Methods and apparatus for use in controlling data traffic for a wireless mobile terminal using a wireless access point (AP)

Techniques for use in controlling data traffic in a wireless local area network (WLAN) which includes at least one access point (AP) are described. In one illustrative example, the terminal is associated with the AP and receives data traffic from a source device via the AP. The terminal identifies whether a processing requirement of the terminal for processing data traffic exceeds a predetermined threshold. In response to such identifying, the terminal produces a control message which includes a source address corresponding to the source device and a destination address corresponding to the terminal, and sends the control message to the AP. The control message is defined to instruct the AP to prohibit transmission of the data traffic originating from the source address and destined to the destination address. In one scenario, the control message further includes a time value indication, for instructing the AP to prohibit transmission of the data traffic only for a time period indicated by the time value indication.

BACKGROUND

1. Field of the Technology

The present disclosure relates generally to radio communications, and more particularly to techniques for controlling unwanted data traffic directed to a wireless mobile terminal in a wireless communication network.

2. Description of the Related Art

Wireless mobile terminals configured to operate in accordance with IEEE 802.11 standards or the like may communicate in wireless local area networks (WLANs). Such wireless mobile terminals are further configured to receive data formatted in IP data packets, for example, via a Web browser application, a Voice over IP (VoIP) application, or other.

Such wireless mobile terminals generally remain unprotected against incoming rogue IP data traffic in the WLAN, such as high data rate “pings” with large data packets, denial of service attacks, network misconfigurations, and/or other network errors. This undesired data traffic may cause excessive battery power drain and performance degradation in the wireless mobile terminal.

Other networks and environments may experience the same or similar problems. What are needed are methods and apparatus to overcome these and other related deficiencies of the prior art.

DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS

Techniques for use in controlling data traffic in a wireless local area network (WLAN) which includes at least one access point (AP) are described. In one illustrative example, a wireless mobile terminal is associated with the AP and receives data traffic from a source device via the AP. The wireless mobile terminal identifies whether a processing requirement for processing data traffic exceeds a predetermined threshold. In response to such identifying, the wireless mobile terminal produces a control message which includes a source address corresponding to the source device and a destination address corresponding to the wireless mobile terminal, and sends the control message to the AP. The control message is defined to instruct the AP to prohibit transmission of the data traffic originating from the source address and destined to the destination address. In one particular embodiment, the control message also includes a time value indication, for instructing the AP to prohibit transmission of the of the data traffic for a time period indicated by the time value indication.

To illustrate one exemplary network architecture within which the techniques of the present disclosure may be practiced,FIG. 1is a communication system100which includes a wireless local area network (WLAN)104within which a wireless mobile terminal202(e.g. end station or “STA”) may operate. WLAN104has a plurality of wireless access points (APs)112,114, and116for wireless communications with wireless mobile terminal202. In the present embodiment, WLAN104and wireless mobile terminal202operate in accordance with IEEE 802.11 standards. Such WLANs are identifiable by a wireless mobile terminal202from a Set Service Identifier (SSID) or Extended SSID (ESSID). WLAN104also includes one or more servers106, a redirect server108, and a gateway110. Server106may provide data, applications, and/or functionality for communication services in WLAN104.

Wireless mobile terminal202may also operate for communications in different LANs/WLANs, such as WLAN122. Similar to WLAN104, WLAN122has a plurality of wireless APs128,130and132, one or more servers124, and a gateway126. In this embodiment, WLAN122is a private communication network of an enterprise (small company, corporation, etc.) associated with wireless mobile terminal202. Such WLANs104and122may provide or allow access to various data and communication services to its terminals. For example, the WLANs may provide for access to Internet120via the Web browser application, or voice telephony communication services with use of Voice over IP (VoIP) communications or other techniques. Data traffic may be received by wireless mobile terminal202from servers106and118, for example.

