Authenticating a user of a communication device to a wireless network to which the user is not associated with

• US 20060236105A1
• Filed: 03/31/2005
• Published: 10/19/2006
• Est. Priority Date: 03/31/2005
• Status: Active Grant

• Current Assignee: Alcatel-Lucent SA (Nokia Corporation)
• Original Assignee: Alcatel-Lucent SA (Nokia Corporation)
• Inventors: Brok, Jacco, Van Bemmel, Jeroen
• Granted Patent: US 8,677,125 B2
• Time in Patent Office: Days
• US Class Current: 713/169
• CPC Class Codes: H04L 63/0838 using one-time-passwords
• CPC Class Codes: H04L 63/18 using different networks or channels, e.g. using out of band channels cryptographic mechanisms or cryptographic arrangements for key distribution involving distinctive intermediate devices or communication paths H04L9/0827; cryptographic mechanisms or cryptographic arrangements for authentication using a plurality of channels H04L9/3215
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/50 Secure pairing of devices
• CPC Class Codes: H04W 74/00 Wireless channel access
• CPC Class Codes: H04W 76/10 Connection setup
• CPC Class Codes: H04W 84/12 WLAN [Wireless Local Area Networks]
• CPC Class Codes: H04W 88/08 Access point devices

Abstract

The present invention provides a method and an apparatus for automating authentication of a user. In one embodiment, a method calls for detecting an authentication event at a wireless communication device to gain access to a first wireless network through an access point associated with the first wireless network, automatically obtaining a credential from a second wireless network in response to the authentication event, and authenticating the user based on the credential to establish a connection between the wireless communication device and the first wireless network. A client-server based communication system includes a client module at a wireless communication device for user authentication of a Wi-Fi device to a Wi-Fi network through an access point associated therewith. For the purposes of authentication, the client-server based communication system further includes a server module with which the client module may automatically exchange signaling messages, such as short message service messages over a wide area network. Such a Wi-Fi user authentication process may, for example, substantially simplify access at a Wi-Fi hotspot in a wireless local area network, reducing manual actions or steps. As a result, a wireless user may be authenticated relatively fast. By offering a desired user experience, user-acceptance of a wireless communication device and/or service may be increased.

Claims

1. A method for authentication of a user, the method comprising:

detecting an authentication event at a wireless communication device to gain access to a first wireless network through an access point associated with said first wireless network;

in response to said authentication event, obtaining a credential from a second wireless network; and

authenticating said user based on said credential to establish a connection between said wireless communication device and said first wireless network.

2. A method, as set forth in claim 1, wherein obtaining a credential from a second wireless network further comprising:

signaling said second wireless network including a wide area network over a wireless connection to automatically send a request message to said wide area network on said wireless connection to automatically obtain said credential for authenticating said user to said first wireless network including a Wi-Fi network.

3. A method, as set forth in claim 2, further comprising:

in response to said request message, receiving said credential in a reply message from said wide area network.

4. A method, as set forth in claim 3, wherein automatically obtaining a credential from a second wireless network further comprising:

requesting an access token in said request message over a wireless connection within a signaling session of said wireless communication device and said wide area network.

5. A method, as set forth in claim 4, further comprising:

extracting said access token from said reply message; and

automatically submitting said access token to said access point to access a Wi-Fi hotspot.

6. A method, as set forth in claim 3, wherein automatically sending a request message further comprising:

sending a short message service message a server over said wide area network to login onto said Wi-Fi network.

7. A method, as set forth in claim 6, wherein receiving said credential in a reply message further comprising:

in response to said short message service message, receiving said access token in a return short message service message.

8. A method, as set forth in claim 1, wherein detecting an authentication event further comprising:

detecting a link-layer authentication signal that initiates a Wi-Fi authentication process for login onto a Wi-Fi network for a modem at said wireless communication device; and

using a wireless connection from said wireless communication device to a wireless local area network to detect a web-based page.

9. A method, as set forth in claim 8, wherein using a wireless connection further comprising:

in response to said short message service message, receiving from said wide area network said access token with a password in said return short message service message;

causing a client module at said wireless communication device to communicate with a server module associated with an operator of said wide area network to authenticate said user based on said access token; and

enabling said user to login into said Wi-Fi network at least one-time based on said password.

