WIRELESS NETWORK SERVICE PROVISION METHOD AND SYSTEM

• US 20160173469A1
• Filed: 12/10/2013
• Published: 06/16/2016
• Est. Priority Date: 08/30/2013
• Status: Active Grant

• Current Assignee: Beijing Zhigu RUI TUO Tech Company Limited
• Original Assignee: Beijing Zhigu RUI TUO Tech Company Limited
• Inventors: Huang, Weicai, Zhang, Hongjiang
• Granted Patent: US 9,843,567 B2
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: G06F 2221/2111 Location-sensitive, e.g. geographical location, GPS
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/0815 providing single-sign-on or federations
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 63/107 wherein the security policies are location-dependent, e.g. entities privileges depend on current location or allowing specific operations only from locally connected terminals
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/63 Location-dependent; Proximity-dependent
• CPC Class Codes: H04W 4/021 Services related to particular areas, e.g. point of interest [POI] services, venue services or geofences
• CPC Class Codes: H04W 4/025 using location based information parameters
• CPC Class Codes: H04W 4/027 using movement velocity, acceleration information

Abstract

Provided in the present invention are a wireless network service provision method and system, which relate to the technical field of network security. The method includes the steps of: automatically authenticating an object entering into a first area; when the object authenticated in the first area enters into a second area, authorizing the object to acquire a network service. By dividing an area securely used in a wireless local area network (the first area), the method and system in the embodiments of the present invention enable the object device, after automatic authentication in the area, to be directly authorized to acquire the network service in a larger area (the second area), therefore taking into account both the security and the convenience of usage of the wireless local area network.

Claims

1. A method, comprising:

performing, by a system comprising a processor, authentication on an object entering a first area; and

in response to the object passing the authentication in the first area being determined to have entered a second area, authorizing the object to obtain a network service.

2. The method according to claim 1, wherein the second area is a defined network coverage area excluding the first area.

3. The method according to claim 1, further comprising:

receiving an access request; and

determining a location of the object corresponding to the access request.

4. The method according to claim 3, wherein the determining the location comprises, in response to a signal sent by the object being determined to have been input through a specified signal interface, determining that the object is located in the first area.

5. The method according to claim 4, wherein the signal interface comprises an interface connected to at least one of a point-of-sale terminal, a mobile phone, a personal digital assistant, a personal computer, a tablet, a handheld dedicated reader, a set top box, an electronic cash register, an automatic teller machine, a public phone booth, or a security system.

6. The method according to claim 3, wherein, the determining the location comprises determining the location of the object according to positioning information of the object.

7. The method according to claim 6, wherein the positioning information comprises at least one of Global Positioning System positioning information, Assisted Global Positioning System positioning information, BeiDou navigation satellite system positioning information, Galileo positioning system information, or Global Navigation Satellite System positioning information.

8. The method according to claim 3, wherein the determining the location comprises determining the location of the object according to motion status information of the object.

9. The method according to claim 3, wherein the determining the location comprises determining the location of the object according to a transmission distance of a signal sent by the object.

10. The method according to claim 3, wherein the determining the location comprises determining the location of the object according to a magnetic field of the location of the object or an intensity of a wireless signal.

11. The method according to claim 1, further comprising:

determining whether an object entering the second area passes authentication in the first area.

12. The method according to claim 1, further comprising:

setting an authority to obtain the network service for the object.

13. The method according to claim 12, further comprising:

providing a network service according to the authority.

14. The method according to claim 1, further comprising:

canceling the authorizing of the object to obtain the network service.

15. The method according to claim 14, wherein the canceling comprises in response to the object being determined to have left the second area, canceling the authorizing of the object.

16. The method according to claim 14, wherein the canceling comprises canceling the authorizing of the object after a preset time period expires after the authorizing of the object is initiated.

17. The method according to claim 1, wherein the authentication in the first area is a password-free authentication.

18. A system, comprising:

a memory to store executable components; and

a processor, coupled to the memory, that executes or facilitates execution of the executable components, the executable components comprising;

an authentication module configured to perform automatic authentication on an object entering a first area, and authorize the object passing the authentication in the first area to obtain a network service in a second area.

19. The system according to claim 18, wherein the executable components further comprise:

an access control module configured to receive an access request; and

a positioning module configured to determine a location of the object corresponding to the access request.

20. The system according to claim 19, wherein when, in response to a main radio frequency signal of the object is being determined to be input through a specific specified signal interface, the positioning module determines is further configured to determine that the object is located in the first area.

21. The system according to claim 20, wherein further comprising:

the system comprises a specified signal interface, and the signal interface comprises comprising an interface connected to any at least one of the following terminals;

a point-of-sale terminal, a mobile phone, a personal digital assistant, a personal computer, a tablet, a handheld dedicated reader, a set top box, an electronic cash register, an automatic teller machine, a public phone booth, and or a security system.

22. The system according to claim 19, wherein the positioning module determines a is further configured to determine the location of the object according to positioning information of the object.

23. The system according to claim 20, wherein the system executable components further comprises:

comprise an Assisted Global Positioning System (A-GPS) positioning module configured to obtain positioning information of the object.

24. The system according to claim 19, wherein the positioning module determines a is further configured to determine the location of the object according to motion status information of the object.

25. The system according to claim 19, wherein the positioning module determines a is further configured to determine the location of the object according to a transmission distance of a signal sent by the object.

26. The system according to claim 19, wherein the positioning module determines a is further configured to determine the location of the object according to a magnetic field of the location of the object or an intensity of a wireless signal.

27. The system according to claim 18, wherein the executable components further comprising:

comprise;

a determining module configured to determine whether the object entering the second area passes the authentication in the first area.

28. The system according to claim 18, wherein the authentication module is further configured to set an authority to obtain the network service for the object.

29. The system according to claim 28, wherein the authentication module is further configured to provide a network service according to the authority.

30. The system according to claim 18, wherein the authentication module is further configured to cancel the authorization of the object.

31. The system according to claim 30, wherein the authentication module is further configured to cancel the authorization of the object in response to the object being determined to leave the second area.

32. The system according to claim 30, wherein the authentication module is further configured to cancel the authorization of the object after a preset time period after the authorization of the object.

33. The system according to claim 18, wherein the authentication module comprises:

a first authentication unit configured to perform the authentication on the object entering the first area; and

a second authentication unit configured to authorize the object passing the authentication in the first area to obtain the network service in the second area.

34. The system according to claim 33, wherein the first authentication unit and the second authentication unit are implemented in a device different from the system.

35. A computer readable storage device comprising executable instructions that, in response to execution, cause a system comprising a processor to perform operations, comprising:

authenticating an object entering a first area; and

in response to the object passing the authenticating in the first area being determined to have entered a second area, authorizing the object to obtain a network service.

36. The computer readable storage device of claim 35, wherein the operations further comprise:

receiving an access request; and

determining a location of the object corresponding to the access request.

37. A system, comprising:

a processor, coupled to a memory that stores executable instructions, that executes or facilitates execution of the executable instructions to at least;

perform authentication on an object entering a first area; and

authorize the object to obtain a network service in response to the object being determined to have passed the authentication in the first area and in response to the object being determined to have entered a second area.