In contrast to WLAN122, WLAN104may be a public WiFi “hotspot” for public use and include what is referred to as a “captive portal” or “walled garden.” For devices connected in WLAN104via one of wireless APs112,114, and116, gateway110is configured to permit or deny access to the data, applications, and/or functionality, as well as to permit or deny external access outside of WLAN104to Internet120. To do this, gateway110has a set of IP address filters which define a set of addresses that are permissible/impermissible, if any at all, for access by devices. Access by a device depends on whether or not a device has been authorized and what access rights are given upon authorization.

Typically, when a request by a device in WLAN104is made prior to proper authorization, gateway110is configured to redirect the request to redirect server108. In response, redirect server108is configured to respond to wireless mobile terminal202to provide data for producing information (e.g. a Web page information) which is rendered in a visual display of wireless mobile terminal202via a Web browser application. The information may solicit a user response. For example, the information may solicit a user registration or login with user fields for entering a user name and/or password information. The user will enter a user response via the Web browser application, for example, which is sent by wireless mobile terminal202and received by gateway110. Gateway110identifies whether the received user response is sufficient (e.g. whether the user name and password match prestored user name and password information, whether the user payment is accepted, whether the user acceptance is confirmed, etc.). If the user response is deemed sufficient, gateway110permits access to the data, applications, and/or functionality in or outside of WLAN104.

Again, in contrast to WLAN104, WLAN122may be a private communication network of an enterprise associated with wireless mobile terminal202. For devices attempting to access WLAN122via Internet120, gateway126is configured to permit or deny internal access to the data, applications, and/or functionality in WLAN122. For. devices connected in WLAN122via one of wireless APs128,130, and132, gateway126may be configured to permit or deny access to the data, applications, and/or functionality offered via WLAN122depending on whether or not a device has been authorized and what access rights are given upon authorization.

Communication may also be configured in accordance with Generic Access Network (GAN) standards. Using GAN based technologies, wireless mobile terminal202may also access communication services from a core network134of a Public Land Mobile Network (PLMN)132(e.g. cellular). GAN technology may provide, amongst other things, a voice communication service for wireless mobile terminal202via the WLAN hotspot. PLMN132includes a core network136, a plurality of base station controllers such as a base station controller (BSC)138coupled to core network136, and a plurality of base stations such as a base station (BS)140and a base station142coupled to associated BSCs138. Core network136, BSC138, and BS140operate in a conventional fashion as well-documented. Other PLMNs in the environment have a similar or the same architecture as PLMN132. Such environments may be referred to as cellular telecommunications networks.

Using GAN technologies, communications between WLAN104and core network134of PLMN132may be facilitated through a suitable connecting network such as a broadband, wide-area IP communication network (e.g. the Internet120) or any suitable public or private wide area network. Gateway/controller or GAN controller (GANC)136is provided between the Internet120and core network134of PLMN132in order to facilitate access to core network134by terminals through alternative links (e.g. radio links wireless APs112,114, and116) different than those conventional radio links offered in the PLMN132(e.g. radio links of base stations140and142). Thus, wireless mobile terminal202may also access services of core network134of PLMN132via WLANs, such as WLAN104, through use of a WLAN radio interface as opposed to a cellular telephony interface. For such communications, GANC136and wireless mobile terminal202are adapted to establish and maintain a (secure) tunnel connection between each other through the intervening networks.

As will be described in more detail later below, techniques of the present disclosure may be implemented in both the wireless mobile terminal202and the wireless AP116. Note that at least some of the wireless APs in WLAN104, such as wireless APs112,114, and116, may be connected to WLAN104through a network entity which may be referred to as an AP controller150. In this case, AP controller150may perform the techniques of the present disclosure instead of the AP itself. APs112,114, and116may include processing logic other than radio functionality, but the extent of such logic is governed by the medium access control (MAC) architecture of the AP. In this regard, there are different types of APs. For one, “thick APs” (i.e. local MAC implementations) perform all necessary data processing and relaying locally (i.e. within the AP). On the other hand, “thin APs” (i.e. or remote MAC implementations) typically include only physical (radio) layer processes, and communicate via a proprietary protocol with the AP controller. Here, the AP's 802.11 MAC layer is implemented on the AP controller, so all frames sent by the AP are processed by the AP controller and forwarded on as if the MAC layer in the AP controller was that of the AP. Finally, “fit APs” have gained popularity in recent years, as they combine both the intelligence of a local MAC implementation with the agility of a remote MAC implementation, by splitting real-time and non-real-time functionality between the AP and the AP controller.

