Interactive client management of an access control list

• US 8,763,082 B2
• Filed: 11/21/2008
• Issued: 06/24/2014
• Est. Priority Date: 05/13/2008
• Status: Active Grant

• Current Assignee: AT&T Mobility II LLC (AT&T, Inc.)
• Original Assignee: AT&T Mobility II LLC (AT&T, Inc.)
• Inventors: Huber, Kurt Donald, Flynn, Judson John, Mansfield, William Gordon
• Primary Examiner(s): LESNIEWSKI, VICTOR D
• Application Number:
  US12/275,878
• Publication Number:
  US 20090288145A1
• Time in Patent Office: 2,041 Days
• Field of Search: 726/1, 726/2, 726/3, 709/225, 380/270, 370/338, 455/411, 455/444, 455/525
• US Class Current: 726/3
• CPC Class Codes: G05B 2219/2614 HVAC, heating, ventillation, climate control
• CPC Class Codes: G06F 3/0484 for the control of specific functions or operations, e.g. selecting or manipulating an object, an image or a displayed text element, setting a parameter value or selecting a range
• CPC Class Codes: G06Q 20/102 Bill distribution or payments
• CPC Class Codes: G06Q 20/1235 with control of digital rights management [DRM]
• CPC Class Codes: G06Q 20/322 Aspects of commerce using mobile devices [M-devices]
• CPC Class Codes: G06Q 20/3223 Realising banking transactions through M-devices
• CPC Class Codes: G06Q 20/387 Payment using discounts or coupons relating to marketing G06Q30/02
• CPC Class Codes: G06Q 20/405 Establishing or using transaction specific rules
• CPC Class Codes: G06Q 30/02 Marketing; Price estimation or determination; Fundraising
• CPC Class Codes: G06Q 30/0222 During e-commerce, i.e. online transactions
• CPC Class Codes: G06Q 30/0261 based on user location
• CPC Class Codes: G06Q 30/0601 Electronic shopping [e-shopping]
• CPC Class Codes: G07F 9/001 Interfacing with vending machines using mobile or wearable devices
• CPC Class Codes: G16H 40/63 for local operation
• CPC Class Codes: H04B 1/3822 specially adapted for use in vehicles H04B1/3827 takes precedence
• CPC Class Codes: H04L 2209/80 Wireless network architectures or network communication protocols for wireless network security H04W12/00
• CPC Class Codes: H04L 41/0803 Configuration setting
• CPC Class Codes: H04L 5/0048 Allocation of pilot signals, i.e. of signals known to the receiver
• CPC Class Codes: H04L 63/04 for providing a confidential data exchange among entities communicating through data packet networks
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 63/0876 : based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint
• CPC Class Codes: H04L 63/101 : Access control lists [ACL]
• CPC Class Codes: H04L 63/102 : Entity profiles
• CPC Class Codes: H04L 63/108 : when the policy decisions are valid for a limited amount of time
• CPC Class Codes: H04M 15/73 : Validating charges
• CPC Class Codes: H04W 12/06 : Authentication
• CPC Class Codes: H04W 12/082 : using revocation of authorisation
• CPC Class Codes: H04W 12/088 : using filters or firewalls
• CPC Class Codes: H04W 4/02 : Services making use of location information
• CPC Class Codes: H04W 4/023 : using mutual or relative location information between multiple location based services [LBS] targets or of distance thresholds
• CPC Class Codes: H04W 4/027 : using movement velocity, acceleration information
• CPC Class Codes: H04W 4/029 : Location-based management or tracking services
• CPC Class Codes: H04W 4/12 : Messaging; Mailboxes; Announcements
• CPC Class Codes: H04W 4/14 : Short messaging services, e.g. short message services [SMS] or unstructured supplementary service data [USSD]
• CPC Class Codes: H04W 4/24 : Accounting or billing
• CPC Class Codes: H04W 4/40 : for vehicles, e.g. vehicle-to-pedestrians [V2P]
• CPC Class Codes: H04W 40/02 : Communication route or path selection, e.g. power-based or shortest path routing
• CPC Class Codes: H04W 48/02 : Access restriction performed under specific conditions
• CPC Class Codes: H04W 48/04 : based on user or terminal location or mobility data, e.g. moving direction, speed
• CPC Class Codes: H04W 48/08 : Access restriction or access information delivery, e.g. discovery data delivery signalling during connection H04W76/00
• CPC Class Codes: H04W 48/16 : Discovering, processing access restriction or access information
• CPC Class Codes: H04W 48/20 : Selecting an access point
• CPC Class Codes: H04W 64/006 : with additional information processing, e.g. for direction or speed determination
• CPC Class Codes: H04W 68/02 : Arrangements for increasing efficiency of notification or paging channel
• CPC Class Codes: H04W 8/20 : Transfer of user or subscriber data
• CPC Class Codes: H04W 8/22 : Processing or transfer of terminal data, e.g. status or physical capabilities
• CPC Class Codes: H04W 84/045 : using private Base Stations, e.g. femto Base Stations, home Node B
• CPC Class Codes: H04W 88/02 : Terminal devices
• CPC Class Codes: H04W 88/06 : adapted for operation in multiple networks or having at least two operational modes, e.g. multi-mode terminals
• CPC Class Codes: H04W 88/08 : Access point devices

