MANAGEMENT OF ACCESS TO SERVICE IN AN ACCESS POINT

• US 20170041797A1
• Filed: 10/21/2016
• Published: 02/09/2017
• Est. Priority Date: 10/15/2009
• Status: Active Grant

• Current Assignee: AT&T Intellectual Property I LP (AT&T, Inc.)
• Original Assignee: AT&T Intellectual Property I LP (AT&T, Inc.)
• Inventors: Wohlert, Randolph, Majmundar, Milap
• Granted Patent: US 10,645,582 B2
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/0861 using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231
• CPC Class Codes: H04L 63/101 Access control lists [ACL]
• CPC Class Codes: H04W 12/068 using credential vaults, e.g. password manager applications or one time password [OTP] applications
• CPC Class Codes: H04W 12/069 using certificates or pre-shared keys
• CPC Class Codes: H04W 12/082 using revocation of authorisation
• CPC Class Codes: H04W 48/16 Discovering, processing access restriction or access information
• CPC Class Codes: H04W 84/045 using private Base Stations, e.g. femto Base Stations, home Node B
• CPC Class Codes: H04W 88/08 Access point devices

Abstract

Access rights to wireless resources and telecommunication service(s) supplied through a set of access points (APs) are configured. Access to wireless resources is authorized by access attributes in access control list(s) (ACL(s)) while a profile of service attributes linked to the ACL(s) regulate provision of telecommunication service(s). Access and service attributes can be automatically or dynamically configured, at least in part, in response to changes in data that directly or indirectly affects an operation environment in which the set of APs is deployed. Automatic or dynamic configuration of access or service attributes enable control or coordination of wireless service provided through the set of APs; degree of control or coordination is determined at least in part by enablement or disablement of disparate services for disparate devices at disparate access points at disparate times and with disparate service priority.

Claims

1. A system, comprising:

a processor; and

a memory that stores executable instructions that, when executed by the processor, facilitate performance of operations, comprising;

receiving request data indicative of a request from a mobile device to access a network device of a network via the system;

decoding the request data to determine credential data indicative of a credential associated with the mobile device;

determining whether the mobile device is authorized to access the network device of the network via the system based on the credential data and first access data that defines first mobile devices authorized to access the network device via the system;

forwarding the credential data of the mobile device to a server device in response to a first determination, based on the credential data and the first access data, that the mobile device is not authorized to access the network device via the system;

receiving second access data from the server device in response to a second determination, based on the credential data, that the mobile device is authorized to access the network device of the network via the system, wherein the second access data defines second mobile devices authorized to access the network device of the network via the system; and

providing the mobile device access to the network device via the system based on the second access data.

2. The system of claim 1, wherein the operations further comprise:

receiving the first access data from a first storage device of the system; and

receiving the second access data from a second storage device of the server device.

3. The system of claim 2, wherein the operations further comprise:

replacing the first access data stored in the first storage device with the second access data received from the second storage device of the server device.

4. The system of claim 1, wherein the providing comprises providing the mobile device the access to the network device of the network based on an interval of time defined by the second access data received from the server device.

5. The system of claim 1, wherein the providing comprises providing the mobile device the access to the network device of the network based on service attribute data defined by the second access data, and wherein the service attribute data is indicative of service attributes that regulate access to wireless resources for the second mobile devices.

6. The system of claim 1, wherein the providing comprises providing the mobile device the access to the network device of the network based on priority data defined by the second access data, and wherein the priority data is indicative of a priority ranking for the mobile device to access wireless resources via the system.

7. The system of claim 6, wherein the providing comprises providing the mobile device the access to the network device of the network based on access quality data indicative of a quality of a service profile for the mobile device with respect to the wireless resources.

8. The system of claim 1, wherein the providing comprises providing the mobile device the access to the network device of the network based on data provided by a source device communicatively coupled to the server device.

9. The system of claim 1, wherein the providing comprises providing the mobile device the access to the network device of the network based on service data indicative of network service parameters for respective mobile devices of the second mobile devices.

10. A method, comprising:

receiving, by an access point device comprising a processor, a signal indicative of a request from a mobile device to access a network device of a communication network via the access point device;

decoding, by the access point device, the signal to determine credential data indicative of a credential for the mobile device;

determining, by the access point device, whether the mobile device is authorized to access the network device via the access point device based on the credential data and first access data that defines first mobile devices authorized to access the network device;

transmitting, by the access point device, the credential data of the mobile device to a server device in response to a first determination, based on the credential data and the first access data, that the mobile device is not authorized to access the network device;

receiving, by the access point device, second access data from the server device in response to a second determination, based on the credential data, that the mobile device is authorized to access the network device of the communication network via the access point device, wherein the second access data defines second mobile devices authorized to access the network device of the communication network via the access point device; and

authorizing, by the access point device, the mobile device to access the network device based on the second access data.

11. The method of claim 10, further comprising:

receiving, by the access point device, the first access data from a first storage device of the access point device; and

receiving, by the access point device, the second access data from a second storage device of the server device.

12. The method of claim 10, further comprising:

replacing, by the access point device, the first access data stored in the first storage device with the second access data received from the second storage device to facilitate the authorizing of the mobile device.

13. The method of claim 10, wherein the authorizing comprises authorizing the mobile device to access the network device in response to a third determination that the mobile device is included in the second mobile devices.

14. The method of claim 10, wherein the authorizing comprises authorizing the mobile device to access the network device based on an interval of time defined by the second access data received from the server device.

15. The method of claim 10, wherein the authorizing comprises authorizing the mobile device to access the network device based on service attribute data defined by the second access data, and wherein the service attribute data is indicative of service attributes that regulate access to communication resources for the second mobile devices.

16. The method of claim 10, wherein the authorizing comprises authorizing the mobile device to access the network device based on priority data defined by the second access data, and wherein the priority data is indicative of a priority ranking for the mobile device to access wireless resources via the access point device.

17. The method of claim 10, wherein the authorizing comprises authorizing the mobile device to access the network device based on access quality data indicative of a quality of a service profile for the mobile device with respect to wireless resources associated with the access point device.

18. A machine-readable storage medium comprising executable instructions that, when executed by a processor, facilitate performance of operations, comprising:

receiving request data indicative of a request from a mobile device to access a network device of a telecommunication network via an access point device;

decoding the request data to determine credential data indicative of a credential for the mobile device;

determining whether the mobile device is authorized to access the network device via the access point device based on the credential data and first access data that defines first mobile devices authorized to access the network device via the access point device;

sending the credential data of the mobile device to a server device in response to a first determination, based on the credential data and the first access data, that the mobile device is not authorized to access the network device via the access point device;

receiving second access data from the server device in response to a second determination, based on the credential data, that the mobile device is authorized to access the network device of the telecommunication network via the access point device, wherein the second access data defines second mobile devices authorized to access the network device of the telecommunication network via the access point device; and

permitting, based on the second access data, the mobile device to access to the network device via the access point device.

19. The machine-readable storage medium of claim 18, wherein the operations further comprise:

receiving the first access data from a first storage device of the access point device; and

receiving the second access data from a second storage device of the server device.

20. The machine-readable storage medium of claim 18, wherein the operations further comprise:

replacing the first access data stored in the first storage device with the second access data.