AP controller150is configured to manage and configure APs in WLAN104, and may also serve as a router. In one centralized architecture embodiment, one or more AP controllers (e.g. AP controller150) manage a set number of deployed APs. The APs retrieve configuration from their AP controller, and report their status back to the AP controller for management purposes. In a typical usage case, data from an AP is tunneled back to its AP controller for processing, and sent onto the back haul network. Here, the AP controller serves as a router, receiving and processing layer-2 frames and switching layer frames onto the access network. The AP controller may also provide Simple Network Management Protocol (SNMP) data regarding its associated APs, or other types of monitoring information, such as graphs of traffic data, or numbers of associated users.

Referring now toFIG. 2, electrical components of a typical wireless mobile terminal202(e.g. a mobile station, an end station or “STA”, or user equipment “UE”, or the like) which operates with wireless APs of communication system100ofFIG. 1will be described. Wireless mobile terminal202may be representative of one or more terminals shown and described in relation toFIG. 1. Wireless mobile terminal202may be a two-way communication device having at least voice and/or advanced data communication capabilities, including the capability to communicate with other computer systems. Also, wireless mobile terminal202may be a wireless communication device which operates in accordance with an IEEE 802.11 standards. Depending on the functionality provided by wireless mobile terminal202, it may be referred to as a data messaging device, a two-way pager, a cellular-type telephone with data messaging capabilities, a wireless Internet appliance, or a data communication device (with or without telephony capabilities).

As shown inFIG. 2, wireless mobile terminal202is adapted to wirelessly communicate with wireless APs of WLANs, such as AP116of WLAN104ofFIG. 1. For communication with AP116, wireless mobile terminal202utilizes a communication subsystem211. Depending on the type of device, wireless mobile terminal202may also be adapted to wirelessly communicate with other systems such as cellular telecommunication systems. With such configuration, wireless mobile terminal202may be referred to as a “dual mode” terminal. Although wireless mobile terminal202may have separate and independent subsystems for these purposes, at least some portions or components of these otherwise different subsystems may be shared where possible.

Communication subsystem211includes a receiver212, a transmitter214, and associated components, such as one or more (e.g. embedded or internal) antenna elements216and218, local oscillators (LOs)213, and a processing module such as a baseband (BB) and media access control (MAC) processing module220. Communication subsystem may be or referred to as a radio frequency (RF) transceiver or wireless transceiver. As will be apparent to those skilled in the field of communications, the particular design of communication subsystem211depends on the communication network in which wireless mobile terminal202is intended to operate. In the present disclosure, communication subsystem211(including its associated processor/processing components) are operative in accordance with IEEE 802.11 standards.

Wireless mobile terminal202may send and receive communication signals through the network after required network procedures have been completed. Signals received by antenna216through the network are input to receiver212, which may perform such common receiver functions as signal amplification, frequency down conversion, filtering, channel selection, and like, and in example shown inFIG. 2, analog-to-digital (A/D) conversion. A/D conversion of a received signal allows more complex communication functions such as demodulation and decoding to be performed in BB/MAC processing module220. In a similar manner, signals to be transmitted are processed, including modulation and encoding, for example, by BB/MAC processing module220. These processed signals are input to transmitter214for digital-to-analog (D/A) conversion, frequency up conversion, filtering, amplification and transmission through the network via antenna218. BB/MAC processing module220not only processes communication signals, but may also provide for receiver and transmitter control. Note that receiver212and transmitter214may share one or more antennas through an antenna switch (not shown inFIG. 2), instead of having two separate dedicated antennas216and218as shown.

