System, method, and computer program for improving carrier Wi-Fi authentication response time

• US 10,341,867 B1
• Filed: 10/24/2016
• Issued: 07/02/2019
• Est. Priority Date: 10/23/2015
• Status: Active Grant

• Current Assignee: Amdocs Development Limited (Amdocs Ltd.)
• Original Assignee: Amdocs Development Limited (Amdocs Ltd.)
• Inventors: Kadmon, Yaron, Ben-Moshe, Dori, Kenig, Ronen
• Primary Examiner(s): Shaifer Harriman, Dant B
• Application Number:
  US15/333,040
• Time in Patent Office: 981 Days
• Field of Search: 726 4
• CPC Class Codes: H04L 63/0281 Proxies
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 12/10 Integrity
• CPC Class Codes: H04W 12/71 Hardware identity
• CPC Class Codes: H04W 12/73 Access point logical identity
• CPC Class Codes: H04W 8/005 Discovery of network devices, e.g. terminals
• CPC Class Codes: H04W 84/042 Public Land Mobile systems, e.g. cellular systems
• CPC Class Codes: H04W 84/12 WLAN [Wireless Local Area Networks]
• CPC Class Codes: H04W 88/06 adapted for operation in multiple networks or having at least two operational modes, e.g. multi-mode terminals

Abstract

A system, method, and computer program product are provided for improving carrier Wi-Fi authentication response time. In use, at least one message is received at a network policy server indicating user equipment is present in at least one cell associated with a cellular network, the at least one message including information associated with the user equipment and at least one cell identifier associated with the at least one cell. Additionally, one or more Wi-Fi hot-spots that reside in a coverage area associated with the at least one cell are identified. Further, at least one indication that the user equipment is either authorized or not authorized to connect to at least one of the one or more Wi-Fi hot-spots is sent, the at least one indication including connection credentials associated with the user equipment if the user equipment is authorized to connect to at least one of the one or more Wi-Fi hot-spots, and the at least one indication being sent prior to the user equipment requesting to access any of the one or more Wi-Fi hot-spots.

Claims

1. A computer program product embodied on a non-transitory computer readable medium, comprising computer code for:

receiving, by a network policy server, at least one message indicating user equipment is present in at least one cell associated with a cellular network, the at least one message including information associated with the user equipment and at least one cell identifier associated with the at least one cell;

responsive to receiving the at least one message, identifying, by the network policy server, one or more Wi-Fi hot-spots that reside in a coverage area associated with the at least one cell;

responsive to identifying the one or more Wi-Fi hot-spots that reside in the coverage area associated with the at least one cell in which the user equipment is present, determining, by the network policy server, a first set of Wi-Fi hot-spots in the one or more Wi-Fi hot-spots that the user equipment is authorized to connect to;

sending, by the network policy server to each Wi-Fi hot-spot in the first set of Wi-Fi hot-spots and prior to the user equipment requesting to access any of the one or more Wi-Fi hot-spots, an indication that the user equipment is authorized to connect to the Wi-Fi hot-spot including credentials associated with the user equipment, for use by the Wi-Fi hot-spot in granting a connection with the user equipment;

responsive to identifying the one or more Wi-Fi hot-spots that reside in the coverage area associated with the at least one cell in which the user equipment is present, determining, by the network policy server, a second set of Wi-Fi hot-spots in the one or more Wi-Fi hot-spots that the user equipment is not authorized to connect to; and

sending, by the network policy server to each Wi-Fi hot-spot in the second set of Wi-Fi hot-spots and prior to the user equipment requesting to access any of the one or more Wi-Fi hot-spots, an indication that the user equipment is not authorized to connect to the Wi-Fi hot-spot.

2. The computer program product of claim 1, further comprising computer code for receiving, at a particular Wi-Fi hot-spot in the first set of Wi-Fi hot-spots after the particular Wi-Fi hot-spot receives from the network policy server the indication that the user equipment is authorized to connect to the particular Wi-Fi hot-spot, a connection request from the user equipment.

3. The computer program product of claim 2, further comprising computer code for determining, at the particular Wi-Fi hot-spot, that the user equipment is authorized to connect to the Wi-Fi hot-spot utilizing the credentials associated with the user equipment previously received by the particular Wi-Fi hot-spot.

4. The computer program product of claim 1, wherein identifying the one or more Wi-Fi hot-spots that reside in the coverage area associated with the at least one cell includes identifying all Wi-Fi hot-spots that reside in the coverage area associated with the at least one cell.

11. The computer program product of claim 1, further comprising computer code for receiving, at a particular Wi-Fi hot-spot in the second set of Wi-Fi hot-spots after the particular Wi-Fi hot-spot receives from the network policy server the indication that the user equipment is not authorized to connect to the particular Wi-Fi hot-spot, a connection request from the user equipment.

