Loading patent…
AssigneeCisco Technology, Inc.
InventorsSrinath Gundavelli, Arun C. Alex, Rajesh P. Velandy, Rajesh S. Pazhyannur, Mark Grayson, Rajeev Koodli, Gaetan Feige, Steve W. Wood
Estimating the term…
Techniques are provided for performing web authentication of mobile wireless devices that roam from a wireless wide area network to a wireless local area network. A redirect rule is invoked when a request is received from the mobile wireless device for world wide web access in order to obtain authentication for the mobile wireless device before permitting world wide web access. When a world wide web access request is received from the mobile wireless device, it is redirected to an authentication portal to allow a user of the mobile wireless device to enter user credentials to allow for world wide web access using the IP address.
A method comprising:
An apparatus comprising:
One or more non-transitory computer readable storage media encoded with software comprising computer executable instructions operable to:
Dependencies are inferred from the claim text.
Drawings are temporarily unavailable. Open the PDF at USPTO
From the US filing history. Foreign family members aren’t listed.
Authentication: using credential vaults, e.g. password manager applications or one time password [OTP] applications
Network traffic management; Network resource management: traffic management, e.g. flow control or congestion control
Wireless communication networks
About 5 years 4 months of term left · ends 1 Mar 2032 (estimated)
The present disclosure relates to authenticating mobile wireless devices.
Mobile wireless devices are capable of accessing world wide web data from a wide area wireless network, e.g., a 3G or 4G/LTE network, as well as wireless local area networks (WLANs), e.g., WiFi™ networks. Mobile wireless device users may roam from the wide area wireless network to a wireless local area network, and in the opposite direction as well.
Challenges are presented when a mobile wireless device roams from the wireless wide area network to a public wireless local area network, e.g., a so-called “hot spot”. Many public wireless local area networks require some sort of authentication of the mobile wireless device and the user before permitting Internet access from the public wireless local area network. Current authentication procedures for this type of scenario have weak security and suffer from other shortcomings.
FIG. 1 is a block diagram showing integration of a wireless local area network and wireless wide area network for purposes of facilitating web authentication of a mobile wireless device.
FIG. 2 is a block diagram of an example local mobility anchor in the wireless wide area core network and configured to perform the web authentication techniques described herein.
FIG. 3 is a block diagram of an example mobile access gateway in the wireless local area network and configured to perform the web authentication techniques described herein.
Overview
Techniques are provided for performing web authentication of mobile wireless devices that roam from a wireless wide area network to a wireless local area network. Data is stored for a redirect rule for traffic associated with a mobile wireless device that has associated with a wireless access point in a public wireless local area network and has been given a temporary unauthenticated session access using an Internet Protocol (IP) address assigned to the mobile wireless device by equipment in a wireless wide area core network that serves as a home network for the mobile wireless device. The redirect rule is for use when a request is received from the mobile wireless device for world wide web access in order to obtain authentication for the mobile wireless device before permitting world wide web access. When a world wide web access request is received from the mobile wireless device, it is redirected to an authentication portal to allow a user of the mobile wireless device to enter user credentials for world wide web access using the IP address.
Example Embodiments