Abstract

System(s) and method(s) provide access management to femtocell service through access control list(s) (e.g., white list(s)). Such white list(s) can be configured via a networked interface which facilitates access management to a femtocell. White list(s) includes a set of subscriber station(s) identifier numbers, codes or tokens, and also can include additional fields for femtocell access management based on desired complexity. Various example aspects such as white list(s) management, maintenance and dissemination; pre-configuration; and inclusion of wireless device(s) or subscriber(s) are also provided. An access management component can facilitate automatic population of a white list(s) associated with a femtocell and can prompt a communication device detected in the femtocell coverage area to inquire whether the communication device desires to connect to the femtocell, be entered into the white list(s), and access a services associated with the femtocell, on a permanent basis or temporarily for a specified period of time.

Claims

1. A femto access point device, comprising:

a memory to store executable instructions; and

a processor coupled to the memory that facilitates execution of the executable instructions to perform operations, comprising;

facilitating a first transmission of request data to a communication device within a coverage area of the femto access point device, wherein the request data is indicative of a request for the communication device to couple to the femto access point device,

in response to receiving, from the communication device, indication data indicative of a rejection of the request, determining timing information representing a time period during which the communication device is to be denied access to the femto access point device, wherein the determining comprises selecting between a first time period representing a temporary denial of femtocell access and a second time period representing a permanent denial of femtocell access,

during the time period, storing identifier data indicative of the communication device within an access control data structure associated with the femto access point device, wherein the access control data structure comprises data indicative of a set of devices that are not authorized to connect to the femto access point device, and

subsequent to the storing, prohibiting a second transmission of the request data to the communication device.

2. The femto access point device of claim 1, wherein the operations further comprise:

scanning a frequency band to facilitate a detection of the communication device in response to the communication device being determined to be located within a coverage area associated with the femto access point device.

3. The femto access point device of claim 1, wherein the operations further comprise:

storing the timing information in the access control data structure.

4. The femto access point device of claim 1, wherein the storing comprises storing the identifier data within the access control data structure based on classification data indicative of a device type associated with the communication device.

5. The femto access point device of claim 1, wherein the storing comprises storing the identifier data within the access control data structure based on historical data indicative of usage history associated with a femto service associated with the femto access point device that has been accessed by the communication device.

6. The femto access point device of claim 1, wherein the operations further comprise:

in response to determining that the time period has expired, deleting the identifier data from the access control data structure.

7. The femto access point device of claim 1, wherein the selecting comprises selecting the first time period and the operations further comprise:

in response to determining that the communication device has exited the coverage area, deleting the identifier data from the access control data structure.

8. The femto access point device of claim 1, wherein the selecting comprises selecting the first time period and the operations further comprise:

in response to determining that an access criterion is satisfied, deleting the identifier data from the access control data structure.

9. The femto access point device of claim 1, wherein the storing comprises storing the identifier data within the access control data structure in response to determining that bandwidth data indicative of a bandwidth availability does not satisfy a bandwidth criterion associated with the femto access point device.

10. The femto access point device of claim 1, wherein the selecting comprises selecting the first time period and the operations further comprise:

in response to determining that the communication device has been restarted, deleting the identifier data from the access control data structure.

