Method and arrangement for externally controlling and managing at least one wlan subscriber who is assigned to a local radio network

• US 20060171382A1
• Filed: 02/12/2004
• Published: 08/03/2006
• Est. Priority Date: 03/10/2003
• Status: Active Grant

• Current Assignee: Deutsche Telekom AG
• Original Assignee: Deutsche Telekom AG
• Inventors: Knuth, Michael, Vater, Helge, Molzahn, Matthias, Mohri, Alexander, Henkels, Christoph
• Granted Patent: US 8,170,032 B2
• Time in Patent Office: Days
• US Class Current: 370/389
• CPC Class Codes: H04L 12/4604 LAN interconnection over a backbone network, e.g. Internet, Frame Relay
• CPC Class Codes: H04L 41/00 Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks
• CPC Class Codes: H04L 41/34 Signalling channels for network management communication
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/0876 based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 9/40 Network security protocols
• CPC Class Codes: H04W 12/068 using credential vaults, e.g. password manager applications or one time password [OTP] applications
• CPC Class Codes: H04W 12/082 using revocation of authorisation
• CPC Class Codes: H04W 12/084 using delegated authorisation, e.g. open authorisation [OAuth] protocol
• CPC Class Codes: H04W 74/00 Wireless channel access
• CPC Class Codes: H04W 76/10 Connection setup
• CPC Class Codes: H04W 80/04 Network layer protocols, e.g. mobile IP [Internet Protocol]
• CPC Class Codes: H04W 84/02 Hierarchically pre-organised networks, e.g. paging networks, cellular networks, WLAN [Wireless Local Area Network] or WLL [Wireless Local Loop]
• CPC Class Codes: H04W 84/12 WLAN [Wireless Local Area Networks]
• CPC Class Codes: H04W 88/02 Terminal devices
• CPC Class Codes: H04W 92/02 Inter-networking arrangements
• CPC Class Codes: Y10S 370/901 Wide area network
• CPC Class Codes: Y10S 370/908 Local area network

Abstract

A method for externally controlling and managing a wireless local area network subscriber assigned to at least one wireless local area network includes requesting a service using the subscriber, checking an authorization of the subscriber to access the TCP/IP network, and establishing a connection via the TCP/IP network to the subscriber if the subscriber has the authorization to access the TCP/IP network. Signaling and/or information data are managed using a control and managing device connected to the public TCP/IP network via an interface device.

Claims

1-33. -33. (canceled)

34. A method for externally controlling and managing at least one wireless local area network subscriber assigned to at least one wireless local area network and capable of requesting services via a public TCP/IP network, the at least one wireless local area network and an external control and managing device being connected to the public TCP/IP network via at least one interface device, the method comprising:

requesting a service using a first wireless local area network subscriber;

checking an authorization of the first subscriber to access the TCP/IP network;

establishing a connection via the TCP/IP network to the first subscriber if the first subscriber has the authorization to access the TCP/IP network; and

transmitting at least one of signaling and information data via the TCP/IP network to the control and managing device;

managing the transmitted at least one of signaling and information data using the control and managing device.

35. The method as recited in claim 34 wherein the signaling data contains settlement data and further comprising generating and forwarding settlement data records to a settlement unit.

36. The method as recited in claim 34 wherein the checking the access authorization is performed using an interface device associated with the wireless local area network.

37. The method as recited in claim 36 further comprising:

when the first subscriber has not been cleared by the interface means, transmitting at least one individual identification to the external control and managing device;

in response to the transmitting of the individual identification, checking, using the external control and managing device, whether the first subscriber has already been granted the authorization to access the TCP/IP network; and

establishing a connection via the TCP/IP network if the first subscriber has already been granted the authorization to access the TCP/IP network.

38. The method as recited in claim 37 wherein the at least one individual identification includes at least one of a MAC address and an IP address of the first subscriber.

39. The method as recited in claim 37 further comprising:

if no access authorization has yet been granted to the first subscriber, prompting the first subscriber to enter an authentication data; and

after the first subscriber has entered the authentication data, receiving, by the first subscriber, the authorization to access the TCP/IP network.

40. The method as recited in claim 36 further comprising checking, using the control and managing device, whether the first subscriber is entitled to use at least one of the TCP/IP network and the requested service.

41. The method as recited in claim 34 wherein each of the at least one interface means is associated with a respective one of the at least one wireless local area network, and further comprising storing, in the external control and managing device, at least one of an address of the respective at least one interface means associated with each wireless local area network and an identification and/or an owner of each wireless local area network.

