User control over WIFI network access

• US 9,985,938 B2
• Filed: 04/18/2016
• Issued: 05/29/2018
• Est. Priority Date: 07/19/2012
• Status: Active Grant

• Current Assignee: T-Mobile Innovations LLC (Deutsche Telekom AG)
• Original Assignee: Sprint Communications Company LP (Deutsche Telekom AG)
• Inventors: Gatewood, John M., Schnitzer, Lee Alan, Woodrum, Sharon L., Voruganti, Bhanu Prakash
• Primary Examiner(s): Reza, Mohammad W
• Application Number:
  US15/131,889
• Publication Number:
  US 20160234179A1
• Time in Patent Office: 771 Days
• Field of Search: 726 6
• CPC Class Codes: H04L 63/06 for supporting key management in a packet data network cryptographic mechanisms or cryptographic arrangements for key management H04L9/08
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/0884 by delegation of authentication, e.g. a proxy authenticates an entity to be authenticated on behalf of this entity vis-à-vis an authentication entity
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227
• CPC Class Codes: H04W 12/04 Key management, e.g. using generic bootstrapping architecture [GBA]
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 12/61 Time-dependent
• CPC Class Codes: H04W 84/12 WLAN [Wireless Local Area Networks]

Abstract

A wireless communication device controls access to a geographically-distributed Wireless Fidelity (WiFi) network. The wireless communication device graphically presents WiFi network data to receive user selections of multiple WiFi access systems, a network name, and a user password. The wireless communication device receives configuration data that associates broadcast identification signals for the WiFi access systems with the network name. The wireless communication device detects a broadcast identification signal for one of the WiFi access systems and responsively presents the network name and a password prompt to receive the user password. The wireless communication device transfers the network name and the user password to the WiFi access system, and in response, the wireless communication device exchanges user data over the WiFi access system.

Claims

1. A method of operating a wireless communication device to control access to a geographically-distributed Wireless Fidelity (WiFi) network that has multiple WiFi access systems, the method comprising:

graphically presenting WiFi network data comprising a geographic map showing the multiple WiFi access systems wherein responsive to the graphical presentation, a user selects the wireless communication device, a single user-selected network name, a single user-selected password, and only some of the multiple WIFI access systems wherein the user does not select all of the multiple WIFI access systems;

receiving the user selections of the multiple user-selected WiFi access systems, the wireless communication device, the single user-selected network name, and the single user-selected password;

wirelessly receiving at least one access key for the multiple user-selected WiFi access systems;

wirelessly detecting one of the multiple user-selected WiFi access systems and responsively graphically presenting the single user-selected network name and a password prompt to receive the single user-selected password wherein the single user-selected network name and the password prompt are not graphically presented when the unselected WiFi access systems are detected; and

receiving the single user-selected password, and in response, wirelessly transferring the access key and an identifier for the wireless communication device to the detected one of the multiple user-selected WiFi access systems, and in response, wirelessly exchanging user data over the detected one of the multiple user-selected WiFi access systems after the detected one of the user-selected WiFi access systems authorizes the access key and the identifier for the wireless communication device.

2. The method of claim 1 further comprising graphically presenting location names for the multiple WiFi access systems on the geographic map.

3. The method of claim 1 further comprising graphically presenting Service Set Identifiers (SSIDs) for the multiple WiFi access systems on the geographic map.

4. The method of claim 1 further comprising graphically presenting service capabilities for the multiple WiFi access systems on the geographic map.

5. The method of claim 1 wherein the wireless communication device has a Long Term Evolution (LTE) communication interface.

6. A wireless communication device to control access to a geographically-distributed Wireless Fidelity (WiFi) network that has multiple WiFi access systems, the wireless communication device comprising:

a User Interface (UI) configured to graphically present WiFi data comprising a geographic map showing the multiple WiFi access systems to responsively receive user selections of the wireless communication device, a single user-selected network name, a single user-selected password, and only some of the multiple WIFI access systems wherein the user does not select all of the multiple WIFI access systems;

a communication interface configured to wirelessly receive at least one access key for the multiple user-selected WiFi access systems and to wirelessly detect the multiple user-selected WiFi access systems; and

a processing system configured, in response to a detection of one of the user-selected WiFi access systems, to direct the UI to graphically present the network name and a password prompt for the single user-selected password, receive the single user-selected password through the UI, and in response to receiving the single user-selected password, direct the communication interface to wirelessly transfer the access key and an identifier for the wireless communication device to the detected one of the user-selected WiFi access systems, and direct the communication interface to wirelessly exchange user data over the detected one of the user-selected WiFi access systems after the detected one of the user-selected WiFi access system authorizes the access key and the identifier for the wireless communication device, wherein the processing system is configured to not graphically present the single user-selected network name and the password prompt when the unselected WiFi access systems are detected.

7. The wireless communication device of claim 6 wherein the UI is configured to graphically present location names for the multiple WiFi access systems on the geographic map.

8. The wireless communication device of claim 6 wherein the UI is configured to graphically present Service Set Identifiers (SSIDs) for the multiple WiFi access systems on the geographic map.

9. The wireless communication device of claim 6 wherein the UI is configured to graphically present service capabilities for the multiple WiFi access systems on the geographic map.

10. The wireless communication device of claim 6 wherein the communication interface comprises a Long Term Evolution (LTE) interface.