GB2557353A - Configuration of wireless-equipped devices - Google Patents
Configuration of wireless-equipped devices Download PDFInfo
- Publication number
- GB2557353A GB2557353A GB1620900.9A GB201620900A GB2557353A GB 2557353 A GB2557353 A GB 2557353A GB 201620900 A GB201620900 A GB 201620900A GB 2557353 A GB2557353 A GB 2557353A
- Authority
- GB
- United Kingdom
- Prior art keywords
- wireless network
- wireless
- access point
- mode
- network device
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Granted
Links
Classifications
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04W—WIRELESS COMMUNICATION NETWORKS
- H04W24/00—Supervisory, monitoring or testing arrangements
- H04W24/02—Arrangements for optimising operational condition
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04W—WIRELESS COMMUNICATION NETWORKS
- H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
- H04W12/06—Authentication
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04W—WIRELESS COMMUNICATION NETWORKS
- H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
- H04W12/50—Secure pairing of devices
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04W—WIRELESS COMMUNICATION NETWORKS
- H04W4/00—Services specially adapted for wireless communication networks; Facilities therefor
- H04W4/50—Service provisioning or reconfiguring
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04W—WIRELESS COMMUNICATION NETWORKS
- H04W60/00—Affiliation to network, e.g. registration; Terminating affiliation with the network, e.g. de-registration
- H04W60/04—Affiliation to network, e.g. registration; Terminating affiliation with the network, e.g. de-registration using triggered events
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04W—WIRELESS COMMUNICATION NETWORKS
- H04W84/00—Network topologies
- H04W84/18—Self-organising networks, e.g. ad-hoc networks or sensor networks
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04W—WIRELESS COMMUNICATION NETWORKS
- H04W84/00—Network topologies
- H04W84/18—Self-organising networks, e.g. ad-hoc networks or sensor networks
- H04W84/20—Master-slave selection or change arrangements
Abstract
A wireless network device (WND) 7 in access point (AP) mode 700 receives authentication information 406, such as SSID and passcode of a wireless target device (WTD) and configuration instructions, from a service providers server 4, triggering the WND to enter listening mode 707. The WTD initially operates in AP mode 204, 208, broadcasting a beacon signal (maybe SSID) to be detected by the WND. Upon detecting the beacon 709, WND switches into client mode to transmit an access key 710 which provides data to establish a secured connection between WND and WTD 214, 715. The access key maybe the SSID and passcode of the WND, allowing the WTD to enter client mode and connect to the WND which is in AP mode. The access key may include WND configuration settings, allowing the WTD to operate in AP mode with configuration details of WND. WTD operates in default AP mode 208 until: detection of access key, initiation of manual over-ride or expiry of a time-out period. Server 4 stores a correspondence between authentication information and a public identity, such that when WTD is sold 405, server 4 transmits authentication information to WND 406. Herein, the configuration requires no user input.
Description
(71) Applicant(s):
British Telecommunications public limited company 81 Newgate Street, London, EC1A 7AJ,
United Kingdom (72) Inventor(s):
David Townend (56) Documents Cited:
US 20140233425 A1 US 20120166519 A1 (58) Field of Search:
US 20130094444 A1 US 20110258236 A1
INT CL H04W
Other: EPODOC, WPI, XPI3E (74) Agent and/or Address for Service:
BT Group Legal
Intellectual Property Department, Ground Floor, Faraday Building, 1 Knightrider Street, LONDON, EC4V 5BT, United Kingdom (54) Title of the Invention: Configuration of wireless-equipped devices Abstract Title: Initial Self-configuration of device in network (57) A wireless network device (WND) 7 in access point (AP) mode 700 receives authentication information 406, such as SSID and passcode of a wireless target device (WTD) and configuration instructions, from a service provider’s server 4, triggering the WND to enter listening mode 707. The WTD initially operates in AP mode 204, 208, broadcasting a beacon signal (maybe SSID) to be detected by the WND. Upon detecting the beacon 709, WND switches into client mode to transmit an access key 710 which provides data to establish a secured connection between WND and WTD 214, 715. The access key maybe the SSID and passcode of the WND, allowing the WTD to enter client mode and connect to the WND which is in AP mode. The access key may include WND configuration settings, allowing the WTD to operate in AP mode with configuration details of WND. WTD operates in default AP mode 208 until: detection of access key, initiation of manual over-ride or expiry of a time-out period. Server 4 stores a correspondence between authentication information and a public identity, such that when WTD is sold 405, server 4 transmits authentication information to WND 406. Herein, the configuration requires no user input.
Save connection details
REMOTE MANAGEMENT SERVER 4
711
Figure 4
405
.............................................................................................ί................................................................................................................................
