Dynamic generation of per-station realm lists for hot spot connections

• US 10,070,359 B2
• Filed: 06/29/2016
• Issued: 09/04/2018
• Est. Priority Date: 10/14/2014
• Status: Active Grant

• Current Assignee: Fortinet Inc.
• Original Assignee: Fortinet Inc.
• Inventors: Kaushik, Anil
• Primary Examiner(s): Song, Rebecca E
• Application Number:
  US15/197,681
• Publication Number:
  US 20170006515A1
• Time in Patent Office: 797 Days
• CPC Class Codes: H04W 12/062 Pre-authentication
• CPC Class Codes: H04W 36/0016 Hand-off preparation specially adapted for end-to-end data sessions
• CPC Class Codes: H04W 36/14 Reselecting a network or an air interface
• CPC Class Codes: H04W 36/18 for allowing seamless reselection, e.g. soft reselection
• CPC Class Codes: H04W 36/22 for handling the traffic
• CPC Class Codes: H04W 48/12 using downlink control channel
• CPC Class Codes: H04W 48/16 Discovering, processing access restriction or access information
• CPC Class Codes: H04W 76/12 Setup of transport tunnels
• CPC Class Codes: H04W 8/02 Processing of mobility data, e.g. registration information at HLR [Home Location Register] or VLR [Visitor Location Register]; Transfer of mobility data, e.g. between HLR, VLR or external networks
• CPC Class Codes: H04W 84/12 WLAN [Wireless Local Area Networks]

Abstract

Per-station realm lists are dynamically generating per-station for hot spot connections to access points by roaming stations. A query for a list of realms is received from a roaming station when connecting to a hot spot. Using an MAC address or other station identity, a list of available realms narrowed to a subset of per-station realms sent to the station. Narrowing is performed on-the-fly with respect to at least one aspects. A last N realms are retrieved from a database record searched by MAC address. The list is further narrowed by removing realms that are inaccessible or otherwise recently shown to have bad link quality. Additional ranking factors can narrow or rearrange the realm list based on financial agreements, popularity, trends, and the like. A selection from the list of realms is received from the station. The access point then authenticates the station with the selected realm. If successful, data traffic concerning the station can be forwarded through the hot spot on behalf of the selected realm.

Claims

1. A computer-implemented method for generating a list of per-station NAI (Network Access Identifier) realms for a hot spot WLAN connection, the method comprising the steps of:

receiving a query for a list of realms from a station during a connection to a hot spot;

responsive to detecting the query specifically from the station, generating the list of realms that are a subset of a list of realms available to the hot spot, including determining one or more realms to which the station has a subscription, and including at least one of one or more realms which the station has a subscription within the list of realms;

receiving a selection from the list of realms;

authenticating the station with the selected realm; and

forwarding data traffic concerning the station through the hot spot on behalf of the selected realm.

2. The method of claim 1, wherein generating the list of realms that are a subset of the list of available realms further comprises:

receiving a list of realms subject to roaming agreements between the hot spot and the realm; and

including at least one or more realms in the list of available realms based on the list of realms subject to the roaming agreements in the list of realms.

3. The method of claim 1, wherein generating the list of realms that are a subset of the list of available realms further comprises:

receiving link quality information concerning the list of available realms; and

determining whether to include at least one realm from the list of available realms based on the link quality information.

4. The method of claim 1, further comprising:

configuring the list of available realms that are compatible with the hot spot.

5. The method of claim 1, further comprising:

implementing a tunnel between the hot spot and the hot spot to forward the data concerning the station.

6. The method of claim 1, further comprising:

narrowing the available list of realms down to three realms for the list of realms; and

generating an IEEE 802.11u beacon that includes the three realms.

7. The method of claim 1, further comprising:

responsive to detecting a request specifically from a second station, generating a second list of realms that are a second subset of the list of available realms, wherein the first list of realms for the station differs from the first list of realms for the second station.

8. The method of claim 1, wherein detecting the request comprises:

detecting the request responsive to the computing device automatically offloading data from a cellular network to the hot spot,

wherein the list of realms includes at least one realm associated with the cellular network.

9. A non-transitory computer-readable medium, storing source code that, when executed by a processor, generates a list of per-station NAI (Network Access Identifier) realms for a hot spot WLAN connection, including:

receiving a query for a list of realms from a station during a connection to a hot spot;

responsive to detecting the query specifically from the station, generating the list of realms that are a subset of a list of realms available to the hot spot, including determining one or more realms to which the station has a subscription, and including at least one of one or more realms which the station has a subscription within the list of realms;

receiving a selection from the list of realms;

authenticating the station with the selected realm; and

forwarding data traffic concerning the station through the hot spot on behalf of the selected realm.

10. The non-transitory computer-readable medium of claim 9, wherein the generating the list of realms that are a subset of the list of available realms further comprises:

receiving a list of realms subject to roaming agreements between the hot spot and the realm; and

including at least one or more realms in the list of available realms based on the list of realms subject to the roaming agreements in the list of realms.

11. The non-transitory computer-readable medium of claim 9, wherein the generating the list of realms that are a subset of the list of available realms further comprises:

receiving link quality information concerning the list of available realms; and

determining whether to include at least one realm from the list of available realms based on the link quality information.

12. The non-transitory computer-readable medium of claim 9, wherein generating the list of per-station realms further comprises:

configuring the list of available realms that are compatible with the hot spot.

13. The non-transitory computer-readable medium of claim 9, wherein the generating the list of per-station realms further comprises:

implementing a tunnel between the hot spot and the hot spot to forward the data concerning the station.

14. The non-transitory computer-readable medium of claim 9, wherein the generating the list of per-station realms further comprises:

determining one or more realms to which the station has a subscription; and

including at least one of one or more realms which the station has a subscription within the list of realms.

15. The non-transitory computer-readable medium of claim 9, wherein the generating the list of per-station realms further comprises:

narrowing the available list of realms down to three realms for the list of realms; and

generating an IEEE 802.11u beacon that includes the three realms.

16. The non-transitory computer-readable medium of claim 9, wherein the method further comprises:

responsive to detecting a request specifically from a second station, generating a second list of realms that are a second subset of the list of available realms, wherein the first list of realms for the station differs from the first list of realms for the second station.

17. The non-transitory computer-readable medium of claim 9, wherein the detecting the request comprises:

detecting the request responsive to the computing device automatically offloading data from a cellular network to the hot spot,

wherein the list of realms includes at least one realm associated with the cellular network.

18. An access point to generate a list of per-station NAI (Network Access Identifier) realms for a hot spot WLAN connection, the access point comprising:

memory;

a processor, coupled to the memory and performing the following;

receiving a query for a list of realms from a station during a connection to a hot spot;

responsive to detecting the query specifically from the station, generating the list of realms that are a subset of a list of realms available to the hot spot, including determining one or more realms to which the station has a subscription, and including at least one of one or more realms which the station has a subscription within the list of realms;

receiving a selection from the list of realms;

authenticating the station with the selected realm; and

forwarding data traffic concerning the station through the hot spot on behalf of the selected realm.