Method and apparatus for authenticating service to a wireless communications device

• US 7,835,724 B2
• Filed: 09/09/2003
• Issued: 11/16/2010
• Est. Priority Date: 09/10/2002
• Status: Active Grant

• Current Assignee: Hewlett Packard Enterprise Development LP (Hewlett-Packard Enterprise Company)
• Original Assignee: Hewlett-Packard Development Company, L.P. (HP Inc.)
• Inventors: Johnson, Ian Robert, Richardson, Amanda, McDonnell, James Thomas Edward
• Primary Examiner(s): Patel, Ajit
• Assistant Examiner(s): NGUYEN, KHAI MINH
• Application Number:
  US10/657,237
• Publication Number:
  US 20040152447A1
• Time in Patent Office: 2,625 Days
• Field of Search: 455/410, 455/411, 455/432.1, 455/510, 455/509, 455/432.3, 455/444, 379/189, 379/161, 379/184, 379/168, 709/219, 709/229
• US Class Current: 455/411
• CPC Class Codes: H04L 12/2856 Access arrangements, e.g. Internet access asynchronous transfer mode networks H04L12/5601; broadband local area networks H04L12/2801; optical access or distribution networks H04Q11/0067; access to open networks H04L12/5691; digital subscriber line end-user equipment and bit-level processing of data on a PSTN-based network H04M11/00; home network gateways H04L12/2834; wireless access networks H04W
• CPC Class Codes: H04L 41/0896 Bandwidth or capacity management, i.e. automatically increasing or decreasing capacities flow or congestion control using dynamic resource allocation, e.g. in-call renegotiation, H04L47/76
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 67/52 specially adapted for the location of the user terminal
• CPC Class Codes: H04L 69/329 in the application layer [OSI layer 7]
• CPC Class Codes: H04W 12/04 Key management, e.g. using generic bootstrapping architecture [GBA]
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/35 Protecting application or service provisioning, e.g. securing SIM application provisioning
• CPC Class Codes: H04W 4/02 Services making use of location information
• CPC Class Codes: H04W 4/029 Location-based management or tracking services
• CPC Class Codes: H04W 84/12 WLAN [Wireless Local Area Networks]

Abstract

A cellular communications service provider authenticates a provider of a location-dependent service, such as a wireless hotspot. Once the cellular communications service provider is aware of potential use of the service by the user, it authenticates the service provider and provides an authentication to the user. Users can thus avoid untrustworthy providers of local services.

Claims

1. A method for operating a communications device capable of communicating with a cellular communications service provider and a wireless computer network service provider, the method comprising:

receiving an indication of potential interfacing of the communications device with a wireless hotspot, wherein the wireless hotspot comprises an interface through which the communications device is configured to communicate with a computer network, wherein the interface is facilitated by a wireless computer network service provider;

sending a request over a cellular communications network to the cellular communications service provider for verifying the trustworthiness of the provider of the wireless computer network service that provides the interface to the computer network; and

on successful verification of the provider of the wireless computer network service, receiving a confirmation over the cellular communications network that the provider of the wireless computer network service is authenticated by the cellular communications service provider.

2. A method as claimed in claim 1, wherein the wireless computer network service is a service running over an infrastructure of the wireless hotspot and the provider of the wireless computer network service is not the provider of the wireless hotspot infrastructure.

3. A method as claimed in claim 1, wherein the confirmation comprises a key enabling the communications device to use the wireless computer network service provided by the wireless computer network provider.

4. A method as claimed in claim 1, further comprising:

sending location information representing the location of the communications device and information of the wireless computer network service to the cellular communications service provider.

5. A method as claimed in claim 4, further including receiving information concerning the location of one or more hotspots close to the user.

6. A method as claimed in claim 4, wherein the indication of potential use is determination that the hotspot is within present or future range of the user.

7. A method as claimed in claim 6, wherein authentication of the provider of the wireless computer network service commences before the request is sent to the cellular communications service provider.

8. A method as claimed in claim 1, wherein the indication of potential interfacing of the communications device with a wireless hotspot is a positive request from the user.

