Online signup provisioning techniques for hotspot connections

• US 9,479,595 B2
• Filed: 07/30/2013
• Issued: 10/25/2016
• Est. Priority Date: 02/05/2013
• Status: Active Grant

• Current Assignee: Intel Corporation
• Original Assignee: Intel IP Corporation (Intel Corporation)
• Inventors: Canpolat, Necati, Vallabhu, Venkata, Gupta, Vivek G.
• Primary Examiner(s): Sheikh, Ayaz
• Assistant Examiner(s): ASEFA, DEBEBE A
• Application Number:
  US14/124,767
• Publication Number:
  US 20150180978A1
• Time in Patent Office: 1,183 Days
• US Class Current: 1/1
• CPC Class Codes: H04L 5/0092 Indication of how the channel is divided
• CPC Class Codes: H04L 67/02 based on web technology, e.g. hypertext transfer protocol [HTTP]
• CPC Class Codes: H04L 67/141 Setup of application sessions admission control or resource allocation in data switching networks H04L47/70
• CPC Class Codes: H04W 12/04 Key management, e.g. using generic bootstrapping architecture [GBA]
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 12/35 Protecting application or service provisioning, e.g. securing SIM application provisioning
• CPC Class Codes: H04W 4/80 Services using short range communication, e.g. near-field communication [NFC], radio-frequency identification [RFID] or low energy communication
• CPC Class Codes: H04W 72/23 in the downlink direction of a wireless link, i.e. towards a terminal

Abstract

Embodiments of system and method configurations for providing provisioning information to a mobile device via a wireless network access point are generally described herein. In some examples, a communication session is established between a mobile device and a service provider to obtain provisioning information for wireless network connectivity via a designated access point (e.g., a “hotspot”). A HTTP session is established within the communication session to exchange registration information via a browser of the mobile device. Provisioning information is returned within the communication session in a Subscription Management Object (MO) in response to successful completion of the HTTP session. The subscription MO is provided outside of the browser and the HTTP session (but within the communication session) using mechanisms such as OMA-DM or SOAP-XML communications. The mobile device can then utilize the provisioning information from the subscription MO to associate with an appropriate hotspot.

Claims

1. An apparatus of a station (STA), the apparatus comprising:

memory; and

processing circuitry coupled to the memory, the processing circuitry configured to;

initiate a Transport Layer Security (TLS) session with an online signup (OSU) server;

encode a device management (DM) package 1 for transmission to the OSU server, the DM package 1 including an indication that the apparatus is contacting the OSU server to establish a new subscription; and

decode a DM package 2 received from the OSU server in response to the DM package 1, the DM package 2 including a universal resource indicator (URI), the URI including a key, the key to link browser interaction with the TLS session.

2. The apparatus of claim 1, wherein the processing circuitry is configured to:

launch a browser to establish a connection to the URI; and

exchange registration data with the OSU server to establish the new subscription.

3. The apparatus of claim 2, wherein the processing circuitry is configured to:

discard the key subsequent to establishing the new subscription.

4. The apparatus of claim 1, wherein to exchange registration data with the OSU server, the processing circuitry is configured to exchange one or more of:

username/password credentials and policies, certificate-based credentials, or subscription management for remediation of credentials.

5. The wireless apparatus of claim 1, wherein the STA is a wireless access point that operates in accordance with a standard from an IEEE 802.11 standards family.

6. The wireless apparatus of claim 1, wherein the DM package 2 is an Open Mobile Alliance (OMA) DM package.

7. The wireless apparatus of claim 1, further comprising a transceiver configured to:

send the DM package 1; and

receive the DM package 2.

8. The apparatus of claim 1, wherein the processing circuitry is configured to:

exchange registration data with the STA to establish the new subscription in response to a browser launched by the STA to establish a connection to the URI.

9. The apparatus of claim 2, wherein the processing circuitry is configured to:

instruct the STA to discard the key subsequent to establishing the new subscription.

10. At least one machine readable storage medium comprising a plurality of instructions that, in response to being executed on a computing device, cause the computing device to:

initiate a Transport Layer Security (TLS) session with an online signup (OSU) server;

encode a device management (DM) package 1 for transmission to the OSU server, the DM package 1 including an indication that the device is contacting the OSU server to establish a new subscription; and

decode a DM package 2 received from the OSU server in response to the DM package 1, the DM package 2 including a universal resource indicator (URI), the URI including a key, the key to link browser interaction with the TLS session.

11. The at least one machine readable storage medium of claim 10, further comprising instructions to:

launch a browser to establish a connection to the URI; and

exchange registration data with the OSU server to establish the new subscription.

12. The at least one machine readable storage medium of claim 11, further comprising instructions to:

discard the key subsequent to establishing the new subscription.

13. The at least one machine readable storage medium of claim 10, wherein to exchange registration data with the OSU server, further includes instructions to exchange one or more of:

username/password credentials and policies, certificate-based credentials, or subscription management for remediation of credentials.

14. The at least one machine readable storage medium of claim 10, wherein the DM package 2 is an Open Mobile Alliance (OMA) DM package.

15. The at least one machine readable storage medium of claim 10, further comprising instructions to:

send the DM package 1 to a wireless access point; and

receive the DM package 2.

16. A method performed by an apparatus of a station (STA), the method comprising:

initiating, using processing circuitry of the apparatus, a Transport Layer Security (TLS) session with an online signup (OSU) server;

encoding a device management (DM) package 1 for transmission to the OSU server, the DM package 1 including an indication that the apparatus is contacting the OSU server to establish a new subscription; and

decoding a DM package 2 received from the OSU server in response to the DM package 1, the DM package 2 including a universal resource indicator (URI), the URI including a key, the key to link browser interaction with the TLS session.

17. The method of claim 16, further comprising

launching a browser to establish a connection to the URI;

and

exchanging registration data with the OSU server to establish the new subscription.

18. The method of claim 17, further comprising:

discarding the key subsequent to establishing the new subscription.

19. The method of claim 16, wherein exchanging registration data with the OSU server, includes exchanging one or more of:

username/password credentials and policies, certificate-based credentials, or subscription management for remediation of credentials.

20. The method of claim 16, wherein the STA is a wireless access point that operates in accordance with a standard from an IEEE 802.11 standards family.

21. The method of claim 16, wherein the DM package 2 is an Open Mobile Alliance (OMA) DM package.

22. The method of claim 16, further comprising:

sending the DM package 1, in response to encoding the DM package 1; and

wherein decoding the DM package 2 includes decoding the DM package 2 in response to receiving the DM package 2.

23. An apparatus of an online signup server (OSU), the apparatus comprising:

memory; and

processing circuitry coupled to the memory, the processing circuitry configured to;

receive a request, from a station (STA), to initiate a Transport Layer Security (TLS) session with the STA;

decode a device management (DM) package 1 received from the STA, the DM package 1 including an indication that the STA is contacting the OSU server to establish a new subscription; and

encode a DM package 2 for transmission to the STA in response to the DM package 1, the DM package 2 including a universal resource indicator (URI), the URI including a key, the key to link browser interaction with the TLS session.