Since wireless mobile terminal202may be a handheld portable battery-powered device, it also includes a battery interface254for receiving one or more rechargeable batteries256. Such a battery256provides electrical power to most if not all electrical circuitry in wireless mobile terminal202, and battery interface254provides for a mechanical and electrical connection for it. Battery interface254is coupled to a regulator (not shown inFIG. 2) that provides a regulated voltage V to all of the circuitry.

Wireless mobile terminal202includes a microprocessor238(one type of processor or controller) that controls overall operation of wireless mobile terminal202. This control includes the communication techniques of the present disclosure. Communication functions, including at least data and voice communications, are performed through communication subsystem211. Microprocessor238also interacts with additional device subsystems such as a display222, a flash memory224, a random access memory (RAM)226, auxiliary input/output (I/O) subsystems228, a serial port230, a keyboard232, a speaker234, a microphone236, a (short-range) communication subsystem240, and any other device subsystems generally designated at242. Some of the subsystems shown inFIG. 2perform communication-related functions, whereas other subsystems may provide “resident” or on-device functions. Notably, some subsystems, such as keyboard232and display222, for example, may be used for both communication-related functions, such as entering a text message for transmission over a communication network, and device-resident functions such as a calculator or task list. Keyboard232may be a complete alphanumeric keyboard and/or telephone-type keypad. On the other hand, keyboard232and display222may be replaced or enhanced with a touch screen display or other suitable input mechanism, or replaced or enhanced with a voice-activated input module.

Operating system software used by microprocessor238may be stored in a persistent store such as flash memory224, which may alternatively be a read-only memory (ROM) or similar storage element (not shown). Those skilled in the art will appreciate that the operating system, specific device applications, or parts thereof, may be temporarily loaded into a volatile store such as RAM226. Microprocessor238, in addition to its operating system functions, enables execution of software applications on wireless mobile terminal202. A predetermined set of applications that control basic device operations, including data and/or voice communication applications, will normally be installed on wireless mobile terminal202during its manufacture. This includes applications or modules which are configured to perform the network selection techniques of the present disclosure. For this reason, microprocessor238(and any other processor(s) or modules of wireless mobile terminal202) may enable execution of particular applications or modules for performing enhanced network selection techniques for access to multiple aggregator services.

Another application that may be loaded onto wireless mobile terminal202may be a personal information manager (PIM) application having the ability to organize and manage data items relating to user such as, but not limited to, e-mail, calendar events, voice mails, appointments, and task items. The PIM application has the ability to send and receive data items via the wireless network. In one embodiment, PIM data items are seamlessly integrated, synchronized, and updated via the wireless network, with the wireless device user's corresponding data items stored and/or associated with a host computer system thereby creating a mirrored host computer on wireless mobile terminal202with respect to such items. This is especially advantageous where the host computer system is the wireless device user's office computer system. Additional applications may also be loaded onto wireless mobile terminal202through network, an auxiliary I/O subsystem228, serial port230, (short-range) communication subsystem240, or any other suitable subsystem242, and installed by a user in RAM226or a non-volatile store (not shown) for execution by microprocessor238. Such flexibility in application installation increases the functionality of wireless mobile terminal202and may provide enhanced on-device functions, communication-related functions, or both. For example, secure communication applications may enable electronic commerce functions and other such financial transactions to be performed using wireless mobile terminal202.

In a data communication mode, a received signal such as a text message, an e-mail message, or web page download will be processed by communication subsystem211and input to microprocessor238. Microprocessor238may further process the signal for output to display222or alternatively to auxiliary I/O device228. A user of wireless mobile terminal202may also compose data items, for example, using keyboard232in conjunction with display222and possibly auxiliary I/O device228. The composed items may be transmitted over a communication network through communication subsystem211.

For voice communications, the overall operation of wireless mobile terminal202is substantially similar, except that the received signals would be output to speaker234and signals for transmission would be generated by microphone236. Alternative voice or audio I/O subsystems, such as a voice message recording subsystem, may also be implemented on wireless mobile terminal202. Although voice or audio signal output may be accomplished primarily through speaker234, display222may also be used to provide an indication of the identity of a calling party, duration of a voice call, or other voice call related information, as some examples.

