Advanced network characterization

• US 9,420,045 B2
• Filed: 10/19/2015
• Issued: 08/16/2016
• Est. Priority Date: 09/29/2005
• Status: Active Grant

• Current Assignee: Channel IP BV
• Original Assignee: Ipass Incorporated (Pareteum Corp.)
• Inventors: Marmolejo-Meillon, Luis G., Nelson, Barbara
• Primary Examiner(s): SCOTT, RANDY A
• Application Number:
  US14/887,160
• Publication Number:
  US 20160044113A1
• Time in Patent Office: 302 Days
• Field of Search: 709/223, 709/224, 709/226, 709/227, 709/222, 726/12, 726/22, 726/7, 726/23
• US Class Current: 1/1
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 63/123 received data contents, e.g. message integrity
• CPC Class Codes: H04L 63/126 the source of the received data
• CPC Class Codes: H04L 63/205 involving negotiation or determination of the one or more network security mechanisms to be used, e.g. by negotiation between the client and the server or between peers or by selection according to the capabilities of the entities involved negotiation of communication capabilities H04L69/24
• CPC Class Codes: H04L 67/04 specially adapted for terminals or networks with limited capabilities; specially adapted for terminal portability
• CPC Class Codes: H04L 67/141 Setup of application sessions admission control or resource allocation in data switching networks H04L47/70
• CPC Class Codes: H04L 67/75 Indicating network or usage conditions on the user display
• CPC Class Codes: H04L 69/18 Multiprotocol handlers, e.g. single devices capable of handling multiple protocols
• CPC Class Codes: H04L 69/24 Negotiation of communication capabilities
• CPC Class Codes: H04W 12/069 using certificates or pre-shared keys
• CPC Class Codes: H04W 12/50 Secure pairing of devices
• CPC Class Codes: H04W 12/66 Trust-dependent, e.g. using trust scores or trust relationships
• CPC Class Codes: H04W 48/08 Access restriction or access information delivery, e.g. discovery data delivery signalling during connection H04W76/00
• CPC Class Codes: H04W 48/16 Discovering, processing access restriction or access information
• CPC Class Codes: H04W 48/18 Selecting a network or a communication service
• CPC Class Codes: H04W 84/12 WLAN [Wireless Local Area Networks]

Abstract

Some embodiments include a method for determining whether to establish a connection between a computer and a network. In some embodiments, the method includes: receiving first network information from a network; determining a first trust level for the network by matching the network information to provisioning information, wherein the provisioning information indicates the first trust level and an authentication method of the network; verifying that network supports the authentication method, wherein the verifying includes exchanging information with the network; after verifying that the network supports the authentication method, establishing a connection to the network, wherein the connection provides access to an Internet.

Claims

1. A method for selecting a network on a computing device, the method comprising:

detecting, via at least one processor of the computing device, network information about a first network that is available for connection;

comparing the network information to network provisioning information that originates from a trusted source;

adding a network identifier associated with the first network to an available networks list indicating a plurality of available networks;

identifying trusted networks in the available networks list;

ranking the trusted networks forming a ranked trusted network list;

selecting a connection network from the ranked trusted networks list;

probing the connection network without connecting to the connection network, wherein the probing reveals additional information about the connection network;

comparing the additional information to the provisioning information;

if the additional information matches a portion of the provisioning information, updating a memory with the additional information;

connecting to the connection network if the additional information matches a portion of the provisioning information; and

if the additional information does not match a portion of the provisioning information, refusing connection to the connection network.

2. The method of claim 1, wherein the memory stores trusted information collected during previous network connections.

3. The method of claim 1, wherein the ranking is based on connection history, and wherein the ranking orders the available networks list from best to worst based on connection history with previously available networks.

4. A non-transitory machine readable medium including program code executable on a processor, the program code for selecting a network on a computing device, the program code including:

program code for detecting, via at least one processor of the computing device, network information about a first network that is available for connection;

program code for comparing the network information to network provisioning information that originates from a trusted source;

program code for adding a network identifier associated with the first network to an available networks list, indicating a plurality of available networks;

program code for identifying trusted networks in the available networks list;

program code for ranking the trusted networks forming a ranked trusted network list;

program code for selecting a connection network from the ranked trusted networks list;

program code for probing the connection network without connecting to the connection network, wherein the probing reveals additional information about the connection network;

program code for comparing the additional information to the provisioning information;

program code for, if the additional information matches a portion of the provisioning information, updating a memory with the additional information and connecting to the connection network; and

program code for, if the additional information does not match a portion of the provisioning information, refusing connection to the connection network.

5. The method of claim 4, wherein the memory stores trusted information collected during previous network connections.

6. The method of claim 4 wherein the ranking is based on connection history, and wherein the ranking orders the available networks list from best to worst based on connection history with previously available networks.

7. An apparatus comprising:

a processor;

a non-transitory machine readable medium including program code executable on the processor, the program code for selecting a network on a computing device, the program code including;

program code for detecting, via at least one processor of the computing device, network information about a first network that is available for connection;

program code for comparing the network information to network provisioning information that originates from a trusted source;

program code for adding a network identifier associated with the first network to an available networks list indicating a plurality of available networks;

program code for identifying trusted networks in the available networks list;

program code for ranking the trusted networks forming a ranked trusted network list;

program code for selecting a connection network from the ranked trusted networks list;

program code for probing the connection network without connecting to the connection network, wherein the probing reveals additional information about the connection network;

program code for comparing the additional information to the provisioning information;

program code for, if the additional information matches a portion of the provisioning information, updating a memory with the additional information and connecting to the connection network; and

program code for, if the additional information does not match a portion of the provisioning information, refusing connection to the connection network.

8. The method of claim 7, wherein the memory stores trusted information collected during previous network connections.

9. The method of claim 7 wherein the ranking is based on connection history, and wherein the ranking orders the available networks list from best to worst based on connection history with previously available networks.