System and method for managing a wireless network community

• US 7,263,076 B1
• Filed: 10/07/2005
• Issued: 08/28/2007
• Est. Priority Date: 10/09/2004
• Status: Active Grant

• Current Assignee: Rateze Remote Mgmt. L.L.C. (Intellectual Ventures LLC)
• Original Assignee: Radiuz Networks, LLC
• Inventors: Robinson, Stephen D., Leibovitz, John S.
• Primary Examiner(s): Ferguson; Keith
• Application Number:
  US11/246,486
• Time in Patent Office: 690 Days
• Field of Search: 370/310, 370/310.2, 370/328, 370/338, 370/343, 370/349, 455/426.1, 455/426.2, 455/422.1, 455/414.2, 455/414.3, 455/414.4, 455/466, 455/410, 455/411, 455/412.1, 455/412.2, 455/435.1, 455/435.2, 455/435.3, 455/500, 455/517, 455/445, 709/229, 709/203, 709/218, 709/219, 709/228, 726/13, 726/3, 726/27
• US Class Current: 370/310
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 63/101 Access control lists [ACL]
• CPC Class Codes: H04L 63/162 at the data link layer
• CPC Class Codes: H04L 67/04 specially adapted for terminals or networks with limited capabilities; specially adapted for terminal portability
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 12/50 Secure pairing of devices
• CPC Class Codes: H04W 12/71 Hardware identity
• CPC Class Codes: H04W 84/12 WLAN [Wireless Local Area Networks]

Abstract

A wireless network community includes a plurality of wireless access points associated with a plurality of owners and a community management system in communication with each of the plurality of wireless access points via an Internet. The community management system includes a web server for interacting with the owners and for allowing each of the owners to register as a member of the network community. The community management system also includes an authentication server, and a data store coupled to the web server and to the authentication server. The community management system is configured to allow each registered member to register an associated wireless access point and to control which of the other members is authorized to access the wireless access point.

Claims

1. A wireless network community comprising:

a plurality of wireless access points associated with a plurality of owners; and

a community management system in communication with each of the plurality of wireless access points via an Internet, the community management system comprising;

a web server for interacting with the plurality of owners and for allowing each of the plurality of owners to register as a member of the network community;

an authentication server; and

a data store coupled to the web server and to the authentication server;

wherein the community management system is configured to allow each registered member of the plurality of members to register an associated wireless access point and to control which of the other members is authorized to access the wireless access point associated with the member.

2. The wireless network community of claim 1 wherein each registered member is allowed to create at least one access policy that indicates who is authorized to access the wireless access point associated with the member, and wherein the at least one access policy is stored in the data store.

3. The wireless network community of claim 2 further comprising at least one registered member who does not own a wireless access point, and wherein the at least one access policy allows all other registered members and the at least one registered member who does not own a wireless access point to access the wireless access point.

4. The wireless network community of claim 2 wherein the at least one access policy authorizes only members that have registered wireless access points.

5. The wireless network community of claim 2 wherein the at least one access policy directly authorizes at least one other member to access the wireless access point.

6. The wireless network community of claim 2 wherein the at least one access policy indirectly authorizes at least one other member to access the wireless access point because the at least one other member is associated with a group and the group is authorized by the member to access the wireless access point.

7. The wireless network community of claim 2 wherein in response to receiving a request by a member to access a registered wireless access point, the authentication server determines whether the requesting member is authorized to access the wireless access point based on the at least one access policy for the wireless access point.

8. The wireless network community of claim 7 wherein the authentication server records and stores in the data store information related to the request to access the wireless access point, wherein the related information includes an identifier of the requesting member, an identifier of the wireless access point, and a timestamp.

9. The wireless network community of claim 1 wherein the authentication server uses an IEEE 802.1x authentication protocol.

10. The wireless network community of claim 9 wherein in response to receiving a request by a member to authenticate against a wireless access point, the authentication server identifies the wireless access point by a wireless media access control (MAC) address associated with the wireless access point.

11. The wireless network community of claim 10 wherein the wireless MAC address comprises normalized MAC address information.

12. The wireless network community of claim 1 wherein each of the plurality of wireless access points is set to a common service set identifier such that a common supplicant profile is used by each registered member.

13. A community management system in communication with a plurality of wireless access points via an Internet, wherein each wireless access pointed is owned by a user, the community management system comprising:

a web server for interacting with the plurality of users and for allowing each of the plurality of users to register as a member of a network community;

an authentication server; and

a data store coupled to the web server and to the authentication server;

wherein the community management system is configured to allow each registered member to register the wireless access point owned by the member and to control which of the other members is authorized to access the wireless access point owned with the member.

14. A method for managing a wireless network community, the method comprising:

registering a plurality of users at a central management system, wherein at least one registered user owns at least one wireless access point;

allowing the at least one registered user to set up access policies that indicate which of the other registered users is authorized to access a wireless access point owned by the at least one registered user; and

storing the access polices associated with the wireless access point in a data storage at the central management system;

wherein the central management system allows the at least one registered user to authorize other registered users to access the wireless access point owned by the user and in turn allows the at least one registered user to be authorized to use wireless access points owned by other of the at least one registered users, thereby effectively expanding each user'"'"'s wireless communication capabilities.

15. The method according to claim 14 wherein allowing the at least one registered user to set up access policies includes allowing the at least one registered user to create an access policy that grants access to the wireless access point to all other registered users.

16. The method according to claim 14 wherein allowing the at least one registered user to set up access policies includes allowing the at least one registered user to create an access policy that grants access to the wireless access point only to other registered users that have also registered their respective wireless access points.

17. The method according to claim 14 wherein allowing the at least one registered user to set up access policies includes allowing the at least one registered user to create an access policy that directly authorizes at least one other registered user to access the wireless access point.

18. The method according to claim 14 wherein allowing the at least one registered user to set up access policies includes allowing the at least one registered user to create an access policy that authorizes a group to access the wireless access point, wherein at least one other registered user is associated with the group.

19. The method according to claim 14 further comprising:

receiving by the central management system a request by a registered user to access a wireless access point; and

in response to receiving the request, determining whether the requesting user is authorized to access the wireless access point based on the access policies associated with the wireless access point.

20. The method according to claim 19 further comprising:

collecting information related to the request to access the wireless access point, wherein the related information includes an identifier of the requesting user, an identifier of the wireless access point, and a timestamp; and

storing the information related to the request at the central management system.

21. The method according to claim 14 further comprising:

receiving by the central management system a request by a registered user to access a wireless access point; and

authenticating the registered user and the wireless access point using an IEEE 802.1x authentication protocol.

22. The method according to claim 14 wherein registering a user includes:

collecting data related to the at least one wireless access point owned by the user, wherein the data includes a wireless media access control (MAC) address associated with each of the at least one wireless access point; and

normalizing each wireless MAC address to a common format.

23. The method according to claim 22 further comprising:

receiving by the central management system a request by a registered user to access a wireless access point;

identifying the wireless access point by the normalized wireless MAC address associated with the wireless access point; and

authenticating the registered user and the wireless access point using an IEEE 802.1x authentication protocol.

24. The method according to claim 14 further comprising:

for each of the at least one wireless access points, setting a service set identifier to a common value such that a common supplicant profile is used by each registered owner.