WiFi access management system and methods of operation thereof

• US 9,628,992 B2
• Filed: 07/31/2015
• Issued: 04/18/2017
• Est. Priority Date: 07/31/2015
• Status: Expired due to Fees

• Current Assignee: WYFI, Inc.
• Original Assignee: WYFI, Inc.
• Inventors: Dimatteo, III, Lawrence Anthony, Clemenson, Matthew Allen
• Primary Examiner(s): RAMPURIA, SHARAD K
• Application Number:
  US14/815,735
• Publication Number:
  US 20170034703A1
• Time in Patent Office: 627 Days
• Field of Search: 455410-411, 455 412
• CPC Class Codes: G06F 3/0482 Interaction with lists of selectable items, e.g. menus
• CPC Class Codes: G06F 3/04847 Interaction techniques to control parameter settings, e.g. interaction with sliders or dials
• CPC Class Codes: H04L 41/0266 using meta-data, objects or commands for formatting management information, e.g. using eXtensible markup language [XML]
• CPC Class Codes: H04L 41/0886 Fully automatic configuration
• CPC Class Codes: H04L 41/22 comprising specially adapted graphical user interfaces [GUI]
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/101 Access control lists [ACL]
• CPC Class Codes: H04L 63/105 Multiple levels of security
• CPC Class Codes: H04L 63/107 wherein the security policies are location-dependent, e.g. entities privileges depend on current location or allowing specific operations only from locally connected terminals
• CPC Class Codes: H04L 63/205 involving negotiation or determination of the one or more network security mechanisms to be used, e.g. by negotiation between the client and the server or between peers or by selection according to the capabilities of the entities involved negotiation of communication capabilities H04L69/24
• CPC Class Codes: H04L 67/306 User profiles
• CPC Class Codes: H04W 12/04 Key management, e.g. using generic bootstrapping architecture [GBA]
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 12/50 Secure pairing of devices
• CPC Class Codes: H04W 48/08 Access restriction or access information delivery, e.g. discovery data delivery signalling during connection H04W76/00
• CPC Class Codes: H04W 76/38 triggered by timers
• CPC Class Codes: H04W 84/12 WLAN [Wireless Local Area Networks]

Abstract

A WiFi access management system and methods of operation are disclosed. In one embodiment, a method comprises receiving, at a server, a wireless access profile and a wireless access list from a securing client device; transmitting an invitation message to an accessing client device associated with the wireless access list; receiving, at the server, a request from the accessing client device to connect to a wireless network associated with the wireless access profile in response to the invitation message; determining, using a processing unit of the server, an operating system of the accessing client device; creating, using the processing unit, a customized configuration file associated with the wireless network based on the operating system of the accessing client device, the wireless access profile, and the wireless access list; and transmitting the customized configuration file using a second encryption protocol to the accessing client device through the server communication unit.

Claims

1. A WiFi (Wireless Fidelity) access management system, comprising:

a first client device comprising a first processor, a first memory, a first communication unit, wherein the first processor is programmed to;

create a wireless access profile to access a wireless network through a wireless networking device,

create a wireless access list based on contact information stored in the first memory,

transmit the wireless access profile and the wireless access list using a first encryption protocol to a server through the first communication unit; and

the server comprising a processing unit, a memory unit, and a server communication unit, wherein the processing unit is programmed to;

receive the wireless access profile and the wireless access list from the first client device,

transmit an invitation message to a second client device associated with the wireless access list through the server communication unit,

receive a request from the second client device to connect to the wireless network in response to the invitation message, determine an operating system of the second client device,

create a customized configuration file associated with the wireless network using information concerning the operating system of the second client device and using information from the wireless access profile and the wireless access list, and

transmit the customized configuration file using a second encryption protocol to the second client device through the server communication unit;

wherein the invitation message comprises a deferred deep link directing the second client device to download an application and

wherein a second processor of the second client device is programmed to;

display an invitation graphical user interface on a display of the second client device through the application; and

transmit the request to connect to the wireless network and information concerning the operating system of the second client device to the server when the second client device receives a user input through the invitation graphical user interface.

2. The system of claim 1, wherein the first client device further comprises a GPS receiver and the first processor is programmed to:

determine current GPS coordinates of the first client device using the GPS receiver concurrent with creating the wireless access profile, and

transmit the current GPS coordinates along with the wireless access profile and the wireless access list to the server through the first communication unit.

3. The system of claim 1, wherein the wireless access profile comprises a network identification, a wireless key to access the wireless network, and an encryption type.

