Privacy enhancements for wireless devices

• US 10,051,003 B2
• Filed: 11/05/2015
• Issued: 08/14/2018
• Est. Priority Date: 07/30/2015
• Status: Active Grant

• Current Assignee: Apple Inc.
• Original Assignee: Apple Inc.
• Inventors: Sigel, Aaron M., Whalley, Andrew R., Pandey, Awartika, Walsh, Robert J.
• Primary Examiner(s): Cribbs, Malcolm
• Application Number:
  US14/933,709
• Publication Number:
  US 20170034215A1
• Time in Patent Office: 1,013 Days
• Field of Search: None
• CPC Class Codes: H04L 63/107 wherein the security policies are location-dependent, e.g. entities privileges depend on current location or allowing specific operations only from locally connected terminals
• CPC Class Codes: H04L 63/108 when the policy decisions are valid for a limited amount of time
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227
• CPC Class Codes: H04W 12/02 Protecting privacy or anonymity, e.g. protecting personally identifiable information [PII]
• CPC Class Codes: H04W 12/04 Key management, e.g. using generic bootstrapping architecture [GBA]
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 12/35 Protecting application or service provisioning, e.g. securing SIM application provisioning
• CPC Class Codes: H04W 12/61 Time-dependent
• CPC Class Codes: H04W 12/64 using geofenced areas
• CPC Class Codes: H04W 48/16 Discovering, processing access restriction or access information

Abstract

A wireless device can obtain a network information record from another device operating as a credential source. The network information record can include network access information for a wireless network (e.g., SSID and password) and a usage policy specifying conditions under which the wireless device should search for the wireless network (e.g., temporal and/or spatial conditions). The wireless device can implement the usage policy by searching for the wireless network only when the conditions are satisfied. In some instances, the network access information can include instructions for dynamically generating time-varying network access information, and the wireless device can use the instructions to generate network access information during a search for wireless networks.

Claims

1. A method executed in a wireless device, the method comprising:

obtaining a first network information record for a first wireless network, the first network information record including network access information for the first wireless network and a usage policy specifying a condition under which the first network information record should be used, wherein the network access information for the first wireless network includes instructions for dynamically generating a network name for the first wireless network using an algorithm and further includes an input parameter to initialize the algorithm;

storing the first network information record in a set of network information records for known networks; and

searching for a wireless network to join, using the set of network information records,

wherein searching for a wireless network to join includes;

determining, based on the usage policy of the first network information record, whether the condition is satisfied; and

searching for the first wireless network only if the condition is satisfied, wherein searching for the first wireless network includes executing the algorithm to dynamically generate the network name of the first wireless network and using the dynamically-generated network name to detect the first wireless network.

2. The method of claim 1 wherein the usage policy specifies that the first network information record should be used only after a start time specified in the usage policy.

3. The method of claim 1 wherein the usage policy specifies that the first network information record should not be used after an expiration time specified in the usage policy.

4. The method of claim 3 further comprising:

after the expiration time, removing the first network information record from the set of network information records for known networks.

5. The method of claim 1 wherein the usage policy specifies that the first network information record should be used only until a timeout condition occurs, the timeout condition being based on one or more of:

elapsed time since the first wireless network was last joined by the wireless device exceeding a join timeout period specified in the usage policy;

or

elapsed time since the first wireless network was last visible to the wireless device exceeding a visibility timeout period specified in the usage policy.

6. The method of claim 5 further comprising:

after the timeout condition occurs, removing the first network information record from the set of network information records for known networks.

7. The method of claim 1 wherein the usage policy specifies that the first network information record should be used only when the device is inside a geofence specified in the usage policy.

8. The method of claim 1 wherein obtaining the first network information record includes:

establishing a secure communication channel with a credential source device; and

receiving the first network information record via the secure communication channel.

9. The method of claim 8 wherein the secure communication channel is a wired communication channel.

10. The method of claim 1 wherein the network access information further includes instructions usable by the wireless device to dynamically generate an access credential for the first wireless network and wherein the method further comprises, in the event that the first wireless network is found in the search:

dynamically generating an access credential using the instructions; and

providing the access credential to the wireless network.

11. The method of claim 1 further comprising:

determining an access credential based on the network access information in the first network information record; and

using the access credential to join the first wireless network in the event that the first wireless network is found in the search.

12. The method of claim 1 wherein searching for a wireless network to join includes broadcasting a network name determined based on the network access information in the first network information record.

13. An electronic device comprising:

a data communication interface to communicate with a wireless network;

a storage medium to store a set of network information records for known networks; and

a processor coupled to the data communication interface and the storage medium, the processor configured to;

obtain a first network information record for a first wireless network, the first network information record including network access information for the first wireless network and a usage policy specifying a condition under which the first network information record should be used, wherein the network access information for the first wireless network includes instructions for dynamically generating one or both of a network name or an access credential using an algorithm and further includes an input parameter to initialize the algorithm;

store the first network information record in the set of network information records for known networks; and

search for a wireless network to join, using the set of network information records, wherein searching for a wireless network to join includes determining, based on the usage policy of the first network information record, whether the condition is satisfied, and searching for the first wireless network only if the condition is satisfied, wherein searching for the first wireless network includes executing the algorithm to dynamically generate one or both of the network name or the access credential and using the dynamically-generated network name or access credential to detect the first wireless network.

14. The electronic device of claim 13 wherein the usage policy specifies that the first network information record should be used only after a start time specified in the usage policy.

15. The electronic device of claim 13 wherein the usage policy specifies that the first network information record should not be used after an expiration time specified in the usage policy.

16. The electronic device of claim 13 wherein the usage policy specifies that the first network information record should be used only until a timeout condition occurs, the timeout condition being based on one or more of:

elapsed time since the first wireless network was last joined by the electronic device exceeding a join timeout period specified in the usage policy;

or

elapsed time since the first wireless network was last visible to the electronic device exceeding a visibility timeout period specified in the usage policy.

17. The electronic device of claim 13 wherein the usage policy specifies that the first network information record should be used only when the device is inside a geofence specified in the usage policy.

18. The electronic device of claim 13 wherein the data communication interface includes a wired communication interface and wherein the processor is further configured to:

establish a secure communication channel with a credential source device; and

receive the first network information record via the secure communication channel.