Method and apparatus for wireless network authentication and authorization

• US 9,961,543 B2
• Filed: 09/10/2014
• Issued: 05/01/2018
• Est. Priority Date: 03/27/2014
• Status: Active Grant

• Current Assignee: Beijing Nanbao Technology Co., Ltd.
• Original Assignee: Beijing Nanbao Technology Co., Ltd.
• Inventors: Zhang, Zhaolong
• Primary Examiner(s): Nipa, Wasika
• Application Number:
  US14/396,026
• Publication Number:
  US 20150281955A1
• Time in Patent Office: 1,329 Days
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 12/63 Location-dependent; Proximity-dependent
• CPC Class Codes: H04W 12/71 Hardware identity
• CPC Class Codes: H04W 12/72 Subscriber identity
• CPC Class Codes: H04W 4/021 Services related to particular areas, e.g. point of interest [POI] services, venue services or geofences

Abstract

A wireless router, comprising a location information acquisition module configured to acquire location information of a mobile device and an identity information collection module configured to store a predetermined location model to determine a match between the location information and the predetermined location model based on a corresponding relation between the predetermined location model and identity information of the mobile device. A wireless router further comprising an authentication and authorization module configured to determine a match between the location information and the predetermined location model and to authenticate and authorize the mobile device to access a network.

Claims

1. An apparatus for authentication and authorization of a wireless network, comprising:

a processor; and

a memory coupled to the processor, the memory configured to store a set of instructions which when executed by the processor become operational with the processor to;

receive location information of a mobile device, from the mobile device, wherein the location information comprises spatial data and temporal data, wherein the spatial data includes a distance between the mobile device and a router and the temporal data includes a time period that the mobile device is within a threshold distance of the router;

receive, from a distance measurement device, radio frequency (RF) signals to determine the distance of the mobile device;

compare the location information of the mobile device to a predetermined location model comprising predetermined spatial data and predetermined temporal data to determine whether a match between the location information and the predetermined location model exists, the predetermined spatial data corresponding to the spatial data and including a threshold distance of five centimeters, the predetermined temporal data corresponding to the temporal data and including a threshold time period of three seconds, wherein the match is determined to exist when the distance between the mobile device and the router is not greater than the threshold distance of five centimeters and the time period that the mobile device is within the threshold distance of the router is at least equal to the threshold time period of three seconds and wherein the match is determined not to exist when the distance between the mobile device and the router is greater than the threshold distance of five centimeters;

responsive to a determination that a match between the location information and the predetermined location model exists, obtain identity information of the mobile device; and

responsive to a determination that a match between the location information and the predetermined location model exists, complete authentication and authorization of the mobile device and permit the mobile device to access the wireless network.

2. The apparatus of claim 1, wherein the memory is further configured to store a set of instructions which when executed by the processor become operational with the processor to:

determine, for the mobile device, an access authority according to a corresponding relation between the predetermined location model and the access authority based on the mobile device'"'"'s location information.

3. The apparatus of claim 1, wherein the memory is further configured to store a set of instructions which when executed by the processor become operational with the processor to:

authenticate the mobile device based on at least one of;

a username, a password, a fingerprint, an iris, a sound wave, a two-dimensional code and a dynamic password.

4. The apparatus of claim 2, wherein the memory is further configured to store a set of instructions which when executed by the processor become operational with the processor to:

store the location information, the predetermined location model, the identity information of the mobile device, the corresponding relation between the predetermined location model and the identity information of the mobile device, and the corresponding relation between the location model and the access authority;

send the location information, the predetermined location model, the identity information of the mobile device, the corresponding relation between the predetermined location model and the identity information of the mobile device, and the corresponding relation between the predetermined location model and the access authority to a cloud server connected to the apparatus via the wireless network;

receive revisions and adjustments made by the cloud server to the location information, the predetermined location model, the identity information of the mobile device, the corresponding relation between the predetermined location model and the identity information of the mobile device, and the corresponding relation between the predetermined location model and the access authority; and

based on the received revisions and adjustments, update the location information, the predetermined location model, the identity information of the mobile device, the corresponding relation between the predetermined location model and the identity information of the mobile device, and the corresponding relation between the predetermined location model and the access authority.

5. The apparatus of claim 1, wherein the set of instructions to receive the location information of the mobile device comprises a set of instructions to:

receive radio frequency (RF) signals from the mobile device to measure a position of the mobile device;

and

receive the location information of the mobile device from a third party.

6. The apparatus of claim 5, wherein the location information comprises at least one of:

distance information associated with the mobile device, relative location information associated with the mobile device, track information and time-dependent changes, wherein the distance, relative location and track are respectively the distance, relative location and track of the mobile device relative to the apparatus, an accessory distance measurement device of the apparatus, or another device that has been authorized by the apparatus.

7. The apparatus of claim 5, wherein the identity information of the mobile device comprises at least one of:

an IP address, a MAC address, a mobile phone number, a mobile device number, a manufacturer logo and a time stamp.