Receive Sale report with access point ID
Retrieve connection details, send to access.........point
406
710
Connect to new client device
715
ACCESS POINT 7
1/4
CD
Figure 1
(e.g. Set Top Box)
2/4
CM co
CD h-
bn
O to to
Φ a
O
Q_
hhCD
a
Π3
M
CO
O a
O m
o i_
Q_
| c | ||
| o | C | |
| '+-» | o | |
| a | M | |
| c | a | |
| 3 | c | |
| LL | 3 | |
| CIO | U_ | |
| c | CIO | |
| c | c | |
| Φ | 1c | |
| M | a | |
| tn | +-» | |
| l | Π3 | |
| M | ||
| Φ | ||
| Φ | ||
| a Π3 | Rul | |
| Φ | ||
| E | ||
| Π3 | ||
| i_ | o | |
| Ll_ | LO | |
LO h-
σ>
h-
Φ a
Π3
Φ
M _c to to _φ
Φ i_ i
σ>
£1
Φ u
Π3
Φ +J _c
T3
Φ i_ i
Φ a
Π3
Φ
M _c to to _Φ
Φ i_ i
CM
Figure 2
CM
3/4
NEW DEVICE 2 o
ACCESS POINT 7
4/4
213 co
CM
LO
Φ =3
O
710 o
CL to to
LU
U
U <
Q
Configuration of Wireless-Equipped Devices
This invention relates to configuration of wireless-equipped devices, and in particular to prepare such devices for connection of customer premises equipment such as a wireless access point with a Wi-Fi peripheral client device newly-supplied to a user.
The procedures for establishing connection of a new client device to the Wi-Fi network are prescribed by the IEEE (in the Wi-Fi 802.11 standards) and the WFA (Wi-Fi Alliance), which prescribe certifications and future standards direction.
In a Wi-Fi network the access point (also known as a router) manages the network admission process, and masters network security credentials. Any Wi-Fi-capable client device may io connect to it in order to gain network or internet connectivity using these security credentials.
The most common methods for establishing a Wi-Fi connection include ‘Pre-shared Key’ (PSK) and ‘Push Button’ (typically known as WPS push button configuration).
In a Pre-shared Key system, the user interacts with the client device typically through a graphical user interface and selects a Wi-Fi network identifier (SSID) from a list, populated by the client through scanning the surrounding environment. Having selected the desired Wi-Fi network, the user then has to input a password/passcode to connect the new device to the WiFi network. In a push-button system the user can push a physical (or software button) on both the access-point and client device within a short time frame in order to exchange security credentials and establish connectivity.
In both cases, the client device may learn of the access point’s presence by listening for beacon frames that are broadcast at regular intervals from the access point. In these beacon frames the network name and security modes are detailed.
Both these systems, although simplified as much as possible and very familiar to users of modern Wi-Fi devices, require some interaction from the user to get the client device connected.
This invention aims to remove all user interaction in the connection procedure completely, by arranging for a product to seamlessly connect to the correct Wi-Fi network with no intervention by the customer - a ‘zero-touch’ setup experience. Existing solutions involve either some level of user interaction or are inherently insecure. In particular, it is undesirable that the security data of the user’s access point be programmed into a new device either on the production line or in the warehouse (unpacking the new device, powering it up and importing these parameters), as this compromises the security of the customer’s Local Area Network (LAN), and is also logistically complex and costly because there is an element of customisation for each new device prior to shipping. It would be necessary to ensure the security details for that customer’s home network were only ever programmed on to the device that is destined for them, and to ensure that the device is delivered to the correct person securely, as interception of the device, for example in the mail or because of misdelivery, would give access to the user’s LAN credentials
It is therefore desirable that such connection be made without compromising the security of the access point by revealing the network name and security modes to another party such as the manufacturer, supplier, service provider or delivery organisation supplying the device to the user. It is also desirable that a new device does not require configuration specific to the user, so that any specimen of the required product can be dispatched without modification, so that the device’s own security codes can be “burnt in” at manufacture and not be vulnerable to unauthorised alteration. It is thus desirable that the access point be given information by which to recognise the new device, rather than the converse.
United States Patent application US2015/373538 describes a process in which an access point changes operating mode to become a client node in order to connect to a client device and exchange security credentials. The access point reconfigures itself to client mode on receipt of instructions from the service provider’s server. It would be inconvenient to initiate this reconfiguration without prompting from the user, as the access point cannot be used for its normal purposes whilst in the client mode, so it would be necessary for the user to initiate the process by transmitting an identifier for the new device when he is ready to connect the device with the access point. This requires an action to be performed by the user when connection is to be made. The present invention allows automation of these steps, so that the process is initiated automatically by the presence of the new device.
