Intelligent network access controller and method

• US 20100159877A1
• Filed: 12/19/2008
• Published: 06/24/2010
• Est. Priority Date: 12/19/2008
• Status: Active Grant

• Current Assignee: Tecore Incorporated
• Original Assignee: Tecore Incorporated
• Inventors: Joseph, Thomas V. III, Salkini, Jay
• Granted Patent: US 8,437,741 B2
• Time in Patent Office: Days
• US Class Current: 455/411
• CPC Class Codes: H04L 63/0272 Virtual private networks
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/0876 based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 24/08 Testing, supervising or monitoring using real traffic
• CPC Class Codes: H04W 4/14 Short messaging services, e.g. short message services [SMS] or unstructured supplementary service data [USSD]
• CPC Class Codes: H04W 4/90 Services for handling of emergency or hazardous situations, e.g. earthquake and tsunami warning systems [ETWS]
• CPC Class Codes: H04W 48/04 based on user or terminal location or mobility data, e.g. moving direction, speed
• CPC Class Codes: H04W 60/02 by periodical registration
• CPC Class Codes: H04W 72/56 based on priority criteria
• CPC Class Codes: H04W 84/005 Moving wireless networks
• CPC Class Codes: H04W 88/02 Terminal devices
• CPC Class Codes: H04W 88/12 Access point controller devices

Abstract

An intelligent network access controller for use with a wireless network that provides communications services to subscribers having wireless communications devices includes a multi-protocol interface for receiving and sending digital messaging by the wireless communications devices; an identification module that determines an identity of a wireless communications device; an access module that receives the identity and determines an access level for the wireless communications device; and a locking module that locks selected wireless communications devices to the controller based on the determined access level.

Claims

1. An intelligent network access controller for use with a wireless network that provides communications services to subscribers having wireless communications devices, comprising:

a multi-protocol interface for receiving and sending digital messaging by the wireless communications devices;

an identification module that determines an identity of a wireless communications device;

an access module that receives the identity and determines an access level for the wireless communications device; and

a locking module that locks selected wireless communications devices to the controller based on the determined access level.

2. The controller of claim 1, wherein the access levels comprise unlimited wireless access, wherein the wireless communications device is redirected to register with one or more wireless networks, and blocked wireless access, wherein alternate (non-controller) wireless network access is prevented.

3. The controller of claim 2, wherein the wireless communications devices comprise one of allowed, restricted, and unknown wireless communications devices.

4. The controller of claim 3, wherein the restricted and unknown wireless communications devices are blocked from wireless access.

5. The controller of claim 3, wherein the restricted wireless communication devices only are blocked from wireless network access.

6. The controller of claim 3, wherein the allowed wireless communication devices are redirected to wireless network access.

7. The controller of claim 3, wherein the allowed and unknown wireless communication devices are redirected to wireless network access.

8. The controller of claim 3, wherein all wireless communication devices are redirected to wireless network access.

9. The controller of claim 2, wherein the identity of the wireless communications device is stored in an equipment identification module of the controller, the equipment identification module including a subscriber profile including one or more of call features, wireless device protocols, wireless device identification, and personal identification number.

10. The controller of claim 1, further comprising a timing module, wherein wireless access is limited based on calendar-specific information including time of day and date information.

11. The controller of claim 1, further comprising a location module, wherein wireless communication access is limited based on a location of the controller.

12. The controller of claim 1, further comprising a location module, wherein wireless communication access is limited based on a location of the wireless device.

13. The controller of claim 1, further comprising an emergency access module, wherein emergency access is allowed during otherwise blocked wireless communications access periods.

14. The controller of claim 1, further comprising an emergency access module, wherein emergency access is allowed at otherwise blocked wireless communications access locations.

15. The controller of claim 1, wherein the controller is permanently mounted at a facility.

16. The controller of claim 1, wherein the controller is portable, and wherein when the location of the controller is changed, a wireless access limitation area associated with the controller may change.

17. The controller of claim 1, wherein the controller is portable, and wherein when the location of the controller is changed, a wireless access limitation area associated with the wireless device may change.

18. The controller of claim 1, further comprising a power control module that interfaces with one or more directional antennae, RF distribution equipment, amplifiers, and repeaters, and wherein an extent of a wireless communications limited area is variable.

19. The controller of claim 1, wherein the controller controls wireless communications access at multiple sites.

20. The controller of claim 1, wherein the controller controls wireless communications access via a single wireless access technology.

21. The controller of claim 1, wherein the controller controls wireless communications access via multiple wireless access technologies.

22. The controller of claim 1, wherein the controller controls wireless communications access via a single frequency band.

23. The controller of claim 1, wherein the controller controls wireless communications access via multiple frequency band.

24. The controller of claim 1, wherein the controller further comprises an interface to a private network, wherein within the wireless communications limited access area, wireless voice communications are enabled among selected wireless communications devices.

25. The controller of claim 1, further comprising a call intercept device, wherein incoming and outgoing communications among the wireless communications devices are monitored and recorded.

