Provisioning methods and apparatus for wireless local area networks (WLANs) with use of a provisioning ESSID

• US 8,437,324 B2
• Filed: 09/13/2011
• Issued: 05/07/2013
• Est. Priority Date: 07/07/2006
• Status: Active Grant

• Current Assignee: Malikie Innovations Limited (Key Patent Innovations Limited)
• Original Assignee: Blackberry Limited
• Inventors: Kezys, Vytautas Robertas, Nagy, Thomas Charles
• Primary Examiner(s): Afshar, Kamran
• Assistant Examiner(s): MATHARU, MANPREET S
• Application Number:
  US13/231,593
• Publication Number:
  US 20120233672A1
• Time in Patent Office: 602 Days
• Field of Search: 370/338, 370/328, 455/452.1, 455/432, 455/455, 455/436
• US Class Current: 370/338
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/107 wherein the security policies are location-dependent, e.g. entities privileges depend on current location or allowing specific operations only from locally connected terminals
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 12/35 Protecting application or service provisioning, e.g. securing SIM application provisioning
• CPC Class Codes: H04W 12/50 Secure pairing of devices
• CPC Class Codes: H04W 12/73 Access point logical identity
• CPC Class Codes: H04W 8/18 Processing of user or subscriber data, e.g. subscribed services, user preferences or user profiles; Transfer of user or subscriber data
• CPC Class Codes: H04W 84/12 WLAN [Wireless Local Area Networks]

Abstract

A wireless network has a primary network which provides one or more communication services and a provisioning network which provides a provisioning service but disallows the one or more communication services. A mobile device associates with an access point of the wireless network by sending a request which includes a first set service identifier (SSID) for accessing and operating in the provisioning network. If an authentication procedure is successful, the device receives via the access point a second SSID in a provisioning procedure with the provisioning network, and programs the second SSID in a network list. The device subsequently associates with the access point by sending a request which includes the second SSID from the network list instead of the first SSID, for accessing and operating in the primary network for the one or more communication services.

Claims

1. A method in a mobile communication device for use in communicating in a wireless network, the wireless network having a primary network which provides one or more communication services and a provisioning network which provides a provisioning service but disallows the one or more communication services, the method comprising:

sending, to an access point of the wireless network, a request for associating with the access point for accessing and operating in the provisioning network, the request including a first set service identifier (SSID);

while being associated with the access point using the first SSID, sending authentication information to the wireless network in an authentication procedure;

if the authentication procedure is successful, then;

receiving, via the access point, a second SSID in a provisioning procedure with the provisioning network;

programming the second SSID in a network list maintained in memory of the mobile device; and

for each one of a plurality of subsequent associations with an access point of the wireless network;

sending a request for associating with the access point for accessing and operating in the primary network, the request including the second SSID instead of the first SSID.

2. The method of claim 1, wherein the mobile communication device is operative in accordance with IEEE 801.11.

3. The method of claim 1, wherein the authentication procedure comprises a login procedure with the wireless network and the authentication information comprises a password.

4. The method of claim 1, wherein the first SSID comprises a first Extended SSID (ESSID) and the second SSID comprises a second ESSID.

5. The method of claim 1, wherein the act of associating with the wireless network comprises the further acts of

causing a probe request with the first SSID to be sent to the wireless access point of the wireless network;

and

monitoring to receive a probe response from the wireless access point in response to the probe request.

6. The method of claim 1, further comprising:

if the authentication procedure is unsuccessful, then failing to receive the second SSID.

7. The method of claim 1, which is embodied in a computer readable medium as computer instructions stored therein, the computer instructions being executable by one or more processors of the mobile communication device.

8. A mobile communication device configured to operate in a wireless network, the wireless network having a primary network configured to provide one or more communication services and a provisioning network configured to provide a provisioning service but disallow the one or more communication services, the mobile communication device comprising:

one or more processors;

a wireless transceiver coupled to the one or more processors;

memory coupled to the one or more processors;

the one or more processors being operative to;

sending, via the wireless transceiver, to an access point of the wireless network, a request for associating with the access point for accessing and operating in the provisioning network, the request including a first set service identifier (SSID);

while being associated with the access point using the first SSID, send via the wireless transceiver authentication information to the wireless network in an authentication procedure;

if the authentication procedure is successful, then;

receive, via the access point, a second SSID in a provisioning procedure with the provisioning network;

program the second SSID in a network list maintained in the memory; and

for each one of a plurality of subsequent associations with an access point of the wireless network;

sending, via the wireless transceiver to the access point, a request for associating with the access point for accessing and operating in the primary network, the request including the second SSID instead of the first SSID.

9. The mobile communication device of claim 8, which is operative in accordance with IEEE 802.11.

10. The mobile communication device of claim 8, wherein the authentication procedure comprises a login procedure with the wireless network and the authentication information comprises a password.

11. The mobile communication device of claim 8, wherein the first SSID comprises a first Extended SSID (ESSID) and the second SSID comprises a second ESSID.

12. The mobile communication device of claim 8, wherein the one or more processors are configured to associate with the wireless network by:

causing a probe request with the first SSID to be sent to the wireless access point of the wireless network; and

monitoring to receive a probe response from the wireless access point in response to the probe request.

13. The mobile communication device of claim 8, wherein the one or more processors are configured to:

if the authentication procedure is unsuccessful, then fail to receive the second SSID.

14. A method in a wireless network for use in providing communications with a mobile communication device, the wireless network having a primary network which provides one or more communication services and a provisioning network which provides a provisioning service but disallows the one or more communication services, the method comprising:

receiving, from the mobile communication device, a request for associating with an access point of the wireless network for mobile device access and operation in the provisioning network, the request including a first set service identifier (SSID);

while the mobile device is associated with the access point using the first SSID, receiving authentication information from the mobile communication device in an authentication procedure;

if the authentication procedure is successful, then sending to the mobile communication device a second SSID in a provisioning procedure, for programming the second SSID in the mobile communication device; and

receiving, from the mobile communication device, a request for associating with an access point of the wireless network for mobile device access and operation in the primary network, the request including the second SSID instead of the first SSID.

15. The method of claim 14, wherein the wireless network comprises a wireless local area network (WLAN) and the wireless network is operative in accordance with IEEE 802.11.

16. The method of claim 14, wherein the authentication procedure comprises a login procedure with the wireless network and the authentication information comprises a password.

17. The method of claim 14, wherein the first SSID comprises a first Extended SSID (ESSID) and the second SSID comprises a second ESSID.

18. The method of claim 14, which is embodied in a computer readable medium as computer instructions stored therein, the computer instructions being executable by one or more processors of the wireless network.

19. A wireless communication network having a primary network which provides one or more communication services and a provisioning network which provides a provisioning service but disallows the one or more communication services, the wireless communication network comprising:

at least one access point;

at least one server;

the at least one access point being configured to receive, from a mobile communication device, a request for associating with the access point, for mobile device access and operation in the provisioning network, the request including a first set service identifier (SSID);

the at least one server being configured to receive authentication information from the mobile communication device in an authentication procedure while the mobile device is associated with the access point using the first SSID;

the at least one server being configured to, if the authentication procedure is successful, send to the mobile communication device a second SSID in a provisioning procedure; and

the at least one access point being further configured to receive, from the mobile communication device, a request for associating with the access point, for mobile device access and operation in the primary network, the request including the second SSID instead of the first SSID.

20. The wireless communication network of claim 19, comprising a wireless local area network (WLAN) operative in accordance with IEEE 802.11.