According to the present invention, there is provided a wireless network device providing: a wireless interface;
a remote management function to receive, from a remote service provider, authentication information for establishing a secured wireless network connection to a target wireless device operating in an access point (AP) mode, a configuration function to configure the wireless network device to operate as a client device in a wireless network through the wireless interface;
an automatic connection function to connect the wireless network device as a client to the target wireless device based on the authentication information;
a configuration function to generate an access key for transmission to the target wireless device that allows establishment of a secured wireless network connection controlled by the wireless network device;
characterised in the provision of a recognition function responsive to receipt of the authentication information from the remote service provider by entering a listening mode in which, during operation in an access point mode, it monitors for an identifying beacon broadcast from the target wireless device, and to activate the configuration function to switch into a client mode on detection of the identifying beacon.
Preferably, the configuration function is arranged to:
transmit client authentication data to the target wireless device;
cause the target wireless device to switch into a client mode, in which the target wireless device is to connect as a client, with the wireless network device using the access key;
return the wireless network device to the access point mode; and establish a secured wireless network connection over the wireless interface, with the target wireless device operating in client mode.
The configuration function may transmit, to the target wireless device, data relating to the configuration settings of the wireless network device as an access point, such that the target wireless device may be configured to operate in access point mode using the access key and the same configuration details as the wireless network device.
The invention also provides a wireless device configured to operate as a target wireless device for co-operation with the wireless network device, providing: a wireless interface a configuration management system capable of configuring the target wireless device in an access point mode and in a client mode;
an automatic connection function responsive to authentication data received from a wireless network device to establish a secured wireless network connection over the wireless interface, between the target wireless device operating in access point mode and the wireless network device operating in client mode, a configuration function responsive to an access key received from the wireless network device to reconfigure the target wireless device to operate in a secured wireless network connection controlled by the wireless network device;
characterised in that the configuration management system is initially configured 5 to operate in a default access point mode in which a broadcast beacon is transmitted by the wireless interface for detection by a wireless network device.
The configuration management function may be responsive to access key data from the wireless network device, to receive access point configuration data from the wireless network device, and to operate in access point mode, using the same access identity as the wireless network device.
The wireless device may be configured to operate in access point mode and to generate the broadcast beacon on first power up, until the first to occur of detection of the access key initiation of a manual over-ride procedure
- expiry of a time-out period.
The configuration management function may be made responsive to an access key received from the wireless network device, by switching to a client mode for co-operation with an access point mode of the wireless network device.
The invention also provides a method of operating a wireless network device in co20 operation with a target wireless device, by
- transmitting, from a remote service provider, authentication information for establishing a secured wireless network connection between the wireless network device and the target wireless network device,
- operating the wireless network device in a client mode and the target wireless device 25 in an access point mode,
- transmitting an access key from the wireless network device to the target wireless network device, the access key providing data for establishing a secured wireless network connection with the wireless network device as access point;
characterised in that, in response to receiving the authentication information from the remote service provider, the wireless network device enters a listening mode in which, whilst operating in an access point mode, it monitors for a broadcast beacon from the target wireless device, on detection of the beacon from the target wireless device, the wireless network device 5 switches into the client mode for connection to the target wireless device for transmission of the access key.
In response to transmission of the access key, the wireless network device may switch back into access point mode, in response to reception of the access key, the target wireless device switches into a client 10 mode, and connects as a client with the wireless network device, using client authentication data transmitted by the wireless network device to the target wireless device;
and a secured wireless network connection is established between the wireless access point operating in access point mode and the target wireless device operating in client mode. The access key transmitted by the wireless network device to the target wireless device may include client authentication data, and in response to reception of the access key, the target wireless device is reconfigured to operate in access point mode using the access key and the same access identity as the wireless network device.
The target wireless device may operate in access point mode, generating broadcast beacons on first power up, until the first to occur of
- detection of the access key
- initiation of a manual over-ride procedure
- expiry of a time-out period
The invention also provides a remote management server for controlling the operation of a wireless access point, comprising
- a data store for receiving and storing data recording a concordance between authentication information relating to each of one or more a target wireless devices and a corresponding respective public identity relating to the or each target wireless device
- an enquiry function for receiving data matching the public identity of a target wireless device to a specified wireless access point
- a retrieval function for retrieving, from the store, the authentication information corresponding to the public identity of the target wireless device and for transmitting the authentication information to the specified wireless access point, together with configuration instructions
- characterised in that the configuration instructions are set to cause the specified wireless access point to:
- enter a listening mode in which, whilst operating in an access point mode, it monitors for a broadcast beacon from the target wireless device and,
- on detection of the broadcast beacon, to switch into a client mode for connection to the target wireless device.
The invention also provides a process for remote configuration of a programmable wireless-enabled device to operate according to the wireless access point defined above by transmission of programme data to the wireless-enabled device over a data communications connection.
