Wi-Fi service delivery platform for retail service providers

• US 20050177515A1
• Filed: 06/18/2004
• Published: 08/11/2005
• Est. Priority Date: 02/06/2004
• Status: Abandoned Application

• Current Assignee: Smith Micro Software Incorporated
• Original Assignee: Tatara Systems Incorporated (Ribbon Communications, Inc.)
• Inventors: Kalavade, Asawaree, Jackson, Kevin, Greene, Jeremy, Bomarsi, Eric
• Application Number:
  US10/871,413
• Publication Number:
  US 20050177515A1
• Time in Patent Office: Days
• US Class Current: 705/52
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 63/0892 by using authentication-authorization-accounting [AAA] servers or protocols
• CPC Class Codes: H04M 15/51 for resellers, retailers or service providers
• CPC Class Codes: H04M 15/8228 Session based
• CPC Class Codes: H04M 2215/2026 Wireless network, e.g. GSM, PCS, TACS
• CPC Class Codes: H04M 2215/2033 WLAN
• CPC Class Codes: H04M 2215/32 Involving wireless systems
• CPC Class Codes: H04M 2215/54 Resellers-retail or service providers billing, e.g. agreements with telephone service operator, activation, charging/recharging of accounts
• CPC Class Codes: H04M 2215/7833 Session based
• CPC Class Codes: H04W 12/062 Pre-authentication
• CPC Class Codes: H04W 12/068 using credential vaults, e.g. password manager applications or one time password [OTP] applications
• CPC Class Codes: H04W 12/069 using certificates or pre-shared keys
• CPC Class Codes: H04W 4/24 Accounting or billing
• CPC Class Codes: H04W 74/00 Wireless channel access
• CPC Class Codes: H04W 76/10 Connection setup
• CPC Class Codes: H04W 84/12 WLAN [Wireless Local Area Networks]
• CPC Class Codes: H04W 88/16 Gateway arrangements

Abstract

A method is provided for managing usage of a plurality of local area networks by a plurality of subscribers associated with a service provider. The subscribers have terminals for accessing the local area networks. The terminals each have a client program for communicating with a service provider network. For each subscriber desiring to access a local area network, the method includes: (a) receiving at a gateway at the service provider network a request for authenticating a subscriber desiring access to the local area network, the request containing subscriber credentials for the subscriber desiring access to the local area network; (b) authenticating the subscriber based on the subscriber credentials and information relating to the subscriber previously stored in a subscriber database; (c) authorizing the local area network to grant access to the subscriber when the subscriber is authenticated; (d) establishing a link between the gateway and a client program on a terminal operated by the subscriber; (e) collecting session information through the link; (f) receiving information on local area network usage by the subscriber; and (g) transmitting the information on local area network usage to a billing system for billing of usage by the subscriber.

Claims

1. A method for managing usage of a plurality of local area networks by a plurality of subscribers associated with a service provider, said subscribers having terminals for accessing said local area networks, said terminals each having a client program for communicating with a service provider network, for each subscriber desiring to access a local area network, the method comprising the steps of:

(a) receiving at a gateway at the service provider network a request for authenticating a subscriber desiring access to said local area network, said request containing subscriber credentials for the subscriber desiring access to said local area network;

(b) authenticating the subscriber based on said subscriber credentials and information relating to said subscriber previously stored in a subscriber database;

(c) authorizing said local area network to grant access to said subscriber when said subscriber is authenticated;

(d) establishing a link between said gateway and a client program on a terminal operated by said subscriber;

(e) collecting session information through said link;

(f) receiving information on local area network usage by said subscriber; and

(g) transmitting said information on local area network usage to a billing system for billing of usage by said subscriber.

2. The method of claim 1 wherein said terminals are laptops, personal digital assistants, or smart phones.

3. The method of claim 1 wherein said service provider is a GSM operator, a CDMA operator, a cable operator, or a wireline service provider.

4. The method of claim 1 wherein step (a) comprises receiving said request from said local area network using RADIUS or DIAMETER protocols.

5. The method of claim 1 wherein said information transmitted in step (g) comprises RADIUS data augmented with location and service plan information and converted to a format of said service provider.

6. The method of claim 1 wherein said local area networks are wireless local area networks.

7. The method of claim 6 wherein said local area networks are Wi-Fi or WiMAX networks.

8. The method of claim 1 wherein step (a) comprises receiving a request for authenticating a subscriber from a network access server at said local area network.

9. The method of claim 1 wherein said subscriber credentials are encrypted.

10. The method of claim 1 further comprising determining a service plan for said subscriber from said subscriber database.

