WiFi network communication security system and method

• US 20060002334A1
• Filed: 06/21/2005
• Published: 01/05/2006
• Est. Priority Date: 06/21/2004
• Status: Abandoned Application

• Current Assignee: Washburn E. Russell III
• Original Assignee: Washburn E. Russell III
• Inventors: Washburn, E. Russell III
• Application Number:
  US11/157,592
• Publication Number:
  US 20060002334A1
• Time in Patent Office: Days
• US Class Current: 370/328
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04W 12/062 Pre-authentication
• CPC Class Codes: H04W 12/088 using filters or firewalls
• CPC Class Codes: H04W 74/00 Wireless channel access
• CPC Class Codes: H04W 76/10 Connection setup
• CPC Class Codes: H04W 8/26 Network addressing or numbering for mobility support
• CPC Class Codes: H04W 84/10 Small scale networks; Flat hierarchical networks

Abstract

In an exemplary embodiment in accordance with the present invention, a system and method is provided that ensures users of public domain wide area networks in particular and networks generally, secure, authenticated and dynamic access to the network. Specifically, the present invention in preferred embodiments provides secure, authenticated and dynamic access to networks, through hotspots, in the WiFi Spectrum by employing microprocessing chipsets having the capabilities of a wireless provisioning device.

Claims

1. A method of providing secure, authenticated, mobile client access to a WiFi Spectrum network, without resort to a client side driver, comprising the steps of:

receiving from a client a start session message containing user identity information, the start session message being received by the route controller using the communications network in accordance with a client control protocol, the start session message being sent automatically upon the client being logged on to the service provider independent of the client controller; and

sending to the client a control message to control the client'"'"'s access to use the communications network, the control message being sent from the route controller using the communications network in accordance with the client control protocol and in response to the start session message.

2. The method of claim 1, further comprising the step of routing a message to a telephone, via the route controller, when a specified code is located on the client device when the start session message is sent thereby.

3. The method of claim 2, wherein the telephone is a VoIP enabled telephone.

4. A route controller to control a client'"'"'s access to use a wireless wide area communications network, the route controller comprising:

a communications port capable of receiving from the client a start session message containing user identity information, the start session message being received by the client controller using the communications network in accordance with a client control protocol, the start session message being sent automatically upon the client being logged on to the service provider independent of the client controller;

a user database containing information associated with the user identity information; and

a client control processor coupled to said communications port and said user database, said client control processor being configured to send a control message to the client to control the client'"'"'s access to use the communications network, the control message being sent from the client controller using the communications network in accordance with the client control protocol and in response to the start session message;

wherein the control message control message is a session authorization message that determine whether the client is granted or denied access to use the communications network for a predetermined period of time.

5. The client controller of claim 4, wherein the route controller is housed in a chassis.

6. The client controller of claim 4, wherein the route controller is housed on a single chip.

7. An apparatus for providing secure, authenticated, mobile wireless client access to use a WiFi spectrum network, comprising:

means for receiving from the client a start session message containing user identity information, the start session message being received by the client controller using the communications network in accordance with a client control protocol, the start session message being sent automatically upon the client being logged on to the service provider independent of the client controller;

means for determining if the client is authorized to access the communications network; and

means for sending to the client a session authorization message, the session authorization message to control the client'"'"'s access to use the communications network being sent from the client controller using the communications network in accordance with the client control protocol and in response to the start session message.

8. The apparatus of claim 7, wherein the apparatus is housed within a chassis.

9. The apparatus of claim 8, wherein the route controller is capable of routing a message to a telephone, in response to a specified code resident on the client device when the start session message is sent thereby.

10. The apparatus of claim 7, wherein the apparatus further comprises at least one operating system selected from the group consisting of DOS, UNIX, LINUX, Windows, MacOS, 2K, Aegis, Fox, BDX Express, FluxOS, HOPE YOctix, UniqueOS, XOS, NachOS, Xinu, ConiX, JavaOS, PalmOS and combinations thereof.

11. The apparatus of claim 10, wherein the apparatus is housed within a chassis.

12. The apparatus of claim 10, wherein the apparatus resides on at least one chip.

13. An article of manufacture comprising a computer-readable medium having stored thereon instructions adapted to be executed by a processor, the instructions which, when executed, define a series of steps to control a client'"'"'s access to use a secure, authenticated, WiFi spectrum network, said steps comprising:

receiving from the client a start session message containing user identity information, the start session message being received by the client controller using the communications network in accordance with a client control protocol, the start session message being sent automatically upon the client being logged on to the service provider independent of the client controller; and

sending to the client a control message to control the client'"'"'s access to use the communications network, the control message being sent from the client controller using the communications network in accordance with the client control protocol and in response to the start session message, wherein the control message control message is a session authorization message that determine whether the client is granted or denied access to use the communications network for a predetermined period of time.

14. A method of using a communications network having a route controller, comprising the steps of:

accessing the route controller though a service provider independent of the client controller;

sending to the route controller a start session message containing user identity information, the start session message being sent automatically upon being logged on to the service provide; and

receiving from the route controller a control message to control whether the client is authorized or denied access to use the communications network, the control message being received by the client using the communications network in accordance with a client control protocol and in response to the start session message, wherein the control message control message is a session authorization message that determine whether the client is granted or denied access to use the communications network for a predetermined period of time.

15. The method of claim 14, further comprising the step of routing a message to a telephone, via the route controller, when a specified code is located on the client device when the start session message is sent thereby.

16. The method of claim 15, wherein the telephone is VoIP enabled telephone.

17. An article of manufacture comprising a computer-readable medium having stored thereon instructions adapted to be executed by a processor, the instructions which, when executed, define a series of steps to use a communications network having a route controller, said steps comprising:

accessing the route controller through a wireless communication entry point;

sending to the route controller a start session message containing user identity information; and

receiving from the route controller a control message to control whether the client is authorized or denied access to use the communications network, the control message being received by the client using the communications network in accordance with a client control protocol and in response to the start session message.

18. The apparatus of claim 17, wherein the apparatus is housed within a chassis.

19. The apparatus of claim 18, wherein the route controller is capable of routing a message to a telephone, in response to a specified code resident on the client device when the start session message is sent thereby.

20. The apparatus of claim 17, wherein the apparatus further comprises at least one operating system selected from the group consisting of DOS, UNIX, LINUX, Windows, MacOS, 2K, Aegis, Fox, BDX Express, FluxOS, HOPE YOctix, UniqueOS, XOS, NachOS, Xinu, ConiX, JavaOS, PalmOS and combinations thereof.