Wireless network access

• US 10,320,766 B2
• Filed: 11/17/2015
• Issued: 06/11/2019
• Est. Priority Date: 11/17/2015
• Status: Active Grant

• Current Assignee: Google LLC (Alphabet Inc.)
• Original Assignee: Google LLC (Alphabet Inc.)
• Inventors: Chen, Kevin Tien, Uhler, Stephen, Kaplan, Rapheal, McKellar, Ian Loic, Irzak, Olga
• Primary Examiner(s): Song, Hee K
• Application Number:
  US14/944,165
• Publication Number:
  US 20170142086A1
• Time in Patent Office: 1,302 Days
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/102 Entity profiles
• CPC Class Codes: H04L 63/18 using different networks or channels, e.g. using out of band channels cryptographic mechanisms or cryptographic arrangements for key distribution involving distinctive intermediate devices or communication paths H04L9/0827; cryptographic mechanisms or cryptographic arrangements for authentication using a plurality of channels H04L9/3215
• CPC Class Codes: H04L 67/10 in which an application is distributed across nodes in the network software deployment G06F8/60; multiprogramming arrangements G06F9/46
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 12/35 Protecting application or service provisioning, e.g. securing SIM application provisioning
• CPC Class Codes: H04W 12/50 Secure pairing of devices
• CPC Class Codes: H04W 76/15 Setup of multiple wireless link connections
• CPC Class Codes: H04W 8/005 Discovery of network devices, e.g. terminals

Abstract

A system and machine-implemented method of wireless network access are provided. First network credentials for a first wireless network hosted by a wireless-enabled device are received from a server. A first network connection with the wireless-enabled device in the first wireless network is established based on the first network credentials. Second network credentials for a second wireless network are provided to the wireless-enabled device via the first network connection. A second network connection with the wireless-enabled device in the second wireless network is established based on the second network credentials.

Claims

1. A computer-implemented method, comprising:

receiving, by a wireless access point and from a server, first network credentials for a first wireless network hosted by a wireless-enabled device;

establishing, by the wireless access point, a first network connection between the wireless access point and the wireless-enabled device in the first wireless network based on the first network credentials, by;

sending a connection request to the wireless-enabled device; and

receiving an authorization message in response to the connection request, the authorization message comprising parameters for the first network connection with the wireless-enabled device;

providing, by the wireless access point, second network credentials for a second wireless network to the wireless-enabled device via the first network connection; and

establishing, by the wireless access point, a second network connection between the wireless access point and the wireless-enabled device in the second wireless network based on the second network credentials, by;

receiving a connection request from the wireless-enabled device; and

sending an authorization message to the wireless-enabled device in response to the connection request, the authorization message comprising parameters for the second network connection with the wireless-enabled device.

2. The computer-implemented method of claim 1, further comprising:

scanning to detect the wireless-enabled device based on the first network credentials,

wherein the first network connection is established upon detecting the wireless-enabled device.

3. The computer-implemented method of claim 2, further comprising sending an error message to the server upon failure to detect the wireless-enabled device.

4. The computer-implemented method of claim 1, wherein the first network connection is established using a first radio system and the second network connection is established using a second radio system different from the first radio system.

5. The computer-implemented method of claim 1, further comprising:

receiving, from the server, registration information associated with a user account of a cloud-based service; and

forwarding the registration information to the wireless-enabled device.

6. The computer-implemented method of claim 1, further comprising:

registering the wireless-enabled device with the cloud-based service in association with a user account;

receiving, from the server, an access token associated with the user account; and

providing the access token to the wireless-enabled device.

7. The computer-implemented method of claim 1, further comprising terminating the first-network connection with the wireless-enabled device after providing the second network credentials.

8. A wireless network access system comprising:

a first radio system;

a second radio system;

a processor; and

a machine-readable medium encoded with instructions executable by the processor to configure the wireless network access system to;

receive, by a wireless access point and from a server, first network credentials for a first wireless network hosted by a wireless-enabled device;

establish, by the wireless access point, a first network connection between the wireless access point and the wireless-enabled device in the first wireless network based on the first network credentials, by;

sending, using the first radio system, a connection request to the wireless-enabled device; and

receiving, using the first radio system, an authorization message in response to the connection request, the authorization message comprising parameters for the first network connection with the wireless-enabled device;

provide, by the wireless access point, second network credentials for a second wireless network to the wireless-enabled device via the first network connection; and

establish, by the wireless access point, a second network connection between the wireless access point and the wireless-enabled device in the second wireless network based on the second network credentials, by;

receiving, using the second radio system, a connection request from the wireless-enabled device; and

sending, using the second radio system, an authorization message to the wireless-enabled device in response to the connection request, the authorization message comprising parameters for the second network connection with the wireless-enabled device.