11. The method of claim 1 wherein said session information includes a client session log containing session information collected on termination of a session.

12. The method of claim 1 wherein said session information includes information on the location of the subscriber.

13. The method of claim 12 further comprising pushing a location-aware message to the terminal using the link established at step (d) based on the location of the subscriber.

14. The method of claim 1 wherein said session information includes performance metrics for use in monitoring network performance.

15. The method of claim 1 wherein said session information includes performance metrics for use in establishing service level agreements between operators of said local area networks and said service provider.

16. The method of claim 1 wherein said session information includes performance metrics for use in customer support and diagnostics to obtain visibility into a subscriber session.

17. The method of claim 1 further comprising the step of auditing said information received in step (f) from said local area network by comparing said information with said session information collected in step (e).

18. The method of claim 1 wherein said local area network contains no hotspot component dedicated to any service provider.

19. The method of claim 1 wherein data is transmitted between said gateway and said local area network without using a dedicated backhaul between the gateway and the local area network.

20. The method of claim 1 wherein data is transmitted between said gateway and said local area network over a public IP network.

21. The method of claim 1 further comprising pushing data to the terminal using the link established at step (d).

22. The method of claim 21 wherein said pushed data comprises advertising.

23. The method of claim 21 wherein said pushed data comprises an updated client program.

24. The method of claim 1 further comprising providing an application to the subscriber using the link established at step (d).

25. The method of claim 24 wherein said application is a messaging application or voice application.

26. The method of claim 1 further comprising performing real-time diagnostics over said link established at step (d).

27. The method of claim 1 wherein said link established at step (d) is maintained even when said subscriber is running a virtual private network.

28. The method of claim 1 wherein the subscriber database is a home location register (HLR) or an lightweight directory access protocol (LDAP) database.

29. The method of claim 1 wherein said subscriber database is an home location register (HLR), and wherein said gateway acts as a visited location register (VLR).

30. The method of claim 1 further comprising using the link established at step (d) to control access to said local area network by said subscriber.

31. The method of claim 30 wherein said subscriber has a pre-paid account, and wherein access to said local area network is controlled by terminating a session when the pre-paid account has been depleted.

32. The method of claim 1 further comprising using said link established at step (d) to replenish an account instead or to alert the subscriber of account depletion.

33. The method of claim 1 wherein information relating to said subscriber previously stored in a subscriber database comprises information obtained in connection with another service offered by the retail service provider to the subscriber.

34. The method of claim 1 wherein said link is a secure link between said gateway and said client program.

35. The method of claim 1 wherein said link is an SSL link.

36. The method of claim 1 further comprising collecting information about said local area networks, said information comprising data on local area network location, type, authentication mechanism or owner.

37. The method of claim 36 further comprising collecting said information about said local area networks in a location directory, and making said directory available to said plurality of subscribers through said client programs.

111. The method of claim 1 wherein said subscriber is authenticated based on SIM authentication information.

112. The method of claim 1 wherein said subscriber is authenticated based on SIM authentication information sent from said client program to said gateway, and by a one time password provided by said gateway to said client program.

38. A gateway for managing usage of a plurality of local area networks by a plurality of subscribers associated with a service provider, said subscribers having terminals for accessing said local area networks, said terminals each having a client program for communicating with said gateway, the gateway comprising:

a first interface module for communicating with said local area networks;

a second interface module for communicating with client programs on terminals operated by subscribers accessing said local area networks;

a third interface module for communicating with infrastructure of said service provider; and

a session manager for receiving through said first interface module requests for authenticating subscribers desiring access to said local area networks, said requests containing subscriber credentials for said subscribers, said session manager authenticating subscribers based on their subscriber credentials and information relating to said subscribers previously stored in a subscriber database through said third interface module, and said session manager authorizing local area networks through said first interface module to grant access to authenticated subscribers,

said session manager also receiving from said local area networks through said first interface module information on local area network usage by said subscribers, said session manager transmitting said information on local area network usage to a billing system through said third interface module for billing of usage by said subscribers,

said session manager also collecting session information through said second interface module from said client programs on said terminals accessing said local area networks.

39. The gateway of claim 38 wherein said terminals are laptops, personal digital assistants, or smart phones.

40. The gateway of claim 38 wherein said service provider is a GSM operator, a CDMA operator, a cable operator, or a wireline service provider.

41. The gateway of claim 38 wherein said requests for authenticating subscribers are received from said local area networks using RADIUS or DIAMETER protocols.

42. The gateway of claim 38 wherein said information transmitted to said billing system comprises RADIUS data augmented with location and service plan information and converted to a format of said service provider.