Serial port230inFIG. 2is normally implemented in a personal digital assistant (PDA)-type communication device for which synchronization with a user's desktop computer is a desirable, albeit optional, component. Serial port230enables a user to set preferences through an external device or software application and extends the capabilities of wireless mobile terminal202by providing for information or software downloads to wireless mobile terminal202other than through a wireless communication network. The alternate download path may, for example, be used to load an encryption key onto wireless mobile terminal202through a direct and thus reliable and trusted connection to thereby provide secure device communication.

Short-range communications subsystem240ofFIG. 2is an additional component that provides for communication between wireless mobile terminal202and different systems or devices, which need not necessarily be similar devices. In this embodiment, communication subsystem240is a BLUETOOTH® communication module to provide for communication with similarly enabled systems and devices. Note that the BLUETOOTH® standards may be defined by or based on BLUETOOTH® Specification Version 2.0, Volumes 1 and 2, for example.

Referring ahead toFIG. 4, which is shown is an illustrative representation of an exemplary user interface402of a communication device (wireless mobile terminal202ofFIGS. 1 and 2). Wireless mobile terminal202includes at least display222, keyboard232, speaker234, microphone236, and a cursor or view positioning mechanism such as a positioning wheel410(e.g. a scrollwheel) or a trackball433. Although shown enlarged inFIG. 4for clarity, this mobile communication device202is sized to be a handheld portable device. As an alternative to or in addition to positioning wheel410and/or trackball433, a wide range of one or more pointing or cursor/view positioning mechanisms such as a touch pad, a joystick button, a mouse, a touchscreen, a tablet, or other whether presently known or unknown, may be employed. The cursor may be or include a pointer, a movable item or other visual cue used to mark a position or point to another item on a display, in order to, for example, indicate position for data entry or for selection of the other item.

Keys428of keyboard232are disposed on a front face of a housing406and positioning wheel410is disposed at a side of housing406. Keyboard232is in the example form of a reduced QWERTY keyboard including a plurality of keys428that serve as input members. It can be seen that the arrangement of the characters448on keys428of keyboard424is generally of the QWERTY arrangement, albeit with many of keys428including two of characters448. In the example depiction of keyboard424, many of keys428include two characters, such as including a first character452and a second character456assigned thereto. Characters may include letters, digits, symbols and the like and can additionally include ideographic characters, components thereof, and the like. One of keys428of keyboard424includes as the characters448thereof the letters “Q” and “W”, and an adjacent key428includes as the characters448thereof the letters “E” and “R”. Keyboard424may be of other configurations, such as an AZERTY keyboard, a QWERTZ keyboard, a Dvorak keyboard, or other keyboard or keypad arrangement, and either reduced or not reduced (i.e. full). In a “full” or non-reduced keyboard or keypad arrangement, each key has a single letter (not multiple letters) of the alphabet assigned to it.

Among keys428of keyboard232are a <NEXT> key440and an <ENTER> key444. The <NEXT> key440, wherein, for example, “<NEXT>” may be a symbol or may be the word “next” provided (e.g. printed) on the key, may be pressed to provide a selection input to the processor and provides substantially the same selection input as is provided by a rotational input of positioning wheel410. Since <NEXT> key440is provided adjacent a number of other keys428of keyboard232, the user can provide a selection input to the processor substantially without moving the user's hands away from the keyboard232during a text entry operation. Another key, the <ESC> key445is disposed on the side of housing406adjacent positioning wheel438, although the same or similar key may be disposed as part of keyboard232. Among keys428of the keyboard424additionally is a <DEL> key486that can be provided to delete a text entry.

Positioning wheel410may serve as another input member and is both rotatable, as is indicated by an arrow412, to provide selection inputs to the processor, and also can be pressed in a direction generally toward housing406, as is indicated by an arrow414to provide another selection input to the processor.

