Authentication of mobile stations

• US 7,813,717 B2
• Filed: 05/13/2005
• Issued: 10/12/2010
• Est. Priority Date: 05/13/2005
• Status: Active Grant

• Current Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Original Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Inventors: Brenes, Manrique, Huotari, Allen J.
• Primary Examiner(s): Ramakrishnaiah; Melur
• Application Number:
  US11/128,895
• Publication Number:
  US 20060281457A1
• Time in Patent Office: 1,978 Days
• Field of Search: 455/411, 455/410, 455/435.1, 455/435.2, 455/435.3, 455/550.1, 455/556.1, 455/556.2, 455/558, 455/575.1, 455/575.3, 455/456.6, 370/352, 370/401
• US Class Current: 455/411
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/101 Access control lists [ACL]
• CPC Class Codes: H04L 63/18 using different networks or channels, e.g. using out of band channels cryptographic mechanisms or cryptographic arrangements for key distribution involving distinctive intermediate devices or communication paths H04L9/0827; cryptographic mechanisms or cryptographic arrangements for authentication using a plurality of channels H04L9/3215
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/50 Secure pairing of devices
• CPC Class Codes: H04W 12/72 Subscriber identity
• CPC Class Codes: H04W 60/00 Affiliation to network, e.g. registration; Terminating affiliation with the network, e.g. de-registration
• CPC Class Codes: H04W 84/042 Public Land Mobile systems, e.g. cellular systems
• CPC Class Codes: H04W 84/12 WLAN [Wireless Local Area Networks]
• CPC Class Codes: H04W 88/06 adapted for operation in multiple networks or having at least two operational modes, e.g. multi-mode terminals

Abstract

A method and system for authenticating a mobile station, such as a dual mode cellular telephone, for access to a wireless local area network is disclosed. The mobile station can be authenticated by registering, and thus pre-authenticating, it with the wireless area network. Registration can comprise providing identifying information regarding the mobile station to the local area network. Access to the local area network facilitates the use of the local area network for communications by the mobile station, such as using VoIP over the Internet.

Claims

1. A method for authenticating a mobile station for access to a wireless local area network, the method comprising:

receiving a registration for a mobile station prior to receiving an association request from the mobile station;

storing identification information for a plurality of mobile stations that are to be allowed to associate to the wireless local area network so as to create a white list of authorized mobile stations;

communicating the white list and corresponding passphrases to a network controller of a cellular telephone network;

associating a mobile station that has roamed into a coverage area of the wireless local area network to the wireless local area network; and

receiving from the mobile station a passphrase and using the passphrase to complete connection to the wireless local area network, the passphrase having been communicated from a cellular network controller to the mobile station.

2. A method for authenticating a mobile station for access to a wireless local area network, the method comprising:

receiving a registration for a mobile station prior to receiving an association request from the mobile station;

storing identification information for a plurality of mobile stations that are to be allowed to associate to the wireless local area network so as to create a white list of authorized mobile stations;

communicating the white list to a network controller of a cellular network and not communicating corresponding passphrases to the network controller;

associating a mobile station that has roamed into a coverage area of the wireless local area network to the wireless local area network;

receiving instructions form a cellular network controller to communicate a passphrase for the mobile station from the wireless local area network to the mobile station;

communicating the passphrase from the wireless local area network to the mobile station via the wireless local area network; and

receiving from the mobile station the passphrase and using the passphrase to complete connection to the wireless local area network.

3. A method for authenticating a mobile station for access to a wireless local area network, the method comprising:

receiving a registration for a mobile station prior to receiving an association request from the mobile station;

storing identification information for a plurality of mobile stations that are to be allowed to associate to the wireless local area network so as to create a white list of authorized mobile stations;

storing the white list locally on the wireless local area network;

associating a mobile station that has roamed into a coverage area of the wireless local area network to the wireless local area network;

comparing identification information of the mobile station to the white list and when a match occurs, communicating a passphrase from the wireless local area network to the mobile station via the cellular telephone network; and

receiving from the mobile station the passphrase and using the passphrase to complete connection to the wireless local area network.

4. A method for authenticating a mobile station for access to a wireless local area network, the method comprising:

receiving a registration for a mobile station prior to receiving an association request from the mobile station;

storing identification information for a plurality of mobile stations that are to be allowed to associate to the wireless local area network so as to create a white list of authorized mobile stations;

storing the white list locally on the wireless local area network;

associating a mobile station that has roamed into a coverage area of the wireless local area network to the wireless local area network;

comparing identification information of the mobile station to the white list and when a match occurs, communicating a passphrase for the mobile station to the mobile station via the wireless local area network; and

receiving from the mobile station the passphrase and using the passphrase to complete connection to the wireless local area network.

5. A method for authenticating a mobile station for access to a wireless local area network, the method comprising:

roaming a mobile station into a coverage area of a wireless local area network that has received a registration for the mobile station;

associating the mobile station to the wireless local area network;

the mobile station communicating to a mobile base station of a cellular telephone network that the mobile station has successfully associated to the wireless LAN;

the mobile station receiving a passphrase from a cellular telephone network controller after the cellular network controller has matched the mobile station to an entry on a white list; and

the mobile station using the passphrase to complete connection to the wireless local area network.

