Seamless public wireless local area network user authentication
View Patent ↗A public wireless LAN permits receipt of non-authentication traffic, such as access information requests, from a mobile wireless communications device prior to device authentication by partially opening a controlled port within an access point. The wireless LAN re-directs such non-authentication traffic received at the AP from the mobile wireless communications to a local web server. The local web server provides reply to the mobile wireless communications device, enabling a determination by the device whether or not to request access. The device seeks access by way of an access request received at the AP. In response, the AP re-directs the access request through an uncontrolled port in the AP to an access server that authenticates device. Upon successful device authentication, the AP fully opens its controlled port to permit the exchange of traffic through that port with the mobile wireless communications device.
1. A communications network for authenticating a mobile wireless communications device, comprising:
a first server for storing non-authentication information;
a second server for authenticating the mobile wireless communications device;
at least one access point having (a) controlled port via which the access point partially opens in response to a receipt of a request for non-authentication information from a mobile wireless communications device and for directing the non-authentication information request to the first server which sends a reply for receipt by the mobile wireless communications device, and (b) an uncontrolled port through which the access point directs authentication traffic received from the mobile wireless communications device to the second server which exchanges authentication traffic with the mobile wireless communications device; and
a public wireless Local Area Network (LAN) coupled to the one AP and said first and second servers.
2. The system according to claim 1 wherein the AP utilizes a communication protocol in conformance with IEEE 802.1x.
3. The system according to claim 1 wherein the information stored in the first server includes access costs.
4. The system according to claim 1 wherein the second server authenticates the mobile wireless communications device in accordance with an Extensible Authentication Protocol (EAP).
5. The system according to claim 1 wherein the authentication traffic received at the one AP includes an identification of the authentication server.
6. An access point comprising:
(a) controlled port being partially opened in response to a receipt of a request for non-authentication information from a mobile wireless communications device and for directing the non-authentication information request to a first server which sends a reply for receipt by the mobile wireless communications device, and
(b) an uncontrolled port through which the access point directs authentication traffic received from the mobile wireless communications device to a second server, which exchanges authentication traffic with the mobile wireless communications device.
7. The system according to claim 6 wherein the access point utilizes a communication protocol in conformance with IEEE 802.1x.