User control over WiFi network access

• US 9,344,452 B2
• Filed: 07/19/2012
• Issued: 05/17/2016
• Est. Priority Date: 07/19/2012
• Status: Active Grant

• Current Assignee: T-Mobile Innovations LLC (Deutsche Telekom AG)
• Original Assignee: Sprint Communications Company LP (Deutsche Telekom AG)
• Inventors: Gatewood, John M., Schnitzer, Lee Alan, Woodrum, Sharon L., Voruganti, Bhanu Prakash
• Primary Examiner(s): Reza, Mohammad W
• Application Number:
  US13/552,749
• Publication Number:
  US 20140026192A1
• Time in Patent Office: 1,398 Days
• Field of Search: 726/4
• US Class Current: 1/1
• CPC Class Codes: H04L 63/06 for supporting key management in a packet data network cryptographic mechanisms or cryptographic arrangements for key management H04L9/08
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/0884 by delegation of authentication, e.g. a proxy authenticates an entity to be authenticated on behalf of this entity vis-à-vis an authentication entity
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227
• CPC Class Codes: H04W 12/04 Key management, e.g. using generic bootstrapping architecture [GBA]
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 12/61 Time-dependent
• CPC Class Codes: H04W 84/12 WLAN [Wireless Local Area Networks]

Abstract

A server system transfers display data for presentation to a user who selects multiple geographically-distributed WiFi access systems and a password. The server system receives user data that indicates the user-selected WiFi network access systems and the user-selected password. The server system stores an association between the user-selected WiFi network access systems and the user-selected password. The server system receives an access request for one of the user-selected WiFi network access systems using the user-selected password. The server system transfers a positive response to the access request based on the stored association between the user-selected WiFi network access systems and the user-selected password.

Claims

1. A method of operating a server system to control access to a Wireless Fidelity (WiFi) network that comprises a plurality of geographically-distributed WiFi access systems;

transferring display data from the server system for presentation to a user who selects more than one of the geographically-distributed WiFi access systems, two or more communication devices and a single password for the multiple communication devices to access the multiple user-selected WiFi access systems;

receiving user data into the server system that indicates the user-selected WiFi network access systems and the user-selected communication devices and the single user-selected password and storing an association between the user-selected WiFi network access systems the user-selected communication devices and the single user-selected password;

receiving an access request into the server system for access to one of the user-selected WiFi network access systems using the single user-selected password, wherein the access request indicates one of the user-selected communication devices; and

transferring a positive response to the access request from the server system based on the stored association between the user-selected WiFi network access systems, the user-selected communication devices, and the single user-selected password.

2. The method of claim 1 wherein the display data renders geographic map displays that indicate the WiFi network access systems.

3. The method of claim 1 wherein:

the user selects a user name for the user-selected WiFi access systems responsive to the display data;

receiving the user data comprises receiving the user-selected user name;

storing the association comprises storing the association between the user-selected WiFi network access systems the user-selected communication devices and the single user-selected password and the user-selected user name;

receiving the access request comprises receiving the access request that indicates the user-selected user name; and

transferring the positive response based on the stored association comprises transferring the positive response based on the stored association between the user-selected WiFi network access systems the user-selected communication devices and and the user-selected password and the user-selected user name.

4. The method of claim 1 further comprising processing the user data to transfer configuration data for delivery to the one user-selected communication device indicated in the access request, wherein the configuration data associates broadcast identification signals for the user-selected WiFi network access systems with the user-selected password.

5. The method of claim 1 further comprising:

processing the user data to transfer configuration data for delivery to the one user-selected communication device indicated in the access request, wherein the configuration data associates broadcast identification signals for the user-selected WiFi network access systems with the user-selected password and an access key, wherein the one user-selected communication device indicated in the access request detects one of the broadcast identification signals, receives the user-selected password from the user, and processes the user-selected password to transfer the access key; and

wherein receiving the access request using the user-selected password comprises receiving the access request indicating the access key.

6. The method of claim 5 wherein:

storing the association between the user-selected WiFi network access systems and the user-selected communication devices and the user-selected password comprises storing the access key in association with the user-selected WiFi network access systems;

transferring the positive response based on the stored association comprises transferring the positive response by comparing the access key from the access request and the stored access key.

