Securing public WLAN hotspot network access

1. A computer implemented method for securing public hotspot communications comprising:

specifying, by one or more computer processors, a service set identifier (SSID) network security setting;

creating by one or more computer processors, a public-private key pair;

deriving, by one or more computer processors, an SSID name using the public-private key pair;

configuring, by the one or more computer processors, an SSID network;

establishing, by the one or more computer processors, a connection with a client;

receiving, by one or more computer processors, a request from a public unsecured network access point after the client has travelled beyond a range of the SSID network;

responsive to receiving the request from the public unsecured network access point after the client has travelled beyond the range of the SSID network, sending, by one or more computer processors, an authentication message to the public unsecured access point, wherein the authentication message comprises the SSID, the public key and a digital signature derived from a hash of a combination of the SSID and the pubic key;

responsive to sending the authentication message to the public unsecured access point, receiving, by one or more computer processors, SSID configuration information from the client through the public unsecured network access point, wherein the SSID configuration information comprises the SSID network security setting;

associating, by one or more computer processors, the SSID network and the public unsecured network access point; and

receiving, by one or more computer processors, data from the client through the public unsecured network access point.

2. The computer implemented method according to claim 1 wherein configuring an SSID network comprises configuring an SSID network using the SSID name and specified network security setting.

3. The computer implemented method according to claim 1 further comprising registering the SSID name by one or more computer processors.

4. The computer implemented method according to claim 1 further comprising:

providing, by one or more computer processors, the client the SSID name and network security settings; and

receiving, by one or more computer processors, a network connection request from the client.

5. The computer implemented method according to claim 1 further comprising:

receiving, by one or more computer processors, encrypted data from the client;

decrypting, by one or more computer processors, the encrypted data;

sending, by one or more computer processors, decrypted data to a network element;

receiving, by one or more computer processors, a response from the network element; and

sending, by one or more computer processors, the response to the client.

6. The computer implemented method according to claim 5 further comprising one or more computer processors encrypting the response and sending the response to the client.

7. A computer program product for distributing software, the computer program product comprising one or more computer readable storage devices and program instructions stored on the one or more computer readable storage devices, the stored program instructions comprising:

program instructions for specifying a service set identifier (SSID) security setting;

program instructions for generating a public-private key pair;

program instructions for deriving an SSID name using the public-private key pair;

program instructions for configuring an SSID network;

program instructions for establishing a connection with a client;

program instructions for receiving a request from a public network access point after the client has travelled beyond a range of the SSID network;

program instructions for sending an authentication message comprising the SSID, the public key, and a digital signature derived from a hash of a combination of the SSID and the public key, to the public unsecured access point in response to receiving the request from the public unsecured network access point after the client has travelled beyond the range of the SSID network;

program instructions for receiving SSID configuration information comprising the SSID network security setting from the client through the public unsecured network access point in response to sending the authentication message to the public unsecured access point;

program instructions for associating the SSID network and the public unsecured network access point; and

program instructions for receiving data from the client through the public unsecured network access point.

8. The computer program product according to claim 7 , wherein the stored program instructions for configuring an SSID network comprise program instructions for configuring an SSID network using the SSID name and specified network security setting.

9. The computer program product according to claim 7 , the stored program instructions further comprising program instructions for registering the SSID name.

10. The computer program product according to claim 7 , the stored program instructions further comprising:

program instructions for providing the client an SSID name and network security setting; and

program instructions for receiving a network connection request from the client.

11. The computer program product according to claim 7 , the stored program instructions further comprising:

program instructions for receiving encrypted data from client;

program instructions for decrypting received data;

program instructions for sending decrypted data to a network element;

program instructions for receiving a response from the network element; and

program instructions for sending the response to the client.

12. The computer program product according to claim 11 , the stored program instructions further comprising program instructions for encrypting the response and sending the response to the client.

13. A computer system for distributing software, the computer system comprising:

one or more computer processors;

one or more computer readable storage devices;

program instructions stored on the one or more computer readable storage devices for execution by the at least on computer processor, the stored program instructions comprising:

program instructions for specifying a service set identifier (SSID) security setting;

program instructions for generating a public-private key pair;

program instructions for deriving an SSID name using the public-private key pair;

program instructions for configuring an SSID network;

program instructions for establishing a connection with a client;

program instructions for receiving a request from a public unsecured network access point after the client has travelled beyond a range of the SSID network;

program instructions for sending an authentication message comprising the SSID, the public key and a digital signature derived from a hash of a combination of the SSID and the public key, to the public unsecured access point in response to receiving the request from the public unsecured network access point after the client has travelled beyond the range of the SSID network;

program instructions for receiving SSID configuration information comprising the SSID network security setting from the client through the public unsecured network access point in response to sending the authentication message to the public unsecured access point;

program instructions for associating the SSID network and the public unsecured network access point; and

program instructions for receiving data from the client through the public unsecured network access point.

14. The computer system according to claim 13 , wherein the stored program instructions for creating an SSID network comprise program instructions for creating an SSID network using the SSID name and specified network security setting.

15. The computer system according to claim 13 , the stored program instructions further comprising program instructions for registering the SSID name.

16. The computer system according to claim 13 , the stored program instructions further comprising:

program instructions for providing the client the SSID name and network security setting to the client; and

program instructions for receiving a network connection request from the client.

17. The computer system according to claim 13 , the stored program instructions further comprising:

program instructions for receiving encrypted data from the client;

program instructions for decrypting received data;

program instructions for sending decrypted data to a network element;

program instructions for receiving a response from the network element; and

program instructions for sending the response to the client.