SYSTEM AND METHOD FOR DEVICE AUTHENTICATION IN A DYNAMIC NETWORK USING WIRELESS COMMUNICATION DEVICES

• US 20120135711A1
• Filed: 02/01/2012
• Published: 05/31/2012
• Est. Priority Date: 03/03/2009
• Status: Active Grant

• Current Assignee: IP Investment Holdings LLC
• Original Assignee: E3, LLC
• Inventors: Jabara, Gary B., Karmis, Christos, Simon, David Brett, Linder, Lloyd Frederick
• Granted Patent: US 9,179,296 B2
• Time in Patent Office: Days
• US Class Current: 455/411
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/0876 based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint
• CPC Class Codes: H04L 63/0892 by using authentication-authorization-accounting [AAA] servers or protocols
• CPC Class Codes: H04N 21/2187 Live feed
• CPC Class Codes: H04N 21/2223 being a public access point, e.g. for downloading to or uploading from clients arrangements specially adapted to plural spots in a confined site in broadcast systems H04H20/63
• CPC Class Codes: H04N 21/2541 Rights Management protecting software against unauthorised usage in a vending or licensing environment G06F21/10; security in data switching network management H04L41/28; security management or policies for network security H04L63/20; access security in wireless networks H04W12/08
• CPC Class Codes: H04N 21/25816 involving client authentication restricting access to computer systems by authenticating users using a predetermined code G06F21/33; cryptographic authentication protocols H04L9/32; networks authentication protocols H04L63/08; authentication in wireless network security H04W12/06
• CPC Class Codes: H04N 21/43637 involving a wireless protocol, e.g. Bluetooth, RF or wireless LAN [IEEE 802.11] arrangements for wireless networking or broadcasting of information in indoor or near-field type systems H04B10/114
• CPC Class Codes: H04N 21/4367 Establishing a secure communication between the client and a peripheral device or smart card
• CPC Class Codes: H04N 21/6131 involving transmission via a mobile phone network wireless downlink channel access H04W74/006
• CPC Class Codes: H04N 21/632 using a connection between clients on a wide area network, e.g. setting up a peer-to-peer communication via Internet for retrieving video segments from the hard-disk of other client devices broadcast-related systems characterised by transmission among terminal devices H04H60/80; distributed application using peer-to-peer [P2P] networks H04L67/104
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 4/021 Services related to particular areas, e.g. point of interest [POI] services, venue services or geofences
• CPC Class Codes: H04W 60/00 Affiliation to network, e.g. registration; Terminating affiliation with the network, e.g. de-registration
• CPC Class Codes: H04W 76/11 Allocation or use of connection identifiers
• CPC Class Codes: H04W 76/45 for Push-to-Talk [PTT] or Push-to-Talk over cellular [PoC] services
• CPC Class Codes: H04W 8/186 Processing of subscriber group data
• CPC Class Codes: H04W 8/205 Transfer to or from user equipment or user record carrier
• CPC Class Codes: H04W 84/18 Self-organising networks, e.g. ad-hoc networks or sensor networks
• CPC Class Codes: H04W 88/04 adapted for relaying to or from another terminal or user

Abstract

A short-range wireless network is established by direct communication between wireless devices and wireless access points. A wireless communication device provides initial registration information to a network and becomes a registered device. An API is downloaded to the wireless device to permit automatic authentication of the device for future communications. When a registered device enters a venue, at least one access point will automatically detect the wireless device and extract the necessary identification data to permit authentication of the device. Customized messages may be provided to the wireless device. If the wireless device enters a different venue, even in another city or state, the registration data may be automatically extracted by an AP and provided to a cloud network for authentication. Authenticated devices receive a list of authenticated vendors and unauthenticated vendors near the present location of the authenticated device.

Claims

1. A method for device authentication in a wireless communication network comprising:

receiving an authentication request from a wireless communication device at a wireless access point;

determining a present location of the wireless communication device;

in response to the authentication request, verifying an identity of the wireless communication device; and

if the identity is verified, providing the wireless communication device with a list of authenticated vendors in a geographic region proximate the present location of the wireless communication device.