7. The method of claim 1 further comprising:

processing the user data to transfer configuration data for delivery to the one user-selected communication device indicated in the access request, wherein the configuration data associates broadcast identification signals for the user-selected WiFi network access systems with the user-selected password and a dynamically-changing network key, wherein the one user-selected communication device indicated in the access request detects one of the broadcast identification signals, receives the user-selected password from the user, and processes the user-selected password and the dynamically-changing network key to transfer a hash value; and

wherein receiving the access request using the user-selected password comprises receiving the access request indicating the hash value; and

wherein transferring the positive response to the access request comprises processing the hash value with the dynamically-changing network key.

8. The method of claim 7 wherein the dynamically-changing network key comprises time of day.

9. The method of claim 1 wherein the server system comprises a portion of an authorization system for a wireless Long Term Evolution (LTE) network and wherein transferring the display data and receiving the user data comprises communicating over the wireless LTE network.

10. A server system to control access to a Wireless Fidelity (WiFi) network that comprises a plurality of geographically-distributed WiFi access systems, the server system comprising:

a user interface server configured to transfer display data from the server system for presentation to a user who selects more than one of the geographically-distributed WiFi access systems and two or more communication devices and a single password for the multiple communication devices to access the user-selected WiFi access systems responsive to the display data, the user interface server further configured to receive user data into the server system that indicates the user-selected WiFi network access systems and the user-selected communication devices and the user-selected password; and

an authorization server operationally coupled to the user interface server and configured to store an association between the user-selected WiFi network access systems and the user-selected communication devices and the single user-selected password, to receive an access request into the server system for access to one of the user-selected WiFi network access systems using the user-selected password, wherein the access request indicates one of the user-selected communication devices, and to transfer a positive response to the access request from the server system based on the stored association between the user-selected WiFi network access systems and the user-selected communication devices and the user-selected password.

11. The server system of claim 10 wherein the user interface server is configured to transfer the display data to render geographic map displays that indicate the WiFi network access systems.

12. The server system of claim 10 wherein:

the user interface server is configured to receive the user data indicating a user name selected by the user for the user-selected WiFi access systems responsive to the display data; and

the authorization server is configured to store the association between the user-selected WiFi network access systems and the user-selected communication devices and the user-selected password and the user-selected user name, receive the access request that indicates the user-selected user name, and transfer the positive response based on the stored association between the user-selected WiFi network access systems and the user-selected communication devices and the user-selected password and the user-selected user name.

13. The server system of claim 10 wherein the user interface server is configured to transfer configuration data for delivery to the user-selected communication device indicated in the access request, wherein the configuration data associates broadcast identification signals for the user-selected WiFi network access systems with the user-selected password.

14. The server system of claim 10 wherein:

the user interface server is configured to transfer configuration data for delivery to the user-selected communication device indicated in the access request, wherein the configuration data associates broadcast identification signals for the user-selected WiFi network access systems with the user-selected password and an access key, wherein the user-selected communication device indicated in the access request detects one of the broadcast identification signals, receives the user-selected password from the user, and processes the user-selected password to transfer the access key; and

the authorization server is configured to receive the access request using the user-selected password by receiving the access request indicating the access key.

15. The server system of claim 14 wherein the authorization server is configured to store the association between the user-selected WiFi network access systems and the user-selected communication devices and the user-selected password by storing the access key in association with the user-selected WiFi network access systems and to transfer the positive response by comparing the access key from the access request and the stored access key.

16. The server system of claim 10 wherein:

the user interface server is configured to transfer configuration data for delivery to the user-selected communication device indicated in the access request, wherein the configuration data associates broadcast identification signals for the user-selected WiFi network access systems with the user-selected password and a dynamically-changing network key, wherein the user-selected communication device indicated in the access request detects one of the broadcast identification signals, receives the user-selected password from the user, and processes the user-selected password and the dynamically-changing network key to transfer a hash value; and

the authorization server is configured to receive the access request using the user-selected password by receiving the access request indicating the hash value and to transfer the positive response by processing the hash value from the access request and the dynamically-changing network key.

17. The server system of claim 16 wherein the dynamically-changing network key comprises time of day.

18. The server system of claim 10 wherein:

the authorization server comprises a portion of an authorization system for a wireless Long Term Evolution (LTE) network; and

the user interface server is configured to transfer the display data and receive the user data over the wireless LTE network.