SYSTEMS AND METHODS FOR PROVISIONING WI-FI DEVICES
Systems and methods are provided for automated provisioning (connection) of Wi-Fi devices to a Wi-Fi network in which another Wi-Fi device is already provisioned (connected) to the network. A non-provisioned Wi-Fi device automatically obtains Wi-Fi network security credentials from the already-provisioned Wi-Fi device, and uses the obtained credentials to connect itself to the network. In some embodiments, the only manual steps involved in provisioning the non-provisioned Wi-Fi device are (a) placing the already-provisioned Wi-Fi device into an “access point mode” (e.g., by pressing a button on the already-provisioned device) and/or (b) placing the non-provisioned Wi-Fi device into an “enrollment mode” (e.g., by powering up the non-provisioned Wi-Fi device). After these user action(s), the non-provisioned Wi-Fi device automatically obtains the Wi-Fi network security credentials (e.g., access point name and network password) from the already-provisioned Wi-Fi device and uses such credentials to automatically connect itself to the Wi-Fi network.
1 . A method for provisioning Wi-Fi devices to a Wi-Fi network, the method comprising:
connecting a first Wi-Fi device to a Wi-Fi access point using a first provisioning process;
after connecting the first Wi-Fi device to the Wi-Fi access point, connecting a second Wi-Fi device to the Wi-Fi access point by a second provisioning process, wherein the second provisioning process for the second Wi-Fi device to the Wi-Fi access point includes:
establishing a wireless communication connection between the first Wi-Fi device and the second Wi-Fi device;
the second Wi-Fi device obtaining access point authentication information from the first Wi-Fi device via the established wireless communication connection, the access point authentication information allowing authenticated connection to the Wi-Fi access point; and
the respective second Wi-Fi device using the access point authentication information received from the first Wi-Fi device to connect to the Wi-Fi access point.
2 . The method of claim 1 , wherein the second provisioning process for the second Wi-Fi device to the Wi-Fi access point further includes, prior to the second Wi-Fi device obtaining the access point authentication information from the first Wi-Fi device:
the second Wi-Fi device authenticating the first Wi-Fi device based on first device authentication information received from the first Wi-Fi device; and
the first Wi-Fi device authenticating the respective second Wi-Fi device based on second device authentication information received from the respective second Wi-Fi device.
3 . The method of claim 2 , wherein the second device authentication information comprises a digital certificate stored in the second Wi-Fi device.
4 . The method of claim 1 , wherein the first Wi-Fi device is configured to operate in both (a) a station mode in which the first Wi-Fi device acts as a slave to the Wi-Fi access point and (b) an access point mode in which the first Wi-Fi device acts as a Wi-Fi access point to the respective second Wi-Fi device to enable the transfer of the access point authentication information to the respective second Wi-Fi device for provisioning the second Wi-Fi device.
5 . The method of claim 4 , wherein the first Wi-Fi device is configured to concurrently operate in both the station mode and the access point mode.
6 . The method of claim 4 , wherein the first Wi-Fi device is configured to operate alternatively in the station mode and the access point mode.
7 . The method of claim 4 , wherein the second provisioning process for the second Wi-Fi device further includes, prior to the second Wi-Fi device obtaining the access point authentication information from the first Wi-Fi device:
the first Wi-Fi device activating the access point mode; and
the second Wi-Fi device activating an enrollment mode.
8 . The method of claim 7 , wherein activating the access point mode for the first Wi-Fi device comprises a user pressing a physical interface provided on the first Wi-Fi device.
9 . The method of claim 7 , wherein the activating of the enrollment mode of the second Wi-Fi device is performed after the activating of the access point mode of the first Wi-Fi device, and automatically triggers the second Wi-Fi device to transmits an access point probe,
wherein the access point probe transmitted by the second Wi-Fi device is received by the first Wi-Fi device in the access point mode, and
wherein the first Wi-Fi device transmits to the second Wi-Fi device a response to the access point probe.
10 . The method of claim 7 , wherein activating the enrollment mode of the second Wi-Fi device comprises powering on the second Wi-Fi device.
