Methods, systems, and computer program products for providing trusted access to a communicaiton network based on location

• US 20060265737A1
• Filed: 05/23/2005
• Published: 11/23/2006
• Est. Priority Date: 05/23/2005
• Status: Abandoned Application

• Current Assignee: Scenera Technologies LLC (Scenera Research LLC)
• Original Assignee: Scenera Technologies LLC (Scenera Research LLC)
• Inventors: Morris, Robert P.
• Application Number:
  US11/135,086
• Publication Number:
  US 20060265737A1
• Time in Patent Office: Days
• US Class Current: 726/3
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 12/63 Location-dependent; Proximity-dependent
• CPC Class Codes: H04W 12/73 Access point logical identity
• CPC Class Codes: H04W 4/02 Services making use of location information
• CPC Class Codes: H04W 4/029 Location-based management or tracking services
• CPC Class Codes: H04W 48/04 based on user or terminal location or mobility data, e.g. moving direction, speed
• CPC Class Codes: H04W 48/16 Discovering, processing access restriction or access information
• CPC Class Codes: H04W 48/18 Selecting a network or a communication service
• CPC Class Codes: H04W 84/12 WLAN [Wireless Local Area Networks]

Abstract

Methods, systems, and computer program products for providing trusted access to a communication network by a client based on location. An available access network providing access to a target communication network is detected. A determination is made as to whether the available access network is a trusted access network. In response to determining that the available access network is not a trusted access network, location information for the client is determined. An identity of at least one trusted access network is determined based on the determined location information.

Claims

1. A method for providing trusted access to a communication network by a client based on location, the method comprising:

at a client;

(a) detecting an available access network providing access to a target communication network;

(b) determining whether the available access network is a trusted access network;

(c) responsive to determining that the available access network is not a trusted access network, determining location information for the client; and

(d) determining an identity of at least one trusted access network based on the determined location information.

2. The method of claim 1 wherein detecting an available access network providing access to a target communication network includes detecting at least one of an access gateway and a wireless access point

3. The method of claim 1 wherein determining whether the available access network is a trusted access network comprises:

(a) determining an access network identifier associated with the available access network; and

(b) determining, based on the access network identifier, whether the identifier associated with the available access network is in an access network database.

4. The method of claim 3 wherein determining an access network identifier associated with the available access network includes at least one of:

(a) determining an Internet protocol (IP) address for at least one of an access gateway associated with the available access network and an access point associated with the available access network;

(b) determining a media access control (MAC) address for at least one of an access gateway associated with the available access network and an access point associated with the available access network;

(c) determining an IP subnet identifier associated with the available access network;

(d) receiving a signed digital certificate associated with the available access network; and

(e) receiving a service set identifier (SSID) associated with the available access network.

5. The method of claim 3 wherein determining whether the identifier associated with the available access network is in an access network database based on the access network identifier includes at least one of:

(a) accessing a local access network database on the client; and

(b) accessing a remote access network database on a server.

6. The method of claim 3 wherein determining whether the identifier associated with the available access network is in an access network database comprises:

(a) accessing a local access network database on the client; and

(b) responsive to not finding the access network identifier in the local access network database, accessing a remote access network database on a server.

7. The method of claim 1 wherein determining location information for the client comprises:

(a) determining an access network identifier associated with the available access network; and

(b) accessing an access network database to determine location information associated with the available access network based on the access network identifier.

8. The method of claim 7 wherein determining an access network identifier associated with the available access network comprises at least one of:

(a) determining an IP address for at least one of an access gateway associated with the available access network and an access point associated with the available access network;

(b) determining a MAC address for at least one of an access gateway associated with the available access network and an access point associated with the available access network;

(c) determining an IP subnet identifier associated with the available access network;

(d) receiving a signed digital certificate associated with the available access network; and

(e) receiving a service set identifier (SSID) associated with the available access network.

9. The method of claim 7 wherein accessing an access network database to determine location information based on the access network identifier associated with the available access network comprises at least one of:

(a) accessing a local access network database on the client; and

(b) accessing a remote access network database on a server.

