A method for commissioning a wireless connection with a related authentication to a remote relay node, whereto an electronic mobile device is connected through at least one wireless communication module to a hosting wireless access node for transferring data with respect to a service provider available on the Internet by means of a commissioned relay access node selected by an authentication and commissioning manager, the method comprising:
- initiating an association phase by the mobile device wireless communication module to establish a connection with at least one wireless communication module of the hosting wireless access node, the association phase to be performed at OSI layer 2;
- initiating an identification phase by an authentication module of the hosting wireless access node to retrieve from a client authentication module of the mobile device at least its authentication credentials provided by an authentication credentials module, the identification phase to be performed at OSI layer 2;
- initiating an access verification phase by the hosting wireless access node authentication module to retrieve from an authentication server of the authentication and commissioning manager the commissioned relay access node to be used;
- initiating a commissioned relay access node selection phase by the authentication server to retrieve from a commissioned relay access node selector of the authentication and commissioning manager the commissioned relay access node to be used;
- initiating a tunnel creation phase by a tunnel/optimization module of the hosting wireless access node to establish a tunnel with a tunneling/optimization module of the commissioned relay access node;
- initiating a transfer of the authentication state phase by the hosting wireless access node authentication module to transfer at least the mobile device authentication credentials to an authentication module of the selected commissioned relay access node, the transfer being encapsulated into the tunnel;
- initiating an authentication phase by the commissioned relay access node authentication module to handshake with the mobile device client authentication module the authentication data used to establish a trusted connection between the commissioned relay access node and the mobile device, the authentication phase to be performed at OSI layer 2,
- the handshaking, using OSI layer 2 data units, being encapsulated into the tunnel between the commissioned relay access node and the hosting wireless access node;
- and
- initiating a keys negotiation phase by the commissioned relay access node authentication module to handshake with the mobile device client authentication module at least one session key to be used for the data encryption from a cryptography module of the mobile device and a cryptography module of the commissioned relay access node, the keys negotiation phase to be performed at OSI layer 2,
- the handshaking, using OSI layer 2 data units, being encapsulated into the tunnel between the commissioned relay access node and the hosting wireless access node;
- performing a data transfer phase to transfer data between the mobile device and the service provider,
- the data exchanged by the mobile device, contained in OSI layer 2 data units, encrypted by the cryptography module and transmitted on the wireless connection with the hosting wireless access node, being encapsulated into the tunnel between the hosting wireless access node and the commissioned relay access node, and
- the data then being extracted from the OSI layer 2 data units, decrypted by the cryptography module and forwarded by the commissioned relay access node to the service provider;
- wherein data is thereby exchanged by the service provider with the commissioned relay access node and not directly with the hosting wireless access node.