Patent ID: 9571482
Date: 2017-02-14
CPC Classifications: H04L,H04W

Claim:
1. A method for secure on-line sign-up and provisioning for Wi-Fi Hotspot 2.0 networks performed by a mobile device, the method comprising: associating with a Wi-Fi Hotspot and establishing a transport-layer security (TLS) session with a sign-up server through the Wi-Fi Hotspot to receive a certificate of the sign-up server; verifying that the certificate of the sign-up server has been signed by a hotspot trust root; sending a first message to the sign-up-server, the first message including device information and a generic alert that is set to subscription creation; receiving from the sign-up-server a second message that includes a Launch-Browser-to-URL command for execution by the mobile device in response to the first message; establishing by the mobile device, upon receipt of the second message, a secure Hypertext Transfer Protocol (HTTPS) connection to a first URL identified in the second message and sending an HTTPS GET request over the secure HTTP connection to the identified first URL, the first URL associated with an activation portal; exchanging information over the established secure HTTP connection with the activation portal to provision credentials for establishment of a subscription for Wi-Fi network access and creation of a subscription management object (MO); receiving an indication from the sign-up server that the subscription was provisioned successfully along with a second URL from which the subscription MO can be retrieved, the second URL being received as part of a HTTPS response message; retrieving the subscription MO in response to the indication that the subscription was provisioned successfully; disassociating with the Wi-Fi Hotspot in response to retrieval of the subscription MO from the sign-up server; and re-associating and authenticating with the Wi-Fi Hotspot, after the disassociation, using the provisioned credentials of the retrieved subscription MO.