10. The method of claim 1 wherein determining location information for the client includes determining location information using a global positioning system.

11. The method of claim 1 wherein determining location information for the client comprises:

(a) prompting a user of the client to input the location information; and

(b) determining location information based on the user input.

12. The method of claim 1 wherein determining an identity of at least one trusted access network based on the determined location information comprises at least one of:

(a) accessing a local access network database on the client; and

(b) accessing a remote access network database on a server.

13. The method of claim 1 wherein determining an identity of at least one trusted access network based on the determined location information comprises:

(a) accessing a local access network database on the client; and

(b) responsive to not finding the trusted access network identifier in the local access network database, accessing a remote access network database on a server.

14. The method of claim 1 wherein determining an identity of at least one trusted access network based on the determined location information includes determining a secure server providing secure communications with the target communication network.

15. The method of claim 14 comprising tunneling from the client to the secure server.

16. The method of claim 1 comprising accessing the target communication network via one of the at least one trusted access networks.

17. The method of claim 1 comprising selecting one of the at least one trusted access networks based on a comparison of network characteristics of the trusted access networks.

18. The method of claim 17, wherein the network characteristics comprise at least one of trust indications of each of the trusted access networks, bandwidth availability of each of the trusted access networks, quality of service of each of the trusted access networks.

19. The method of claim 17 wherein selecting one of the at least one trusted access networks based on a comparison of network characteristics of the trusted access networks comprises:

(a) displaying the trusted access network and corresponding network characteristics to a user; and

(b) requesting user input for selecting a trusted access network.

20. The method of claim 17 wherein selecting one of the at least one trusted access networks based on a comparison of network characteristics of the trusted access networks comprises includes automatically selecting a trusted access network having at least minimum network characteristics.

21. A method for providing trusted access to a communication network by a client based on location, the method comprising:

at a client;

(a) determining location information for the client; and

(b) determining an identity of at least one trusted access network based on the determined location information.

22. A method for providing trusted access to a communication network to a client based on location, the method comprising:

at a server;

(a) receiving, from a client, a request for an identity of at least one trusted access network for accessing a target communication network, the request including at least one of an access network identifier associated with an access network currently available to the client and location information for the client; and

(b) determining corresponding information for at least one trusted access network based on the at least one of a network identifier for an access network currently accessible to the client and location information for the client; and

(c) forwarding the corresponding information for the at least one trusted access network to the client.

23. The method of claim 22 wherein the access network identifier associated with an access network currently accessible to the client includes at least one of:

(a) an IP address for at least one of an access gateway associated with the available access network and an access point associated with the available access network;

(b) a MAC address for at least one of an access gateway associated with the available access network and an access point associated with the available access network;

(c) an IP subnet identifier associated with the available access network;

(d) a signed digital certificate associated with the available access network; and

(e) a SSID associated with the available access network.

24. The method of claim 22 wherein the location information for the client includes location information using a global positioning system.

25. The method of claim 22 wherein determining corresponding information for at least one trusted access network based on the at least one of a network identifier for an access network currently accessible to the client and location information for the client includes accessing a remote access network database on the server.

26. The method of claim 22 wherein determining corresponding information for at least one trusted access network based on the at least one of a network identifier for an access network currently accessible to the client and location information for the client includes determining location information for the at least one trusted access network.

27. The method of claim 22 wherein determining corresponding information for at least one trusted access network based on the at least one of a network identifier for an access network currently accessible to the client and location information for the client includes determining an identity of a secure server providing secure communications with the target communication network.

28. The method of claim 22 wherein determining corresponding information for at least one trusted access network based on the at least one of a network identifier for an access network currently accessible to the client and location information for the client includes determining network characteristics of the trusted access networks.

29. The method of claim 28 wherein the network characteristics comprise at least one of trust indications of each of the trusted access networks, bandwidth availability of each of the trusted access networks, quality of service of each of the trusted access networks.

30. The method of claim 28 wherein determining corresponding information for at least one trusted access network based on the at least one of a network identifier for an access network currently accessible to the client and location information for the client includes determining whether a trusted access network has at least minimum network characteristics.

