MANAGEMENT OF ACCESS TO SERVICE IN AN ACCESS POINT

• US 20130295881A1
• Filed: 07/03/2013
• Published: 11/07/2013
• Est. Priority Date: 10/15/2009
• Status: Active Grant

• Current Assignee: AT&T Intellectual Property I LP (AT&T, Inc.)
• Original Assignee: AT&T Intellectual Property I LP (AT&T, Inc.)
• Inventors: Wohlert, Randolph, Majmundar, Milap
• Granted Patent: US 8,856,878 B2
• Time in Patent Office: Days
• US Class Current: 455/410
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/0861 using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231
• CPC Class Codes: H04L 63/101 Access control lists [ACL]
• CPC Class Codes: H04W 12/068 using credential vaults, e.g. password manager applications or one time password [OTP] applications
• CPC Class Codes: H04W 12/069 using certificates or pre-shared keys
• CPC Class Codes: H04W 12/082 using revocation of authorisation
• CPC Class Codes: H04W 48/16 Discovering, processing access restriction or access information
• CPC Class Codes: H04W 84/045 using private Base Stations, e.g. femto Base Stations, home Node B
• CPC Class Codes: H04W 88/08 Access point devices

Abstract

System(s) and method(s) are provided to configure access rights to wireless resources and telecommunication service(s) supplied through a set of access points (APs). Access to wireless resources is authorized by access attributes in access control list(s) (ACL(s)) while a profile of service attributes linked to the ACL(s) regulate provision of telecommunication service(s). Access and service attributes can be automatically or dynamically configured, at least in part, in response to changes in data that directly or indirectly affects an operation environment in which the set of APs is deployed. Automatic or dynamic configuration of access or service attributes enable control or coordination of wireless service provided through the set of APs; degree of control or coordination is determined at least in part by enablement or disablement of disparate services for disparate devices at disparate access points at disparate times and with disparate service priority.

Claims

1. An access point device, comprising:

a memory to store instructions; and

a processor, communicatively coupled to the memory, that facilitates execution of the instructions to perform operations, comprising;

receiving first access control data, wherein the first access control data defines a first set of devices authorized to access a set of network devices of a network via the access point device;

controlling access to the set of network devices based on the first access control data;

receiving second access control data, wherein the second access control data defines a second set of devices authorized to access the set of network devices via the access point device;

replacing the first access control data with the second access control data in response to the receiving the second access control data; and

controlling access to the set of network devices based on the second access control data.

2. The access point device of claim 1, wherein the operations further comprise:

validating a credential of a mobile device requesting establishment of attachment signaling with the access point device based on the second access control data;

in response to the credential of the mobile device failing the validating, forwarding the credential of the device to an access point management system;

receiving, from the access point management system, validation data representative of an indication of a successful validation of the credential of the mobile device based on third access control data;

replacing the second access control data with the third access control data in response to receiving the third access control data from the access point management system; and

controlling access to the set of network devices based on the third access control data.

3. The access point device of claim 2, wherein the third access control data defines a third set of devices authorized to access the set of network devices via the access point device.

4. The access point device of claim 1, wherein the first access control data further defines first network service parameters for respective devices of the first set of devices and wherein the second access control data further defines second network service parameters for respective devices of the second set of devices.

5. The access point device of claim 1, wherein the first access control data further defines network service parameters for respective devices of the first set of devices

6. The access point device of claim 5, wherein the network service parameters define levels of service to provide to the respective devices.

7. The access point device of claim 5, wherein at least two devices of the first set of devices are associated with different network service parameters.

8. A method, comprising:

determining, by a system comprising a processor, a change has occurred to first access control data based on information stored in an access information data store, wherein the first access control data defines a first set of devices authorized to access a network device of a network via an access point device;

generating, by the system, second access control data based on the change, wherein the second access control data defines a second set of devices authorized to access the network device via the access point device; and

initiating, by the system, transmission of the second access control data to the access point device.

9. The method of claim 8, further comprising:

initiating, by the system, another transmission to the access point device of a request to replace the first access control data with the second access control data in memory associated with the access point device.

10. The method of claim 8, wherein the information stored in the access information data store comprises information defining devices authorized to access the network device via the access point and the information is updateable according to a schedule.

11. The method of claim 10, further comprising:

monitoring, by the system, the information of the access information data store, wherein the determining comprises determining the change has occurred to the first access control data based on the monitoring.

12. The method of claim 8, further comprising:

receiving, by the system, a notification regarding the change to the first access control data based on the information stored in the access information data store, wherein the determining comprises determining the change has occurred to the first access control data in response to the receiving the notification.

13. The method of claim 8, wherein the first access control data further defines first network service parameters for first respective devices included in the first set of devices and the second access control data further defines second network service parameters for second respective devices included in the second set of devices.

14. The method of claim 13, wherein the first and second network service parameters define levels of service to provide to the first and second respective devices included in the first and second sets of devices, respectively.

15. A computer readable storage device comprising computer executable instructions that, in response to execution, cause an access point device comprising a processor to perform operations, the operations comprising:

identifying a change to first access control data based on information stored in an access information data store, wherein the first access control data defines a first set of devices authorized to access a set of network devices via the access point device and network service parameters associated with provision of service to respective devices of the first set of devices via the access point device;

generating second access control data based on the change, wherein the second access control data comprises an update to the network service parameters; and

responsive to receiving the second access control data, sending the second access control data to the access point device for control of access to the set of network devices based on the second access control data.

16. The computer readable storage device of claim 15, the operations further comprising:

sending, to the access point device, a request to replace the first access control data with the second access control data in memory associated with the access point device.

17. The computer readable storage device of claim 15, wherein the information stored in the access information data store comprises first information defining devices authorized to access the set of network devices via the access point device and second information defining service parameters associated with provision of service to the devices via the access point device, respectively, wherein the information is updated multiple times.

18. The computer readable storage device of claim 17, wherein the operations further comprise:

monitoring the information of the access information data store, wherein the identifying the change comprises identifying the change to first access control data based on the monitoring.

19. The computer readable storage device of claim 15, wherein the identifying the change comprises identifying the change in response to receiving a notification regarding the change to the first access control data based on the information stored in the access information data store.

20. The computer readable storage device of claim 15, wherein the update to the network service parameters comprises a first change in level of service to provide to a first device of the first set of devices and a second change in level of service to provide to a second device of the first set of devices.