Display222may include a cursor484that depicts generally where the next input or selection from user interface402will be received. Display222is shown inFIG. 4as displaying a home screen that represents a number of applications586(FIG. 3shows some of the example possible applications86) depicted as corresponding discrete icons488. Icons488include, for example, an Electronic Mail (E-Mail) icon490, a Calendar icon492, an Address Book icon494, a Tasks icon496, a Messages icon497, a MemoPad icon498, and a Search icon499, respectively.

As shown now further inFIG. 5, memory224of the wireless mobile terminal includes a plurality of applications or routines586associated with the visually displayed icons488ofFIG. 4for the processing of data. Applications586may be in any of a variety of forms such as, without limitation, software, firmware, and the like. Applications586include, for example, an Electronic Mail (E-Mail) application588(FIG. 5) associated with E-mail icon490(FIG. 4), a Calendar application590(FIG. 5) associated with Calendar icon492(FIG. 4), an Address Book application592(FIG. 5) associated with Address Book icon494(FIG. 4), a Tasks application594(FIG. 5) associated with Tasks icon496(FIG. 4), a MemoPad (Memos) application596(FIG. 5) associated with MemoPad icon498, a Web Browser application598(FIG. 5) associated with Web Browser icon497(FIG. 4), a Voice/Telephone application599(FIG. 5) associated with Voice/Telephone icon484, and a Search application500(FIG. 5) associated with Search icon499(FIG. 4). An operating system (OS) program516also resides in memory224.

The “home” screen output is shown inFIG. 4as currently active and constitutes the main “ribbon” application for displaying the icons488shown. An application, such as E-mail application588ofFIG. 5, may then be initiated (opened or viewed) from user interface402by providing a suitable user input to it. For example, E-mail application588may be initiated (opened or viewed) by rotating positioning wheel410to highlight E-mail icon490and providing a selection input by translating positioning wheel410in the direction indicated by arrow438. As another example, display222displays icon499associated with Search application500and accepts input from positioning wheel410to initiate a search from that icon499. Applications586may be additionally or alternatively initiated (opened or viewed) from user interface402by providing another suitable input to it, such as by suitably rotating or “rolling” trackball433and providing a selection input by, for example, pushing the trackball433(e.g. somewhat similar to positioning wheel410except into the plane ofFIG. 4).

Movement, navigation, and/or scrolling with use of a cursor/view positioning mechanism is beneficial given the relatively large size of visually displayed information and the compact size of display222ofFIG. 4, and since information and messages are typically only partially presented in the limited view of display222at any given moment. As previously described, positioning wheel410is one helpful cursor/view positioning mechanism to achieve such movement. Positioning wheel410, which may be referred to as a scrollwheel, specifically includes a circular disc which is rotatable about a fixed axis of housing302and may be rotated by the end user's index finger or thumb. When the information or message is being partially displayed, an upwards rotation of positioning wheel410causes an upwards scrolling such that display222presents viewing of an upper portion of the information or message. Similarly, a downwards rotation of positioning wheel410causes a downwards scrolling such that display222presents viewing of a lower portion of the information or message. Positioning wheel410is mounted along a fixed linear axis such that the end user can depress positioning wheel410inwards toward housing406(e.g. with the end user's index finger or thumb) for selection of information. Again, see the direction indicated by an arrow414of positioning wheel410shown.

Although a specific wireless mobile terminal202has just been described, any suitable mobile communication device or terminal may be part of the inventive methods and apparatus which will be described in fuller detail below. Note that many components of wireless mobile terminal202shown and described may not be included (e.g. a full QWERTY keypad may be optional). Again, keyboard232and display222may be substituted or enhanced with a touch screen display or other suitable input mechanism, or enhanced or replaced with a voice-activated input module. Also, although the description of the architecture relates to a specific example for illustration, where the WLAN is an IEEE 802.11-based network, different environments may be applicable as well. The wireless network may be a WiMAX-based network (i.e. IEEE 802.16), or an Ultra-WideBand (UWB)-based network (i.e. IEEE 802.15), as a few examples.

