Secure system and method for onboarding router

A method of onboarding a Wi-Fi client device to a Wi-Fi access point device for connection with an external network, said method comprising:

• receiving, at a radio of the Wi-Fi access point device, a pairing request from the Wi-Fi client device;
• obtaining one or more pairing instructions from an onboarding program of the Wi-Fi access point device;
• executing the one or more pairing instructions, wherein executing the one or more pairing instructions comprises:
• starting a timer;
• receiving, via the radio in the Wi-Fi access point device, an open Wi-Fi onboarding service set identification (SSID) broadcast from a gateway device;
• passing, via the radio, the Wi-Fi onboarding SSID to a controller in the Wi-Fi access point device;
• instructing, via the controller, the radio to broadcast the open Wi-Fi onboarding SSID based on the timer;
• creating a programmed secure Wi-Fi onboarding SSID, wherein the programmed secure Wi-Fi onboarding SSID is based on a user email, a unique parameter of the Wi-Fi access point device, and a time stamp, and wherein the unique parameter comprises a serial number of the Wi-Fi access point device;
• instructing, via the controller, the radio to broadcast the programmed secure Wi-Fi onboarding SSID such that the Wi-Fi client device is able to join the established programmed secure Wi-Fi onboarding SSID;
• onboarding, via the controller, the Wi-Fi access point device to the external network, based on information communicated between the Wi-Fi client device and the Wi-Fi access point device over the programmed secure Wi-Fi onboarding SSID;
• and
• instructing, via the controller, the radio to stop the broadcast of the open Wi-Fi onboarding SSID at the earlier of an expiration of the timer and the onboarding of the Wi-Fi access point device to the external network and to use the established programmed secure Wi-Fi onboarding SSID to complete onboarding of the Wi-Fi access point device onto the gateway device;
• and
• enabling only the Wi-Fi client device to be a sole client device to connect to the open onboarding SSID during the timer.

A non-transitory, computer-readable media having computer-readable instructions stored thereon, the computer-readable instructions being capable of being read by a controller in a Wi-Fi access point device, which additionally includes a radio and a memory, the memory having onboarding instructions stored therein, the onboarding instructions including instructions for establishing an open Wi-Fi onboarding service set identification (SSID) and instructions for establishing a programmed secure Wi-Fi onboarding SSID, wherein the computer-readable instructions are capable of instructing the controller in the Wi-Fi access point device to perform the method:

• receiving, at the radio of the Wi-Fi access point device, a pairing request from the client device;
• obtaining one or more pairing instructions from an onboarding program of the Wi-Fi access point device;
• executing the one or more pairing instructions, wherein executing the one or more pairing instructions comprises:
• starting a timer;
• receiving, via the radio the open Wi-Fi onboarding SSID broadcast from a gateway device and passing the Wi-Fi onboarding SSID to the controller;
• instructing the radio to broadcast the open Wi-Fi onboarding SSID based on the timer;
• using, via a controller in the Wi-Fi access point device, the open Wi-Fi onboarding SSID as instructed by the Wi-Fi client device to connect to the gateway device;
• creating, via the controller, the programmed secure Wi-Fi onboarding SSID with the client device, wherein the programmed secure Wi-Fi onboarding SSID is based on a user email, a unique parameter of the Wi-Fi access point device, and a time stamp, and wherein the unique parameter comprises a serial number of the Wi-Fi access point device;
• instructing, via the controller, the radio to broadcast the programmed secure Wi-Fi onboarding SSID such that the Wi-Fi client device is able to join the established programmed secure Wi-Fi onboarding SSID;
• onboarding, via the controller, the Wi-Fi access point device to the external network, based on information communicated between the Wi-Fi client device and the Wi-Fi access point device over the programmed secure Wi-Fi onboarding SSID;
• and
• instructing, via the controller, the radio to stop the broadcast of the open Wi-Fi onboarding SSID at the earlier of an expiration of the timer and the onboarding of the Wi-Fi access point device to the external network and to use the programmed secure Wi-Fi onboarding SSID to complete onboarding of the Wi-Fi access point device onto the gateway device;
• and
• enabling, via the controller, only the Wi-Fi client device to be a sole client device to connect to the open onboarding SSID during the timer.

A method of onboarding a Wi-Fi client device to a Wi-Fi access point device, said method comprising:

• broadcasting, from the Wi-Fi access point device, an open Wi-Fi onboarding service set identification (SSID), wherein a timer is started after the open Wi-Fi onboarding SSID is broadcasted;
• receiving, via the Wi-Fi client device, the broadcasted open Wi-Fi onboarding SSID;
• using, via the Wi-Fi access point device, the open Wi-Fi onboarding SSID as instructed by the Wi-Fi client device to connect to the gateway device and an external network;
• transmitting, via the Wi-Fi client device, a request for a programmed secure Wi-Fi onboarding SSID;
• creating, via the Wi-Fi access point device, the programmed secure Wi-Fi onboarding SSID with the client device, wherein the programmed secure Wi-Fi onboarding SSID is based on a user email, a unique parameter of the Wi-Fi access point device, and a time stamp, and wherein the unique parameter comprises a serial number of the Wi-Fi access point device;
• broadcasting, from the Wi-Fi access point device the programmed secure Wi-Fi onboarding SSID based on the transmitted request during a duration of the timer such that the Wi-Fi client device is able to join the programmed secure Wi-Fi onboarding SSID;
• onboarding the Wi-Fi client device to the Wi-Fi access point device, based on said broadcasting of the programmed secure Wi-Fi onboarding SSID;
• establishing, via the Wi-Fi access point device, a Wi-Fi local area network including the Wi-Fi client device;
• connecting, via the Wi-Fi access point device, the Wi-Fi local area network with the external network;
• and
• stopping, via the Wi-Fi access point device, the broadcasting of the open Wi-Fi onboarding SSID at the earlier of an expiration of the timer and the onboarding of the Wi-Fi client device to the Wi-Fi access point device and to use the programmed secure Wi-Fi onboarding SSID to complete onboarding of the Wi-Fi access point device onto the gateway device;
• and
• enabling, via the Wi-Fi access point device, only the Wi-Fi client device to be a sole client device to connect to the open onboarding SSID during the timer.