2. The method of claim 1, further comprising initiating an initial registration for the wireless communication device if the identity is not verified, the initial registration request comprising a device identification code.

3. The method of claim 2 wherein the device identification code is stored in association with the wireless communication device upon completion of processing the initial registration request.

4. The method of claim 2 wherein the authentication request from the wireless communication device comprises the device identification code.

5. The method of claim 4 wherein the authentication request from the wireless communication device occurs immediately following the initial registration request.

6. The method of claim 1, further comprising blocking communication from a vendor not on the list of authenticated vendors.

7. The method of claim 1, further comprising providing the wireless communication device with a list of bogus vendors in a geographic region proximate the present location of the wireless communication device.

8. The method of claim 1, further comprising transmitting message data for a vendor from the access point to the wireless communication device, the message comprising vendor identification data sufficient to permit the wireless communication device to verify if the vendor is an authenticated vendor.

9. The method of claim 1 for use with a plurality of access points, the method further comprising transmitting message data for a vendor from one of the plurality of access point to the wireless communication device, the message data comprising vendor identification data sufficient to permit the wireless communication device to verify if the vendor is an authenticated vendor.

10. The method of claim 1 for use with a plurality of access points wherein the message data is video data, the method further comprising transmitting the video data from at least one of the plurality of access point to the authenticated wireless communication device.

11. The method of claim 1 wherein a vendor has an associated access point, the method further comprising transmitting message data from the vendor access point to the wireless communication device, the message comprising vendor identification data sufficient to permit the wireless communication device to verify if the vendor is an authenticated vendor.

12. The method of claim 1, further comprising receiving an initial registration request from the wireless communication device prior to ever receiving the authentication request from the wireless communication device, the initial registration request comprising a device identification code.

13. The method of claim 12 wherein the authentication request from the wireless communication device comprises the device identification code.

14. The method of claim 2, further comprising providing the wireless communication device with a list of authenticated vendors in a geographic region proximate an initial location of the wireless communication device upon completion of the initial registration.

15. The method of claim 1, further comprising providing the wireless communication device with an updated list of authenticated vendors in the geographic region proximate the present location of the wireless communication device in response to the authentication request if the present location of the wireless communication device is different from the initial location of the wireless communication device.

16. The method of claim 1 wherein the authentication request from the wireless communication device comprises a device identification code that is stored in association with the wireless communication device, the method further comprising:

receiving a new authentication request from a wireless communication device at a wireless access point when the wireless communication device is at a new location;

determining the new location of the wireless communication device;

using the stored device identification code to authenticate the wireless communication device; and

upon authentication of the wireless communication device, providing the wireless communication device with a list of authenticated vendors in a geographic region proximate the new location of the wireless communication device.

17. The method of claim 1 wherein the message data is video data and the wireless access point provides video data to the authenticated wireless communication device.

18. The method of claim 1 wherein the authenticated wireless communication device communicates with an authenticated vendor to place an order for goods or services.

19. The method of claim 18 wherein the authenticated wireless communication device provides seating data to permit the delivery of the ordered goods or services from the authenticated vendor.

20. The method of claim 1 wherein a plurality of access points are distributed throughout a cruise ship and the list of authenticated vendors comprises vendors on the cruise ship and vendors at a port of call.

21. A method for device authentication in a wireless communication network comprising:

temporarily installing a plurality of wireless access points in a venue;

coupling the plurality of access points to a portable control room;

connecting the portable control room to a central server;

receiving an authentication request from a first wireless communication device at one of the plurality of wireless access points;

in response to the authentication request, verifying an identity of the first wireless communication device with the central server; and

if the identity is verified, providing the first wireless communication device with data via one of the plurality of wireless access points.

22. The method of claim 21 wherein the data is provided to the first wireless communication device by the control room.

23. The method of claim 21 wherein the data is provided to the first wireless communication device by the central server.