Referring back toFIG. 1briefly, and as described earlier, wireless mobile terminal202may remain unprotected against incoming rogue IP data traffic while operating in the WLAN if no suitable technique is employed to control the same. Rogue data traffic may be or include high data rate “pings” with large data packets, denial of service attacks, network misconfiguration, and/or other network errors. Undesired data traffic may be received from server119ofFIG. 1, which may be deemed a “rogue” device, while desirable data traffic may be received from server118. Undesired data traffic may cause excessive battery power drain and performance degradation in the wireless mobile terminal202.

Referring now toFIG. 3, a process flow diagram illustrating a technique for use in controlling data traffic for a wireless mobile terminal in a wireless communication network is shown. In general, the techniques described in relation to the diagram ofFIG. 3may be performed by one or more controllers or processors of a wireless mobile terminal (e.g. wireless mobile terminal202ofFIGS. 1-2) and an access point (AP) (e.g. AP116ofFIG. 1) or an AP controller thereof (e.g. AP controller150). A computer program product which may embody the technique may include a computer readable medium (e.g. memory of the wireless mobile terminal or AP, computer disk, CD-ROM, etc.) having computer instructions stored therein which are executable by the one or more processors for performing the technique.

Wireless mobile terminal202receives data traffic communicated from server118, which is one type of a source device (process step302ofFIG. 3). Wireless mobile terminal202also receives data traffic communicated from server119which is another type of source device (process step304ofFIG. 3). The communication of data traffic in process steps302and304may occur at the same time, substantially at the same time, or at different times. In this example, data traffic from server119may become undesired data traffic, in which server119will be deemed a “rogue” device.

Wireless mobile terminal202regularly operates to monitor incoming data traffic. In particular, wireless mobile terminal202identifies whether a processing requirement for processing the data traffic exceeds a predetermined threshold (process step306ofFIG. 3). The processing requirement assess may relate to data traffic from server119, or from both servers118and119, for example. The processing requirement may relate to a buffering requirement in a memory buffer of the wireless mobile terminal202, a processing speed requirement of a processor of the wireless mobile terminal202, or both, for example. Alternatively, wireless mobile terminal202may identify a condition different from an excessive processing requirement in step306(e.g. identifying data traffic that is not excessive but unwanted, unneeded, or having a lower priority that other data traffic).

If an excessive processing requirement or other condition is identified in process step306, then wireless mobile terminal202reads the source IP address of the undesired data traffic from server119and stores such address. Wireless mobile terminal202then produces a control message and transmits it to AP116(process step308ofFIG. 3. The control message includes the source IP address corresponding to server119, a destination address corresponding to wireless mobile terminal202, and a time value indication. The control message is defined to instruct AP116(or the AP controller thereof) to prohibit the transmission of the data traffic originating from the source IP address of server119and destined to the destination IP address of wireless mobile terminal202, for a time period indicated by the time value indication.

The time value indication may be an indication of a time period or a time in the future. The time period or time may be chosen “on-the-fly” by the wireless mobile terminal from a range of values depending on the need or circumstance at the wireless mobile terminal. In one example, the selected time period may be a value between 0 and 60 seconds. In another example, the selected time period may be a value between 0 and 5 minutes.

Prior to transmitting the control message, wireless mobile terminal202encrypts at least a portion of the control message with use of an encryption key associated with wireless mobile terminal202or associated user, or network.

The control message is then received at AP116, which proceeds to authenticate the message (process step310ofFIG. 3). During the authentication, AP116attempts to decrypt the at least portion of the control message using the encryption key, if known or available. If AP116is unable to successfully decrypt the at least portion of the control message, then AP116ignores the control message and refrains from performing the further steps.

On the other hand, if AP116is able to successfully decrypt the at least portion of the control message, then authentication is successful and the further steps are performed. For one, AP116transmits a confirmation message back to wireless mobile terminal202(process step312ofFIG. 3), and this confirmation message is received at wireless mobile terminal202. In addition, AP116adds a new record to a table stored in memory. The stored table is utilized by AP116for data traffic monitoring (i.e. prohibiting such data traffic from being transmitted). Each record may include a source IP address, a destination IP address, and a time value indication, for example, for data traffic that is prohibited from being transmitted.