The invention also provides a computer system, including a processor and a memory storing computer program code, for performing the method of the invention, and a computer program element comprising computer program code to, when loaded into a computer system and executed thereon, cause the computer to perform the method.
The present invention enables a function to be built into the access point to allow a ‘set and forget’ scenario. The function allows the access point to initiate a listening mode, which allows the access point to wait for a specific device to appear in range before it takes further action. The listening mode can be initiated by instructions transmitted from a remote location, for example a location from which the device is to be dispatched to the user, to allow the access point to be made ready for the subsequent arrival of the device at the user’s premises.
In an embodiment, a remote management system informs the access point of a new device with which it is to connect, typically over the Internet, when the device is dispatched from the warehouse, but only takes action when the new device is detected by the access point during normal operation.
This allows automatic configuration of newly purchased devices, with no interaction by the end user, allowing wireless connection of a new product to the customer’s Wi-Fi network to take place automatically, without the user inputting Wi-Fi passwords etc. Another use may be for automatic updating of the customer-specific configuration of a new or replacement broadband access point, to allow automatic transfer of customer specific passwords and settings from the customer’s existing access point to the new one.
This arrangement allows a non-customised generic device to be sent to a customer, and temporary credentials be given to the customer’s existing access point equipment to allow installation (online and working) automatically without any additional action, as soon as it is within range of the user’s access point. There is assurance that the credentials have been sent to the correct access point equipment because they are sent to that customer’s network connection. This way the procedure is secure, as the supplier or service provider does not need to know the user’s network credentials, and devices that are to be shipped do not need personalisation in any way.
Embodiments of the invention will now be described, by way of example, with reference to the drawings, in which:
Figure 1 depicts a general arrangement of the various elements which co-operate to perform embodiments of the invention.
Figure 2 is a schematic diagram illustrating the general arrangement of a customer equipment configured to operate according to the embodiment of Figure 1.
Figure 3 is a schematic diagram illustrating the general arrangement of an access point arranged for co-operation with the equipment of Figure 2 according to the embodiment of Figure 1.
Figure 4 is a flow diagram depicting the operation of the access point of Figure 3 and the co-operating device of Figure 2 in a first process according to the invention.
Figure 5 is a flow diagram depicting the operation of the access point of Figure 3 and the co-operating device of Figure 2 in the later stages of a second process according to the invention
The first embodiment relates to a process for connecting a new peripheral device to an existing access point. The second embodiment relates to a process for installing a new access point to replace the existing access point. Most of the steps are common to both processes.
Figure 1 depicts a manufacturing plant 1 at which new devices 2 are assembled and preprogrammed with “burnt in” identification data. The data is recorded in a look up table 3 which is communicated to the service provider’s remote management system 4. The remote management system has a number of functions 403, 405, 406 which will be discussed later with reference to Figure 2. The device 2 itself is sent over a physical distribution network 5 to a user premises 6 for installation, and for wireless connection 8 to an access point 7. The access point 7 is also capable of connection to a data network 9 such as the Internet.
In the first embodiment, the new device 2 is a device intended to operate in a local access network controlled by the access point 7. In the second embodiment, the new device is intended to operate as an access point, and is to be used to replace the existing access point 7 in operation of the local access network.
io Figure 2 depicts the functional elements of a customer equipment 2 to be delivered to a user and installed in the LAN 8 controlled by the access point 7. It comprises a wireless interface 28 for communicating over a local area network 8. The equipment 2 also has functional elements comprising remote management functions 20, configuration management 21, an autoconnect function 22, and an auto-configuration synchronisation function 23. A protocol stack 24 co15 ordinates communications with other terminals over a wireless communications interface 28. It will be noted that in general a wired interface 29 is not required for the operation of the invention, although the device 2 may be equipped with one as depicted.
The device has preconfigured Wi-Fi hotspot credentials (SSID and passcode) built in at the time of manufacture, and is configured to support soft-AP/hotspot mode out of the box by default. This provides a time-limited setup mode in which the device enters a setup mode for a limited period, for example 24 hours after its first boot-up, or until it is manually set up. The set up may be initiated by any suitable indication of delivery to the customer’s premises, for example switching on, on connection of the device to an external electrical supply or enabling of a battery.
Figure 3 depicts the functional elements of an access point 7 configured to operate according to this embodiment. Many of the functions are similar to those of the customer equipment 2. It comprises a wired interface 79 for connection to the data network 9, such as the Internet, and a wireless interface 78 for communicating over a local area network 8. The local area network 8 is normally controlled by the access point 7, but the access point is also capable of connection to another local area network as will be discussed.
