System and method for device authentication in a dynamic network using wireless communication devices

• US 9,609,513 B2
• Filed: 11/03/2014
• Issued: 03/28/2017
• Est. Priority Date: 03/03/2009
• Status: Active Grant

• Current Assignee: IP Investment Holdings LLC
• Original Assignee: Mobilitie, LLC (Bai Communications Pty Ltd.)
• Inventors: Jabara, Gary B., Karmis, Christos, Simon, David Brett, Linder, Lloyd Frederick
• Primary Examiner(s): ODOM, CURTIS B
• Application Number:
  US14/531,118
• Publication Number:
  US 20160127899A1
• Time in Patent Office: 876 Days
• US Class Current: 1/1
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/12 Detection or prevention of fraud
• CPC Class Codes: H04W 12/122 Counter-measures against attacks; Protection against rogue devices
• CPC Class Codes: H04W 12/64 using geofenced areas
• CPC Class Codes: H04W 12/73 Access point logical identity
• CPC Class Codes: H04W 4/02 Services making use of location information
• CPC Class Codes: H04W 4/80 Services using short range communication, e.g. near-field communication [NFC], radio-frequency identification [RFID] or low energy communication
• CPC Class Codes: H04W 64/003 locating network equipment

Abstract

A short-range wireless network is established by direct communication between wireless devices and wireless access points. A wireless communication device provides initial registration information to a network and becomes a registered device. An API is downloaded to the wireless device to permit automatic authentication of the device for future communications. When a registered device enters a venue, at least one access point will automatically detect the wireless device and extract the necessary identification data to permit authentication of the device. Customized messages may be provided to the wireless device. If the wireless device enters a different venue, even in another city or state, the registration data may be automatically extracted by an AP and provided to a cloud network for authentication. Authenticated devices receive a list of authenticated vendors and unauthenticated vendors near the present location of the authenticated device.

Claims

1. A method for device authentication in a wireless communication network comprising:

receiving an authentication request from a wireless communication device at a wireless access point;

determining a present location of the wireless communication device;

in response to the authentication request, verifying an identity of the wireless communication device;

if the identity is verified, providing the wireless communication device with a list of authenticated vendors in a geographic region proximate the present location of the wireless communication device; and

initiating an initial registration for the wireless communication device if the identity is not verified, the initial registration request comprising a device identification code.

2. The method of claim 1 wherein the device identification code is stored in association with the wireless communication device upon completion of processing the initial registration request.

3. The method of claim 1 wherein the authentication request from the wireless communication device comprises the device identification code.

4. The method of claim 3 wherein the authentication request from the wireless communication device occurs immediately following the initial registration request.

5. The method of claim 1, further comprising blocking communication from a vendor not on the list of authenticated vendors.

6. The method of claim 1, further comprising providing the wireless communication device with a list of bogus vendors in a geographic region proximate the present location of the wireless communication device.

7. The method of claim 1, further comprising transmitting message data for a vendor from the access point to the wireless communication device, the message comprising vendor identification data sufficient to permit the wireless communication device to verify if the vendor is an authenticated vendor.

8. The method of claim 1 for use with a plurality of access points, the method further comprising transmitting message data for a vendor from one of the plurality of access point to the wireless communication device, the message data comprising vendor identification data sufficient to permit the wireless communication device to verify if the vendor is an authenticated vendor.

9. The method of claim 8 for use with a plurality of access points wherein the message data is video data, the method further comprising transmitting the video data from at least one of the plurality of access points to the authenticated wireless communication device.

10. The method of claim 1 wherein a vendor has an associated access point, the method further comprising transmitting message data from the vendor access point to the wireless communication device, the message comprising vendor identification data sufficient to permit the wireless communication device to verify if the vendor is an authenticated vendor.

11. The method of claim 1, further comprising receiving an initial registration request from the wireless communication device prior to ever receiving the authentication request from the wireless communication device, the initial registration request comprising a device identification code.

12. The method of claim 11 wherein the authentication request from the wireless communication device comprises the device identification code.

13. The method of claim 1, further comprising providing the wireless communication device with a list of authenticated vendors in a geographic region proximate an initial location of the wireless communication device upon completion of the initial registration.

14. The method of claim 1, further comprising providing the wireless communication device with an updated list of authenticated vendors in the geographic region proximate the present location of the wireless communication device in response to the authentication request if the present location of the wireless communication device is different from the initial location of the wireless communication device.

15. The method of claim 1 wherein the authentication request from the wireless communication device comprises a device identification code that is stored in association with the wireless communication device, the method further comprising:

receiving a new authentication request from a wireless communication device at a wireless access point when the wireless communication device is at a new location;

determining the new location of the wireless communication device;

using the stored device identification code to authenticate the wireless communication device; and

upon authentication of the wireless communication device, providing the wireless communication device with a list of authenticated vendors in a geographic region proximate the new location of the wireless communication device.

16. The method of claim 8 wherein the message data is video data and the wireless access point provides video data to the authenticated wireless communication device.

