Method and apparatus for controlling wireless access to a network

• US 7,535,880 B1
• Filed: 01/13/2005
• Issued: 05/19/2009
• Est. Priority Date: 01/13/2005
• Status: Active Grant

• Current Assignee: CommScope Technologies, LLC (CommScope Holding Company, Inc.)
• Original Assignee: 2Wire, Inc. (CommScope Holding Company, Inc.)
• Inventors: Hinman, Brian L., Romano, Pasquale, Bednarz, Philip
• Primary Examiner(s): Kincaid; Lester
• Assistant Examiner(s): MITCHELL, NATHAN A
• Application Number:
  US11/036,303
• Time in Patent Office: 1,587 Days
• Field of Search: 370/338, 370/342, 370/328, 455/439, 455/69, 455/414.1, 455/433, 709/226, 709/227
• US Class Current: 370/338
• CPC Class Codes: H04W 12/084 using delegated authorisation, e.g. open authorisation [OAuth] protocol
• CPC Class Codes: H04W 12/086 using security domains
• CPC Class Codes: H04W 48/02 Access restriction performed under specific conditions

Abstract

A wireless access point includes at least a first service set identifier associated with a public LAN. The wireless access point provides wireless access to the public LAN and to a wide area network (WAN). The wireless access point implements an access policy that provides unrestricted access to the WAN to a first type of wireless application or wireless device detected by the wireless access point, and restricted access to the WAN to a second type of wireless application or wireless device detected by the wireless access point.

Claims

1. A method, comprising:

receiving, by a wireless access point, an access request from a first type of wireless device or wireless application configured to a first service set identifier (SSID) but not a second SSID, the first SSID associated with a public LAN and the second SSID associated with a private LAN;

granting the first type of wireless device or wireless application access to the public LAN;

denying the first type of wireless device or wireless application direct access to the private LAN;

granting the first type of wireless device or wireless application access to the private LAN through the public LAN, when the first type of wireless device or wireless application provides access credentials for the private LAN;

receiving an access request from a second type of wireless device or wireless application, configured to the second SSID; and

granting the second type of wireless device or wireless application direct access to the private LAN, wherein granting the second type or wireless device or wireless application direct access to the private LAN comprises granting restricted access to the private LAN when the second type of wireless device or wireless application does not provide access credentials for the private LAN.

2. The method of claim 1, wherein access is granted to the private LAN through the public LAN via a communication link.

3. An apparatus, comprising:

a wireless access point configured to;

receive an access a request from a first type of wireless device or wireless application configured to a first service set identifier (SSID) but not a second SSID, the first SSID associated with a public LAN and the second SSID associated with a private LAN

grant the first type of wireless device or wireless application access to the public LAN;

deny the first type of wireless device or wireless application direct access to the private LAN;

grant the first type of wireless device or wireless application access to the private LAN through the public LAN, when the first type of wireless device or wireless application provides access credentials for the private LAN;

receive an access request from a second type of wireless device or wireless application, configured to the second SSID; and

grant the second type of wireless device or wireless application direct access to the private LAN, wherein granting the second type or wireless device or wireless application direct access to the private LAN comprises granting restricted access to the private LAN when the second type of wireless device or wireless application does not provide access credentials for the private LAN.