Secure and seamless wireless public domain wide area network and method of using the same
First Claim
1. A method of providing secure, authenticated, mobile client access to a wireless public domain wide area network, using the 802.11 spectrum, without resort to a client side driver, comprising the steps of:
- receiving from a client a start session message containing user identity information, the start session message being received by the route controller using the communications network in accordance with a client control protocol, the start session message being sent automatically upon the client being logged on to the service provider independent of the client controller; and
sending to the client a control message to control the clients access to use the communications network, the control message being sent from the route controller using the communications network in accordance with the client control protocol and in response to the start session message;
wherein the receiving and/or sending step is performed by a wireless provisioning device having a chassis;
at least one processor;
an operating system, the operating system operably configured in the chassis to control the at least one processor, which are operatively coupled with the chassis;
a packet-switched interface capable of receiving a multiplicity of inbound framed packet-data to provide inbound packets and transmitting a multiplicity of outbound framed packet-data comprising outbound packets;
a channel controller coupled to the packet-switched interface that channels the inbound packets based on the inbound address information and constructs the outbound packets and channels the outbound packets with the outbound address information, the channel controller capable of being effectively connected to at least one network via the operating system; and
an authenticator in operative communication with the operating system to allow authentication at the wireless provisioning device;
whereby a user of a mobile computing device connects to the wireless provisioning device without having to first access the Internet;
wherein said step of sending controls determines whether the client is authorized or denied access to use the communications network, wherein the control message is a session authorization message authorizing the client to use the communications network for a predetermined period of time.
1 Assignment
0 Petitions
Accused Products
Abstract
A wireless public domain Wide Area Network (WPDWAN) is a system and method of providing high throughput data services to public domain customers through the use of encoded 2.4 Ghz microwave transmissions. Connecting computers to multi-point wireless bridges USi11g the 2.4 Ghz spectrum has been available for many years. However, the concept of opening the service to public domain has long been limited due to authentication, security and inevitable routing concerns. With the incorporation of a wireless router, methods of authentication through the use LDAP MAC authentication with route control and logical segmentation to preclude sniffing actions. This problem has been addressed with WPDWAN. The WPDWAN provides high data throughput connection rates to residential, commercial and mobile customers. The WPDWAN allows users to connect to the Internet backbone using a 2.4 Ghz 802.IIb standard PCMCIA card. These cards function at rates of at least 2 Mbps. The wireless card connects the computer to the Internet backbone and allows the customer to remain either stationary or be mobile within the area of coverage.
-
Citations
41 Claims
-
1. A method of providing secure, authenticated, mobile client access to a wireless public domain wide area network, using the 802.11 spectrum, without resort to a client side driver, comprising the steps of:
-
receiving from a client a start session message containing user identity information, the start session message being received by the route controller using the communications network in accordance with a client control protocol, the start session message being sent automatically upon the client being logged on to the service provider independent of the client controller; and sending to the client a control message to control the clients access to use the communications network, the control message being sent from the route controller using the communications network in accordance with the client control protocol and in response to the start session message; wherein the receiving and/or sending step is performed by a wireless provisioning device having a chassis;
at least one processor;
an operating system, the operating system operably configured in the chassis to control the at least one processor, which are operatively coupled with the chassis;
a packet-switched interface capable of receiving a multiplicity of inbound framed packet-data to provide inbound packets and transmitting a multiplicity of outbound framed packet-data comprising outbound packets;
a channel controller coupled to the packet-switched interface that channels the inbound packets based on the inbound address information and constructs the outbound packets and channels the outbound packets with the outbound address information, the channel controller capable of being effectively connected to at least one network via the operating system; and
an authenticator in operative communication with the operating system to allow authentication at the wireless provisioning device;
whereby a user of a mobile computing device connects to the wireless provisioning device without having to first access the Internet;
wherein said step of sending controls determines whether the client is authorized or denied access to use the communications network, wherein the control message is a session authorization message authorizing the client to use the communications network for a predetermined period of time. - View Dependent Claims (2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15, 16, 17, 18, 19, 20)
-
-
21. An apparatus for providing secure, authenticated, mobile wireless client access to use a wireless public domain wide area communications network, utilizing the 802.11 spectrum, comprising:
-
a receiver operatively configured to receive from the client a start session message containing user identity information, the start session message being received by the client controller using the communications network in accordance with a client control protocol, the start session message being sent automatically upon the client being logged on to the service provider independent of the client controller; a gateway operatively configured to determine if the client is authorized to access the communications network; and a route controller notifyer operatively configured to send to the client a session authorization message, the session authorization message to control the client'"'"'s access to use the communications network being sent from the client controller using the communications network in accordance with the client control protocol and in response to the start session message, wherein the session authorization message controls whether the client is authorized or denied access to use the communications network, wherein the session authorization network authorizes the client to use the communications network for a predetermined period of time; wherein the receiving apparatus is a wireless provisioning device having a microprocessor and the components operatively configured within a chassis thereof to control the microprocessor;