9. The wireless network access system of claim 8, wherein the first radio system is different from the second radio system.

10. The wireless network access system of claim 8, wherein the instructions are executable by the processor to further configure the wireless network access system to:

receive, from the server, registration information associated with a user account of a cloud-based service; and

forward the registration information to the wireless-enabled device.

11. The wireless network access system of claim 8, wherein the instructions executable by the processor to establish the first network connection further configure the wireless network access system to:

scan to detect the wireless-enabled device based on the first network credentials,

wherein the first network connection is established upon detecting the wireless-enabled device.

12. The wireless network access system of claim 11, wherein the instructions are executable by the processor to further configure the wireless network access system to:

send an error message to the server upon failure to detect the wireless-enabled device.

13. The wireless network access system of claim 8, wherein the instructions are executable by the processor to further configure the wireless network access system to:

register the wireless-enabled device with the cloud-based service in association with a user account;

receive, from the server, an access token associated with the user account; and

provide the access token to the wireless-enabled device.

14. The wireless network access system of claim 8, wherein the instructions are executable by the processor to further configure the wireless network access system to:

terminate the first-network connection with the wireless-enabled device after providing the second network credentials.

15. A non-transitory machine-readable medium encoded with instructions that, when executed by a processor, cause the processor to perform a process comprising:

receiving, by a wireless access point and from a server, first network credentials for a first wireless network hosted by a wireless-enabled device;

establishing, by the wireless access point, a first network connection between the wireless access point and the wireless-enabled device in the first wireless network based on the first network credentials, by;

sending a connection request to the wireless-enabled device; and

receiving an authorization message in response to the connection request, the authorization message comprising parameters for the first network connection with the wireless-enabled device;

providing, by the wireless access point, second network credentials for a second wireless network to the wireless-enabled device via the first network connection; and

establishing, by the wireless access point, a second network connection between the wireless access point and the wireless-enabled device in the second wireless network based on the second network credentials, by;

receiving a connection request from the wireless-enabled device; and

sending an authorization message to the wireless-enabled device in response to the connection request, the authorization message comprising parameters for the second network connection with the wireless-enabled device.

16. The non-transitory machine-readable medium of claim 15, wherein the process further comprises:

scanning to detect the wireless-enabled device based on the first network credentials, wherein the first network connection is established upon detecting the wireless-enabled device; and

sending an error message to the server upon failure to detect the wireless-enabled device.

17. The non-transitory machine-readable medium of claim 15, wherein the first network connection is established using a first radio system and the second network connection is established using a second radio system different from the first radio system.

18. The non-transitory machine-readable medium of claim 15, wherein the process further comprises:

receiving, from the server, registration information associated with a user account of a cloud-based service; and

forwarding the registration information to the wireless-enabled device.

19. The non-transitory machine-readable medium of claim 15, wherein the process of establishing the first network connection comprises:

terminating the first-network connection with the wireless-enabled device after providing the second network credentials.

20. A wireless access point device comprising:

a network interface;

a wireless network interface;

a processor; and

a memory comprising instructions executable by the processor to implement a network access manager application that is configured to;

receive, via the network interface and from a cloud-based service, first network credentials for a first wireless network hosted by a wireless-enabled device;

establish a first network connection between the wireless access point device and the wireless-enabled device in the first wireless network based on the first network credentials, by;

sending, using the wireless network interface, a connection request to the wireless-enabled device; and

receiving, using the wireless network interface, an authorization message in response to the connection request, the authorization message comprising parameters for the first network connection with the wireless-enabled device;

provide second network credentials for a second wireless network to the wireless-enabled device via the first network connection; and

establish a second network connection between the wireless access point and the wireless-enabled device in the second wireless network based on the second network credentials, by;

receiving, using the wireless network interface, a connection request from the wireless-enabled device; and

sending, using the wireless network interface, an authorization message to the wireless-enabled device in response to the connection request, the authorization message comprising parameters for the second network connection with the wireless-enabled device.

21. The wireless access point device of claim 20, wherein the network access manager application is configured to:

scan to detect the wireless-enabled device based on the first network credentials,

wherein the first network connection is established upon detecting the wireless-enabled device.

22. The wireless access point device of claim 21, wherein the network access manager application is configured to:

send an error message to the server upon failure to detect the wireless-enabled device.

23. The wireless access point device of claim 20, wherein the network access manager application is configured to:

register the wireless-enabled device with the cloud-based service in association with a user account;

receive, from the cloud-based service, an access token associated with the user account; and

provide the access token to the wireless-enabled device.

24. The wireless access point device of claim 20, wherein the network access manager application is configured to:

terminate the first-network connection with the wireless-enabled device after providing the second network credentials.

25. The wireless access point device of claim 20, wherein the wireless network interface is a Wi-Fi network interface, and wherein the network interface is an Ethernet interface.