Restricted services for wireless stations

• US 20080226075A1
• Filed: 03/14/2008
• Published: 09/18/2008
• Est. Priority Date: 03/14/2007
• Status: Abandoned Application

• Current Assignee: Trapeze Networks Incorporated (Juniper Networks Incorporated)
• Original Assignee: Trapeze Networks Incorporated (Juniper Networks Incorporated)
• Inventors: Gast, Matthew Stuart
• Application Number:
  US12/077,051
• Publication Number:
  US 20080226075A1
• Time in Patent Office: Days
• US Class Current: 380/270
• CPC Class Codes: H04L 2209/80 Wireless network architectures or network communication protocols for wireless network security H04W12/00
• CPC Class Codes: H04L 63/06 for supporting key management in a packet data network cryptographic mechanisms or cryptographic arrangements for key management H04L9/08
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/101 Access control lists [ACL]
• CPC Class Codes: H04L 9/0841 involving Diffie-Hellman or related key agreement protocols
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 12/50 Secure pairing of devices
• CPC Class Codes: H04W 84/12 WLAN [Wireless Local Area Networks]

Abstract

A technique for providing restricted access to a wireless network involves recognizing a service descriptive identifier (SDID). The SDID may be transmitted to wireless stations that query the wireless network so that the wireless stations can at least gain access to restricted services provided by the wireless network. The SDID may include quality of service (QoS) parameters, as well, thereby facilitating dynamically restricted access to the wireless network.

Claims

1. A method, comprising:

receiving a request from a wireless device for a restricted service provided over a wireless network;

if the wireless network is security enabled, transmitting a Service Descriptive Identifier (SDID) over the wireless network, wherein the SDID is associated with the restricted service;

recognizing the SDID in the received request;

responsive to recognizing the SDID, enabling a the wireless device to access the restricted service.

2. The method of claim 1, wherein the transmitting the SDID further comprises transmitting the SDID in a beacon frame.

3. The method of claim 1, further comprising:

generating a key;

encrypting communications with the wireless device using the generated key.

4. The method of claim 1, further comprising using an encryption key to encrypt communications between the wireless device, wherein the encryption key is derived from one of the group consisting of a pre-shared secret and a Diffie-Hellman key exchange.

5. The method of claim 1, wherein the wireless device includes a phone.

6. The method of claim 1, wherein the SDID is transmitted responsive to receiving a query from the wireless device.

7. The method of claim 1, wherein the wireless network is an 802.11 network.

8. A method, comprising:

receiving a Service Descriptive Identifier (SDID), wherein the SDID is associated with a restricted service provided over a wireless network;

responsive to an instruction to utilize the restricted service, using the SDID to request access to the restricted service;

accessing the restricted service on the wireless network.

9. The method of claim 8, wherein the SDID is received at a mobile device.

10. The method of claim 8, wherein the receiving the SDID further comprises obtaining the SDID from a beacon frame.

11. The method of claim 8, further comprising receiving the instruction by way of user input.

12. The method of claim 8, further comprising receiving the instruction by way of a decision-making engine.

13. The method of claim 8, further comprising:

generating a key;

encrypting communications with the wireless network using the generated key.

14. The method of claim 8, further comprising using an encryption key to encrypt communications with the wireless network, wherein the encryption key is derived from one of the group consisting of a pre-shared secret and a Diffie-Hellman key exchange.

15. The method of claim 8, further comprising transmitting a query to the wireless network, wherein the SDID is received responsive to the transmitted query.

16. The method of claim 8, further comprising associating the SDID with quality of service (QoS) parameters.

17. An authenticator, comprising:

a Wireless Local Area Network (WLAN) radio;

a Service Descriptive Identifier (SDID) authentication engine implemented in a computer-readable medium;

wherein, in operation;

the WLAN radio transmits an SDID, wherein the SDID is associated with a restricted service provided over a wireless network;

the WLAN radio receives a request from a wireless device for the restricted service;

the SDID authentication engine recognizes the SDID in the received request;

the SDID authentication engine, responsive to recognizing the SDID, enables access by the wireless device to the restricted service.

18. The system of claim 17, wherein the wireless device is a cellular phone.

19. The system of claim 17, wherein the restricted service includes an emergency call service.

20. The system of claim 17, wherein the authenticator is an 802.11-compatible access point (AP).