Granted Patent B2

US 9,548,977 · App. 13/514,290 · Granted Jan 17, 2017

Abstract

Claims (55)

1. A method for performing network, capability, and service discovery, the method comprising:

providing, when an authentication is to be performed, for transmission of a request for signed access point information, wherein the request is provided, by a user equipment, for transmission prior to the authentication with an access point;

providing, when the authentication is not to be performed, for transmission of the request for the signed access point information, wherein the request is provided, by the user equipment, prior to associating with the access point, wherein the signed access point information includes at least one of a service set identifier, a media access control address, a uniform resource identifier, a services list, a network access identifier realm list, or a fully qualified domain name list, the request for the signed access point information including a random number and at least a vendor specific attribute according to the standard of Wi-Fi Alliance;

receiving, by the user equipment, a response comprising the signed access point information, the response being received in response to the request and including a signed identification, a signed capability, and a signed service information of the access point, the random number of the request, and at least the vendor specific attribute according to the standard of Wi-Fi Alliance for verification prior to authentication with the access point when authentication is performed or prior to associating with the access point when authentication is not performed; and

verifying, by the user equipment, the signed access point information using a digital certificate.

2. The method of claim 1 , wherein the request for the signed access point information comprises one or more identifiers, and wherein each of the one or more identifiers corresponds to a type of requested access point information.

3. The method of claim 1 , wherein the verifying the signed access point information further comprises:

verifying a signature of an issuer of the digital certificate; and

using information in the digital certificate to verify the signed access point information.

4. The method of claim 1 , further comprising:

selecting an access point for communication based at least in part on the verified signed access point information.

5. An apparatus comprising:

at least one processor; and

at least one memory including computer program code, the at least one memory and the computer program code configured to, with the at least one processor, cause the apparatus to perform at least the following:

provide, when an authentication is to be performed, for transmission of a request for signed access point information, wherein the request is provided, by a user equipment, for transmission prior to the authentication with an access point;

provide, when the authentication is not to be performed, for transmission of the request for the signed access point information, wherein the request is provided, by the user equipment, prior to associating with the access point, wherein the signed access point information comprises at least one of a service set identifier, media access control address, uniform resource identifier, services list, network access identifier realm list, or fully qualified domain name list, the request for the signed access point information including a random number and at least a vendor specific attribute according to the standard of Wi-Fi Alliance;

receive, by the user equipment, a response comprising the signed access point information, the response being received in response to the request and including a signed identification, a signed capability, and a signed service information of the access point, the random number of the request, and at least the vendor specific attribute according to the standard of Wi-Fi Alliance for verification prior to authentication with the access point when authentication is performed or prior to associating with the access point when authentication is not performed; and

verify, by the user equipment, the signed access point information using a digital certificate.

6. The apparatus of claim 5 , wherein the request for the signed access point information comprises one or more identifiers, and wherein each of the one or more identifiers corresponds to a type of requested access point information.

7. The apparatus of claim 5 , wherein in order to verify the signed access point information, the at least one memory and the computer program code are further configured to, with the at least one processor, cause the apparatus to:

verify a signature of an issuer of the digital certificate; and

use information in the digital certificate to verify the signed access point information.

8. The apparatus of claim 5 , wherein in order to verify the signed access point information, the at least one memory and the computer program code are further configured to, with the at least one processor, cause the apparatus to:

verify the signed access point information using a public key infrastructure.

9. The apparatus of claim 5 , wherein the at least one memory and the computer program code are further configured to, with the at least one processor, cause the apparatus to:

select an access point for communication based at least in part on the verified signed access point information.

10. A non-transitory computer-readable storage medium including computer-readable program code, which when executed by at least one processor provides operations comprising:

providing, when an authentication is to be performed, for transmission of a request for signed access point information, wherein the request is provided, by a user equipment, for transmission prior to the authentication with an access point;

providing, when the authentication is not to be performed, for transmission of the request for the signed access point information, wherein the request is provided, by the user equipment, prior to associating with the access point, wherein the signed access point information includes at least one of a service set identifier, a media access control address, a uniform resource identifier, a services list, a network access identifier realm list, or a fully qualified domain name list, the request for the signed access point information including a random number and at least a vendor specific attribute according to the standard of Wi-Fi Alliance;

receiving, by the user equipment, a response comprising the signed access point information, the response being received in response to the request and including a signed identification, a signed capability, a signed service information of the access point, the random number of the request, and at least the vendor specific attribute according to the standard of Wi-Fi Alliance for verification prior to authentication with the access point when authentication is performed or prior to associating with the access point when authentication is not performed; and

verifying, by the user equipment, the signed access point information using a digital certificate.