a packet-switched interface configured to receive a multiplicity of inbound framed packet-data and to provide inbound packets and to transmit a multiplicity of outbound framed packet-data comprising outbound packets;
a channel controller coupled to the packet-switched interface that is configured to channel the inbound packets based on the inbound address information and configured to construct the outbound packets and channels with the outbound address information, the channel controller capable of being effectively connected to at least one network, whereby a user of a mobile computing device connects to the wireless provisioning device without having to first access the Internet. - View Dependent Claims (22)
-
-
23. An article of manufacture comprising a non-transitory computer readable storage medium having stored thereon instructions adapted to be executed by a processor, the instructions which, when executed, define a series of steps to control a client'"'"'s access to use a secure, authenticated, mobile wireless public domain wide area communications network, using the 802.11 spectrum, said steps comprising:
-
receiving from the client a start session message containing user identity information, the start session message being received by the client controller using the communications network in accordance with a client control protocol, the start session message being sent automatically upon the client being logged on to the service provider independent of the client controller; and sending to the client a control message to control the clients access to use the communications network, the control message being sent from the client controller, using the communications network in accordance with the client control protocol and in response to the start session message, wherein the control message control message is a session authorization message that determine whether the client is granted or denied access to use the communications network for a predetermined period of time; wherein the article of manufacture is a wireless provisioning device configured within a chassis thereof to control the processor;
a packet-switched interface configured to receive a multiplicity of inbound framed packet-data and to provide inbound packets and to transmit a multiplicity of outbound framed packet-data comprising outbound packets;
a channel controller coupled to the packet-switched interface that is configured to channel the inbound packets based on the inbound address information and configured to construct the outbound packets and channels with the outbound address information, the channel controller capable of being effectively connected to at least one network;whereby a user of a mobile computing device connects to the wireless provisioning device without having to first access the Internet. - View Dependent Claims (24, 25, 26, 27)
-
-
28. A method of using secure, authenticated, mobile client access to a wireless public domain communications network using the 802.11 spectrum having a route controller, comprising the steps of:
-
accessing the route controller though a service provider independent of the client controller; sending to the route controller a start session message containing user identity information, the start session message being sent automatically upon a client being logged on to the service provider; and receiving from the route controller a control message to control whether the client is authorized or denied access to use the communications network, the control message being received by the client using the communications network in accordance with a client control protocol and in response to the start session message, wherein the control message is a session authorization message that determine whether the client is granted or denied access to use the communications network for a predetermined period of time; wherein the receiving and/or sending step is performed by a wireless provisioning device having a chassis;
at least one processor;
an operating system, the operating system operably configured in the chassis to control the at least one processor, which are operatively coupled with the chassis;
a packet-switched interface capable of receiving a multiplicity of inbound framed packet-data to provide inbound packets and transmitting a multiplicity of outbound framed packet-data comprising outbound packets;
a channel controller coupled to the packet-switched interface that channels the inbound packets based on the inbound address information and constructs the outbound packets and channels the outbound packets with the outbound address information, the channel controller capable of being effectively connected to at least one network via the operating system; and
an authenticator in operative communication with the operating system to allow authentication at the wireless provisioning device;
whereby a user of a mobile computing device connects to the wireless provisioning device without having to first access the Internet. - View Dependent Claims (29, 30, 31, 32, 33, 34)
-
-
35. An article of manufacture comprising a non-transitory computer readable storage medium having stored thereon instructions adapted to be executed by a processor, the instructions which, when executed, define a series of steps to use a wireless public domain communications network using the 802.11 spectrum having a route controller, said steps comprising:
-
accessing the route controller through a wireless communication entry point; sending to the route controller a start session message containing user identity information, the start session message being sent automatically upon a client being logged on to the service provider and receiving from the route controller a control message to control whether the client is authorized or denied access to use the communications network, the control message being received by the client using the communications network in accordance with a client control protocol in response to the start session message;
wherein the control message is a session authorization message authorizing the client to use the communications network for a predetermined period of time;wherein the article of manufacture is a wireless provisioning device within a chassis thereof to control the processor;
a packet-switched interface configured to receive a multiplicity of inbound framed packet-data, to provide inbound packets and to transmit a multiplicity of outbound framed packet-data comprising outbound packets;
a channel controller coupled to the packet-switched interface that is configured to channel the inbound packets based on the inbound address information and configured to construct the outbound packets and channels with the outbound address information, the channel controller capable of being effectively connected to at least one network;whereby the user of a mobile computing device connects to the wireless provisioning device without having to first access the Internet. - View Dependent Claims (36, 37, 38, 39, 40, 41)
-
Specification