10. A method, as set forth in claim 3, wherein automatically sending a request message further comprising:

using a packet-based data connection capable of exchanging Internet protocol data packets to send said request message to a server over said wide area network to login onto said Wi-Fi network.

11. A client-server based communication system to automate authentication of a user to a first wireless network, said client-server based communication system associated with a second wireless network comprising:

a client including a storage storing instructions for detecting an authentication event at a wireless communication device to gain access to said first wireless network through an access point associated with said first wireless network, in response to said authentication event, automatically obtaining a credential from said second wireless network, and authenticating said user based on said credential to establish a connection between said wireless communication device and said first wireless network; and

a server adapted to communicate with said client for an operator, said server including a storage storing instructions to automatically authenticate said user to said first wireless network in response to said authentication event by providing said credential in a signaling session with said client over said second wireless network for connecting said wireless communication device to said first wireless network.

12. A client-server based communication system, as set forth in claim 11, wherein said storage stores further instructions for said client to signal said second wireless network including a wide area network over a wireless connection to automatically send a request message to said wide area network on said wireless connection to obtain said credential for authenticating said user to said first wireless network including a Wi-Fi network.

13. A client-server based communication system, as set forth in claim 12, wherein said storage stores further instructions for said client to receive said credential in a reply message from said wide area network in response to said request message.

14. A client-server based communication system, as set forth in claim 11, wherein said storage stores further instructions for said client to request an access token in said request message over a wireless connection within a signaling session of said wireless communication device and said wide area network.

15. A client-server based communication system, as set forth in claim 12, wherein said storage stores further instructions for said client to extract said access token from said reply message and automatically submit said access token to said access point to access a Wi-Fi hotspot associated with said Wi-Fi network.

16. A client in a client-server based communication system to automate authentication of a user to a first wireless network, said client associated with a second wireless network comprising:

a controller; and

a storage coupled to said controller, said storage storing instructions for detecting an authentication event at a wireless communication device to gain access to said first wireless network through an access point associated with said first wireless network, in response to said authentication event, automatically obtain a credential from said second wireless network, and authenticate said user based on said credential to establish a connection between said wireless communication device and said first wireless network.

17. A client, as set forth in claim 16, wherein said client is being defined at least in part by an Institute of Electrical and Electronics Engineers 802.11x standard.

18. A client, as set forth in claim 16, wherein said client further comprises:

a transceiver including a modem to;

detect a link-layer authentication signal that initiates a Wi-Fi authentication process for login onto said first wireless network including a Wi-Fi network;

send a short message service message to a server over said wide area network to login onto said Wi-Fi network; and

receive said access token in a return short message service message in response to said short message service message.

19. A client, as set forth in claim 18, wherein said transceiver to use a wireless connection from a wireless communication device to detect a web-based page.

20. A client, as set forth in claim 19, wherein said modem to receive from said wide area network said access token with a password in said return short message service message in response to said short message service message, cause a client module at said wireless communication device to communicate with a server module associated with an operator of said wide area network to authenticate said user based on said access token, and enable said user to login into said Wi-Fi network at least one-time based on said password.

21. A server in a client-server based communication system to automate authentication of a user to a first wireless network, said server associated with a second wireless network comprising:

a controller; and

a storage coupled to said controller, said storage storing instructions to automatically authenticate said user of a client to said first wireless network associated with an access point for an operator in response to an authentication event at a wireless communication device by providing a credential in a signaling session with said client over said second wireless network for connecting said wireless communication device to said first wireless network.

22. A server, as set forth in claim 21, wherein said server is being defined at least in part by an Institute of Electrical and Electronics Engineers 802.11x standard.

23. An article comprising a computer readable storage medium storing instructions that, when executed, to automate authentication of a user, cause a client-server based communication system to:

detect an authentication event at a wireless communication device to gain access to a first wireless network through an access point associated with said first wireless network;

in response to said authentication event, automatically obtain a credential from a second wireless network; and

authenticate said user based on said credential to establish a connection between said wireless communication device and said first wireless network.

24. An apparatus for automating authentication of a user, the apparatus comprising:

means for detecting an authentication event at a wireless communication device to gain access to a first wireless network through an access point associated with said first wireless network;

means for automatically obtaining a credential from a second wireless network in response to said authentication event; and

means for authenticating said user based on said credential to establish a connection between said wireless communication device and said first wireless network.