METHOD FOR PAIRING WITH A GATEWAY

• US 20190320477A1
• Filed: 10/23/2017
• Published: 10/17/2019
• Est. Priority Date: 10/24/2016
• Status: Active Application

• Current Assignee: Sagemcom Broadband SAS (Sagemcom Holding SAS)
• Original Assignee: Sagemcom Broadband SAS (Sagemcom Holding SAS)
• Inventors: KORBER, Nicolas
• Application Number:
  US16/343,936
• Publication Number:
  US 20190320477A1
• Time in Patent Office: Days
• CPC Class Codes: H04L 12/66 Arrangements for connecting between networks having differing types of switching systems, e.g. gateways
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/062 Pre-authentication
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 12/50 Secure pairing of devices
• CPC Class Codes: H04W 48/02 Access restriction performed under specific conditions
• CPC Class Codes: H04W 48/08 Access restriction or access information delivery, e.g. discovery data delivery signalling during connection H04W76/00
• CPC Class Codes: H04W 48/16 Discovering, processing access restriction or access information
• CPC Class Codes: H04W 76/15 Setup of multiple wireless link connections
• CPC Class Codes: H04W 76/34 Selective release of ongoing connections
• CPC Class Codes: H04W 84/12 WLAN [Wireless Local Area Networks]
• CPC Class Codes: H04W 88/08 Access point devices
• CPC Class Codes: H04W 88/16 Gateway arrangements

Abstract

A gateway manages a first secure wireless local network and a second secure wireless local network. The gateway interconnects the second secure wireless local network and a wide-area network so that each device paired with the second secure wireless local network can access services offered by the wide-area network. The gateway detects an attempt at first pairing, with the first secure wireless local network, using first authentication data. The gateway checks with a provisioning server that the first pairing is performed by a device associated with the same user as the gateway, and checks that the first authentication data correspond to expected authentication data. In the case of a positive check, the gateway transmits, via the first secure wireless local network, second authentication data as well as a network identifier of the second secure wireless local network, with a view to pairing with the second secure wireless local network.

Claims

1. A pairing method, wherein a gateway serves as a wireless access point to at least one first secure wireless local network and to a second secure wireless local network, the gateway interconnecting the second secure wireless local network and a wide-area network so that each communication device paired with the second secure wireless local network can access services offered via the wide-area network, a provisioning server being connected to the wide-area network, the method comprising:

detecting an attempt at first pairing of a communication device with one said first secure wireless local network, in which the communication device is identified and supplies first authentication data;

checking that the first authentication data correspond to authentication data expected by the gateway vis-à

-vis said first secure wireless local network;

in the case of positive check, confirming the first pairing with said first secure wireless local network and transmitting, to said communication device via said first secure wireless local network, second authentication data as well as a network identifier of the second secure wireless local network;

detecting an attempt at second pairing of the communication device with the second secure wireless local network, in which the communication device supplies other authentication data;

checking that said other authentication data correspond to said second authentication data; and

,

in the case of positive check, confirming the second pairing with the second secure wireless local network, so as to enable said communication device to access said services offered by the wide-area network,

wherein the first secure wireless local network does not enable to access the services offered by the wide-area network, and the method is implemented by the gateway and further comprises, for confirming the first pairing with said first secure wireless local network;

checking with the provisioning server that said communication device is associated with the same user as the gateway,

and, for checking that said communication device is associated with the same user as the gateway and for checking that the first authentication data correspond to the authentication data expected, the gateway receives from the provisioning server a description including, for each communication device among a set of communication devices liable to pairing with the second secure wireless local network;

a communication device identifier,

a network identifier, and

authentication data expected vis-à

-vis the first secure wireless local network;

and wherein the gateway creates one said first secure wireless local network for each communication device among said set of communication devices liable to pairing with the second secure wireless local network, by allocating to said first secure wireless local network the network identifier of the description of the corresponding communication device.

2. The pairing method according to claim 1, wherein, when the second pairing with the second secure wireless local network for a communication device among said set of communication devices liable to pairing is confirmed, the gateway stops the first secure wireless local network created for said communication device.

3. The pairing method according to claim 1, wherein each first secure wireless local network and the second secure wireless local network are of the Wi-Fi type.

5. A non-transitory information storage medium storing a computer program comprising instructions for implementing, by a processor, the method according to claim 1, when said program is executed by said processor.

4. (canceled)

6. A gateway configured to serve as a wireless access point to at least one first secure wireless local network and to a second secure wireless local network, the gateway interconnecting the second secure wireless local network and a wide-area network so that each communication device paired with the second secure wireless local network can access services offered via the wide-area network, a provisioning server being connected to the wide-area network, the gateway comprising circuitry configured for:

detecting an attempt at first pairing of a communication device with one said first secure wireless local network, in which the communication device is identified and supplies first authentication data;

checking that the first authentication data correspond to authentication data expected by the gateway vis-à

-vis said first secure wireless local network;

confirming, in the case of a positive check, the first pairing with said first secure wireless local network and transmitting to said communication device via said first secure wireless local network second authentication data as well as a network identifier of the second secure wireless local network;

detecting an attempt at second pairing of the communication device with the second secure wireless local network, in which the communication device supplies other authentication data;

checking that said other authentication data correspond to said second authentication data; and

confirming, in the case of a positive check, the second pairing with the second secure wireless local network, so as to enable said communication device to access said services offered via the wide-area network,

wherein the first secure wireless local network does not enable to access the services offered via the wide-area network, and for confirming the first pairing with said first secure wireless local network, the circuitry is further configured for;

checking with the provisioning server that said communication device is associated with the same user as the gateway,

and, for checking that said communication device is associated with the same user as the gateway and to check that the first authentication data correspond to the authentication data expected, the circuitry is further configured for receiving from the provisioning server a description including, for each communication device among a set of communication devices liable to pairing with the second secure wireless local network;

a communication device identifier,

a network identifier, and

authentication data expected vis-à

-vis the first secure wireless local network;

and the circuitry is further configured for creating one said first secure wireless local network for each communication device among said set of communication devices liable to pairing with the second secure wireless local network, by allocating to said first secure wireless local network the network identifier of the description of the corresponding communication device.