Systems, methods and computer-readable storage media facilitating mobile device guest network access

• US 9,674,187 B1
• Filed: 09/28/2016
• Issued: 06/06/2017
• Est. Priority Date: 09/28/2016
• Status: Active Grant

• Current Assignee: Chengdu Sk Spruce Technologies Co., Ltd.
• Original Assignee: Network Performance Research Group LLC
• Inventors: Kurniawan, Erick, Tsai, Kun Ting, Ngo, Terry F K, Yi, Seung Baek
• Primary Examiner(s): Schwartz, Darren B
• Application Number:
  US15/278,098
• Time in Patent Office: 251 Days
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 63/0876 based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint
• CPC Class Codes: H04L 63/102 Entity profiles
• CPC Class Codes: H04L 63/107 wherein the security policies are location-dependent, e.g. entities privileges depend on current location or allowing specific operations only from locally connected terminals
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 12/37 Managing security policies for mobile devices or for controlling mobile applications
• CPC Class Codes: H04W 4/021 Services related to particular areas, e.g. point of interest [POI] services, venue services or geofences
• CPC Class Codes: H04W 48/04 based on user or terminal location or mobility data, e.g. moving direction, speed
• CPC Class Codes: H04W 76/10 Connection setup
• CPC Class Codes: H04W 84/12 WLAN [Wireless Local Area Networks]
• CPC Class Codes: H04W 84/18 Self-organising networks, e.g. ad-hoc networks or sensor networks
• CPC Class Codes: H04W 88/08 Access point devices

Abstract

Mobile device access to a guest network is facilitated. A method comprises: detecting a home network having an associated access point based on the device being within a first defined proximity of the associated access point; and transmitting information indicative of a request to establish a guest network via the associated access point of the home network and providing authentication information for an entity associated with the device. The method also comprises establishing the guest network according to one or more assigned resources based on receipt of an acknowledgement message received from a cloud device, wherein receipt of the acknowledgment message from the cloud device is based on cloud device determination that the entity associated with the device is authenticated and based on receipt of an authorization by an entity associated with the home network.

Claims

1. A non-transitory computer-readable storage medium storing computer-executable instructions that, in response to being executed by a processor of a device, causes the device to perform operations, wherein the operations comprise:

detecting a home network having an associated access point based on the device being within a first defined proximity of the associated access point;

transmitting information indicative of a request to establish a guest network via the associated access point of the home network and providing authentication information for an entity associated with the device; and

establishing the guest network according to one or more assigned resources based on receipt of an acknowledgement message received from a cloud device, wherein receipt of the acknowledgment message from the cloud device is based on cloud device determination that the entity associated with the device is authenticated and based on receipt of an authorization by an entity associated with the home network, wherein the guest network is further established according to a defined geofence around the associated access point and wherein the guest network is provided for access by the device via the one or more assigned resources based on a determination that the device is within a second defined proximity of the defined geofence, and wherein access to the guest network is closed based on a determination that the device fails to be within the second defined proximity of the defined geofence.

2. The non-transitory computer-readable storage medium of claim 1, wherein the acknowledgement message comprises a code configured to allow access to the guest network by the device according to the one or more assigned resources.

3. The non-transitory computer-readable storage medium of claim 2, wherein the acknowledgement message further comprises information indicative of the one or more assigned resources authorized by the entity associated with the home network.

4. The non-transitory computer-readable storage medium of claim 1, wherein the one or more assigned resources comprises a defined time period during which the guest network is accessible by the device.

5. The non-transitory computer-readable storage medium of claim 1, wherein the one or more assigned resources comprises a quality of service assigned to the guest network.

6. The non-transitory computer-readable storage medium of claim 1, wherein the authentication information can be at least one of information for logging into a defined website or information for logging into a business entity network.

7. The non-transitory computer-readable storage medium of claim 1, wherein the request further comprises a request to establish the guest network as a masquerade network having a defined configuration, wherein the device has a second home network having the defined configuration, and wherein the defined configuration was previously established on the second home network.

8. The non-transitory computer-readable storage medium of claim 1, wherein the device and the associated access point have respective subscriptions for a system with which the home network is associated.

9. The non-transitory computer-readable storage medium of claim 1, wherein the detecting is performed via a personal area network communication protocol.

10. A method, comprising:

receiving, by a device comprising a processor, an authorization message from a second device associated with an entity having a home network accessible via an access point, wherein the authorization message comprises information authorizing establishment of a guest network for a third device via the access point, and wherein the home network comprises a personal area network; and

transmitting, by the device, to the third device, access information to obtain access by the third device to the guest network via the access point according to one or more assigned resources for the guest network, wherein the guest network is established according to a defined geofence around the access point, wherein the guest network is provided for access by the third device via one or more assigned resources based on a determination that the third device is within a second defined proximity of the defined geofence, and wherein access to the guest network is closed based on a determination that the third device fails to be within the second defined proximity of the defined geofence.

11. The method of claim 10, further comprising:

receiving, by the device, from the third device, a request message to access the access point via the guest network, wherein the receiving the request message is performed prior to the receiving the authorization message from the second device and wherein the request message comprises information indicative of at least one of login information for an entity associated with the third device or whether the entity associated with the third device is authenticated.

12. The method of claim 10, further comprising:

transmitting, by the device, to the second device, an inquiry message requesting permission to establish the guest network for the third device, wherein the transmitting is performed in response to a determination that the entity associated with the third device is authenticated.

13. The method of claim 12, wherein the receiving of the authorization message is in response to the transmitting the inquiry message and wherein the authorization message comprises information indicative of one or more defined conditions for the guest network.

14. The method of claim 13, wherein the one or more defined conditions comprises one or more defined conditions related to a time period during which access to the guest network is granted or a quality of service provided via the guest network.

15. The method of claim 14, wherein the quality of service is specified via a policy associated with differing levels of service for different entities requesting the guest network.

16. A non-transitory computer-readable storage medium storing computer-executable instructions that, in response to being executed by a processor of a device, causes the device to perform operations, wherein the operations comprise:

detecting a home network having an associated access point based on the device being within a first defined proximity of the associated access point;

transmitting information indicative of a request to establish a guest network via the associated access point of the home network and providing authentication information for an entity associated with the device; and

establishing the guest network according to one or more assigned resources based on receipt of an acknowledgement message received from a cloud device, wherein receipt of the acknowledgment message from the cloud device is based on cloud device determination that the entity associated with the device is authenticated and based on receipt of an authorization by an entity associated with the home network, wherein the guest network is further established according to a defined geofence around the associated access point, wherein the guest network is provided for access by the device via the one or more assigned resources based on a determination that the device is within a second defined proximity of the defined geofence and a defined time period associated with the one or more assigned resources has not elapsed, and wherein access to the guest network is closed based on a determination that the device fails to be within the second defined proximity of the defined geofence or based on a determination that the defined time period associated with the one or more assigned resources has elapsed.

17. The non-transitory computer-readable storage medium of claim 16, wherein the acknowledgement message comprises a code configured to allow access to the guest network by the device according to the one or more assigned resources.

18. The non-transitory computer-readable storage medium of claim 16, wherein the acknowledgement message further comprises information indicative of the one or more assigned resources authorized by the entity associated with the home network.