43. The gateway of claim 38 wherein said local area networks are wireless local area networks.

44. The gateway of claim 38 wherein said local area networks are Wi-Fi or WiMAX networks.

45. The gateway of claim 38 wherein said first interface module communicates with network access servers at said local area networks.

46. The gateway of claim 38 wherein said subscriber credentials are encrypted.

47. The gateway of claim 38 wherein said session manager also determines a service plan for said subscriber from said subscriber database.

48. The gateway of claim 38 wherein said session information includes a client session log containing session information collected on termination of a session.

49. The gateway of claim 38 wherein said session information includes information on the location of the subscriber.

50. The gateway of claim 49 wherein the session manager pushes a location-aware message to the terminal using links established between the second interface module and the client programs on the terminals based on said information on the location of the subscriber.

51. The gateway of claim 38 wherein said session information includes performance metrics for use in monitoring network performance.

52. The gateway of claim 38 wherein said session manager also audits said information on local area network usage by said subscribers by comparing said information with said session information.

53. The gateway of claim 38 wherein said local area network contains no hotspot component dedicated to any service provider.

54. The gateway of claim 38 wherein data is transmitted between said gateway and said local area networks without using dedicated backhauls between the gateway and the local area networks.

55. The gateway of claim 38 wherein data is transmitted between said gateway and said local area networks over a public IP network.

56. The gateway of claim 38 wherein said session manager further pushes data to the terminals using a link established between the second interface module and the client programs on the terminals.

57. The gateway of claim 56 wherein said pushed data comprises advertising.

58. The gateway of claim 56 wherein said pushed data comprises an updated client program.

59. The gateway of claim 38 wherein the session manager further provides an application to the subscriber using links established between the second interface module and the client programs on the terminals.

60. The gateway of claim 59 wherein said application is a messaging application or voice application.

61. The gateway of claim 38 wherein the session manager further performs real-time diagnostics using links established between the second interface module and the client programs on the terminals.

62. The gateway of claim 38 wherein said links established between the second interface module and the client programs on the terminals are maintained even when subscribers are running virtual private networks.

63. The gateway of claim 38 wherein said client program and said gateway communicate to replenish an account or to alert the subscriber of account depletion.

64. The gateway of claim 38 wherein the subscriber database is an HLR or an LDAP database.

65. The gateway of claim 38 wherein said subscriber database is an home location register (HLR), and wherein said gateway acts as a visited location register (VLR).

66. The gateway of claim 38 wherein the session manager uses links established between the second interface module and the client programs on the terminals to control access to said local area networks by said subscribers.

67. The gateway of claim 66 wherein for subscribers having a pre-paid account, the session manager controls their access to said local area networks by terminating a session when a pre-paid account has been depleted.

68. The gateway of claim 38 wherein information relating to said subscriber previously stored in a subscriber database comprises information from another service offered by the retail service provider to the subscriber.

69. The gateway of claim 38 wherein said gateway is deployed centrally in a service provider network.

70. The gateway of claim 38 wherein said requests for authenticating subscribers is made using 802.1x or http protocol.

71. The gateway of claim 38 wherein said session information includes performance metrics for use in establishing service level agreements between operators of said local area networks and said service provider.

72. The gateway of claim 38 wherein said session information includes performance metrics for use in customer support and diagnostics to get visibility into a subscriber session.

73. The gateway of claim 38 wherein said gateway and said client program communicate over a secure link.

74. The gateway of claim 73 wherein said link is an SSL link.

75. The gateway of claim 38 wherein said session manager collect information about said local area networks, said information comprising information on local are network location, type, authentication mechanism or owner.

76. The gateway of claim 75 wherein said gateway collects said information about said local area networks in a location directory, and makes said directory available to said plurality of subscribers.

113. The gateway of claim 38 wherein said subscriber is authenticated based on SIM authentication information.

114. The gateway of claim 38 wherein said subscriber is authenticated based on SIM authentication information sent from said client program to said gateway, and by a one time password provided by said gateway to said client program.

77. A method of accessing one of a plurality of local area networks by a subscriber operating a terminal, said subscriber associated with a service provider, the method for accessing a local area network comprising the steps of:

(a) transmitting to the local area network a request for accessing the local area network, said request including subscriber credentials for said subscriber, said local area network transmitting to a gateway at the service provider network a request containing the subscriber credentials for authenticating the subscriber, said gateway authenticating the subscriber based on said subscriber credentials and information relating to said subscriber previously stored in a subscriber database, said gateway authorizing said local area network to grant access to said subscriber when said subscriber is authenticated;

(b) accessing said local area network when said subscriber is authorized to access said local area network;

(c) establishing a link between a client program on said terminal operated by said subscriber and said gateway; and

(d) transmitting session information through said link to said gateway.

