METHOD AND APPARATUS FOR WIRELESS NETWORK AUTHENTICATION AND AUTHORIZATION

• US 20150281955A1
• Filed: 09/10/2014
• Published: 10/01/2015
• Est. Priority Date: 03/27/2014
• Status: Active Grant

• Current Assignee: Beijing Nanbao Technology Co., Ltd.
• Original Assignee: Beijing Nanbao Technology Co., Ltd.
• Inventors: Zhang, Zhaolong
• Granted Patent: US 9,961,543 B2
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 12/63 Location-dependent; Proximity-dependent
• CPC Class Codes: H04W 12/71 Hardware identity
• CPC Class Codes: H04W 12/72 Subscriber identity
• CPC Class Codes: H04W 4/021 Services related to particular areas, e.g. point of interest [POI] services, venue services or geofences

Abstract

A wireless router, comprising a location information acquisition module configured to acquire location information of a mobile device and an identity information collection module configured to store a predetermined location model to determine a match between the location information and the predetermined location model based on a corresponding relation between the predetermined location model and identity information of the mobile device. A wireless router further comprising an authentication and authorization module configured to determine a match between the location information and the predetermined location model and to authenticate and authorize the mobile device to access a network.

Claims

1. A wireless router, comprising:

a location information acquisition module configured to acquire location information of a mobile device;

an identity information collection module configured to store a predetermined location model to determine a match between the location information and the predetermined location model based on a corresponding relation between the predetermined location model and identity information of the mobile device; and

an authentication and authorization module configured to determine a match between the location information and the predetermined location model and to authenticate and authorize the mobile device to access a network.

2. The wireless router of claim 1, further comprising:

an identity verification module for determining an access authority of the mobile device according to the present corresponding relation between the location relation and the access authority.

3. The wireless router of claim 1, further comprising:

a second verification module for verifying the mobile device that has been successfully authenticated and authorized by the authentication and authorization module according to a user name, a password, a fingerprint, an iris, a sound wave, a two-dimensional code or a dynamic password.

4. The wireless router of claim 1, further comprising:

an intelligent learning module for storing a location model, an identity information, the corresponding relation between the location model and the identity information, and the corresponding relation between the location model and an access authority;

sending the location model, the identity information, the corresponding relation between the location model and identity information, and the corresponding relation between the location model and the access authority to a cloud platform module connected to the wireless router via a network;

receiving revisions and adjustments made by the cloud platform module to the location model, the identity information, the corresponding relation between the location model and the identity information, and the corresponding relation between the location model and the access authority; and

sending the revisions and adjustments to the location information acquisition module, the identity information verification module, the authentication and authorization module and a second verification module.

5. The wireless router of claim 1, further comprising:

the location information acquisition module acquires the location information of the mobile device in at least one of;

the location information acquisition module comprises a wireless distance-measuring and positioning module for acquiring radio frequency (RF) signals from the mobile device to measure the distance and position of the mobile device so as to acquire the location information of the mobile device;

the location information acquisition module receives the location information of the mobile device from the mobile device; and

the location information acquisition module receives the location information of the mobile device from a third party.

6. The wireless router of claim 5, further comprising:

the location information comprises the mobile device'"'"'s distance information, relative location information, track information and time-dependent changes thereof; and

the distance, relative location and track are the distance, relative location and track of a mobile device relative to the wireless router, an accessory distance measurement device of the wireless router or another device that has been authorized by the wireless router.

7. The wireless router of claim 5, further comprising:

the identity information of the mobile device comprises at least one of an IP address, a MAC address, a mobile phone number, a mobile device number, a manufacturer logo and a time stamp.

8. A method for authenticating and authorizing a mobile device, comprising:

receiving, by a wireless router, location information of a mobile device;

comparing the location information of the mobile device with a predetermined location model ti determine whether a match between the location information and the predetermined location model exists;

obtaining, by the wireless router, identity information of the mobile device; and

completing authentication and authorization of the mobile device by permitting the mobile device to access a wireless network.

9. The method of claim 8 further comprising:

determining, for the mobile device an access authority according to a corresponding relation between the predetermined location model and a network access authority based on the mobile device'"'"'s location information.

10. The method of claim 8, further comprising:

authenticating the mobile device based on at least one of;

a username, a password, a fingerprint, an iris, a sound wave, a two-dimensional code or a dynamic password.

11. The method of claim 10 further comprising:

sending the location information, the location model, the corresponding relation between the location model and access authority, and the identity information of the mobile device to a cloud server connected via the wireless network, wherein the cloud server analyzes, adjusts or revises the received information, and sends the adjustments and revisions to the wireless router.

12. The method claim 8, wherein obtaining the mobile device'"'"'s location information by the wireless router further comprises:

receiving RF signals from the mobile device to measure the distance and position of the mobile device;

receiving the location information of the mobile device from the mobile device; and

receiving the location information of the mobile device from a third party.

13. The method of claim 12, wherein the location information comprises at least one of:

a distance information associated with the mobile device, a relative location information associated with the mobile device, track information and time-dependent changes; and

wherein the distance, relative location and track are the distance, relative location and track of the mobile device relative to the wireless router, an accessory distance measurement device of the wireless router or another device that has been authorized by the wireless router.

14. The method of claim 12, wherein the identity information of the mobile device comprises at least one of:

an IP address, a MAC address, a mobile phone number, a mobile device number, a manufacturer logo and a time stamp.

15. (canceled)

16. A non-transitory computer-readable medium having stored thereon a program of instructions executable by a router to cause the router to:

receive location information of a mobile device;

compare the location information of the mobile device with a predetermined location model to determine whether a match exists between the location information and the predetermined location model;

obtain the identity information of the mobile device; and

complete authentication and authorization of the mobile device by permitting the mobile device to access a wireless network.