8. The apparatus of claim 1, wherein the instructions to compare the location information of the mobile device with a stored predetermined location model comprising spatial data and temporal data to determine whether a match between the location information and the predetermined location model exists, wherein the match is determined by comparing the temporal data of the location information with the temporal data of the predetermined location model, and the spatial data of the location data with the spatial data of the predetermined location model further comprise instructions to:

responsive to the temporal data of the location information exceeding a temporal criteria of the predetermined location model and the location data of the location information not exceeding a location criteria of the predetermined location model, determine the match between the location information and the predetermined location model exists.

9. The apparatus of claim 1, wherein the spatial information of the predetermined location model further comprises movement track information of the mobile device relative to the router.

10. The apparatus of claim 1, wherein the memory is further configured to store a set of instructions which when executed by the processor become operational with the processor to:

determine an adjustment to the predetermined location model based on identity information of the mobile device.

11. A method for authenticating and authorizing a mobile device, comprising:

receiving, by a wireless router, location information of the mobile device, from the mobile device, wherein the location information comprises spatial data and temporal data, wherein the spatial data includes a distance between the mobile device and the wireless router and the temporal data includes a time period that the mobile device is within a threshold distance of the wireless router;

receiving, from a distance measurement device, radio frequency (RF) signals to determine the distance of the mobile device;

comparing, by the wireless router, the location information of the mobile device to a predetermined location model comprising predetermined spatial data and predetermined temporal data to determine whether a match between the location information and the predetermined location model exists, the predetermined spatial data corresponding to the spatial data and including a threshold distance of five centimeters, the predetermined temporal data corresponding to the temporal data and including a threshold time period of three seconds, wherein the match is determined to exist when the distance between the mobile device and the wireless router is not greater than the threshold distance of five centimeters and the time period that the mobile device is within the threshold distance of the wireless router is at least equal to the threshold time period of three seconds and wherein the match is determined not to exist when the distance between the mobile device and the wireless router is greater than the threshold distance of five centimeters;

responsive to a determination that a match between the location information and the predetermined location model exists, obtaining, by the wireless router, identity information of the mobile device; and

responsive to a determination that a match between the location information and the predetermined location model exists, completing, by the wireless router, authentication and authorization of the mobile device and permitting the mobile device to access a wireless network, wherein, responsive to completing authentication and authorization of the mobile device, permitting the mobile device to access the wireless network when the distance between the mobile device and the wireless router is greater than the threshold distance of five centimeters.

12. The method of claim 11 further comprising:

determining, for the mobile device, an access authority according to a corresponding relation between the predetermined location model and the access authority based on the mobile device'"'"'s location information.

13. The method of claim 11, further comprising:

authenticating the mobile device based on at least one of;

a username, a password, a fingerprint, an iris, a sound wave, a two-dimensional code and a dynamic password.

14. The method of claim 12, further comprising:

sending the location information, the predetermined location model, the corresponding relation between the predetermined location model and the access authority, the corresponding relation between the location model and the identity information of the mobile device, and the identity information of the mobile device to a cloud server connected via the wireless network, wherein the cloud server analyzes, adjusts, or revises the identity information, and sends adjustments and revisions to an apparatus.

15. The method of claim 11, wherein receiving, by the wireless router, the location information of the mobile device further comprises:

receiving RF signals from the mobile device to measure a position of the mobile device;

and

receiving the location information of the mobile device from a third party.

16. The method of claim 15, wherein the location information comprises at least one of:

distance information associated with the mobile device, relative location information associated with the mobile device, track information and time-dependent changes, wherein the distance, relative location and track are respectively the distance, relative location and track of the mobile device relative to the wireless router, an accessory distance measurement device of the wireless router, or another device that has been authorized by the wireless router.

17. The method of claim 15, wherein the identity information of the mobile device comprises at least one of:

an IP address, a MAC address, a mobile phone number, a mobile device number, a manufacturer logo and a time stamp.

18. A non-transitory computer-readable medium having stored thereon a program of instructions executable by a router to cause the router to:

receive location information of a mobile device, from the mobile device, wherein the location information comprises spatial data and temporal data, wherein the spatial data includes a distance between the mobile device and the router and the temporal data includes a time period that the mobile device is within a threshold distance of the router;

receive, from a distance measurement device, radio frequency (RF) signals to determine the distance of the mobile device;

compare the location information of the mobile device to a predetermined location model comprising predetermined spatial data and predetermined temporal data to determine whether a match exists between the location information and the predetermined location model, the predetermined spatial data corresponding to the spatial data and including a threshold distance of five centimeters, the predetermined temporal data corresponding to the temporal data and including a threshold time period of three seconds, and the match being determined to exist when the distance between the mobile device and the router is not greater than the threshold distance of five centimeters and the time period that the mobile device is within the threshold distance of the router is at least equal to the threshold time period of three seconds and the match being determined not to exist when the distance between the mobile device and the router is greater than the threshold distance of five centimeters;

responsive to a determination that a match between the location information and the predetermined location model exists, obtain identity information of the mobile device; and

responsive to a determination that a match between the location information and the predetermined location model exists, complete authentication and authorization of the mobile device and permit the mobile device to access a wireless network.