11. The femto access point device of claim 1, wherein the selecting comprises selecting the first time period and the operations further comprise:

in response to determining that a battery of the communication device has been discharged, deleting the identifier data from the access control data structure.

12. The femto access point device of claim 1, wherein the storing comprises storing the identifier data within the access control data structure based on policy data indicative of a quality of service policy associated with the communication device.

13. A method, comprising:

in response to determining that a mobile communication device is within a coverage area associated with a femto access point device, facilitating, by the femto access point device comprising a processor, a first transmission of request data from the femto access point device to the mobile communication device, wherein the request data prompts the mobile communication device to access a set of services provided via the femto access point device;

in response to receiving, from the mobile communication device, indication data that indicates that the mobile communication device has denied access to the femto access point device, determining, by the femto access point device, timing information representing a time period during which the mobile communication device is to be denied access to the femto access point device, wherein the determining the timing information comprises selecting between a first time period representing a temporary denial of femtocell access and a second time period representing a permanent denial of femtocell access;

based on the timing information, updating, by the femto access point device, an access control data structure associated with the femto access point device with identifier information associated with the mobile communication device, wherein the access control data structure comprises data indicative of a set of devices that are prohibited to connect to the femto access point device; and

subsequent to the updating, prohibiting a second transmission of the request data to the mobile communication device.

14. The method of claim 13, wherein the updating further comprises adding the identifier data to a slot of the access control data structure.

15. The method of claim 14, wherein the selecting comprises selecting the first time period and the method further comprises:

determining, by the femto access point device, an expiration of the first time period time; and

in response to determining the expiration, deleting, by the femto access point device, the identifier data from the slot.

16. The method of claim 14, wherein the selecting comprises selecting the first time period and the method further comprises:

in response to determining that a battery of the mobile communication device has been discharged, deleting, by the femto access point device, the identifier data from the slot.

17. The method of claim 13, wherein the updating further comprises updating the access control data structure with the identifier information in response to determining that classification data indicative of a type of the mobile communication device satisfies a classification criterion.

18. A non transitory computer-readable storage medium comprising computer-executable instructions that, in response to execution, cause a femto access point device comprising a processor to perform operations, comprising:

directing to a subscriber station device, detected in a coverage area of the femto access point device, request data indicative of a femtocell initiated request that prompts the subscriber station device to access the femto access point device;

in response to receiving reply data from the subscriber station device indicating that the subscriber device has rejected the femtocell initiated request, determining timing information indicative of a time period during which the subscriber station device is to be prohibited from coupling to the femto access point device, wherein the determining comprises selecting between a first time period representing a temporary denial of femtocell access and a second time period representing a permanent denial of femtocell access;

based on the timing information, storing identifier data indicative of the subscriber station device within an access control data structure of the femto access point device, wherein the access control data structure comprises data indicative of a set of devices that are not authorized to connect to the femto access point device; and

subsequent to the storing, denying a transmission of the request data to the subscriber station device.

19. The non transitory computer-readable storage medium of claim 18, wherein the operations further comprise:

in response to determining that the subscriber station device has exited the coverage area, deleting the identifier data from the access control data structure.

20. The non transitory computer-readable storage medium of claim 18, wherein the operations further comprise:

in response to determining that the time period has expired, deleting the identifier data from the access control data structure.

21. A method, comprising:

receiving, by a communication device comprising a processor, query data from a femto access point device indicative of a request to connect to the femto access point device;

in response to the receiving, directing, by the communication device, reply data indicative of rejection of the request to the femto access point device, wherein the directing comprises directing the reply data to facilitate storing, during a time period that is determined based on a selection between a first time period representing a temporary denial of femtocell access and a second time period representing a permanent denial of femtocell access, identifier data indicative of the communication device within an access control data structure of the femto access point device that stores data associated with a set of devices that are not authorized to communicate via the femto access point device, and wherein the directing comprises directing the reply data to facilitate, subsequent to the storing, a denial of a transmission of the query data between the femto access point device and the communication device.

22. The method of claim 21, wherein the directing comprises directing, to the femto access point device, policy data that specifies a quality of service policy associated with the communication device and wherein the directing comprises directing the reply data to facilitate the storing based on the policy data.