31. A computer program product comprising computer executable instructions embodied in a computer-readable medium for performing steps comprising:

at a client;

(a) detecting an available access network providing access to a target communication network;

(b) determining whether the available access network is a trusted access network;

(c) responsive to determining that the available access network is not a trusted access network, determining location information for the client; and

(d) determining an identity of at least one trusted access network based on the determined location information.

32. A computer program product comprising computer executable instructions embodied in a computer-readable medium for performing steps comprising:

at a server;

(a) receiving, from a client, a request for an identity of at least one trusted access network for accessing a target communication network, the request including at least one of an access network identifier associated with an access network currently available to the client and location information for the client; and

(b) determining corresponding information for at least one trusted access network based on the at least one of a network identifier for an access network currently accessible to the client and location information for the client; and

(c) forwarding the corresponding information for the at least one trusted access network to the client.

33. A communication device for providing trusted access to a communication network based on location, comprising:

(a) means for detecting an available access network providing access to a target communication network;

(b) means for determining whether the available access network is a trusted access network;

(c) means for determining location information for the client; and

(d) means for determining an identity of at least one trusted access network based on the determined location information.

34. A communication device for providing trusted access to a communication network based on location, the method comprising:

(a) a network interface that detects an available access network providing access to a target communication network;

(b) a location manager that determines location information for the communication device, and

(c) a network information manager that determines whether the available access network is a trusted access network and, responsive to determining that the available access network is not a trusted access network, determines an identity of at least one trusted access network based on the determined location information.

35. The communication device of claim 34 wherein the network interface is configured to detect at least one of an access gateway and a wireless access point.

36. The communication device of claim 34 wherein the location manager is configured to determine location information for the communication device by:

(a) determining an access network identifier associated with the available access network; and

(b) accessing an access network database to determine location information based on the access network identifier associated with the available access network.

37. The communication device of claim 34 wherein the location manager is configured to determine an access network identifier associated with the available access network based on at least one of:

(a) an IP address for at least one of an access gateway associated with the available access network and an access point associated with the available access network;

(b) a MAC address for at least one of an access gateway associated with the available access network and an access point associated with the available access network;

(c) an IP subnet identifier associated with the available access network;

(d) a signed digital certificate associated with the available access network; and

(e) a service set identifier (SSID) associated with the available access network.

38. The communication device of claim 34 comprising a local access network database, wherein the location manager is configured to access the local access network database to determine location information based on the access network identifier associated with the available access network.

39. The communication device of claim 34 wherein the location manager is configured to access a remote access network database on a server to determine location information based on the access network identifier associated with the available access network.

40. The communication device of claim 34 comprising a global positioning system (GPS) receiver that receives GPS location information from a global positioning system, wherein the location manager is configured to determine location information for the communication device based on the received GPS location information.

41. The communication device of claim 34 wherein the location manager is configured to determine location information for the communication device by:

(a) prompting a user of the communication device to input the location information; and

(b) determining location information based on the user input.

42. The communication device of claim 34 wherein the network information manager is configured to determine whether the available access network is a trusted access network by:

(a) determining an access network identifier associated with the available access network; and

(b) determining whether the identifier associated with the available access network is in an access network database.

43. The communication device of claim 42 wherein, the network information manager is configured to determine the access network identifier associated with the available access network based on at least one of:

(a) an IP address for at least one of an access gateway associated with the available access network and an access point associated with the available access network;

(b) a MAC address for at least one of an access gateway associated with the available access network and an access point associated with the available access network;

(c) an IP subnet identifier associated with the available access network;

(d) a signed digital certificate associated with the available access network; and

(e) a SSID associated with the available access network.

44. The communication device of claim 42 comprising a local access network database, wherein the network information manager is configured to access the local access network database to determine whether the available access network is a trusted access network.

45. The communication device of claim 42 wherein the network information manager is configured to access a remote access network database on a server to determine whether the available access network is a trusted access network.

46. The communication device of claim 42 wherein the network information manager is configured to determine whether the identifier associated with the available access network is in an access network database by:

(a) accessing a local access network database on the communication device; and

(b) responsive to not finding the access network identifier in the local access network database, accessing a remote access network database on a server.

