Managed roaming for WLANS

A system for securely accessing a wireless network, comprising:

• a wireless mobile device;
• wherein the wireless mobile device uses an association control list to control communication with an access point, the association control list comprising digital data representing information concerning at least one access point and whether the wireless mobile unit should communicate with the at least one access point,
• wherein the association control list is updated by communicating with a server;
• and
• wherein the server is used to facilitate the authentication of the access point by the mobile unit.

A system for securely accessing a wireless network, comprising:

• a wireless mobile device comprising a processor and memory,
• wherein the wireless mobile device associates with an access point and sends a request to a server for confirmation that the access point is authorized, the access point comprising a wireless device for communicating with other wireless devices and a wired network interface for communicating via a wired network,
• wherein the wireless network conforms to one or more of the IEEE 802.11 family of specifications, and
• wherein the wireless mobile device stores an identifier of the access point if the server does not confirm that the access point is authorized, and subsequently transmits the identifier to the server.

A wireless communication security system, comprising:

• a first wireless mobile device;
• a server system comprising a plurality of servers;
• wherein the first wireless mobile uses an association control list to control communication with other wireless mobile devices via at least one access point;
• the association control list comprising a plurality of identifiers, each identifier uniquely identifying a wireless mobile device,
• wherein one or more servers of the plurality of servers control the content of the association control list, and wherein the plurality of servers are organized hierarchically.

A system for securely accessing a wireless network, comprising:

• a wireless mobile unit comprising a processor and memory,
• wherein the wireless mobile unit transmits to a server system comprising a plurality of servers a data structure comprising identifiers of access points within range of the wireless mobile units;
• wherein the wireless mobile unit receives from the server system information concerning at least one access point and whether the mobile unit should communicate with the at least one access point, and
• wherein the server system is organized hierarchically.

A system for securely accessing a wireless network comprising:

• an access point for communicating with wireless devices;
• a server system comprising a plurality of servers;
• and
• a wired network interface for communicating via a wired network,
• wherein the access point is configured to wirelessly transmit an association control list, the association control list comprising digital data representing information concerning at least one access point and whether at least one wireless mobile device should communicate with the at least one access point,
• wherein the access point is further configured to periodically broadcast the association control list,
• wherein one or more servers of the plurality of servers control the content of the association control list, and wherein the plurality of servers are organized hierarchically.