Wireless network authorization using a trusted authenticator

A method of granting access to a wireless network, comprising:

• pairing a trusted authenticator directly with a client device over a direct connection to enable the client device to become connected to a WLAN, wherein the direct connection is a near field connection (NFC) or a Bluetooth connection, and wherein said trusted authenticator is connected to a gateway over a Wireless Local Area Network (WLAN) Wi-Fi wireless network and is loaded with trusted zone information defining boundaries of a predefined trusted zone associated with said gateway;
• determining with said trusted authenticator whether said client device is within said trusted zone based on said trusted zone information, and denying said client device access to said wireless network when said client device is outside said trusted zone;
• sending a certificate signing request (CSR) request message from said trusted authenticator to said client device, said CSR request message defining a key pair generation algorithm;
• receiving a CSR at said trusted authenticator from said client device in response to said CSR request message, said CSR comprising a public key generated by said client device according to said key pair generation algorithm;
• sending said CSR from said trusted authenticator to said gateway in an enrollment request message;
• receiving a digital certificate from said gateway at said trusted authenticator in response to said enrollment request message, wherein said gateway generated a digital certificate based on said CSR and encrypted said digital certificate using said public key in said CSR;
• and
• providing said digital certificate from said trusted authenticator to said client device such that said client device decrypts said digital certificate using a private key generated at the client device according to said key pair generation algorithm and provides said digital certificate to an authentication server at said gateway to join said wireless network,
• wherein said trusted zone has boundaries defined by geographical coordinates of a building, said client device is determined to be within the geographical coordinates of the building when the client device is within the trusted zone as determined by the trusted authenticator, and
• wherein the client device is a video player.