Visitor gateway in a wireless network

• US 7,248,858 B2
• Filed: 05/05/2003
• Issued: 07/24/2007
• Est. Priority Date: 05/04/2002
• Status: Active Grant

• Current Assignee: Avago Technologies International Sales Pte Limited (Broadcom, Inc.)
• Original Assignee: Broadcom Corporation (Broadcom, Inc.)
• Inventors: Barber, Simon, de Castro, Edward R., Petruschka, Roy
• Primary Examiner(s): TAYLOR, BARRY W
• Application Number:
  US10/430,810
• Publication Number:
  US 20050073979A1
• Time in Patent Office: 1,541 Days
• Field of Search: None
• US Class Current: 455/414.1
• CPC Class Codes: H04L 12/2856 Access arrangements, e.g. Internet access asynchronous transfer mode networks H04L12/5601; broadband local area networks H04L12/2801; optical access or distribution networks H04Q11/0067; access to open networks H04L12/5691; digital subscriber line end-user equipment and bit-level processing of data on a PSTN-based network H04M11/00; home network gateways H04L12/2834; wireless access networks H04W
• CPC Class Codes: H04L 63/02 for separating internal from external traffic, e.g. firewalls
• CPC Class Codes: H04L 63/0209 Architectural arrangements, e.g. perimeter networks or demilitarized zones
• CPC Class Codes: H04L 63/065 for group communications cryptographic mechanisms or cryptographic arrangements for key management involving conference or group key H04L9/0833
• CPC Class Codes: H04L 63/101 Access control lists [ACL]
• CPC Class Codes: H04L 63/162 at the data link layer
• CPC Class Codes: H04W 12/03 Protecting confidentiality, e.g. by encryption
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 16/14 Spectrum sharing arrangements between different networks
• CPC Class Codes: H04W 24/00 Supervisory, monitoring or testing arrangements
• CPC Class Codes: H04W 84/04 Large scale networks; Deep hierarchical networks
• CPC Class Codes: H04W 84/12 WLAN [Wireless Local Area Networks]
• CPC Class Codes: H04W 84/18 Self-organising networks, e.g. ad-hoc networks or sensor networks
• CPC Class Codes: H04W 84/22 with access to wired networks
• CPC Class Codes: H04W 88/08 Access point devices
• CPC Class Codes: H04W 88/12 Access point controller devices

Abstract

A system and method for restricting access to a wireless network is disclosed herein. One or more access points are generally associated with the wireless network (e.g., an IEEE 802.11 wireless network), and a visitor gateway for automatically preventing visiting user from directly entering the wireless network. A command and control center communicates with the access points and the visitor gateway and controls data transfer and routing thereof. The visitor gateway can communicate with a remote computer network (e.g., the Internet) and restricts access to the wireless network by a visiting user through or from the remote computer network. The command and control center also can automatically route the visiting user to the visitor gateway when the visiting user attempts to access an access point associated with the wireless network.

Claims

1. A system for restricting access to a wireless network, comprising:

at least one access point associated with the wireless network;

a visitor gateway that is configured to provide access to a remote computer network;

a command and control center associated with the wireless network, wherein the command and control center communicates with the at least one access point and the visitor gateway and controls data transfer and routing thereof; and

a secure communications tunnel through which the command and control center communicates with the at least one access point and the visitor gateway such that traffic from a wireless client designated as a visitor wireless client is tunneled to provide that visitor wireless client access to the remote computer network while preventing access to at least one node of an internal network accessible by a wireless client not designated as a visitor wireless client.

2. The system of claim 1, further comprising a firewall located between the command and control center and the visitor gateway.

3. The system of claim 1, wherein the command and control center automatically routes the visiting user to the visitor gateway when the visiting user attempts to access the at least one access point associated with the wireless network.

4. The system of claim 1, wherein the wireless network comprises an IEEE 802.11 wireless network.

5. A system for restricting access to an IEEE 802.11 wireless network, comprising:

at least one access point associated with the IEEE 802.11 wireless network;

a visitor gateway for automatically restricting entry of a visiting user to the IEEE 802.11 wireless network, wherein the visitor gateway communicates with a remote computer network and restricts access to the wireless network by a visiting user client but allows the visiting user client access to the remote computer network; and

a command and control center associated with the IEEE 802.11 wireless network, wherein the command and control center communicates with the at least one access point and at visitor gateway and controls data transfer and routing thereof and wherein the command and control center automatically routes the visiting user to the visitor gateway when the visiting user attempts to access the at least one access point associated with the IEEE 802.11 wireless network;

a firewall located between the command and control center and the visitor gateway;

a protected zone in which access to and from the IEEE 802.11 wireless network is limited, wherein the visitor gateway is located within the protected zone of the IEEE 802.11 wireless network; and

secure communications tunnel through which the command and control center communicates with the at least one access point, the firewall and the visitor gateway.