The access point 7 is under the overall control of a processor 76, and has access to a memory 76 for storing data and programming instructions. The access point 7 also has functional elements similar to those of the consumer device 2, comprising remote management functions 70, configuration management 71, an autoconnect function 72, and an auto-configuration synchronisation function 73. Typical access points have pre-configured Wi-Fi credentials (SSID and Passcode) built in at the time of manufacture. In this embodiment, the access points additionally support a configurable client mode, allowing switching between default access point mode and client mode or, in an alternative embodiment, operation in a hybrid mode supporting both client and access point modes simultaneously. The client mode function is a software io defined operating mode, typically used in products such as wifi repeaters or range extenders. A protocol stack 74 co-ordinates communications with other terminals over the communications interface 78, 79, and a frame / packet listening function 75 is provided for detection of predetermined identification data transmitted or broadcast from other devices, and specifically from the device 2. This function includes a rule-matching function 750. The local area network 8 is normally controlled by the access point 7, but it is also capable of connection to another local area network as will be discussed.
The access point may be manufactured with these capabilities, but many existing access point devices are capable of reconfiguration with new programming data downloaded from a remote management system 4 such that they can be modified whilst in use to have additional capabilities, and it is within the scope of this invention to cover the process of upgrading or reconfiguring such a programmable access point remotely, so as to become capable of operation of the ‘auto-connect’ process to be discussed below.
The process by which the manufacturing process 1, new device 2, the access server 7, and the remote management server 4 co-operate to perform the embodiment of the invention will now be described with reference to Figure 4. In that Figure, steps performed during manufacture are prefixed with a “1”, those performed by the new device 2 are prefixed with a “2”, those performed by the remote management system 4 are prefixed with a “4”, and those performed by the access point 7 are prefixed with a “7”, the last two digits indicating the order in which the steps are performed.
On initial manufacture, each ‘auto-connect’ device 2 is provided with a “burnt in” SSID identity, passcode and a public serial number (step 101). A concordance 3 between these identities is communicated securely to the remote management server 4 (step 102), where the data is stored (step 403) until required. The manufacturing process (101) configures the autoconnect device 2 with a default setting 204 such that it will enter a default setup mode when it is first powered up, in which it initially acts as a temporary Wi-Fi access-point hotspot. This allows the access-point 7 to recognise the new device 2 when the device is first powered-up within wireless range of the access point 7 through its beacon broadcast advertisements which contain the SSID.
When the new device 2 is allocated to a user, the public serial number is identified, for example by scanning the number on packaging, at the point of sale or on despatch from a io warehouse. The remote management server 4 is informed of the public serial number of the device, and of the network identity of the customer to whom it has been allocated. The remote management server can then retrieve the corresponding SSID and passcode (step 405) for the device. This SSID and passcode are then transmitted, together with associated connection instructions, to the access point 7 associated with the customer identity (step 406).
These instructions include three elements. First there are the matching criteria for the listening function 75, such as a beacon frame with the SSID and/or MAC address of the new device 2, Secondly there is a configuration command, for the configuration management system 71, to cause the access point to change to client mode and connect to the SSID using the passcode of the new device. Thirdly, there is an action command to configure the ‘auto20 connect’ function 72 to exchange its own network name (SSID) and passcode with the new device.
It will be noted that no-one handling the device in a shop, warehouse, or in transit, needs to know the SSID of either the new device 2 or the access point 7 to which it is to be connected. Only the public serial number and the network identity of the customer need to be known by such personnel.
The Wi-Fi access point 7 is configured such that when the access point 7 receives an instruction set from the remote management server 4 (step 707) it changes from its normal operational mode 700 to enable a ‘listening function’ that inspects the layer-2 protocol frames in the signal, to identify a defined ‘trigger’ event. In the preferred embodiment this ‘trigger’ event is receipt of a beacon frame (a broadcast Wi-Fi network advertisement) with an SSID (Wi-Fi network name) identified in the instruction set given to it by the remote management system (4). This SSID is the network that will be advertised by the new ‘auto-connect’ device 2 that is allocated to the user following an order process. It should be noted that once the existing access point 7 has received the instructions/credentials for the new device 2 over the external connection 9, neither device requires an external network connection to complete the remaining process - it is only necessary that both are powered up and in wireless communication with each other.
After the listening function is installed (step 707), the access point 7 continues to function as normal, but is additionally listening out for a beacon transmitted by the new device on a predetermined channel specified in the instructions 707 transmitted from the remote management server 4. The access-point may either retune its main traffic channel (on which it io communicates with client devices in its vicinity) to correspond in with the channel on which the new device will operate, or it may remain normal operations on its existing channel but implement an off-channel scanning procedure during idle periods, when there is no client traffic, to seek the new device beacon on the channel advised to it. The latter procedure is preferred as it avoids disruption of any channel allocation plan that may be in operation to minimise interference with neighbouring access points. The delay in scanning until an idle period also avoids disruption of any existing sessions the access point may be handling when the new device first comes into range.
