# US 9,521,116 B2 · Apparatus, method, and system for securing a public wireless network > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 9,521,116 B2 - Document ID: US9521116B2 - Status: Granted - Kind: B2 - Application number: 14/302,158 - Filed: 2014-06-11 - Published: 2015-12-17 - Granted: 2016-12-13 - Earliest claimed: 2014-06-11 - Assignees: Verizon Patent and Licensing Inc. - Applicants: Verizon Patent and Licensing Inc. - Inventors: Mark Durbin - Web page: https://patentgrep.com/patent/US9521116B2 ## CPC - H04W 76/11: Allocation or use of connection identifiers - H04L 12/4641: {Virtual LANs, VLANs, e.g. virtual private networks [VPN] (LAN interconnection over a bridge based backbone H04L12/462; encapsulation techniques H04L12/4633; routing of packets H04L45/00; packet switches H04L49/00; virtual private networks for security H04L63/0272)} - H04L 63/0272: {Virtual private networks} - H04W 12/08: Access security - H04L 2101/681: using addresses for wireless personal area networks or wireless sensor networks, e.g. Zigbee addresses - H04W 84/12: WLAN [Wireless Local Area Networks] - H04W 88/02: Terminal devices - H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72) - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) ## Abstract An approach for automatically securing a public wireless network is disclosed. A VPN connection platform maintains a list of available trusted wireless access identifiers to connect to a public wireless network from a mobile device. The trusted wireless access identifiers are provided to an application associated with the mobile device that selectively initiates a virtual private connection when the mobile device cannot utilize anyone of the trusted wireless access identifiers. ## Claims ### Claim 1 A method comprising: maintaining a plurality of trusted wireless access identifiers that are available for use to connect to a public wireless network via a plurality of corresponding wireless access points; providing the plurality of trusted wireless access identifiers to an application associated with a mobile device for establishing a trusted wireless connection, wherein the application compares the trusted wireless access identifiers to a plurality of detected wireless access identifiers that correspond to one or more wireless networks in which the mobile device is in range, wherein the application determines, based on the comparing, which, if any, of the detected wireless access identifiers correspond to the plurality of trusted wireless access identifiers, wherein the application determines that a first set of wireless access identifiers, of the plurality of detected wireless access identifiers, which do not correspond to any of the trusted wireless access identifiers, are untrusted wireless access identifiers, wherein the application determines that a second set of wireless access identifiers, of the plurality of detected wireless access identifiers, which correspond to one or more of the trusted wireless access identifiers, are trusted wireless access identifiers, wherein the application presents information regarding the first set of untrusted wireless access identifiers, including an indication that the one or more untrusted wireless access identifiers are not trusted; receiving an indication, from the application, that a particular untrusted wireless access identifier, of the first set of untrusted wireless access identifiers, has been selected for use by the mobile device; and in response to receiving the indication from the application, initiating a virtual private connection for the mobile device, the virtual private connection being initiated based on the indication that the selected wireless access identifier is an untrusted wireless access identifier. ### Claim 2 (depends on 1) The method according to claim 1, further comprising: signaling, to the mobile device, session set-up information for the establishment of the virtual private connection over a communication connection that is distinct from any wireless connection that can be supported by the plurality of wireless access points. ### Claim 3 (depends on 2) The method according to claim 2, wherein the session set-up information specifies that the virtual private connection is to be established using one of the plurality of wireless access points or a different wireless access point that is not associated with the plurality of trusted wireless access identifiers. ### Claim 4 (depends on 3) The method according to claim 3, wherein the mobile devices include a cellular phone configured to support communication connection and the trusted wireless connection. ### Claim 5 (depends on 1) The method according to claim 1, further comprising: receiving a request by the mobile device to access the application for execution by the mobile device; and periodically updating the plurality of trusted wireless access identifiers to the application. ### Claim 6 (depends on 1) The method according to claim 1, wherein the plurality of trusted wireless access identifiers include service set identifiers (SSIDs), and the application monitors for the plurality of wireless access points using the SSIDs, wherein the untrusted wireless access identifiers are SSIDs that are not included in the plurality of trusted wireless access identifiers. ### Claim 7 (depends on 6) The method according to claim 6, wherein the SSIDs are selected from a list of one or more recognized wireless connections associated to the mobile device. ### Claim 8 (depends on 1) The method according to claim 1, further comprising: selecting the virtual private connection based on service set identifiers (SSIDs); and initiating the selected virtual private connection associated with the corresponding SSIDs. ### Claim 9 A method comprising: executing an application associated with a mobile device for establishing a trusted wireless connection; receiving a plurality of trusted wireless access identifiers that are available for use to connect to a public wireless network via a plurality of corresponding wireless access points; detecting one or more wireless access identifiers; determining which, if any, of the detected wireless access identifiers correspond to the plurality of trusted wireless access identifiers, the determining comprising: comparing the detected wireless access identifiers to the received plurality of trusted wireless access identifiers, and identifying, based on the comparing, at least one of: one or more trusted wireless access identifiers, of the detected wireless access identifiers, or one or more untrusted wireless access identifiers, of the detected wireless access identifiers; presenting, via the application, information identifying the detected wireless identifiers, the presented information including at least one of: information regarding the one or more trusted wireless access identifiers, including an indication that the one or more trusted wireless access identifiers are trusted, or information regarding the one or more untrusted wireless access identifiers, including an indication that the one or more untrusted wireless access identifiers are not trusted; receiving, via the application, a selection of a particular untrusted wireless access identifier, of the one or more untrusted wireless access identifiers, and launching, based on the selection of the particular untrusted wireless access identifier, a session establishment process for a virtual private connection. ### Claim 10 (depends on 9) The method