11 . The method of claim 7 , wherein after the activating the access point mode of the first Wi-Fi device and the activating the enrollment mode of the second Wi-Fi device, the second Wi-Fi device obtaining the access point authentication information from the first Wi-Fi device and the second Wi-Fi device using the access point authentication information to connect to the Wi-Fi access point are performed automatically without human participation.
12 . The method of claim 1 , wherein the access point authentication information is stored in the first Wi-Fi device during the first provisioning process.
13 . The method of claim 1 , wherein connecting the first Wi-Fi device to the Wi-Fi access point using the first provisioning process comprises one of:
manual entry of terminal commands;
using a mobile provisioning application to communicate access point authentication information to the first Wi-Fi device; or
using a mass storage device.
14 . A method for provisioning a second Wi-Fi device to a Wi-Fi access point of a Wi-Fi network having a first Wi-Fi device previously provisioned to the Wi-Fi access point, the method comprising:
entering the first Wi-Fi device into an access point mode allowing wireless communications with the second Wi-Fi device;
entering the second Wi-Fi device into an enrollment mode;
while the first Wi-Fi device is in the access point mode and the second Wi-Fi device is in the enrollment mode, the first and second Wi-Fi devices automatically performing a provisioning information exchange including:
establishing a wireless communication connection between the first and second Wi-Fi devices;
using the established wireless communication connection, performing a device authentication process including:
the second Wi-Fi device communicating second Wi-Fi device authentication information stored in the second Wi-Fi device to the first Wi-Fi device; and
the first Wi-Fi device authenticating the second Wi-Fi device based on the second Wi-Fi device authentication information received from the second Wi-Fi device;
after the device authentication process, the first Wi-Fi device communicating access point authentication information to the second Wi-Fi device, the access point authentication information allowing authenticated connection to the Wi-Fi access point; and
the second Wi-Fi device using the access point authentication information received from the first Wi-Fi device to connect the second Wi-Fi device to the Wi-Fi access point.
15 . The method of claim 14 , wherein the device authentication process further includes:
the first Wi-Fi device communicating first Wi-Fi device authentication information stored in the first Wi-Fi device to the second Wi-Fi device;
the second Wi-Fi device authenticating the first Wi-Fi device based on the first Wi-Fi device authentication information received from the first Wi-Fi device.
16 . The method of claim 14 , wherein the second Wi-Fi device authentication information used by the first Wi-Fi device for authenticating the second Wi-Fi device comprises a digital certificate stored in the second Wi-Fi device.
17 . The method of claim 14 , wherein entering the first Wi-Fi device into the access point mode comprises a user pressing a physical interface provided on the first Wi-Fi device.
18 . The method of claim 14 , wherein the step of entering the second Wi-Fi device into the enrollment mode is performed after the step of entering the first Wi-Fi device in the access point mode, and automatically triggers the provisioning information exchange.
19 . The method of claim 14 , wherein the step of entering the second Wi-Fi device into the enrollment mode is performed after the step of entering the first Wi-Fi device in the access point mode, and automatically triggers the second Wi-Fi device to initiate the provisioning information exchange by transmitting an access point probe,
wherein the access point probe transmitted by the second Wi-Fi device is received by the first Wi-Fi device in the access point mode, and
wherein the first Wi-Fi device transmits to the second Wi-Fi device a response to the access point probe.
20 . The method of claim 14 , wherein entering the second Wi-Fi device into an enrollment mode comprises powering on the second Wi-Fi device.
21 . The method of claim 14 , wherein after the first Wi-Fi device enters into the access point mode and the second Wi-Fi device enters into the enrollment mode, the provisioning information exchange and the connection of the second Wi-Fi device to the Wi-Fi access point are performed automatically without human participation.
22 . The method of claim 14 , wherein the access point authentication information is stored in the first Wi-Fi device during the previous provisioning of the first Wi-Fi device.