A ‘match’ is detected (i.e. the access point 7 has processed a broadcast beacon frame with an SSID matching the criteria it has been given - step 709) when a new device 2 using this identifier is powered-on within range of the access point 7 and starts to transmit its SSID (step 208).
Upon detecting the ‘trigger’ event the access point 7 reconfigures itself from its default ‘access-point’ mode to operate instead in a ‘client’ mode (step 710). During this process any other client devices on the local area network will briefly lose contact with the access node 7, so the access node may defer this step in the process until it detects an absence of activity on the local access network under its control. Alternatively, the access point may support a hybrid mode (concurrent client and access point modes) in order to perform the setup procedure. It may also support multiple radios or frequency bands allowing it to temporarily redirect connected client devices to an alternative radio band whilst the access point operates as a client to the new device 2 during the setup procedure.
Having detected the trigger event and selected a suitable time to continue the process, the access point 7 uses the credentials (SSID and passcode) provided to it in the instruction set from the remote management system to connect, as a client, to the new device 2, which is at this point still in its initial default configuration, and operating as an access point. Having mutually confirmed each other’s identities, the original access point 7 can now send the new device 2 its own SSID and passcode (step 711), and then returns to normal operation as an access node (step 712). The new device, on validating the data (step 213), can then use that security data to access the local area network controlled by the original access point 7, (step 214) to allow the new device 2 to operate in client mode as a client of the access point 7 (step io 214) such that the new device 2 can connect, in client mode, to the access point 7. The access point 7, which has now returned to operation in normal access-point mode, can therefore accept connection of the new device to the Local access network under its control (step 715).
The process may be over-ridden or interrupted at various points. For example, the new device may have a manual configuration mode which allows it to revert immediately to client mode after initial power up 208. If such a manual intervention takes place, the device 2 ceases to transmit the SSID and the subsequent steps 213, 214 do not take place.
The access point 7 may be arranged to only listen out for the triggering SSID (step 709) for a predetermined timeout period. If the SSID is not detected within that period the access point 7 reverts to normal operation (700) and may subsequently remove the listening rule.
Similarly, if the exchange of security details (step 711) fails, the access point 7 resumes normal operation (step 700) without connection of the device 2. These timeouts operate as a failsafe so that the access point 7 continues to operate, and the user continues to have a connection to the data network 4, even if the new device 2 fails to connect.
In a second embodiment, depicted in Figure 5, the new device 2 is supplied as a new access point to replace the existing one. In this case the process concludes, after the new device 2 has received the configuration details of the existing access point 2 (step 213), by rebooting and loading those configuration details. After the reboot, the new access point 2 operates in an identical manner to the existing access point 7 (step 216). It may be used as a relay from the original access point (7), which reverts to normal access point mode, or the new access point can be connected to the network 9 and take over operation of the local area network, without any other client devices requiring reconfiguration. In the latter case, the original access point 7, on detection of the beacon signal from the new access point 2, can then be shut down (step 717), or remain in operation as a client node, for example as a relay, as appropriate.
As the present invention is implemented on software within a wireless access point, it 5 may be possible to upgrade a conventional wireless access point to one which can perform a method according to the present invention. Computer code may be deployed to a wireless access point via download, for example via the internet from an ISP, or on some physical media, for example, DVD, CD-ROM, USB memory stick, etc. for which the wireless access point has an appropriate media reader.
io
Claims (15)
1. A wireless network device (7) providing:
- a wireless interface (78)
- a remote management function (70) to receive, from a remote service provider (4),
5 authentication information for establishing a secured wireless network connection (8) to a target wireless device (2) operating in an access point (AP) mode,
- a configuration function (71) to configure the wireless network device to operate as a client device in a wireless network through the wireless interface (78);
- an automatic connection function (72) to connect the wireless network device (7) as a io client to the target wireless device (2) based on the authentication information;
- a configuration function (73) to generate an access key for transmission to the target wireless device (2) that allows establishment of a secured wireless network connection controlled by the wireless network device (7);
characterised in the provision of a recognition function (75) responsive to receipt 15 of the authentication information from the remote service provider (4) by entering a listening mode in which, during operation in an access point mode, it monitors for an identifying beacon (208) broadcast from the target wireless device (2), and to activate the configuration function (71) to switch into a client mode on detection of the identifying beacon.
2. A wireless network device according to Claim 1, in which the configuration function (71) is arranged to
- transmit client authentication data to the target wireless device (2)
- cause the target wireless device to switch into a client mode in which the
25 target wireless device is to connect as a client with the wireless network device using the said access key
- return the wireless network device (7) to the access point mode; and
- establish a secured wireless network connection over the wireless interface (78), with the target wireless device (2) operating in client
30 mode.
