# US 10,313,449 B2 · Online signup provisioning techniques for hotspot connections > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 10,313,449 B2 - Document ID: US10313449B2 - Status: Granted - Kind: B2 - Application number: 15/198,090 - Filed: 2016-06-30 - Published: 2016-10-20 - Granted: 2019-06-04 - Earliest claimed: 2013-02-05 - Assignees: Intel IP Corporation - Applicants: Intel IP Corporation - Inventors: Necati Canpolat; Venkata Vallabhu; Vivek G. Gupta - Web page: https://patentgrep.com/patent/US10313449B2 ## CPC - H04L 67/141: Setup of application sessions (admission control or resource allocation in data switching networks H04L47/70) - H04L 5/0092: {Indication of how the channel is divided} - H04L 67/02: based on web technology, e.g. hypertext transfer protocol [HTTP] - H04W 4/80: Services using short range communication, e.g. near-field communication [NFC], radio-frequency identification [RFID] or low energy communication - H04W 12/04: Key management, e.g. using generic bootstrapping architecture [GBA] - H04W 12/06: Authentication - H04W 12/08: Access security - H04W 12/35: {Protecting application or service provisioning, e.g. securing SIM application provisioning} - H04W 72/23: in the downlink direction of a wireless link, i.e. towards a terminal - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) - H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72) ## Abstract Embodiments of system and method configurations for providing provisioning information to a mobile device via a wireless network access point are generally described herein. In some examples, a communication session is established between a mobile device and a service provider to obtain provisioning information for wireless network connectivity via a designated access point (e.g., a “hotspot”). A HTTP session is established within the communication session to exchange registration information via a browser of the mobile device. Provisioning information is returned within the communication session in a Subscription Management Object (MO) in response to successful completion of the HTTP session. The subscription MO is provided outside of the browser and the HTTP session (but within the communication session) using mechanisms such as OMA-DM or SOAP-XML communications. The mobile device can then utilize the provisioning information from the subscription MO to associate with an appropriate hotspot. ## Claims ### Claim 1 A non-transitory machine-readable medium that stores instructions for execution by one or more processors to configure a device to: associate with a Wi-Fi network through a Wi-Fi Hotspot; initiate a Transport Layer Security (TLS) session with an online signup (OSU) server; encode a device management (DM) package 1 for transmission to the OSU server, the DM package 1 including an indication that the apparatus is contacting the OSU server to establish a new subscription; and decode a DM package 2 received from the OSU server in response to the DM package 1, the DM package 2 including a universal resource indicator (URI), the URI including a key, the key to link an HTTPS session with the TLS session, wherein the HTTPS session is used to establish a secure HTTPS connection to the URI in a browser of the device. ### Claim 2 (depends on 1) The non-transitory machine-readable medium of claim 1, wherein the instructions further configure the device to: launch the browser on a touchscreen display to establish a connection to the URI; and exchange registration data with the OSU server to establish the new subscription. ### Claim 3 (depends on 2) The non-transitory machine-readable medium of claim 2, wherein the instructions further configure the device to: discard the key subsequent to establishing the new subscription. ### Claim 4 (depends on 2) The non-transitory machine-readable medium of claim 2, wherein exchange of DM packages is an Open Mobile Alliance (OMA) exchange. ### Claim 5 (depends on 2) The non-transitory machine-readable medium of claim 2, wherein the instructions further configure the device to: disassociate with a hotspot subsequent to establishing the new subscription; and re-associate with the hotspot to establish a Wi-Fi connection using the new subscription. ### Claim 6 (depends on 2) The non-transitory machine-readable medium of claim 2, wherein the instructions further configure the device to encode a DM package include a request that the device be notified upon completion of user input in the browser. ### Claim 7 An apparatus of a station (STA), the apparatus comprising: memory; and processing circuitry coupled to the memory, the processing circuitry configured to: initiate a Transport Layer Security (TLS) session with an online signup (OSU) server; encode a device management (DM) package 1 for transmission to the OSU server, the DM package 1 including an indication that the apparatus is contacting the OSU server to establish a new subscription; and decode a DM package 2 received from the OSU server in response to the DM package 1, the DM package 2 including a universal resource indicator (URI), the URI including a key, the key to link an HTTPS session with the TLS session, wherein the HTTPS session is used to establish a secure HTTPS connection to the URI in a browser of the STA. ### Claim 8 (depends on 7) The apparatus of claim 7, wherein the processing circuitry is configured to: launch the browser to establish a connection to the URI; and exchange registration data with the OSU server to establish the net subscription. ### Claim 9 (depends on 8) The apparatus of claim 8, wherein the processing circuitry is configured to: discard the key. ### Claim 10 (depends on 7) The apparatus of claim 7, wherein exchange of DM packages is an Open Mobile Alliance (OMA) exchange. ### Claim 11 (depends on 8) The apparatus of claim 8, wherein the processing circuitry is to: disassociate with a hotspot subsequent to establishing the new subscription; and re-associate with the hotspot to establish a Wi-Fi connection using the new subscription. ### Claim 12 (depends on 7) The apparatus of claim 7, further comprising: transceiver circuitry; and one or more antennas to be coupled to the transceiver. ### Claim 13 (depends on 7) The apparatus of claim 7, further comprising: a touchscreen display to display an icon associated with the OSU server. ### Claim 14 A method performed by a mobile device for secure on-line sign-up and provisioning for Wi-Fi Hotspot 2.0 networks, the method comprising: associating with a Wi-Fi network through a Wi-Fi Hotspot; initiating a Transport Layer Security (TLS) session with an online signup (OSU) server; encoding a device management (DM) package 1 for transmission to the OSU server, the DM package 1 including an indication that the apparatus is contacting the OSU server to establish a new subscription; and decoding a DM package 2 received from the OSU server in response to the DM package 1, the DM package 2 including a universal resource indicator (URI), the URI including a key, the key to link an HTTPS session with the TLS session, wherein the HTTPS session is used to establish a secure HTTPS connection to the URI in a browser of the mobile device. ### Claim 15 (depends on 14) The method of claim 14, further comprising: launching the browser on a touchscreen display to establish connection to the URI; and exchanging registration data with the OSU server to establish the new subscription. ### Claim 16 (depends on 15) The method of claim 15, wherein the instructions further configure the mobile device to: discard the key. ### Claim 17 (depends on 14) The method of claim 14, further comprising: receiving a subscription management object from the OSU server for use in managing the new subscription. ### Claim 18 (depends on 15) The method of claim 15, further comprising: disassociating with a hotspot subsequent to establishing the new subscription; and re-associating with the hotspot to establish a Wi-Fi connection using the new subscription. ### Claim 19 A mobile device comprising: a transceiver and an application processor configured to: associate with a Wi-Fi network through a Wi-Fi Hotspot; initiate a Transport Layer Security (TLS) session with an online signup (OSU) server; encode a device management (DM) package 1 for transmission to the OSU server, the DM package 1 including an indication that the apparatus is contacting the OSU server to establish a new subscription; and decode a DM package 2 received from the OSU server in response to the DM package 1, the DM package 2 including a universal resource indicator (URI), the URI including a key, the key to link an HTTPS session with the TLS session, wherein the HTTPS session is used to establish a secure HTTPS connection to the URI in a browser of the mobile device; a touchscreen display to display the browser to receive user input to establish a connection to the URI to exchange registration data with the OSU server to establish the new subscription; and one or more antennas coupled to the transceiver. ### Claim 20 (depends on 19) The mobile device of claim 19, wherein the transceiver is configured to communicate using Bluetooth. ### Claim 21 (depends on 19) The mobile device of claim 19, wherein the transceiver is configured to communicate using a standard of the 3rd Generation Partnership Project (3GPP) Long Term Evolution (LTE) family of standards.