78. The method of claim 77 wherein said terminals are laptops, personal digital assistants, or smart phones.

79. The method of claim 77 wherein said service provider is a GSM operator, a CDMA operator, a cable operator, or a wireline service provider.

80. The method of claim 77 wherein transmitting to a gateway comprises using RADIUS or DIAMETER protocols.

81. The method of claim 77 wherein said local area networks are wireless local area networks.

82. The method of claim 81 wherein said local area networks are Wi-Fi or WiMAX networks.

83. The method of claim 77 wherein said request for authenticating a subscriber is transmitted to said gateway from a network access server at said local area network.

84. The method of claim 77 wherein said subscriber credentials are encrypted.

85. The method of claim 77 wherein said session information includes a client session log containing session information collected on termination of a session.

86. The method of claim 77 wherein said session information includes information on the location of the subscriber.

87. The method of claim 77 further comprising receiving a location-aware message from the gateway through the link established at step (c) based on said location of the subscriber.

88. The method of claim 77 wherein said session information includes performance metrics for use in monitoring network performance.

89. The method of claim 77 wherein said local area network contains no hotspot component dedicated to any service provider.

90. The method of claim 77 further comprising receiving data from the gateway through the link established at step (c).

91. The method of claim 90 wherein said data comprises advertising.

92. The method of claim 90 wherein said data comprises an updated client program.

93. The method of claim 77 further comprising receiving an application from the gateway through the link established at step (c).

94. The method of claim 93 wherein said application is a messaging application or voice application.

95. The method of claim 77 wherein said link established at step (c) is maintained even when said subscriber is running a virtual private network.

96. The method of claim 77 wherein access to said local area network by said subscriber is controlled by said gateway using the link established at step (c).

97. The method of claim 96 wherein said subscriber has a pre-paid account, and wherein access to said local area network is controlled by the gateway by terminating a session when the pre-paid account has been depleted.

98. The method of claim 77 wherein information relating to said subscriber previously stored in a subscriber database comprises information from another service offered by the retail service provider to the subscriber.

99. The method of claim 77 wherein said client program checks driver compatibility on said terminal.

100. The method of claim 77 wherein said client program transmits a preconfigured profile of said subscriber to said local area network.

101. The method of claim 77 wherein said client program provides a directory to said user of accessible local area networks.

102. The method of claim 101 wherein said client program can prioritize said local area networks based on one or more factors including local area network location, preferred local area networks, and network transmission speeds.

103. The method of claim 77 wherein said client program can access GPRS, CDMA, dial and Ethernet networks.

104. The method of claim 77 wherein said client program can interface with local area network equipment for http authentication.

105. The method of claim 77 wherein said client program displays session information or pushed messages on said terminal.

106. The method of claim 77 wherein said client program is plugged into a client interface of a party other than said service provider.

107. The method of claim 77 wherein said session information includes performance metrics for use in establishing service level agreements between operators of said local area networks and said service provider.

108. The method of claim 77 wherein said session information includes performance metrics for use in customer support and diagnostics to get visibility into a subscriber session.

109. The method of claim 77 wherein said link is a secure link between said gateway and said client program.

110. The method of claim 77 wherein said link is an SSL link.

115. The method of claim 77 wherein said subscriber is authenticated based on SIM authentication information.

116. The method of claim 77 wherein said subscriber is authenticated based on SIM authentication information sent from said client program to said gateway, and by a one time password provided by said gateway to said client program.

117. A method for managing usage of a plurality of local area networks by a plurality of subscribers associated with a service provider, said subscribers having terminals for accessing said local area networks, said subscribers also having cell phones having MSISDN information, for each subscriber desiring to access a local area network, the method comprising the steps of:

(a) receiving at a gateway at the service provider network a request for authenticating a subscriber desiring access to said local area network, said request containing MSISDN information for the subscriber desiring access to said local area network;

(b) validating the subscriber based on said MSISDN information and information relating to said subscriber previously stored in a subscriber database;

(c) transmitting a one time password to a cell phone operated by said subscriber;

(d) receiving from a terminal operated by said subscriber said one time password;

(e) authenticating said subscriber based on said one time password;

(f) authorizing said local area network to grant access to said subscriber when said subscriber is authenticated;

(g) receiving information on local area network usage by said subscriber; and

(h) transmitting said information on local area network usage to a billing system for billing of usage by said subscriber.