23 . A system comprising:
a Wi-Fi access point;
a first Wi-Fi device configured to be connected to the Wi-Fi access point by a first provisioning process; and
at least one second Wi-Fi device;
wherein each respective second Wi-Fi device is configured to interact with the first Wi-Fi device to connect the respective second Wi-Fi device to the Wi-Fi access point by a second provisioning process including:
the first Wi-Fi device activating an access point mode allowing wireless communications with the respective second Wi-Fi device;
the respective second Wi-Fi device activating an enrollment mode;
establishing a wireless communication connection between the first Wi-Fi device in the access point mode and the respective second Wi-Fi device in the enrollment mode;
the respective second Wi-Fi device obtaining access point authentication information from the first Wi-Fi device via the establishing wireless communication connection, the access point authentication information allowing authenticated connection to the Wi-Fi access point; and
the respective second Wi-Fi device using the access point authentication information received from the first Wi-Fi device to connect to the Wi-Fi access point.
24 . A method for provisioning Wi-Fi devices to a Wi-Fi network, comprising:
connecting a first Wi-Fi device to a Wi-Fi access point using a first provisioning process;
after connecting the first Wi-Fi device to the Wi-Fi access point, connecting at least one second Wi-Fi device to the Wi-Fi access point by a second provisioning process, wherein the second provisioning process for connecting each respective second Wi-Fi device to the Wi-Fi access point includes:
entering the first Wi-Fi device into an access point mode allowing wireless communications with other non-provisioned Wi-Fi device;
entering the respective second Wi-Fi device into an enrollment mode;
the first Wi-Fi device and the respective second Wi-Fi device automatically performing a provisioning information exchange including:
establishing a wireless communication connection between the first Wi-Fi device in the an access point mode and the respective second Wi-Fi device in the enrollment mode
using the established wireless communication connection, performing a device authentication process including:
the respective second Wi-Fi device communicating Wi-Fi device authentication information stored in the respective second Wi-Fi device to the first Wi-Fi device; and
the first Wi-Fi device authenticating the respective second Wi-Fi device based on the Wi-Fi device authentication information received from the respective second Wi-Fi device;
after the device authentication process, the first Wi-Fi device communicating access point authentication information to the respective second Wi-Fi device, the access point authentication information allowing authenticated connection to the Wi-Fi access point; and
the respective second Wi-Fi device using the access point authentication information received from the first Wi-Fi device to connect to the Wi-Fi access point.
25 . A method, comprising:
a first Wi-Fi device connecting to a Wi-Fi access point;
entering the first Wi-Fi device into an access point mode allowing wireless communications with other Wi-Fi devices; and
while the first Wi-Fi device is in the access point mode:
the first Wi-Fi device establishing a wireless communication connection with a second Wi-Fi device;
the first Wi-Fi device performing a device authentication process with the second Wi-Fi device, including:
the first Wi-Fi device receiving Wi-Fi device authentication information from the second Wi-Fi device; and
the first Wi-Fi device authenticating the second Wi-Fi device based on the Wi-Fi device authentication information received from the second Wi-Fi device;
after the device authentication process, the first Wi-Fi device communicating access point authentication information to the second Wi-Fi device, the access point authentication information allowing the second Wi-Fi device to connect to the Wi-Fi access point.
26 . A method for provisioning a second Wi-Fi device to a Wi-Fi access point of a Wi-Fi network having a first Wi-Fi device previously provisioned to the Wi-Fi access point, the method comprising:
entering the second Wi-Fi device into an enrollment mode; and
while the second Wi-Fi device is in the enrollment mode:
the second Wi-Fi device establishing a wireless communication connection with the first Wi-Fi device;
the second Wi-Fi device performing a device authentication process to authenticate itself with the first Wi-Fi device, including communicating Wi-Fi device authentication information stored in the second Wi-Fi device to the first Wi-Fi device;
in response to a successful completion of the device authentication process, the second Wi-Fi device receiving access point authentication information from the first Wi-Fi device; and
the second Wi-Fi device using the access point authentication information received from the first Wi-Fi device to connect the second Wi-Fi device to the Wi-Fi access point.