System and method for WiFi authentication and selection

• US 10,674,433 B2
• Filed: 04/13/2018
• Issued: 06/02/2020
• Est. Priority Date: 03/11/2013
• Status: Expired

• Current Assignee: Futurewei Technologies Incorporated (Huawei Investment & Holding Co., Ltd.)
• Original Assignee: Futurewei Technologies Incorporated (Huawei Investment & Holding Co., Ltd.)
• Inventors: Xiang, Zhixian
• Primary Examiner(s): Orgad, Edan
• Application Number:
  US15/953,178
• Publication Number:
  US 20180234910A1
• Time in Patent Office: 781 Days
• CPC Class Codes: H04L 63/0876 based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 48/06 based on traffic conditions
• CPC Class Codes: H04W 48/14 using user query or user detection
• CPC Class Codes: H04W 48/18 Selecting a network or a communication service

Abstract

A method embodiment for network authentication includes selecting, by a user equipment (UE), an access network for establishing a network connection and receiving one or more network authentication status indications for a network associated with the access network. The method further includes implementing a network authentication and selection policy in accordance with the one or more network authentication status indications.

Claims

1. A method for network authentication and selection comprising:

determining, by a network device, an authentication status of a network associated with the network device; and

transmitting, by the network device to a user equipment (UE), one or more network authentication status indications in accordance with the authentication status of the network, the one or more network authentication status indications providing information for the UE to determine whether to continue an authentication process with the network, and one of the network authentication status indications being an access network query protocol (ANQP) information element comprising a payload field indicating overload information about the network.

2. The method of claim 1, the ANQP information element comprising at least one of an information identification (ID) field, a length field, an organization identifier (OI) field, a type field, or a subtype field.

3. The method of claim 1, further comprising transmitting an authentication retry policy to the UE.

4. The method of claim 3, wherein the authentication retry policy defines a retry timer, a maximum number of authentication attempts, or a combination thereof.

5. A network device comprising:

a non-transitory memory storage comprising instructions; and

one or more processors in communication with the non-transitory memory storage, wherein the one or more processors execute the instructions to;

determine an authentication status of a network associated with the network device; and

transmit, to a user equipment (UE), one or more network authentication status indications in accordance with the authentication status of the network, wherein the one or more network authentication status indications provide information for the UE to determine whether to continue an authentication process with the network, and wherein one of the network authentication status indications is an access network query protocol (ANQP) information element comprising a payload field indicating overload information about the network.

6. The network device of claim 5, wherein the ANQP information element comprises at least one of an information identification (ID) field, a length field, an organization identifier (OI) field, a type field, or a subtype field.

7. The network device of claim 5, wherein the one or more processors execute the instructions to transmit an authentication retry policy to the UE.

8. The network device of claim 7, wherein the authentication retry policy defines a retry timer, a maximum number of authentication attempts, or a combination thereof.

9. A method for network authentication and selection comprising:

selecting, by a user equipment (UE), an access network for establishing a network connection;

receiving, by the UE, one or more network authentication status indications for a first network associated with the access network, one of the network authentication status indications being an access network query protocol (ANQP) information element comprising a payload field indicating overload information about the first network; and

implementing, by the UE, a network authentication and selection policy in accordance with the one or more network authentication status indications, the implementing comprising;

deciding, by the UE, whether to continue an authentication process with the access network in accordance with the one or more network authentication status indications; and

implementing, by the UE, an authentication retry policy in response to the UE deciding not to continue the authentication process with the access network.

10. The method of claim 9, the ANQP information element comprising at least one of an information identification (ID) field, a length field, an organization identifier (OI) field, a type field, or a subtype field.

11. The method of claim 9 , wherein the one or more network authentication status indications comprise an overload indication indicating whether an authentication server associated with the first network is overloaded, an authentication permission indication indicating whether the first network is allowing new users authentication attempts, a network selection function indication, a quality of service (QoS) indication, a policy control function indication, or a combination thereof.

12. The method of claim 9, wherein receiving the one or more network authentication status indications comprises receiving the one or more network authentication status indications in an ANQP response, a beacon, a probe response, an Access Network Discovery and Selection Function (ANDSF) policy function, or a combination thereof.

13. A user equipment (UE) comprising:

a non-transitory memory storage comprising instructions; and

one or more processors in communication with the non-transitory memory storage, wherein the one or more processors execute the instructions to;

select an access network for establishing a network connection;

receive one or more network authentication status indications for a first network associated with the access network, wherein one of the network authentication status indications is an access network query protocol (ANQP) information element comprising a payload field indicating overload information about the first network; and

implement a network authentication and selection policy in accordance with the one or more network authentication status indications, wherein the one or more processors executing the instructions to implement the network authentication and selection policy comprises the one or more processors executing the instructions to;

decide whether to continue an authentication process with the access network in accordance with the one or more network authentication status indications; and

implement an authentication retry policy in response to the UE deciding not to continue the authentication process with the access network.

14. The UE of claim 13, wherein the ANQP information element comprises at least one of an information identification (ID) field, a length field, an organization identifier (OI) field, a type field, or a subtype field.

15. The UE of claim 13, wherein the one or more network authentication status indications comprise an overload indication indicating whether an authentication server associated with the first network is overloaded, an authentication permission indication indicating whether the first network is allowing new users authentication attempts, a network selection function indication, a quality of service (QoS) indication, a policy control function indication, or a combination thereof.

16. The UE of claim 13, wherein the one or more processors executing the instructions to implement the network authentication and selection policy comprises the one or more processors executing the instructions to select a different network for establishing the network connection in accordance with the one or more network authentication status indications.