9. A method as claimed in claim 1, wherein the confirmation that the provider of the service is authenticated is provided via a cellular communication link between the cellular communications service provider and the communications device.

10. A computer system for a cellular telecommunications provider, comprising a processor arranged for:

receiving an indication of potential use of a specified wireless hotspot of computer network services from a user of a communications device, the communications device configured to communicate with the cellular telecommunications provider and at least one wireless computer network;

receiving a request for authentication of at least one provider of the computer network services at the specified wireless hotspot from the communications device;

identifying wireless computer network services available at the specified wireless hotspot;

authenticating the at least one provider of the wireless computer network services available at the specified wireless hotspot responsive to the request from the communications device; and

preparing authentication information for use by the communications device in communicating with the at least one wireless computer network.

11. A computer system as claimed in claim 10, wherein in preparing the authentication information the processor is arranged for generating a cryptographic key.

12. A computer system as claimed in claim 10, wherein the processor is further arranged for receiving location information representing the location of the communications device, and for determining from the location information one or more wireless hotspots that are within a vicinity of the communications device.

13. A computer system as claimed in claim 12, wherein the processor is further arranged for (a) receiving a positive request for use of a service at the hotspot from the user, (b) commencing authenticating a provider of the service before the positive request is received and (c) preparing authentication information for use by the user after the positive request is received.

14. A computer system as claimed in claim 10, wherein, in authenticating the at least one provider of the wireless computer network services, the processor is arranged for verifying the trustworthiness of the at least one provider of the wireless computer network services.

15. A computer system as claimed in claim 10, wherein the computer system is further arranged to receive the indication of potential use via a call over a cellular communications network from the user via the cellular communications service provider.

16. A computer system as claimed in claim 10, wherein the computer system is further arranged to provide the authentication information to the communications device of the user via a cellular communication link between the cellular telecommunications provider and the communications device.

17. A non-transitory storage medium storing a computer-readable program code thereon, the computer-readable program code being arranged to cause a computer system of a cellular communications provider to:

receive an indication of potential use of a specified wireless hotspot of wireless computer network services from a user of a communications device, the communications device being capable of communicating with the cellular telecommunications provider and at least one wireless computer network service provider;

receive a request from the communications device for authentication of at least one provider of the computer network services at the specified wireless hotspot;

identify wireless computer network services available at the specified wireless hotspot;

authenticate the at least one provider of the wireless computer network services available at the specified wireless hotspot responsive to the request from the communications device; and

prepare authentication information for provision to the communications device.

18. A non-transitory storage medium as claimed in claim 17, wherein the computer-readable program code arranged to cause the computer system of the cellular communications provider to authenticate the at least one provider of the wireless computer network services is arranged for verifying the trustworthiness of the at least one provider of the wireless computer network services.

19. A non-transitory storage medium as claimed in claim 17, further comprising computer-readable program code arranged to cause a computer system of the cellular communications provider to:

sense a direction the user is moving and alert the user of upcoming wireless computer network hotspots.

20. A method for operating a cellular telecommunications provider to authorize a wireless communications device to interface with a location-dependent wireless computer network service, the method comprising:

tracking the location of the wireless communications device;

determining that the wireless communications device is within a vicinity of and outside of an operating range of the location-dependent wireless computer network service;

authenticating a provider of the location-dependent wireless computer network service, wherein the provider of the location-dependent wireless computer network service facilitates interfacing of the wireless communications device to a computer network; and

providing an identification of the authenticated provider of the location-dependent wireless computer network service to the wireless communications device.

21. A method as claimed in claim 20, further comprising receiving a request to use the location-dependent wireless computer network service by the user.

22. A method as claimed in claim 21, wherein authenticating the provider of the location-dependent wireless computer network service commences prior to receiving the request.

23. A method as claimed in claim 20, wherein authenticating the provider of the location-dependent wireless computer network service comprises verifying the trustworthiness of the provider of the service.

24. A method as claimed in claim 20, further comprising:

providing to the user additional wireless computer network services in the vicinity of the location of the user.