Secure provisioning methods and apparatus for mobile communication devices operating in wireless local area networks (WLANs)

1. A method for use in enabling a mobile communication device to obtain a communication service, the method comprising:

performing a scanning operation with use of a first identifier for identifying a wireless local area network (WLAN) device which is configured to operate as an access point;

communicating, in a limited RF coverage region which has a smaller RF coverage area than RF coverage areas of a plurality of access points in a WLAN network, with the WLAN device configured to operate as the access point;

while communicating with the WLAN device:

receiving, at the mobile communication device via the WLAN device, an IP address which is assigned to the mobile communication device, for establishing layer-3 communications with the WLAN network;

after the layer-3 communications are established, participating in an authentication procedure via the WLAN device; and

after positive authentication from the authentication procedure, participating in a provisioning procedure via the WLAN device for receiving information for programming in a profile in the mobile communication device, the information comprising a second identifier;

performing a scanning operation with use of the second identifier from the profile for identifying the WLAN network; and

communicating with the WLAN network identified by the second identifier for obtaining the communication service.

2. The method of claim 1 , further comprising:

sending authentication information to the WLAN device; and

after sending the authentication information, receiving an authentication response from the WLAN device.

3. The method of claim 1 , the second identifier comprises a second network identifier of the WLAN network.

4. The method of claim 1 , wherein the first identifier comprises a first network identifier and the second identifier comprises a second network identifier.

5. The method of claim 1 , wherein the information comprises a security key for use with the WLAN network.

6. The method of claim 1 , wherein the WLAN device which is configured to operate as the access point is part of the WLAN network.

7. The method of claim 1 , wherein the first identifier uniquely identifies the WLAN device over other WLAN devices.

8. The method of claim 1 , wherein the mobile communication device establishes the communication with the WLAN device in the limited RF coverage region which is formed by adaptive beamforming.

9. A mobile communication device configured to operate to obtain a communication service, the mobile communication device comprising:

one or more processors;

a wireless transceiver coupled to the one or more processors;

memory coupled to the one or more processors;

the one or more processors being configured to:

perform a scanning operation, with the wireless transceiver, using a first identifier for identifying a wireless local area network (WLAN) device which is configured to operate as an access point;

communicate, via the wireless transceiver in a limited RF coverage region which has a smaller RF coverage area than RF coverage areas of a plurality of access points in a WLAN network, with the WLAN device configured to operate as the access point;

while communicating with the WLAN device:

receive, at the mobile communication device via the WLAN device, an IP address which is assigned to the mobile communication device, for establishing layer-3 communications with the WLAN network;

after the layer-3 communications are established, participate in an authentication procedure via the WLAN device; and

after positive authentication from the authentication procedure, participate in a provisioning procedure via the WLAN device for receiving information for programming in a profile in the memory, the information comprising a second identifier;

perform a scanning operation, with the wireless transceiver, using the second identifier from the profile for identifying the WLAN network; and

communicate, via the wireless transceiver, with the WLAN network identifier by the second identifier for obtaining the communication service.

10. The mobile communication device of claim 9 , wherein the one or more processors are further configured to:

send via the wireless transceiver authentication information to the WLAN device; and

after sending the authentication information, receive via the wireless transceiver an authentication response from the WLAN device.

11. The mobile communication device of claim 9 , wherein the second identifier comprises a second network identifier of the WLAN network.

12. The mobile communication device of claim 9 , wherein the first identifier comprises a first network identifier and the second identifier comprises a second network identifier.

13. The mobile communication device of claim 9 , wherein the provisioning information comprises a security key for use with the WLAN network.

14. The mobile communication device of claim 9 , wherein the WLAN device which is configured to operate as the access point is part of the WLAN network.

15. The mobile communication device of claim 9 , wherein the first identifier uniquely identifies the WLAN device over other WLAN devices.

16. The mobile communication device of claim 9 , wherein the one or more processors are further configured to establish the communication with the WLAN device in the limited RF coverage region which is formed by adaptive beamforming.

17. A method in a wireless local area network (WLAN) device for use in enabling a mobile communication device to obtain a communication service, the method comprising:

operating as an access point;

using a first identifier for identifying the WLAN device operating as the access point;

communicating, in a limited RF coverage region which has a smaller RF coverage area than RF coverage areas of a plurality of access points in a WLAN network, with the mobile communication device;

while communicating with the mobile communication device:

sending, to the mobile communication device via the WLAN device, an IP address which is assigned to the mobile communication device, for establishing layer-3 communications between the mobile communication device and the WLAN;

after the layer-3 communications are established, participating in an authentication procedure with the mobile communication device; and

after positive authentication from the authentication procedure, participating in a provisioning procedure with the mobile communication device, for sending information for programming in the mobile communication device, the information comprising a second identifier for use in identifying the WLAN network for obtaining communication service.

18. The method of claim 17 , further comprising:

receiving authentication information from the mobile communication device; and

after receiving the authentication information, sending an authentication response to the mobile communication device.