4. The system of claim 1, wherein the customized configuration file is an XML file.

5. The system of claim 1, wherein the customized configuration file is a mobileconfig file when the operating system of the second client device is an iOS operating system.

6. The system of claim 1, wherein a second processor of the second client device is programmed to:

store in a second memory of the second client device network configuration information associated with the wireless network when the customized configuration file is installed on the second client device; and

connect to the wireless network automatically through a second communication unit of the second client device after the second client device installs the customized configuration file.

7. The system of claim 6, wherein the second client device connects to the wireless network without displaying the wireless key on a display of the second client device.

8. The system of claim 1, wherein the wireless access list comprises a connection expiration period and wherein the server creates the customized configuration file using the connection expiration period in order to limit a connection of the second client device to the wireless network to the connection expiration period.

9. The system of claim 1, wherein the wireless networking device is a wireless router.

10. A method of managing access to a WiFi network, comprising:

creating, at a first client device using a first processor of the first client device, a wireless access profile to access a wireless network through a wireless networking device;

creating, at the first client device using the first processor, a wireless access list using contact information stored in a first memory of the first client device;

transmitting the wireless access profile and

the wireless access list using a first encryption protocol to a server through a first communication unit of the first client device;

receiving, at the server, the wireless access profile and the wireless access list from the first client device;

transmitting an invitation message to a second client device associated with the wireless access list through a server communication unit of the server;

receiving, at the server, a request from the second client device to connect to the wireless network in response to the invitation message;

determining, using a processing unit of the server, an operating system of the second client device;

creating, using the processing unit, a customized configuration file associated with the wireless network using information concerning the operating system of the second client device and using information from the wireless access profile and the wireless access list; and

transmitting the customized configuration file using a second encryption protocol to the second client device through the server communication unit;

displaying, on a display of the second client device, an invitation graphical user interface through an application,

wherein the application is downloaded in response to a user input activating a deferred deep link included in the invitation message; and

transmitting the request to connect to the wireless network and information concerning the operating system of the second client device to the server when the second client device receives another user input through the invitation graphical user interface.

11. The method of claim 10, further comprising:

determining, at the first client device, current GPS coordinates of the first client device using a GPS receiver of the first client device concurrent with creating the wireless access profile; and

transmitting the current GPS coordinates along with the wireless access profile and the wireless access list to the server through the first communication unit.

12. The method of claim 10, further comprising:

installing, at the second client device, the customized configuration file;

storing, in a second memory of the second client device, network configuration information associated with the wireless network when the customized configuration file is installed; and

connecting to the wireless network automatically through a second communication unit of the second client device after the second client device installs the customized configuration file.

13. The method of claim 10, further comprising creating, by the processing unit of the server, the customized configuration file using a connection expiration period, wherein the customized configuration file limits a connection of the second client device to the wireless network to the connection expiration period.

14. A non-transitory readable medium comprising computer executable instructions stored thereon, wherein the instructions include the steps comprising:

receiving, at a server, a wireless access profile and a wireless access list from a first client device;

transmitting an invitation message to a second client device associated with the wireless access list through a server communication unit of the server;

receiving, at the server, a request from the second client device to connect to a wireless network associated with the wireless access profile in response to the invitation message;

determining, using a processing unit of the server, an operating system of the second client device;

creating, using, the processing unit, a customized configuration file associated with the wireless network using information concerning the operating system of the second client device and

information from the wireless access profile and the wireless access list; and

transmitting the customized configuration file using a second encryption protocol to the second client device through the server communication unit;

displaying, on a display of the second client device, an invitation graphical user interface through an application,

wherein the application is downloaded in response to a user input activating a deferred deep link included in the invitation message; and

transmitting the request to connect to the wireless network and information concerning the operating system of the second client device to the server when the second client device receives another user input through the invitation graphical user interface.

15. The non-transitory readable medium of claim 14, further comprising:

determining, at the first client device, current GPS coordinates of the first client device using a GPS receiver of the first client device concurrent with creating the wireless access profile; and

transmitting the current GPS coordinates along with the wireless access profile and the wireless access list to the server through the first communication unit.

16. The non-transitory readable medium of claim 14, further comprising:

installing, at the second client device, the customized configuration file;

storing, in a second memory of the second client device, network configuration information associated with the wireless network when the customized configuration file is installed; and

connecting to the wireless network automatically through a second communication unit of the second client device after the second client device installs the customized configuration file.

17. The non-transitory readable medium of claim 14, further comprising creating, by the processing unit of the server, the customized configuration file using a connection expiration period, wherein the customized configuration file limits a connection of the second client device to the wireless network to the connection expiration period.