Method and system for provisioning device specific WLAN credentials
A method at an electronic device, the method including initiating authentication with a network through a network element; providing a configuration request, the configuration request including an attribute set for the electronic device; and receiving a configuration response, the configuration response including a certificate or credential for future authentication with the network.
1. A method at an electronic device, the method comprising:
initiating authentication with a network through a network element;
providing a Device Provisioning Protocol (DPP) request to a server of the network, the DPP request including an attribute set for the electronic device, wherein the attribute set contains a global Media Access Control (MAC) address of the electronic device or a hash of the global MAC address of the electronic device;
receiving a DPP response from the server of the network, the DPP response including a certificate or credential for future authentication with the network, wherein the certificate or credential includes a hash of at least a portion of the attribute set;
obtaining a new MAC address, wherein the obtaining comprises choosing a random MAC address;
sending a request to find a connection point, the request comprising the new MAC address;
receiving a response to the request; and
providing the certificate or credential to the network for authentication;
wherein the certificate or credential is used to map the new MAC address to the electronic device.
2. The method of claim 1 , wherein the attribute set contains a unique identifier for the electronic device.
3. The method of claim 2 , wherein the identifier is unique for one or more of a type of the electronic device; for the network operator; for a Wi-Fi operator; for a Carrier operator; for a network equipment manufacturer; or for an equipment vendor.
4. The method of claim 1 , wherein the attribute set includes a Wi-Fi client class for the electronic device.
5. The method of claim 1 , wherein the network is a Wi-Fi network.
6. The method of claim 1 , further comprising providing the certificate or credential to a second electronic device associated with the electronic device for use by the second electronic device when authenticating to the network.
7. An electronic device comprising:
a processor; and
a communications subsystem,
wherein the electronic device is configured to:
initiate authentication with a network through a network element;
provide a Device Provisioning Protocol (DPP) request to a server of the network, the DPP request including an attribute set for the electronic device, wherein the attribute set contains a global Media Access Control (MAC) address of the electronic device or a hash of the global MAC address of the electronic device;
receive a DPP response from the server of the network, the DPP response including a certificate or credential for future authentication with the network, wherein the certificate or credential includes a hash of at least a portion of the attribute set;
obtain a new MAC address, wherein the obtaining comprises choosing a random MAC address;
send a request to find a connection point, the request comprising the new MAC address;
receive a response to the request from the network; and
provide the certificate or credential to the network for authentication;
wherein the certificate or credential is used to map the new MAC address to the electronic device.
8. The electronic device of claim 7 , wherein the attribute set contains a unique identifier for the electronic device.
9. The electronic device of claim 8 , wherein the identifier is unique for one or more of a type of the electronic device; for the network operator; for a Wi-Fi operator; for a Carrier operator; for a network equipment manufacturer; or for an equipment vendor.
10. The electronic device of claim 7 , wherein the attribute set includes a Wi-Fi client class for the electronic device.
11. The electronic device of claim 7 , wherein the network is a Wi-Fi network.
12. The electronic device of claim 7 , wherein the electronic device is further configured to provide the certificate or credential to a second electronic device associated with the electronic device for use by the second electronic device when authenticating to the network.
13. A non-transitory computer readable medium for storing instruction code, which, when executed by a processor of an electronic device cause the electronic device to:
initiate authentication with a network through a network element;
provide a Device Provisioning Protocol (DPP) request to a server of the network, the DPP request including an attribute set for the electronic device, wherein the attribute set contains a global Media Access Control (MAC) address of the electronic device or a hash of the global MAC address of the electronic device;
receive a DPP response from the server of the network, the DPP response including a certificate or credential for future authentication with the network, wherein the certificate or credential includes a hash of at least a portion of the attribute set;
obtain a new MAC address, wherein the obtaining comprises choosing a random MAC address;
send a request to find a connection point, the request comprising the new MAC address;
receive a response to the request from the network; and
provide the certificate or credential to the network for authentication;
wherein the certificate or credential is used to map the new MAC address to the electronic device.