3. A wireless network device according to claim 1, in which the configuration function (73) is arranged to transmit, to the target wireless device (2), data relating to the configuration settings of the wireless network device as an access point,
5 such that the target wireless device may be configured to operate in access point mode using the access key and the same configuration details as the wireless network device.
4. A wireless device configured to operate as a target wireless device (2), providing:
io - a wireless interface (28)
- a configuration management system capable of configuring the target wireless device in an access point mode and in a client mode;
- an automatic connection function (22) responsive to authentication data received from a wireless network device (7) to establish a secured wireless network connection over
15 the wireless interface (28), between the target wireless device (2) operating in access point mode and the wireless network device (7) operating in client mode,
- a configuration function (23) responsive to an access key received from the wireless network device (7) to reconfigure the target wireless device to operate in a secured wireless network connection controlled by the wireless network device (7);
20 characterised in that the configuration management system (21) is initially configured to operate in a default access point mode in which a broadcast beacon is transmitted by the wireless interface (28) for detection by a wireless network device (7).
5. A wireless device according to Claim 4, the configuration management function (21) being responsive to an access key received from the wireless network device (7), by
25 switching to a client mode for co-operation with an access point mode of the wireless network device.
6. A wireless device according to Claim 4, the configuration management function (21) being responsive to access key data from the wireless network device (7), to receive
30 access point configuration data from the wireless network device, and to operate in access point mode, using the same access identity as the wireless network device (7)
7. A wireless device according to Claim 4, Claim 5, or Claim 6, configured to operate in access point mode and to generate the broadcast beacon on first power up, until the first to occur of
5 - detection of the access key
- initiation of a manual over-ride procedure
- expiry of a time-out period io
8. A method of operating a wireless network device (7) in co-operation with a target wireless device (2), by
- transmitting, from a remote service provider (4), authentication information (406) for establishing a secured wireless network connection between the wireless network
15 device and the target wireless network device,
- operating the wireless network device in a client mode and the target wireless device in an access point mode,
- transmitting an access key (711) from the wireless network device to the target wireless network device, the access key providing data for establishing a secured
20 wireless network connection (8) with the wireless network device as access point;
characterised in that,
- in response to receiving the authentication information from the remote service provider, the wireless network device enters a listening mode (707) in which, whilst operating in an access point mode, it monitors for a broadcast
25 beacon (208) from the target wireless device (2),
- on detection (709) of the beacon from the target wireless device, the wireless network device switches into the client mode (710) for connection to the target wireless device for transmission of the access key (711).
9. A method according to Claim 8, in which
- in response to transmission of the access key (711), the wireless network device (2) switches back into access point mode (712),
- in response to reception of the access key (711), the target wireless device
5 (2) switches into a client mode (214), and connects as a client with the wireless network device, using client authentication data transmitted by the wireless network device (7) to the target wireless device (2) ;
- and a secured wireless network connection (8) is established between the wireless access point (7) operating in access point mode and the io target wireless device (2) operating in client mode.
10. A method according to Claim 8, in which
15 - the access key (711) transmitted by the wireless network device (7) to the target wireless device (2) includes client authentication data
- in response to reception of the access key (711), the target wireless device is reconfigured to operate in access point mode using the access key and the same access identity as the wireless network device.
11. A method according to Claim 8, claim 9 or Claim 10, wherein the target wireless device operates in access point mode, generating broadcast beacons on first power up, until
25 the first to occur of
- detection of the access key
- initiation of a manual over-ride procedure
- expiry of a time-out period
12 A remote management server (4) for controlling the operation of a wireless access point (7), comprising
- a data store (403) for receiving and storing data (3) recording a concordance between authentication information relating to each of one or more a target wireless devices (2) and a
5 corresponding respective public identity relating to the or each target wireless device
- an enquiry function (405) for receiving data matching the public identity of a target wireless device (2) to a specified wireless access point (7)
- a retrieval function (406) for retrieving, from the store (403), the authentication information corresponding to the public identity of the target wireless device (2) and for io transmitting the authentication information to the specified wireless access point (7), together with configuration instructions
- characterised in that the configuration instructions are set to cause the specified wireless access point to:
- enter a listening mode (707) in which, whilst operating in an access point mode,
15 it monitors for a broadcast beacon (208) from the target wireless device (2) and,
- on detection (709) of the broadcast beacon, to switch into a client mode (710) for connection to the target wireless device.
13. A process for remote configuration of a programmable wireless-enabled device (7) to 20 operate according to the wireless access point of claim 1, claim 2 or claim 3, by transmission of programme data to the wireless-enabled device over a data communications connection.
14. A computer system including a processor and memory storing computer program code for performing the steps of any of Claim 8, claim 9, claim 10, or claim 11.