6. A method for authenticating a mobile station for access to a wireless local area network, the method comprising:

roaming a mobile station into a coverage area of a wireless local area network that has received a registration for the mobile station;

associating the mobile station to the wireless local area network;

the mobile station communicating to a mobile base station of a cellular telephone network that the mobile station has successfully associated to the wireless local area network;

the mobile station receiving a passphrase from the wireless local area network after the wireless local area network has received instructions from a cellular network controller to communicate the passphrase to the mobile station; and

the mobile station using the passphrase to completes connection to the wireless local area network.

7. A method for authenticating a mobile station for access to a wireless local area network, the method comprising:

roaming a mobile station into a coverage area of a wireless local area network that has received a registration for the mobile station;

associating the mobile station to the wireless local area network;

the mobile station communicating to a mobile base station of a cellular telephone network that the mobile station has successfully associated to the wireless local area network;

the mobile station receiving a passphrase via the cellular telephone network after a device of the wireless local area network has matched the mobile station to an entry on a white list and communicated the passphrase to the cellular network; and

the mobile station using the passphrase to complete connection to the wireless local area network.

8. A method for authenticating a mobile station for access to a wireless local area network, the method comprising:

roaming a mobile station into a coverage area of a wireless local area network that has received a registration for the mobile station;

associating the mobile station to the wireless local area network;

the mobile station communicating to a mobile base station of a cellular telephone network that the mobile station has successfully associated to the wireless local area network;

the mobile station receiving a passphrase from the wireless local area network after a device of the wireless local area network has matched the mobile station to an entry on a white list; and

the mobile station using the passphrase to completes connection to the wireless local area network.

9. An access point comprising:

a memory;

a control circuit configured to facilitate storage of a list of dual mode mobile station identifications and a corresponding passphrase for each mobile station identification in the memory;

a circuit configured to facilitate;

storing identification information for a plurality of mobile stations that are to be allowed to associate to the wireless local area network so as to create a white list of authorized mobile stations;

communicating the white list and corresponding passphrases to a network controller of a cellular telephone network;

associating a mobile station that has roamed into a coverage area of the wireless local area network to the wireless local area network; and

receiving from the mobile station a passphrase and using the passphrase to complete connection to the wireless local area network, the passphrase having been communicated from a cellular network controller to the mobile station.

10. The access point as recited in claim 9, wherein the control circuit is further configured to permit association of a mobile station having an identification stored in the memory when the mobile station provides the corresponding passphrase.

11. The access point as recited in claim 9, wherein the access point is an IEEE 802.11 compatible access point.

12. The access point as recited in claim 9, further comprising a circuit configured to facilitate the establishment of wireless security parameters to be used in communication between the access point and a mobile station.

13. The access point as recited in claim 9, wherein the access point is configured to communicate with a wide area network.

14. The access point as recited in claim 9, wherein the access point is configured to communicate with the Internet.

15. An access point comprising:

a memory;

a control circuit configured to facilitate storage of a list of dual mode mobile station identifications and a corresponding passphrase for each mobile station identification in the memory;

a circuit configured to facilitate;

storing identification information for a plurality of mobile stations that are to be allowed to associate to the wireless local area network so as to create a white list of authorized mobile stations;

communicating the white list to a network controller of a cellular network and not communicating corresponding passphrases to the network controller;

associating a mobile station that has roamed into a coverage area of the wireless local area network to the wireless local area network;

receiving instructions form a cellular network controller to communicate a passphrase for the mobile station from the wireless local area network to the mobile station;

communicating the passphrase from the wireless local area network to the mobile station via the wireless local area network; and

receiving from the mobile station the passphrase and using the passphrase to complete connection to the wireless local area network.

16. An access point comprising:

a memory;

a control circuit configured to facilitate storage of a list of dual mode mobile station identifications and a corresponding passphrase for each mobile station identification in the memory;

a circuit configured to facilitate;

storing identification information for a plurality of mobile stations that are to be allowed to associate to the wireless local area network so as to create a white list of authorized mobile stations;

storing the white list locally on the wireless local area network;

associating a mobile station that has roamed into a coverage area of the wireless local area network to the wireless local area network;

comparing identification information of the mobile station to the white list and when a match occurs, communicating a passphrase from the wireless local area network to the mobile station via the cellular telephone network; and

receiving from the mobile station the passphrase and using the passphrase to complete connection to the wireless local area network.

17. An access point comprising:

a memory;

a control circuit configured to facilitate storage of a list of dual mode mobile station identifications and a corresponding passphrase for each mobile station identification in the memory;

a circuit configured to facilitate;

storing identification information for a plurality of mobile stations that are to be allowed to associate to the wireless local area network so as to create a white list of authorized mobile stations;

storing the white list locally on the wireless local area network;

associating a mobile station that has roamed into a coverage area of the wireless local area network to the wireless local area network;

comparing identification information of the mobile station to the white list and when a match occurs, communicating a passphrase for the mobile station to the mobile station via the wireless local area network; and

receiving from the mobile station the passphrase and using the passphrase to complete connection to the wireless local area network.