System and method for WiFi authentication and selection

• US 9,961,615 B2
• Filed: 07/15/2016
• Issued: 05/01/2018
• Est. Priority Date: 03/11/2013
• Status: Active Grant

• Current Assignee: Futurewei Technologies Incorporated (Huawei Investment & Holding Co., Ltd.)
• Original Assignee: Futurewei Technologies Incorporated (Huawei Investment & Holding Co., Ltd.)
• Inventors: Xiang, Zhixian
• Primary Examiner(s): Smarth, Gerald
• Application Number:
  US15/211,361
• Publication Number:
  US 20160330672A1
• Time in Patent Office: 655 Days
• CPC Class Codes: H04L 63/0876 based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 48/06 based on traffic conditions
• CPC Class Codes: H04W 48/14 using user query or user detection
• CPC Class Codes: H04W 48/18 Selecting a network or a communication service

Abstract

A method embodiment for network authentication includes selecting, by a user equipment (UE), an access network for establishing a network connection and receiving one or more network authentication status indications for a network associated with the access network. The method further includes implementing a network authentication and selection policy in accordance with the one or more network authentication status indications.

Claims

1. A method for network authentication and selection comprising:

determining, by a network device, an authentication status of a network associated with the network device; and

transmitting, by the network device to a user equipment (UE), one or more network authentication status indications in accordance with the authentication status of the network.

2. The method of claim 1, wherein determining the authentication status of the network comprises determining whether an authentication server of the network is overloaded, and wherein transmitting the one or more network authentication status indications comprises transmitting an overload indication in accordance with whether the authentication server is overloaded.

3. The method of claim 1, wherein determining the authentication status of the network comprises determining the network is allowing authentication attempts from new users, and wherein transmitting the one or more network authentication status indications comprises transmitting a authentication permission indication in accordance with whether the network is allowing the authentication attempts from the new users.

4. The method of claim 1, further comprising transmitting an authentication retry policy to the UE.

5. The method of claim 4, wherein the authentication retry policy defines a retry timer, a maximum number of authentication attempts, or a combination thereof.

6. The method of claim 1, further comprising:

determining, by the network device, an authentication status of a second network, wherein the network device provides access to the second network; and

transmitting, to the UE, one or more second network authentication status indications in accordance with the authentication status of the second network.

7. The method of claim 1, wherein transmitting the one or more network authentication status indications comprises transmitting the one or more network authentication status indications in an Access Network Query Protocol (ANQP) response, a beacon, a probe response, an Access Network Discovery and Selection Function (ANDSF) policy function, or a combination thereof.

8. The method of claim 1, wherein the one or more network authentication status indications provide information for the UE to determine whether to continue an authentication process with the network.

9. The method of claim 1, wherein the one or more network authentication status indications comprises an overload indication indicating whether an authentication server associated with the network is overloaded, a authentication permission indication indicating whether the network is allowing authentication attempts from new users, a network selection function indication, a quality of service (QoS) indication, a policy control function indication, or a combination thereof.

10. The method of claim 1, further comprising transmitting the one or more network authentication status indications in one or more independent information elements.

11. The method of claim 1, further comprising transmitting the one or more network authentication status indications in one or more fields of one or more information elements.

12. A network device comprising:

a non-transitory memory storage comprising instructions; and

one or more processors in communication with the memory, wherein the one or more processors execute the instructions for;

determining an authentication status of a network associated with the network device; and

transmitting, to a user equipment (UE), one or more network authentication status indications in accordance with the authentication status of the network.

13. The network device of claim 12, wherein the one or more network authentication status indications comprises an overload indication indicating whether an authentication server associated with the network is overloaded, a authentication permission indication indicating whether the network is allowing authentication attempts from new users, a network selection function indication, a quality of service (QoS) indication, a policy control function indication, or a combination thereof.

14. The network device of claim 12, wherein the one or more network authentication status indications is transmitted in one or more independent information elements.

15. The network device of claim 12, wherein the one or more network authentication status indications is transmitted in one or more fields of one or more information elements.

16. The network device of claim 12, wherein the one or more processors execute the instructions for transmitting an authentication retry policy to the UE.

17. The network device of claim 16, wherein the authentication retry policy defines a retry timer, a maximum number of authentication attempts, or a combination thereof.

18. The network device of claim 12, wherein the one or more network authentication status indications provide information for the UE to determine whether to continue an authentication process with the network.

19. The network device of claim 12, wherein determining the authentication status of the network comprises determining whether an authentication server of the network is overloaded, and wherein transmitting the one or more network authentication status indications comprises transmitting an overload indication in accordance with whether the authentication server is overloaded.

20. The network device of claim 12, wherein determining the authentication status of the network comprises determining the network is allowing authentication attempts from new users, and wherein transmitting the one or more network authentication status indications comprises transmitting a authentication permission indication in accordance with whether the network is allowing the authentication attempts from the new users.

21. The network device of claim 12, wherein the one or more processors execute the instructions for:

determining an authentication status of a second network, wherein the network device provides access to the second network; and

transmitting, to the UE, one or more second network authentication status indications in accordance with the authentication status of the second network.

22. The network device of claim 12, wherein transmitting the one or more network authentication status indications comprises transmitting the one or more network authentication status indications in an Access Network Query Protocol (ANQP) response, a beacon, a probe response, an Access Network Discovery and Selection Function (ANDSF) policy function, or a combination thereof.

23. A method for network authentication and selection comprising:

selecting, by a user equipment (UE), an access network for establishing a network connection;

receiving, by the UE, one or more network authentication status indications for a first network associated with the access network; and

implementing, by the UE, a network authentication and selection policy in accordance with the one or more network authentication status indications.

24. The method of claim 23, wherein the one or more network authentication status indications comprises an overload indication indicating whether an authentication server associated with the first network is overloaded, an authentication permission indication indicating whether the first network is allowing new users authentication attempts, a network selection function indication, a quality of service (QoS) indication, a policy control function indication, or a combination thereof.

25. The method of claim 23, wherein implementing the network authentication and selection policy comprises:

deciding, by the UE, whether to continue an authentication process with the access network in accordance with the one or more network authentication status indications; and

implementing, by the UE, an authentication retry policy when the UE decides not to continue the authentication process with the access network.

26. The method of claim 23, wherein receiving the one or more network authentication status indications comprises receiving the one or more network authentication status indications in an Access Network Query Protocol (ANQP) response, a beacon, a probe response, an Access Network Discovery and Selection Function (ANDSF) policy function, or a combination thereof.

27. A user equipment (UE) comprising:

a non-transitory memory storage comprising instructions; and

one or more processors in communication with the memory, wherein the one or more processors execute the instructions for;

selecting an access network for establishing a network connection;

receiving one or more network authentication status indications for a first network associated with the access network; and

implementing a network authentication and selection policy in accordance with the one or more network authentication status indications.

28. The UE of claim 27, wherein the one or more network authentication status indications comprises an overload indication indicating whether an authentication server associated with the first network is overloaded, an authentication permission indication indicating whether the first network is allowing new users authentication attempts, a network selection function indication, a quality of service (QoS) indication, a policy control function indication, or a combination thereof.

29. The UE of claim 27, wherein implementing the network authentication and selection policy comprises:

deciding whether to continue an authentication process with the access network in accordance with the one or more network authentication status indications; and

implementing an authentication retry policy when the UE decides not to continue the authentication process with the access network.

30. The UE of claim 27, wherein implementing the network authentication and selection policy comprises selecting a different network associated with a different network for establishing the network connection in accordance with the one or more network authentication status indications.