17. The method of claim 1 wherein the authenticated wireless communication device communicates with an authenticated vendor to place an order for goods or services.

18. The method of claim 17 wherein the authenticated wireless communication device provides seating data to permit the delivery of the ordered goods or services from the authenticated vendor.

19. The method of claim 1 wherein a plurality of access points are distributed throughout a cruise ship and the list of authenticated vendors comprises vendors on the cruise ship and vendors at a port of call.

20. A method for device authentication in a wireless communication network comprising:

temporarily installing a plurality of wireless access points in a venue;

coupling the plurality of access points to a portable control room;

connecting the portable control room to a central server;

receiving an authentication request from a first wireless communication device at one of the plurality of wireless access points;

in response to the authentication request, verifying an identity of the first wireless communication device with the central server; and

if the identity is verified, providing the first wireless communication device with data via one of the plurality of wireless access points.

21. The method of claim 20 wherein the data is provided to the first wireless communication device by the control room.

22. The method of claim 20 wherein the data is provided to the first wireless communication device by the central server.

23. The method of claim 20 wherein the data is provided to the first wireless communication device by a second authenticated wireless communication device.

24. The method of claim 20 wherein the data is provided to the first wireless communication device by a second wireless communication device.

25. The method of claim 23 wherein the data is provided to the first wireless communication device by the second wireless communication device using a direct communication link between the first and second wireless communication devices.

26. The method of claim 23 wherein the data is provided to the first wireless communication device by the second wireless communication device using at least one of the plurality of wireless access points.

27. The method of claim 20 wherein the data is provided to the first wireless communication device is multimedia data.

28. The method of claim 20 wherein one of the plurality of access points is suspended from a balloon.

29. A system comprising:

a plurality of wireless access points;

a storage structure configured to store a list of authenticated vendors having wireless access points;

an initial wireless network access point configured to receive an authentication request from a wireless communication device; and

a registration server configured to receive the authentication request and, in response to the authentication request, to verify an identity of the wireless communication device, and, if the identity is verified such that the wireless communication device is authenticated, to provide a portion of the list of authenticated vendors to the authenticated wireless communication device, the portion of the list of authenticated vendors indicating authenticated vendors in a geographic region proximate a present location of the authenticated wireless communication device.

30. The system of claim 29 wherein the registration server is further configured to determine the present location of the authenticated wireless communication device based on a location of the initial network access point.

31. The system of claim 29 wherein the registration server is further configured to initiate an initial registration for the wireless communication device if the identity is not verified, the initial registration request comprising a device identification code.

32. The system of claim 31 wherein the registration server is further configured to store the device identification code in association with the wireless communication device upon completion of processing the initial registration request.

33. The system of claim 31 wherein the authentication request received by the initial network access point from the wireless communication device comprises the device identification code.

34. The system of claim 31 wherein authentication request from the wireless communication device is part of the initial registration request.

35. The system of claim 29 wherein the wireless communication device is configured to block communication from a vendor not on the list of authenticated vendors.

36. The system of claim 29 wherein the registration server is further configured to provide a list of bogus vendors in the geographic region proximate the present location of the authenticated wireless communication device.

37. The system of claim 29 the initial network access point is configured to transmit the portion of the list of authenticated vendors to the authenticated wireless communication device.

38. The system of claim 29 wherein at least one of the plurality of wireless access points is further configured to transmit message data for a vendor to the authenticated wireless communication device, the message comprising vendor identification data sufficient to permit the authenticated wireless communication device to verify if the vendor is an authenticated vendor.

39. The system of claim 29 wherein selected ones of the plurality of wireless access points are further configured to transmit message data for a vendor to the authenticated wireless communication device, the message comprising vendor identification data sufficient to permit the authenticated wireless communication device to verify if the vendor is an authenticated vendor.

40. The system of claim 29 wherein selected ones of the plurality of wireless access points are further configured to transmit video data to the authenticated wireless communication device.

41. The system of claim 29 wherein one of the plurality of wireless access points is further configured to transmit an updated list of authenticated vendors in the geographic region proximate a current location of the authenticated wireless communication if the current location of the wireless communication device is different from a location of the wireless communication device proximate the initial wireless network access point.

42. The system of claim 29 wherein the initial wireless network access point is positioned at a first location during a first authentication of the wireless communication device and a second of the plurality of wireless network access points positioned at a second location remote from the first location is configured to detect a communication from the wireless communication device, the registration server being further configured to authenticate the wireless communication device at the second location based at least in part on data used to authenticate the wireless communication device at the first location.

43. The system of claim 42 wherein the second of the plurality of wireless network access points is further configured to transmit an updated list of authenticated vendors is further configured to transmit an updated list of authenticated vendors in the geographic region proximate the second location of the authenticated wireless.

44. The system of claim 42 wherein the authentication request from the wireless communication device received by the initial wireless access point at the first location comprises a device identification code, the registration server being further configured to store the received device identification code in association with the wireless communication device and to retrieve the stored device identification code to authenticate the wireless communication device at the second location.