11. An apparatus comprising:

at least one processor; and

at least one memory including computer program code, the at least one memory and the computer program code configured to, with the at least one processor, cause the apparatus to perform at least the following:

receive, when an authentication is to be performed, a request for signed access point information, wherein the request is received, by an access point, prior to authentication; receive, when the authentication is not to be performed, the request for the signed access point information, wherein the request is received, by the access point, prior to association, wherein the signed access point information comprises at least one of a service set identifier, media access control address, uniform resource identifier, services list, network access identifier realm list, or fully qualified domain name list, the request for the signed access point information including a random number and at least a vendor specific attribute according to the standard of Wi-Fi Alliance;

sign, by the access point, the requested access point information, the requested access point information being received in response to the request and including a signed identification, a signed capability, and a signed service information of the access point, the random number of the request, and at least the vendor specific attribute according to the standard of Wi-Fi Alliance for verification prior to authentication with the access point when authentication is performed or prior to associating with the access point when authentication is not performed;

build, by the access point, a response to the request comprising the signed access point information; and

provide, by the access point, for transmission of the response.

12. The apparatus of claim 11 , the apparatus further comprises:

sign the requested access point information using information in a digital certificate.

13. An apparatus comprising:

at least one processor; and

at least one memory including computer program code, the at least one memory and the computer program code configured to, with the at least one processor, cause the apparatus to perform at least the following:

receive, when an authentication is to be performed, a request for signed access point information, wherein the request is received, by an access point, prior to authentication;

receive, when the authentication is not to be performed, the request for the signed access point information, wherein the request is received, by the access point, prior to association, wherein the signed access point information comprises at least one of a service set identifier, media access control address, uniform resource identifier, services list, network access identifier realm list, or fully qualified domain name list, the request for the signed access point information including a random number and at least a vendor specific attribute according to the standard of Wi-Fi Alliance;

provide, by the access point, for transmission of the request to a third party entity, wherein the request is provided for transmission to the third party entity over a secure connection;

receive, by the access point, a response to the request comprising the signed access point information from the third party entity, wherein the response is received from the third party entity over a secure connection, the signed access point information being provided in response to the request and including a signed identification, a signed capability, and a signed service information of the access point, the random number of the request, and at least the vendor specific attribute according to the standard of Wi-Fi Alliance for verification prior to authentication with the access point when authentication is performed or prior to associating with the access point when authentication is not performed; and

provide, by the access point, for transmission of the response.

14. The apparatus of claim 13 , wherein the signed access point information from the third party entity is signed using information in a digital certificate.

15. A method for performing network, capability, and service discovery, the method comprising:

receiving, when an authentication is to be performed, a request for signed access point information, wherein the request is received, by an access point, prior to authentication;

receiving, when the authentication is not to be performed, the request for the signed access point information, wherein the request is received, by the access point, prior to association, wherein the signed access point information comprises at least one of a service set identifier, media access control address, uniform resource identifier, services list, network access identifier realm list, or fully qualified domain name list, the request for the signed access point information including a random number and at least a vendor specific attribute according to the standard of Wi-Fi Alliance;

providing, by the access point, for transmission of the request to a third party entity, wherein the request is provided for transmission to the third party entity over a secure connection;

receiving, by the access point, a response to the request comprising the signed access point information from the third party entity, wherein the response is received from the third party entity over a secure connection, the signed access point information being provided in response to the request and including a signed identification, a signed capability, and a signed service information of the access point, the random number of the request, and at least the vendor specific attribute according to the standard of Wi-Fi Alliance for verification prior to authentication with the access point when authentication is performed or prior to associating with the access point when authentication is not performed; and

providing, by the access point, for transmission of the response.

Assignments (8)