according to claim 9, further comprising: receiving, via the application, a selection of a particular trusted wireless access identifier, of the one or more trusted wireless access identifiers; and in response to determining that there is a correspondence between the selected particular detected wireless access identifier and the plurality of trusted wireless access identifiers, establishing the trusted wireless connection using the selected particular trusted wireless access identifier. ### Claim 11 (depends on 10) The method according to claim 10, further comprising: presenting, via the application, information regarding the particular trusted wireless access identifier. ### Claim 12 An apparatus comprising: at least one processor; and at least one memory including computer program code for one or more programs, the at least one memory and the computer program code configured to, with the at least one processor, cause the apparatus to perform at least the following: maintain a plurality of trusted wireless access identifiers that are available for use to connect to a public wireless network via a plurality of corresponding wireless access points; provide the plurality of trusted wireless access identifiers to an application associated with a mobile device for establishing a trusted wireless connection, wherein the application: compares the trusted wireless access identifiers to a plurality of detected wireless access identifiers that correspond to one or more wireless networks in which the mobile device is in range, determines, based on the comparing, which, if any, of the detected wireless access identifiers correspond to the plurality of trusted wireless access identifiers, determines that a first set of wireless access identifiers, of the plurality of detected wireless access identifiers, which do not correspond to any of the trusted wireless access identifiers, are untrusted wireless access identifiers, determines that a second set of wireless access identifiers, of the plurality of detected wireless access identifiers, which correspond to one or more of the trusted wireless access identifiers, are trusted wireless access identifiers, presents information regarding the second set of trusted wireless access identifiers, including an indication that the second set of trusted wireless access identifiers are trusted, and presents information regarding the first set of untrusted wireless access identifiers, including an indication that the first set of untrusted wireless access identifiers are not trusted; receive an indication, from the application, that a particular untrusted wireless access identifier, of the first set of untrusted wireless access identifiers, has been selected for use by the mobile device; and in response to receiving the indication from the application, initiate a virtual private connection for the mobile device, via a particular wireless access point that corresponds to the selected untrusted wireless access identifier. ### Claim 13 (depends on 12) The apparatus according to claim 12, wherein the apparatus is further caused to: signal, to the mobile device, session set-up information for the establishment of the virtual private connection over a communication connection that is distinct from any wireless connection that can be supported by the plurality of wireless access points. ### Claim 14 (depends on 13) The apparatus according to claim 13, wherein the session set-up information specifies that the virtual private connection is to be established using one of the plurality of wireless access points or a different wireless access point that is not associated with the plurality of trusted wireless access identifiers. ### Claim 15 (depends on 14) The apparatus according to claim 14, wherein the mobile devices include a cellular phone configured to support communication connection and the trusted wireless connection. ### Claim 16 (depends on 12) The apparatus according to claim 12, wherein the apparatus is further caused to: receive a request by the mobile device to access the application for execution by the mobile device; and periodically update the plurality of trusted wireless access identifiers to the application. ### Claim 17 (depends on 12) The apparatus according to claim 12, wherein the plurality of trusted wireless access identifiers include service set identifiers (SSIDs), and the application monitors for the plurality of wireless access points using the SSIDs, wherein the untrusted wireless access identifiers are SSIDs that are not included in the plurality of trusted wireless access identifiers. ### Claim 18 (depends on 17) The apparatus according to claim 17, wherein the SSIDs are selected from a list of one or more recognized wireless connections associated to the mobile device. ### Claim 19 (depends on 12) The apparatus according to claim 12, wherein the apparatus is further caused to: select the virtual private connection based on service set identifiers (SSIDs); and initiate the selected virtual private connection associated with the corresponding SSIDs. ### Claim 20 A system comprising: an automated public wireless network securing platform configured to: maintain a plurality of trusted wireless access identifiers that are available for use to connect to a public wireless network via a plurality of corresponding wireless access points; provide the plurality of trusted wireless access identifiers to an application associated with a mobile device for establishing a trusted wireless connection, wherein the application: compares the trusted wireless access identifiers to a plurality of detected wireless access identifiers that correspond to one or more wireless networks in which the mobile device is in range, determines, based on the comparing, which, if any, of the detected wireless access identifiers correspond to the plurality of trusted wireless access identifiers, determines that a first set of wireless access identifiers, of the plurality of detected wireless access identifiers, which do not correspond to any of the trusted wireless access identifiers, are untrusted wireless access identifiers, determines that a second set of wireless access identifiers, of the plurality of detected wireless access identifiers, which correspond to one or more of the trusted wireless access identifiers, are trusted wireless access identifiers, presents information regarding the second set of trusted wireless access identifiers, including an indication that the second set of trusted wireless access identifiers are trusted, and presents information regarding the first set of untrusted wireless access identifiers, including an indication that the first set of untrusted wireless access identifiers are not trusted; receive an indication, from the application, that a particular untrusted wireless access identifier, of the first set of untrusted wireless access identifiers, has been selected for use by the mobile device; and in response to receiving the indication from the application, initiate a virtual private connection for the mobile device, via a particular wireless access point that corresponds to the selected untrusted wireless access identifier. ### Claim 21 (depends on 20) The system of claim 20, wherein the automated public wireless network securing platform is further configured to: select the virtual private connection based on service set identifiers (SSIDs); and initiate the selected virtual private connection associated with the corresponding SSIDs.