42. The method as recited in claim 41 further comprising ascertaining and logging, in the external control and managing device, a capacity usage of a first of the at least one wireless local area network so as to enable, as a function of the capacity usage, the first subscriber to be denied, at least temporarily, the authorization to access the TCP/IP network.

43. The method as recited in claim 41 further comprising storing, in the external control and managing device, an individual website for at least one of a first of the at least one wireless local area network and the first subscriber so that the individual website is capable of being transmitted to the first subscriber.

44. The method as recited in claim 43 wherein the first subscriber is located in a service are of the first wireless local area network, and further comprising, using the transmitted individual website, logging on, by the first subscriber, at the interface means of the first wireless local area network so as to obtain the authorization to access the public TCP/IP network.

45. The method as recited in claim 41 further comprising managing, in the external control and managing device, a table in which the at least one of an address of the interface device associated with the first wireless local area network and an identification and/or an owner of the first wireless local area network is assigned to the first subscriber when the authorization has been granted.

46. The method as recited in claim 35 further comprising:

checking whether the first subscriber has a credit; and

at least one of severing an established connection and not establishing a connection once the credit has been used up.

47. An apparatus comprising:

a public TCP/IP network;

at least one wireless local area network connected via at least one interface device to the public TCP/IP network;

at least one wireless local area network subscriber associated with the public TCP/IP network;

a control and managing device associated with the public TCP/IP network;

wherein;

the interface device and the control and managing device each have a data exchange device configure to exchange at least one of signaling and information data via the public TCP/IP network;

at least one of the interface device and the control and managing device has a checking device configured to check, when a first subscriber of the at least one wireless local area network subscriber requests a service, an authorization of the first subscriber to access the public TCP/IP network; and

the control and managing device includes a control device configured to control an establishment of a connection via the public TCP/IP network to the first subscriber.

48. The apparatus as recited in claim 47 wherein the control device is configured to control the establishment of the connection via the public TCP/IP network to the first subscriber contingent upon whether the first subscriber has the authorization to access the TCP/IP network.

49. The apparatus as recited in claim 47 wherein:

the signaling data includes settlement data;

the control and managing device includes a data generation device configured to generate settlement data records based on the settlement data; and

the control and managing device includes a data forwarding device configured to forward the settlement data records to a settlement unit.

50. The apparatus as recited in claim 47 wherein:

the interface device includes a transmission device configured to transmit at least one individual identification to the control and managing device;

the control and managing device includes the checking device; and

the checking device is configured, in response to the at least one individual identification, to check whether the first subscriber has already been granted the authorization to access the public TCP/IP network.

51. The apparatus as recited in claim 50 wherein the at least one individual identification includes at least one of a MAC address and an IP address of the first subscriber.

52. A control and managing device comprising:

a data exchange device configured to exchange at least one of signaling and information data with an interface device of a wireless local area network, the interface device being connected to the data exchange device via a public TCP/IP network;

a checking device configured to check an authorization of a service-requesting wireless local area network subscriber to access the public TCP/IP network; and

a control device configured to control an establishment of a connection via the public TCP/IP network to the subscriber.

53. The control and managing device as recited in claim 52 wherein the control device is configured to control the establishment of the connection via the public TCP/IP network to the subscriber contingent upon whether the subscriber has the authorization to access the TCP/IP network.

54. The control and managing device as recited in claim 52 wherein further comprising:

a data generation device configured to generate settlement data records based on the settlement data; and

a data forwarding device configured to forward the settlement data records to a settlement unit.

55. The control and managing device as recited in claim 52 wherein the checking device is configured, in response to at least one individual identification of the subscriber, to check whether the subscriber has already been granted the authorization to access the public TCP/IP network.

56. The control and managing device as recited in claim 52 further comprising:

a storage device configured to store at least one of an address of the interface device and an identification and/or an owner of the wireless local area network; and

a table management device configured to manage a table in which the at least one of the address of the interface device and the identification and/or the owner of the wireless local area network is assigned to the subscriber when the subscriber is logged on to the wireless local area network and the authorization to access the public TCP/IP network has been granted.

57. The control and managing device as recited in claim 52 further comprising:

a capacity usage device configured to ascertain a capacity usage of the wireless local area network; and

a blocking device capable of denying the subscriber the authorization, at least temporarily, to access the TCP/IP network.