Method, apparatuses and computer program product to provide wireless configuration
A network access device ( 130 ) is described arranged to cooperate with a configurator ( 120 ) according to a configuration protocol (DPP) that enables to configure wireless networks and wireless devices. The network access device has a transceiver ( 131 ) for wireless communication (Wi-Fi), and a processor ( 132 ) arranged to accommodate an operational network ( 161 ) arranged to enable access to an external network ( 152 ) using a network communication protocol (TCP/IP), and a configuration network ( 162 ) arranged not to provide access to the external network after configuration of the operational network. The network access device provides out-of-band (OOB) information on the configuration network for enabling the configurator to cooperate with the network access device, and accommodates, while cooperating with the configurator via the configuration network, configuration of the operational network, and configuration of the wireless communication device ( 110 ) to enable association of the wireless communication device with the operational network.
1 . A network access device for providing wireless networks, the device being arranged to cooperate with a configurator according to a configuration protocol that enables configuring of a wireless network and a wireless communication device to associate with the wireless network, the network access device comprising:
a transceiver for wireless communication with the wireless communication device of a wireless communication protocol, and
a processor configured to:
accommodate a first wireless network as an operational network, the operational network being arranged to enable access to an external network using a network communication protocol;
accommodate a second wireless network as a configuration network arranged not to provide access to the external network after configuration of the operational network;
enable establishing a configuration network connection according to the network communication protocol by association of the configurator to the configuration network;
the network access device being arranged to:
provide, using an out-of-band channel, out-of-band information on the configuration network for enabling the configurator to cooperate with the network access device,
accommodate, while cooperating with the configurator via the configuration network, configuration of the operational network, and configuration of the wireless communication device to enable association of the wireless communication device with the operational network,
provide, on the configuration network:
a configuration tunnel, the tunnel enabling messages according to the configuration protocol to be transferred via the configuration network connection (DPP over TCP/IP), and
a configuration relay arranged for relaying, via the configuration network connection, configuration messages according to the configuration protocol using the wireless communication protocol (DPP over Wi-Fi); and
the network access device being further arranged to accommodate the configuration of the operational network via the configuration tunnel, and/or the configuration of the wireless communication device via the configuration relay.
2 . The device of claim 1 wherein the configuration network is arranged to have an open SSID.
3 . The device of claim 1 , wherein the out-of-band information comprises at least one of:
a configuration network identifier for the association of the configurator to the configuration network;
relay information for accessing the configuration relay including a relay port address according to the network communication protocol;
tunnel information for accessing the configuration tunnel including a tunnel port address according to the network communication protocol.
4 . The device of claim 1 , wherein the processor is arranged to separate the operational network and the configuration network by creating at least one of:
a first virtual local area network on the operational network and a second virtual local area network on the configuration network.
5 . The device of claim 1 , wherein at least one of the network communication protocol is the transmission control protocol/internet protocol TCP/IP,
the wireless communication protocol is Wi-Fi,
the configuration protocol is the device provisioning protocol DPP,
the tunnel enables transfer of DPP messages over TCP/IP, and
the relay converts DPP messages over Wi-Fi into DPP messages over TCP/IP and vice versa.
6 . The device of claim 1 wherein the device is arranged to support at least one of Pre-Shared Keys, Simultaneous Authentication of Equals and Enterprise credentials.
7 . The device of claim 1 , wherein the device comprises a DPP controller and the DPP controller is arranged to provide its IP address for connection as a service.
8 . The device of claim 1 , wherein the configurator is arranged to cooperate with the network access device according to a configuration protocol that enables the configurator to configure wireless networks and wireless communication devices to associate with a wireless network, the configurator comprising:
a communication unit arranged to communicate according to a network communication protocol; and
a processor system arranged to establish, via the communication unit, a configuration network connection according to a network communication protocol by association of the configurator to the configuration network, the configurator being arranged to engage, while cooperating with the network access device via the configuration network, configuration of the operational network, and configuration of a wireless communication device to enable association of the wireless communication device with the operational network.
9 . The device of claim 8 , wherein the configurator comprises a configurator controller and the configuration protocol comprises a configurator interface protocol defining communication between a configurator interface and the configurator controller, wherein the configurator controller comprising a processor is configured to:
configure the operational network via a device provisioning protocol, and/or
configure the wireless communication device via a device provisioning protocol.
10 . The device of claim 8 , wherein the configurator comprises a configurator interface and the configuration protocol comprises a configurator interface protocol defining communication between the configurator interface and a configurator controller, the configurator interface comprising a configurator interface processor arranged to acquire, using an out-of-band channel, the out-of-band information on the configuration network, and to connect to the configurator controller via the communication unit for enabling the configurator to cooperate with the configurator controller using the out-of-band information.
11 . The device of claim 8 , wherein the configurator is arranged to send, in a configuration message to an Enrollee, an indication of a selection of a type of authentication and key management suite and at least one of a Pre-Shared Key and a passphrase for use by the Enrollee to associate with the operation network.
12 . The device of claim 8 , wherein the configurator is arranged to provide an indication of a TCP port in a message to the network access device.
13 . A wireless communication device for communicating in wireless networks, the device being arranged to cooperate with a configurator according to a configuration protocol, wherein the configuration protocol enables configuration of wireless networks and wireless communication devices to associate with a wireless network comprising a network access, the wireless communication device comprising:
a transceiver for wireless communication with a network access device for providing wireless networks according to a wireless communication protocol, and a processor arranged to: receive a configuration from the configurator to associate with a first wireless network as an operational network, the operational network being arranged to enable access to an external network using a network communication protocol, wherein the operational network comprises:
a configuration tunnel, the tunnel enabling messages according to the configuration protocol to be transferred via the configuration network connection (DPP over TCP/IP), and
a configuration relay arranged for relaying, via the configuration network connection, configuration messages according to the configuration protocol using the wireless communication protocol (DPP over Wi-Fi); and
the network access device being further arranged to accommodate the configuration of the operational network via the configuration tunnel, and/or the configuration of the wireless communication device via the configuration relay, and
wherein the configuration protocol includes steps to:
associate with a configuration network connection, according to the network communication protocol wherein the wireless communication device is arranged to:
communicate with the configuration network and/or the configurator using TCP/IP,
provide or to obtain, using an out-of-band channel, out-of-band information on the configuration network for enabling the configurator to cooperate with the wireless communication device, and
accommodate, while cooperating with the configurator via the configuration network, configuration of the wireless communication device to enable association of the wireless communication device with the operational network.
14 . The wireless communication device of claim 13 , wherein the wireless communication device is arranged to extract TCP/IP port information from obtained information on the configuration network.
15 . The wireless communication device of claim 13 , wherein the wireless communication device is arranged to associate with an open SSID.
16 . The wireless communication device of claim 13 , wherein the wireless communication device is arranged to use one of a Pre-Shared Key, Simultaneous Authentication of Equals or Enterprise Credentials for association with the operation network.