26. The controller of claim 1, wherein the wireless communications devices include a fixed wireless telephone, a mobile device, and a computer having a wireless modem.

27. The controller of claim 1, further comprising a private network communications module that operates to establish a private network for voice communications among wireless devices, including wireless devices locked to the controller.

28. The controller of claim 1, further comprising a private network communications module that operates to establish a private network for voice communications among wireless devices, excluding wireless devices locked to the controller.

29. The controller of claim 28, further comprising:

a public switched telephone network (PSTN) interface; and

a private branch exchange (PBX) interface.

30. The controller of claim 1, further comprising a user interface, the user interface providing an operator access to operate the controller and to configure the controller to establish access restrictions.

44. The INAC of claim 1, wherein the means for dynamically determining characteristic values, comprises:

means for determining locations of the devices;

means for determining call features of the devices; and

means for determining restriction times in the local wireless network.

45. The INAC of claim 1, wherein the local wireless network is established on one of an airplane, a ship, and a train.

46. The INAC of claim 45, wherein the means for locking locks the devices to the local wireless network based on an operational profile of the airplane, ship, or train.

47. The INAC of claim 46, wherein an operational profile of the airplane includes one of flying, defined as access doors shut, and not flying.

31. A method, implemented on a suitably programmed processor, for restricting access to wireless communications to and from a wireless network, comprising:

provoking access from a wireless communications device to register with the intelligent access controller wireless network;

determining a category of the wireless communications device;

if the determined category is a first category, locking the wireless communications device so that access to the wireless network is prevented; and

if the determined category is a second category, directing the wireless communications device to re-attempt access with the wireless network.

32. The method of claim 31, wherein the first category comprises restricted devices and unknown devices, and wherein the second category consists of allowed devices.

33. The method of claim 31, wherein the first category comprises restricted devices, and wherein the second category consists of allowed devices and unknown devices.

34. The method of claim 31, wherein the first category comprises no devices, and wherein the second category consists of restricted devices, allowed devices and unknown devices.

35. The method of claim 34, further comprising:

receiving an emergency access request from a first category device;

determining if the first category device is an unknown device or a restricted device; and

if the first category device is an unknown device, initiating emergency access connection through the wireless network.

36. The method of claim 34, further comprising:

receiving an emergency access request from a first category device;

and initiating emergency access connection through the wireless network.

37. The method of claim 34, further comprising:

receiving an emergency access request from a first category device;

and not initiating emergency access connection through the wireless network.

38. The method of claim 34, further comprising:

receiving an access request from a first category device;

and allowing the access on the intelligent access controller wireless system.

39. The method of claim 34, further comprising:

receiving an access request from a first category device;

and allowing the access on the intelligent access controller wireless system and providing a method of monitoring the wireless device activity through the transaction.

40. The method of claim 34, further comprising accessing the wireless device overtly from the controller.

41. The method of claim 34, further comprising accessing the wireless device covertly from the controller.

42. An intelligent network access controller (INAC) that creates a local wireless network and that dynamically controls access by wireless devices to a wireless network underlying the local wireless network, the INAC, comprising:

means for registering the wireless devices, wherein the devices are identified and classified, and wherein the devices comprise one of allowed, restricted, and unknown;

means for dynamically determining characteristic values of the devices;

means for dynamically granting access by the devices to the wireless network based on the dynamically determined characteristics of the devices; and

means for locking devices to the local wireless network based on the dynamically determined characteristics.

43. The INAC of claim 42, wherein the means for registering comprises means for identifying the devices based on one or more of phone number and equipment identification number.

48. The INAC of claim 42, further comprising means for establishing a private network within a RF coverage area the local wireless network.

49. A method for controlling access by wireless devices to a wireless network, comprising the steps of:

establishing a local wireless network having a determined RF coverage area as an overlay to the wireless network;

detecting when the devices enter the RF coverage area of the local wireless network;

dynamically determining one or more characteristics of the devices and one or more characteristics of the RF coverage area; and

based on the dynamically determined characteristics, either;

locking the devices to the local wireless network, or

passing the devices to the wireless network.

50. The method of claim 49, further comprising registering the devices with the local wireless network based on one or more of phone number and equipment identification number.

51. The method of claim 49, wherein dynamically determining characteristic values comprises:

determining locations of the devices;

determining call features of the devices; and

determining restriction times in the local wireless network.

52. The method of claim 49, further comprising establishing a private network within a RF coverage area the local wireless network.

53. A system for controlling access to an existing wireless network, comprising:

means for generating a RF signal receivable by wireless devices, wherein a local wireless network is created; and

a controller coupled to the means for generating the RF signal, comprising;

an identity_module that identifies wireless devices within a coverage area of the local wireless network,

an access module that determines a level of access to the existing wireless network, wherein the levels of access comprise one of allowed and blocked, and

a locking module that locks wireless devices with a blocked level of access to the local wireless network.

54. The system of claim 53, wherein the local wireless network is established in a building.

55. The system of claim 53, wherein the local wireless network is established in a facility.