12. The computer program product of claim 11, further comprising computer code for determining, at the particular Wi-Fi hot-spot, that the user equipment is not authorized to connect to the Wi-Fi hot-spot utilizing the indication previously received by the particular Wi-Fi hot-spot.

13. The computer program product of claim 1, wherein determining, by the network policy server, the first set of Wi-Fi hot-spots in the one or more Wi-Fi hot-spots that the user equipment is authorized to connect to and determining, by the network policy server, the second set of Wi-Fi hot-spots in the one or more Wi-Fi hot-spots that the user equipment is not authorized to connect to is performed by:

authenticating the user equipment in association with each Wi-Fi hot-spot in the one or more Wi-Fi hot-spots.

14. The computer program product of claim 13, wherein a result of the authenticating is pushed to each Wi-Fi hot-spot in the one or more Wi-Fi hot-spots.

5. A method, comprising:

receiving, by a network policy server, at least one message indicating user equipment is present in at least one cell associated with a cellular network, the at least one message including information associated with the user equipment and at least one cell identifier associated with the at least one cell;

responsive to receiving the at least one message, identifying, by the network policy server, one or more Wi-Fi hot-spots that reside in a coverage area associated with the at least one cell;

responsive to identifying the one or more Wi-Fi hot-spots that reside in the coverage area associated with the at least one cell in which the user equipment is present, determining, by the network policy server, a first set of Wi-Fi hot-spots in the one or more Wi-Fi hot-spots that the user equipment is authorized to connect to;

sending, by the network policy server to each Wi-Fi hot-spot in the first set of Wi-Fi hot-spots and prior to the user equipment requesting to access any of the one or more Wi-Fi hot-spots, an indication that the user equipment is authorized to connect to the Wi-Fi hot-spot including credentials associated with the user equipment, for use by the Wi-Fi hot-spot in granting a connection with the user equipment;

responsive to identifying the one or more Wi-Fi hot-spots that reside in the coverage area associated with the at least one cell in which the user equipment is present, determining, by the network policy server, a second set of Wi-Fi hot-spots in the one or more Wi-Fi hot-spots that the user equipment is not authorized to connect to; and

sending, by the network policy server to each Wi-Fi hot-spot in the second set of Wi-Fi hot-spots and prior to the user equipment requesting to access any of the one or more Wi-Fi hot-spots, an indication that the user equipment is not authorized to connect to the Wi-Fi hot-spot.

6. The method of claim 5, further comprising receiving, at a particular Wi-Fi hot-spot in the first set of Wi-Fi hot-spots after the particular Wi-Fi hot-spot receives from the network policy server the indication that the user equipment is authorized to connect to the particular Wi-Fi hot-spot, a connection request from the user equipment.

7. The method of claim 6, further comprising determining, at the particular Wi-Fi hot-spot, that the user equipment is authorized to connect to the Wi-Fi hot-spot utilizing the credentials associated with the user equipment previously received by the particular Wi-Fi hot-spot.

8. The method of claim 5, wherein identifying the one or more Wi-Fi hot-spots that reside in the coverage area associated with the at least one cell includes identifying all Wi-Fi hot-spots that reside in the coverage area associated with the at least one cell.

9. A system comprising:

a memory system; and

one or more processing cores coupled to the memory system and that are each configured for;

receiving, by a network policy server, at least one message indicating user equipment is present in at least one cell associated with a cellular network, the at least one message including information associated with the user equipment and at least one cell identifier associated with the at least one cell;

responsive to receiving the at least one message, identifying, by the network policy server, one or more Wi-Fi hot-spots that reside in a coverage area associated with the at least one cell;

responsive to identifying the one or more Wi-Fi hot-spots that reside in the coverage area associated with the at least one cell in which the user equipment is present, determining, by the network policy server, a first set of Wi-Fi hot-spots in the one or more Wi-Fi hot-spots that the user equipment is authorized to connect to;

sending, by the network policy server to each Wi-Fi hot-spot in the first set of Wi-Fi hot-spots and prior to the user equipment requesting to access any of the one or more Wi-Fi hot-spots, an indication that the user equipment is authorized to connect to the Wi-Fi hot-spot including credentials associated with the user equipment, for use by the Wi-Fi hot-spot in granting a connection with the user equipment;

responsive to identifying the one or more Wi-Fi hot-spots that reside in the coverage area associated with the at least one cell in which the user equipment is present, determining, by the network policy server, a second set of Wi-Fi hot-spots in the one or more Wi-Fi hot-spots that the user equipment is not authorized to connect to; and

sending, by the network policy server to each Wi-Fi hot-spot in the second set of Wi-Fi hot-spots and prior to the user equipment requesting to access any of the one or more Wi-Fi hot-spots, an indication that the user equipment is not authorized to connect to the Wi-Fi hot-spot.

10. The system of claim 9, wherein identifying the one or more Wi-Fi hot-spots that reside in the coverage area associated with the at least one cell includes identifying all Wi-Fi hot-spots that reside in the coverage area associated with the at least one cell.