Automatic configuration of client terminal in public hot spot

• US 20060173844A1
• Filed: 03/12/2004
• Published: 08/03/2006
• Est. Priority Date: 03/14/2003
• Status: Active Grant

• Current Assignee: Boston Medical Center, InterDigital Patent Holdings, Inc. (InterDigital, Inc.)
• Original Assignee: Thomson Licensing (Vantiva SA)
• Inventors: Mathur, Saurabh, Zhang, Junbiao, Mody, Sachin Satish
• Granted Patent: US 8,522,315 B2
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/102 Entity profiles
• CPC Class Codes: H04L 67/34 involving the movement of software or configuration parameters network booting or remote initial program loading [RIPL] G06F9/4416
• CPC Class Codes: H04W 12/062 Pre-authentication
• CPC Class Codes: H04W 8/245 from a network towards a terminal
• CPC Class Codes: H04W 80/04 Network layer protocols, e.g. mobile IP [Internet Protocol]
• CPC Class Codes: H04W 84/12 WLAN [Wireless Local Area Networks]

Abstract

The invention herein provides an apparatus and a method for automatically configuring an IEEE 802.1x client terminal to provide limited access in a WLAN environment, specifically utilizing the access point to filter traffic associated with the limited access so as to redirect the client terminal'"'"'s HTTP request to a designated local web server. The web server responds to the client terminal by requesting information required to establish an authorized communication. Thereafter the client terminal provides information required to establish an authorized communication. In the course of the communication the web server sends information such as transmission rates, new user account creation information, authentication method selection, and access user terms and conditions of acceptance, all typically required to establish an authorized access. The client responds with information, required to establish an authorized communication.

Claims

1. A method for enabling a client terminal to access a wireless network, comprising the steps of:

receiving an access request from the client terminal;

redirecting the access request to a local web server;

requesting from the client terminal, information required to establish client terminal access to the wireless network;

activating, in response to the information received from the client terminal, a software module that reconfigures the client terminal for authentication using appropriate parameters associated with a configuration arrangement selected by a user; and

authenticating the reconfigured client terminal and allowing access to the wireless network in response to the authentication.

2. The method according to claim 1, wherein the wireless network is an IEEE 802.11 compliant wireless local area network (WLAN), and the client terminal is an IEEE 802.1x compliant client terminal.

3. The method according to claim 2, wherein the activating step comprises activating an Active X control/plug-in previously installed on the client terminal.

4. The method according to claim 2, wherein the activating step comprises downloading to, and activating in, the client terminal an Active X control/plug-in.

5. An access point for providing a secure communications session between a client terminal and a wireless network, comprising:

a means for receiving an access request from the terminal;

a means for redirecting the access request to a local web server for allowing a reconfigured access to the wireless network, means for activating, in response to the information received form the client terminal, a software module that reconfigures the client terminal for authentication using appropriate parameters associated with a configuration arrangement selected by a user; and

means for authenticating the reconfigured client terminal and allowing access to the wireless network in response to the authentication.

6. The access point according to claim 5, wherein the access point complies with the IEEE 802.11 standards and the client terminal is an IEEE 802.1x compliant client terminal.

7. A method for configuring a client terminal to provide secure access in a wireless network, comprising the steps of:

filtering traffic associated with an HTTP request from the client terminal for access to the wireless network,

redirecting the request to a designated web server, and

issuing a request from the designated web server to the client terminal for information required to establish an authorized communication.

8. The method according to claim 7, wherein the wireless network is an IEEE 802.11 compliant wireless local area network and the client terminal is an IEEE 802.1x compliant client terminal.

9. The method according to claim 8, further comprising the step of the client terminal providing the web server information required to establish an authorized connection.

10. The method according to claim 8, further comprising the step of receiving from the web server and communicating to the client terminal access rate information required to establish an authorized communication.

11. The method according to claim 8, further comprising the step of receiving from the web server and communicating to the client terminal access user account creation information required to establish an authorized communication.

12. The method according to claim 8, further comprising the step of receiving from the web server and communicating to the client terminal access authentication method selection information required to establish an authorized communication.

13. The method according to claim 8, further comprising the step of receiving from the web server and communicating to the client terminal new account creation information required to establish an authorized communication.

14. The method according to claim 8, further comprising the step of receiving from the web server and communicating to the client terminal access user terms and conditions of acceptance information required to establish an authorized communication.

15. The method according to claim 8, further comprising the step of receiving from the client terminal and communicating to the web server access rate information required to establish an authorized communication.

16. The method according to claim 8, further comprising the step of receiving from the client terminal and communicating to the web server user account creation data required to establish an authorized communication.

17. The method according to claim 8, further comprising the step of receiving from the client terminal and communicating to the web server user access authentication method selection information required to establish an authorized communication.

18. The method according to claim 8, further comprising the step of receiving from the client terminal and communicating to the web server acceptance of the user access terms and conditions required to establish an authorized communication.

19. The method according to claim 8, whereby the browser program is an ActiveX control.

20. The method according to claim 8, whereby the browser program is a plug-in.

21. A mobile terminal, comprising:

means for receiving an extended authentication protocol request identification message packet;

means for forwarding an extended authentication protocol response identity message packet;

means for receiving an extended authentication protocol failure message packet;

means for forwarding a web re-direct request;

means for receiving a provider list web page;

means for selecting a provider and forwarding said selected provider information;

means for receiving an ActiveX control message to re-configure said mobile terminal; and

means for reconfiguring said mobile terminal and establishing authorized communications.