Online signup provisioning techniques for hotspot connections

An apparatus of a station (STA), the apparatus comprising:

• memory;
• and
• processing circuitry coupled to the memory, the processing circuitry configured to:
• initiate a Transport Layer Security (TLS) session with an online signup (OSU) server;
• encode a device management (DM) package 1 for transmission to the OSU server, the DM package 1 including an indication that the apparatus is contacting the OSU server to establish a new subscription;
• and
• decode a DM package 2 received from the OSU server in response to the DM package 1, the DM package 2 including a universal resource indicator (URI), the URI including a key, the key to link an HTTPS session with the TLS session, wherein the HTTPS session is used to establish a secure HTTPS connection to the URI in a browser of the STA.

A method performed by a mobile device for secure on-line sign-up and provisioning for Wi-Fi Hotspot 2.0 networks, the method comprising:

• associating with a Wi-Fi network through a Wi-Fi Hotspot;
• initiating a Transport Layer Security (TLS) session with an online signup (OSU) server;
• encoding a device management (DM) package 1 for transmission to the OSU server, the DM package 1 including an indication that the apparatus is contacting the OSU server to establish a new subscription;
• and
• decoding a DM package 2 received from the OSU server in response to the DM package 1, the DM package 2 including a universal resource indicator (URI), the URI including a key, the key to link an HTTPS session with the TLS session, wherein the HTTPS session is used to establish a secure HTTPS connection to the URI in a browser of the mobile device.

A mobile device comprising:

• a transceiver and an application processor configured to:
• associate with a Wi-Fi network through a Wi-Fi Hotspot;
• initiate a Transport Layer Security (TLS) session with an online signup (OSU) server;
• encode a device management (DM) package 1 for transmission to the OSU server, the DM package 1 including an indication that the apparatus is contacting the OSU server to establish a new subscription;
• and
• decode a DM package 2 received from the OSU server in response to the DM package 1, the DM package 2 including a universal resource indicator (URI), the URI including a key, the key to link an HTTPS session with the TLS session, wherein the HTTPS session is used to establish a secure HTTPS connection to the URI in a browser of the mobile device;
• a touchscreen display to display the browser to receive user input to establish a connection to the URI to exchange registration data with the OSU server to establish the new subscription;
• and
• one or more antennas coupled to the transceiver.