Efficient infrastructure service discovery with security
Systems, methods, and apparatuses for efficient infrastructure service discovery with security are disclosed. In one aspect, systems and methods for advertising services available via an access point without requiring a device to connect for discovery are described. This may allow devices to determine, prior to establishing a connection with an access point, whether a desired service is offered. Further description of publication rules is provided. Service providers can use the publication rules to identify service information which may be discovered by devices based on device authentication status or other factors to allow controlled, secure discovery of the service information.
1. An apparatus for providing service information, the apparatus comprising:
a receiver configured to receive a service information query from a user equipment for a service prior to receiving an association request from the user equipment;
a transmitter; and
a service information processor configured to:
transmit, via the transmitter, a service discovery request to one or more service devices providing the service;
receive, via the receiver in response to the service discovery request, a service discovery response from a service device included in the one or more service devices providing the service, the service discovery response including a publication rule having:
a first portion identifying an authentication status,
a second portion identifying service description information to transmit to a requesting user equipment having the authentication status; and
a third portion that identifies a time during which the publication rule applies;
determine that a user equipment authentication status for the user equipment corresponds to the authentication status identified in the first portion of the publication rule;
determine that a current time is during the time which the publication rule applies; and
generate a service information response including at least a portion of the service description information
wherein the transmitter is further configured to transmit the service information response to the user equipment, wherein the service information response is transmitted prior to authenticating the user equipment.
2. The apparatus of claim 1 , wherein the service information query further includes an operator identifier, wherein the operator identifier includes one or more of a network access identifier, a roaming consortium identifier, or an operator name.
3. The apparatus of claim 1 , wherein the publication rule further includes a third portion that identifies one or more characteristics of the requesting user equipment which may receive the service description information, wherein the one or more characteristics of the requesting user equipment includes capability, bandwidth, location, accessory, or radio access technology.
4. The apparatus of claim 1 , wherein the publication rule further includes a third portion including a value indicating if the publication rule may be cached and, if so, a duration of time the publication rule may be cached for.
5. The apparatus of claim 1 , wherein the service information processor is further configured to identify the service from a plurality of services.
6. The apparatus of claim 5 , wherein the plurality of services are provided by a plurality of service providers.
7. The apparatus of claim 1 , wherein generating the service information comprises generating service information indicating no service found upon determining the authentication status of the user equipment is not included in the publication rule.
8. A method of providing service information, the method comprising:
receiving a service information query from a user equipment for a service prior to receiving an association request from the user equipment;
transmitting a service discovery request to one or more service devices providing the service;
receiving, in response to the service discovery request, a service discovery response from a service device included in the one or more service devices providing the service, the service discovery response including a publication rule having:
a first portion identifying an authentication status,
a second portion identifying service description information to transmit to a requesting user equipment having the authentication status; and
a third portion that identifies a time during which the publication rule applies;
determining that a user equipment authentication status for the user equipment corresponds to the authentication status identified in the first portion of the publication rule;
determining that a current time is during the time which the publication rule applies;
generating a service information response including at least a portion of the service information; and
transmitting the service information response to the user equipment, wherein the service information response is transmitted prior to authenticating the user equipment.
9. The method of claim 8 , wherein the service information query further includes an operator identifier, wherein the operator identifier includes one or more of a network access identifier, a roaming consortium identifier, and an operator name.
10. The method of claim 8 , wherein the publication rule further includes a third portion that identifies one or more characteristics of the requesting user equipment which may receive the service description information, wherein the one or more characteristics of the requesting user equipment includes capability, bandwidth, location, accessory, and radio access technology.
11. The method of claim 8 , wherein the publication rule further includes a third portion including a value indicating if the publication rule may be cached and, if so, a duration of time the publication rule may be cached for.
12. The method of claim 8 , wherein the service information processor is further configured to identify the service from a plurality of services provided by a plurality of service providers.
13. An apparatus for providing access to a networked service, the apparatus comprising:
a receiver configured to receive a service discovery request for the networked service from an access point providing service information to a user equipment;
a service information processor configured to
generate service information describing the networked service, the service information including a publication rule having:
a first portion identifying an authentication status,
a second portion identifying service description information to transmit to a requesting user equipment having the authentication status; and
a third portion that identifies a time during which the publication rule applies; and
determine that a current time is during the time which the publication rule applies;
a transmitter configured to transmit, in response to the service discovery request, a service discovery response including the service information to the access point providing the service information to the user equipment, wherein the service response is transmitted prior to the access point receiving an association request from the user equipment; and
a processor configured to provide the networked service to the user equipment via the access point.
14. The apparatus of claim 13 , wherein service discovery request originated with a user equipment.
15. The apparatus of claim 13 , wherein the publication rule further includes a third portion that identifies one or more characteristics of the requesting user equipment which may receive the information, the one or more characteristics of requesting user equipment including capability, bandwidth, location, accessory, or radio access technology of the requesting user equipment.
16. The apparatus of claim 13 , wherein the publication rule further includes a third portion including a value indicating if the publication rule may be cached and, if so, a duration of time the publication rule may be cached for.
17. The apparatus of claim 13 , wherein the service information processor is further configured to identify the service from a plurality of services.
18. The apparatus of claim 13 , further comprising an access proxy, the access proxy configured to obtain at least a portion of the service information from a service source, and wherein the service information processor is further configured to generate the service information based at least in part on obtained portion of the service information.
19. A method of providing access to a networked service, the method comprising:
receiving, from an access point providing service information to a user equipment, a service discovery request for the networked service;
generating service information describing the networked service, the service information including a publication rule having:
a first portion identifying an authentication status, and
a second portion identifying service description information to transmit to a requesting user equipment having the authentication status; and
a third portion that identifies a time during which the publication rule applies;
determining that a current time is during the time which the publication rule applies;
transmitting, to the access point providing the service information to the user equipment in response to the service discovery request, a service discovery response including the service information, wherein the service response is transmitted prior to the access point receiving an association request from the user equipment; and
providing the networked service to the user equipment via the access point.
20. The method of claim 19 , wherein service discovery request originated with a user equipment.
21. The method of claim 19 , wherein the publication rule further includes a third portion that identifies one or more characteristics of the requesting user equipment which may receive the information, the one or more characteristics of requesting user equipment including capability, bandwidth, location, accessory, or radio access technology of the requesting user equipment.
22. The method of claim 19 , wherein the publication rule further includes a third portion including a value indicating if the publication rule may be cached and, if so, a duration of time the publication rule may be cached for.
23. The method of claim 19 , wherein the service information processor is further configured to identify the service from a plurality of services.
24. The method of claim 19 , further comprising obtaining at least a portion of the service information from a service source, and wherein said generating of the service information based at least in part on the obtained portion of the service information.