15. A computer program element comprising computer program code to, when loaded into a computer system and executed thereon, cause the computer to perform the steps of a method as claimed in any of Claim 8, claim 9, claim 10, or claim 11.
Intellectual
Property
Office
Application No: GB1620900.9 Examiner: Mr Peter Herbert
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| GB1620900.9A GB2557353B (en) | 2016-12-08 | 2016-12-08 | Configuration of wireless-equipped devices |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| GB1620900.9A GB2557353B (en) | 2016-12-08 | 2016-12-08 | Configuration of wireless-equipped devices |
Publications (3)
| Publication Number | Publication Date |
|---|---|
| GB201620900D0 GB201620900D0 (en) | 2017-01-25 |
| GB2557353A true GB2557353A (en) | 2018-06-20 |
| GB2557353B GB2557353B (en) | 2019-12-04 |
Family
ID=58221963
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| GB1620900.9A Active GB2557353B (en) | 2016-12-08 | 2016-12-08 | Configuration of wireless-equipped devices |
Country Status (1)
| Country | Link |
|---|---|
| GB (1) | GB2557353B (en) |
Families Citing this family (2)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN112217831B (en) * | 2017-09-18 | 2023-04-25 | 创新先进技术有限公司 | Information interaction method, device and equipment for Internet of things equipment |
| CN112637853B (en) * | 2020-12-25 | 2023-05-12 | 杭州涂鸦信息技术有限公司 | Networking and distribution method and related device |
Citations (4)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| US20110258236A1 (en) * | 2010-04-16 | 2011-10-20 | Iyer Pradeep J | Secure Hotspot Roaming |
| US20120166519A1 (en) * | 2010-12-22 | 2012-06-28 | Pradeep Iyer | Provisioning a Swarm |
| US20130094444A1 (en) * | 2011-10-13 | 2013-04-18 | Applied Communications Sciences | Automatic provisioning of an m2m device having a wifi interface |
| US20140233425A1 (en) * | 2011-09-27 | 2014-08-21 | Qualcomm Incorporated | Automatic configuration of a wireless device |
-
2016
- 2016-12-08 GB GB1620900.9A patent/GB2557353B/en active Active
Patent Citations (4)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| US20110258236A1 (en) * | 2010-04-16 | 2011-10-20 | Iyer Pradeep J | Secure Hotspot Roaming |
| US20120166519A1 (en) * | 2010-12-22 | 2012-06-28 | Pradeep Iyer | Provisioning a Swarm |
| US20140233425A1 (en) * | 2011-09-27 | 2014-08-21 | Qualcomm Incorporated | Automatic configuration of a wireless device |
| US20130094444A1 (en) * | 2011-10-13 | 2013-04-18 | Applied Communications Sciences | Automatic provisioning of an m2m device having a wifi interface |
Also Published As
| Publication number | Publication date |
|---|---|
| GB2557353B (en) | 2019-12-04 |
| GB201620900D0 (en) | 2017-01-25 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| US10938798B2 (en) | Configuration of wireless-equipped devices | |
| CN110692280B (en) | Network access method, device and system | |
| US10129818B2 (en) | Automated access point provisioning | |
| CN105208583B (en) | Method and device for configuring intelligent household electrical appliance to access network and intelligent equipment | |
| US10057813B1 (en) | Onboarding and configuring Wi-Fi enabled devices | |
| US20090233609A1 (en) | Touchless Plug and Play Base Station | |
| JP5063692B2 (en) | Automatic configuration of base station router devices | |
| EP3257318B1 (en) | Restoration of network access | |
| EP1978772A1 (en) | Authentication policy | |
| EP3342118B1 (en) | Automatically grouping, authenticating, and provisioning access points using cloud-based management of wlan infrastructure | |
| CN104202799A (en) | A method for accessing wireless network by WIFI smart apparatus with zero-configuration | |
| CN104853448A (en) | Method for automatically establishing wireless connection and device thereof | |
| US9032051B2 (en) | Automatic differentiation of setup type in router setup application | |
| US8706136B2 (en) | Initialization of regulatory configurations of unlicensed wireless devices | |
| CN106231616B (en) | A kind of method and wireless router configuring wireless relay | |
| CN106488532A (en) | A kind of automatic distribution method, device and equipment, repeater | |
| EP2308218B1 (en) | Configuration of a communication device | |
| JP7004649B2 (en) | Communication method of electronic device, electronic device and communication method of mobile terminal | |
| GB2557353A (en) | Configuration of wireless-equipped devices | |
| CN114205378A (en) | Network distribution method and device of Internet of things equipment, storage medium and electronic device | |
| CN102045698B (en) | Method and device for acquiring terminal information | |
| EP2792184B1 (en) | Radio base station initialization | |
| CN107736042B (en) | Method for operating a wireless communication device |