47. The communication device of claim 34 comprising a local access network database, wherein the network information manager is configured to determine an identity of at least one trusted access network based on the determined location information by accessing the local access network database on the communication device.

48. The communication device of claim 34 wherein the network information manager is configured to determine an identity of at least one trusted access network based on the determined location information by accessing a remote access network database on a server.

49. The communication device of claim 34 wherein the network information manager is configured to determine an identity of at least one trusted access network based on the determined location information by:

(a) accessing a local access network database on the communication device; and

(b) responsive to not finding the trusted access network identifier in the local access network database, accessing a remote access network database on a server.

50. The communication device of claim 34 wherein the network information manager is configured to determine an identity of at least one trusted access network based on the determined location information by determining a secure server providing secure communications with the target communication network.

51. The communication device of claim 50 wherein the network information manager is configured to tunnel to the secure server.

52. The communication device of claim 34 wherein the network information manager is configured to select one of the at least one trusted access networks based on a comparison of network characteristics of the trusted access networks.

53. The communication device of claim 52 wherein the network characteristics comprise at least one of trust indications of each of the trusted access networks, bandwidth availability of each of the trusted access networks, quality of service of each of the trusted access networks.

54. The communication device of claim 52 comprising a display and input device, wherein the network information manager is configured to select one of the at least one trusted access networks by:

(a) displaying the trusted access network and corresponding network characteristics to a user on the display; and

(b) requesting user input via the input device for selecting a trusted access network.

55. The communication device of claim 52 wherein the network information manager is configured to select one of the at least one trusted access networks by automatically selecting a trusted access network having at least minimum network characteristics.

56. A server for providing trusted access to a communication network by a client, the server comprising:

(a) means for receiving, from a client, a request for an identity of at least one trusted access network for accessing a target communication network, the request including at least one of an access network identifier associated with an access network currently available to the client and location information for the client; and

(b) means for determining corresponding information for at least one trusted access network based on the at least one of a network identifier for an access network currently accessible to the client and location information for the client; and

(c) means for forwarding the corresponding information for the at least one trusted access network to the client.

57. A server for providing trusted access to a communication network by a client, the server comprising:

(a) a client interface that receives, from a client, a request for an identity of at least one trusted access network for accessing a target communication network, the request including at least one of an access network identifier associated with an access network currently available to the client and location information for the client; and

(b) a network information manager that determines corresponding information for at least one trusted access network based on the at least one of a network identifier for an access network currently accessible to the client and location information for the client, wherein the client interface forwards the corresponding information for the at least one trusted access network to the client.

58. The server of claim 57 wherein the access network identifier associated with an access network currently accessible to the client includes at least one of:

(a) an IP address for at least one of an access gateway associated with the available access network and an access point associated with the available access network;

(b) a MAC address for at least one of an access gateway associated with the available access network and an access point associated with the available access network;

(c) an IP subnet identifier associated with the available access network;

(d) a signed digital certificate associated with the available access network; and

(e) a SSID associated with the available access network.

59. The server of claim 57 wherein the location information for the client includes location information using a global positioning system.

60. The server of claim 57 wherein the network information manager is configured to determine corresponding information for the at least one trusted access network by accessing an access network database.

61. The server of claim 57 comprising a location manager, wherein the location manager is configured to determine location information for the at least one trusted access network by accessing an access network database.

62. The server of claim 57 wherein the network information manager is configured to determine corresponding information for at least one trusted access network by determining an identity of a secure server providing secure communications with the target communication network.

63. The server of claim 57 wherein the network information manager is configured to determine corresponding information for at least one trusted access network by determining network characteristics of the trusted access networks.

64. The server of claim 63 wherein the network characteristics comprise at least one of trust indications of each of the trusted access networks, bandwidth availability of each of the trusted access networks, quality of service of each of the trusted access networks.

65. The server of claim 57 wherein the network information manager is configured to determine corresponding information for at least one trusted access network by determining a trusted access network having at least minimum network characteristics.