24. The method of claim 21 wherein the data is provided to the first wireless communication device by a second authenticated wireless communication device.

25. The method of claim 21 wherein the data is provided to the first wireless communication device by a second wireless communication device.

26. The method of claim 24 wherein the data is provided to the first wireless communication device by the second wireless communication device using a direct communication link between the first and second wireless communication devices.

27. The method of claim 24 wherein the data is provided to the first wireless communication device by the second wireless communication device using at least one of the plurality of wireless access points.

28. The method of claim 21 wherein the data is provided to the first wireless communication device is multimedia data.

29. The method of claim 21 wherein one of the plurality of access points is suspended from a balloon.

30. A system comprising:

a plurality of wireless access points;

a storage structure configured to store a list of authenticated vendors having wireless access points;

an initial wireless network access point configured to receive an authentication request from a wireless communication device; and

a registration server configured to receive the authentication request and, in response to the authentication request, to verify an identity of the wireless communication device, and, if the identity is verified such that the wireless communication device is authenticated , to provide a portion of the list of authenticated vendors to the authenticated wireless communication device, the portion of the list of authenticated vendors indicating authenticated vendors in a geographic region proximate a present location of the authenticated wireless communication device.

31. The system of claim 30 wherein the registration server is further configured to determine the present location of the authenticated wireless communication device based on a location of the initial network access point.

32. The system of claim 30 wherein the registration server is further configured to initiate an initial registration for the wireless communication device if the identity is not verified, the initial registration request comprising a device identification code.

33. The system of claim 32 wherein the registration server is further configured to store the device identification code in association with the wireless communication device upon completion of processing the initial registration request.

34. The system of claim 32 wherein the authentication request received by the initial network access point from the wireless communication device comprises the device identification code.

35. The system of claim 32 wherein authentication request from the wireless communication device is part of the initial registration request.

36. The system of claim 30 wherein the wireless communication device is configured to block communication from a vendor not on the list of authenticated vendors.

37. The system of claim 30 wherein the registration server is further configured to provide a list of bogus vendors in the geographic region proximate the present location of the authenticated wireless communication device.

38. The system of claim 30 the initial network access point is configured to transmit the portion of the list of authenticated vendors to the authenticated wireless communication device.

39. The system of claim 30 wherein at least one of the plurality of wireless access points is further configured to transmit message data for a vendor to the authenticated wireless communication device, the message comprising vendor identification data sufficient to permit the authenticated wireless communication device to verify if the vendor is an authenticated vendor.

40. The system of claim 30 wherein selected ones of the plurality of wireless access points are further configured to transmit message data for a vendor to the authenticated wireless communication device, the message comprising vendor identification data sufficient to permit the authenticated wireless communication device to verify if the vendor is an authenticated vendor.

41. The system of claim 30 wherein selected ones of the plurality of wireless access points are further configured to transmit video data to the authenticated wireless communication device.

42. The system of claim 30 wherein one of the plurality of wireless access points is further configured to transmit an updated list of authenticated vendors in the geographic region proximate a current location of the authenticated wireless communication if the current location of the wireless communication device is different from a location of the wireless communication device proximate the initial wireless network access point.

43. The system of claim 30 wherein the initial wireless network access point is positioned at a first location during a first authentication of the wireless communication device and a second of the plurality of wireless network access points positioned at a second location remote from the first location is configured to detect a communication from the wireless communication device, the registration server being further configured to authenticate the wireless communication device at the second location based at least in part on data used to authenticate the wireless communication device at the first location.

44. The system of claim 43 wherein the second of the plurality of wireless network access points is further configured to transmit an updated list of authenticated vendors is further configured to transmit an updated list of authenticated vendors in the geographic region proximate the second location of the authenticated wireless.

45. The system of claim 43 wherein the authentication request from the wireless communication device received by the initial wireless access point at the first location comprises a device identification code, the registration server being further configured to store the received device identification code in association with the wireless communication device and to retrieve the stored device identification code to authenticate the wireless communication device at the second location.