Provisioned configuration for automatic wireless connection

• US 20070287450A1
• Filed: 04/23/2007
• Published: 12/13/2007
• Est. Priority Date: 04/24/2006
• Status: Active Grant

• Current Assignee: Ruckus IP Holdings LLC
• Original Assignee: Ruckus Wireless, Inc. (CommScope Holding Company, Inc.)
• Inventors: Kuo, Ted Tsei, Yang, Bo-Chieh, Lin, Tian-Yuan, Jou, Tyan-Shu, Sheu, Ming
• Granted Patent: US 9,071,583 B2
• Time in Patent Office: Days
• US Class Current: 455/433
• CPC Class Codes: H04L 63/06 for supporting key management in a packet data network cryptographic mechanisms or cryptographic arrangements for key management H04L9/08
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/0869 for achieving mutual authentication cryptographic mechanisms or cryptographic arrangements for mutual authentication H04L9/3273
• CPC Class Codes: H04L 63/0876 based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint
• CPC Class Codes: H04L 63/101 Access control lists [ACL]
• CPC Class Codes: H04L 63/102 Entity profiles
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227
• CPC Class Codes: H04W 12/04 Key management, e.g. using generic bootstrapping architecture [GBA]
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 12/35 Protecting application or service provisioning, e.g. securing SIM application provisioning
• CPC Class Codes: H04W 8/18 Processing of user or subscriber data, e.g. subscribed services, user preferences or user profiles; Transfer of user or subscriber data
• CPC Class Codes: H04W 84/12 WLAN [Wireless Local Area Networks]
• CPC Class Codes: H04W 88/02 Terminal devices

Abstract

Systems and methods for provisioned configuration of wireless devices to allow access to restricted wireless networks are provided. Using an open wireless or wired network, a user of a wireless device may be authenticated. A configuration application, which includes the parameters and policies of the provisioned configuration, is generated, transferred to, and executed on the wireless device. Following configuration by the application, the wireless device is allowed to access the restricted wireless network within the parameters and policies of the provisioned configuration.

Claims

1. A method for provisioned configuration of a wireless device comprising:

authenticating a user of the wireless device;

transferring an executable application to the wireless device, wherein execution of the executable application configures the wireless device to allow the wireless device access to a restricted wireless network, wherein the configuration includes parameters and policies governing access to the restricted wireless network;

controlling access of the wireless device to the wireless network based on at least the parameters and policies installed on the wireless device as a part of the wireless device configuration.

2. The method of claim 1, wherein the configuration further includes a certificate.

3. The method of claim 1, wherein the configuration further includes a shared secret.

4. The method of claim 1, wherein the configuration further includes a private key.

5. The method of claim 1, wherein authenticating the user of the wireless devices occurs over an open wireless network.

6. The method of claim 1, wherein authentication the user of the wireless device occurs over a wired network.

7. The method of claim 1, further comprising generating the executable application based on at least authentication information provided by the wireless device.

8. The method of claim 7, wherein the authentication information is associated with provisioned configuration information in a provisioned configuration database.

9. The method of claim 7, further comprising associating the configuration settings for the wireless device with the authentication information in a provisioned configuration database.

10. The method of claim 7, wherein the authentication information comprises information concerning the user.

11. The method of claim 7, wherein the authentication information comprises information concerning the wireless device.

12. The method of claim 1, wherein the executable application includes a plurality of configuration settings for the wireless device.

13. The method of claim 12, wherein each of the plurality of configuration settings includes parameters and policies for a different wireless network.

14. The method of claim 12, wherein each of the plurality of configuration settings includes a certificate.

15. The method of claim 12, wherein each of the plurality of configuration settings includes a shared secret.

16. The method of claim 12, wherein each of the plurality of configuration settings includes a private key.

17. A system for provisioned configuration of a wireless device comprising:

an authentication module configured to authenticate a user of the wireless device;

a provisioned configuration database including a provisioned configuration for the wireless device, the provisioned configuration based on at least authentication information identified by the authentication module, wherein the provisioned configuration includes parameters and policies of access by the wireless device to a wireless network; and

an application generation module configured to generate an executable application for the wireless device that configures the wireless device for access to the wireless network based on at least the provisioned configuration.

18. The system of claim 17, wherein the authentication information comprises information concerning the user.

19. The system of claim 17, wherein the authentication information comprises information concerning the wireless device.

20. The system of claim 17, wherein the provisioned configuration database is further configured to store information concerning a plurality of parameters and policies of access to wireless networks, associations with users, and associations with wireless devices.

21. The system of claim 17, wherein the provisioned configuration database is further configured to store information concerning certificates.

22. The system of claim 17, wherein the provisioned configuration database is further configured to store shared secrets.

23. The system of claim 17, wherein the provisioned configuration database is further configured to store private keys.

24. The system of claim 17, further comprising a provisioning module configured to deliver the generated executable application to the wireless device.

25. The system of claim 24, wherein the executable application is transferred to the wireless device over an open wireless network.

26. The system of claim 24, wherein the executable application is transferred to the wireless device over a wired network.

27. The system of claim 24, wherein the executable application provides a plurality of provisioned configurations.

28. The system of claim 27, wherein each of the plurality of provisioned configurations includes parameters and policies for a different wireless network.

30. The computer-readable storage medium of claim 18, wherein the method further comprises generating the executable application based on at least authentication information provided by the wireless device.

29. A computer-readable storage medium having embodied thereon a program, the program being executable by a computer processor to perform a method for provisioned configuration of a wireless device comprising:

authenticating a user of the wireless device;

transferring an executable application to the wireless device, wherein execution of the executable application configures the wireless device to allow the wireless device access to a restricted wireless network, wherein the configuration includes parameters and policies governing access to the restricted wireless network;

controlling access of the wireless device to the wireless network based on at least the parameters and policies installed on the wireless device as a part of the wireless device configuration.