In this case, the new record for wireless mobile terminal202includes the source IP address corresponding to server119, the destination address corresponding to wireless mobile terminal202, and the time value indication. Thus, in the present example, the table contains a new record corresponding to server119from which undesired data traffic is being communicated, but does not contain a record corresponding to server118from which desired data traffic is being communicated.

AP116then monitors all incoming data packets which are destined for transmission from the AP116, using the records in the table (process step314ofFIG. 3). AP116also initializes and runs a timer with a time value indicated by the time value indication (process step316ofFIG. 3).

In the monitoring of process step314, AP116monitors all incoming data traffic for identifying a source IP address that matches the source IP address corresponding to server119and a destination IP address that matches the destination IP address corresponding to wireless mobile terminal202. More particularly, AP116reads a current source IP address from a source address field of the data traffic, and a current destination IP address from a destination address field of the data traffic. Then, AP116compares the current source IP address with the source IP address from the control message, and the current destination IP address with the destination IP address from the control message. A matching of the source addresses and a matching of the destination addresses will cause the AP116to prohibit further transmission.

When AP116receives data traffic communicated from server118intended for wireless mobile terminal202(process step318ofFIG. 3), AP116checks the data traffic (process step320ofFIG. 3). As the source IP addresses will fail to match, AP116will cause this desired data traffic to be transmitted from the AP116to wireless mobile terminal202. When AP116receives data traffic communicated from server119intended for wireless mobile terminal202(process step322ofFIG. 3), AP116will also check this data traffic (process step324ofFIG. 3). As the source and destination IP addresses will match, AP116will prohibit transmission of the undesired data traffic from the AP116. AP116proceeds to discard or delete, from its memory, this undesired data traffic without transmission.

At some time, the timer running in AP116will expire (step326ofFIG. 3). In response, AP116deletes the record associated with server119from the stored table, and will thereafter allow the data traffic associated with server119to be transmitted. Thus, when AP116receives data traffic communicated from server118intended for wireless mobile terminal202(process step330ofFIG. 3), AP116checks the data traffic (process step332ofFIG. 3). As the source IP addresses will fail to match, AP116will cause this data traffic to be transmitted from the AP116to wireless mobile terminal202. Similarly, when AP116receives data traffic communicated from server119intended for wireless mobile terminal202(process step334ofFIG. 3), AP116will also check this data traffic (process step336ofFIG. 3). As the source and destination IP addresses will fail to match in this case as well, AP116will cause this data traffic to be transmitted from the AP116to wireless mobile terminal202.

Note that, in process step334, wireless mobile terminal202may (soon) again identify that data traffic from server119is undesirable. In such case, wireless mobile terminal202operates to repeat process steps306,308, and312to again prohibit AP transmission and receipt of such data traffic. This process may repeat over and over, even indefinitely, as needed by wireless mobile terminal202, especially if the time period provided by wireless mobile terminal202is a relatively small value. The processing burden of such repeated control messaging is relatively small.

Alternatively inFIG. 3, the communication of data traffic from server119to wireless mobile terminal202will cease within the time period provided to the AP116. In this case, wireless mobile terminal202does not need to send any further control messages to AP116regarding data traffic from server119.

As apparent, wireless mobile terminal202is advantageously provided with full control over stopping undesirable data traffic, “on-the-fly” as needed. Processing power and battery power consumption in wireless mobile terminal202are reduced. Further, RF bandwidth in the WLAN is conserved. The local nature of such processing (i.e. the processing being performed at the AP or controller thereof) is advantageous as it is efficient and expedient. Since an AP or controller thereof already inherently functions to inspect data packets for transmission to wireless mobile terminals, the additional processing needed for the purpose of the present techniques is minimal and efficient. The relatively short time periods provided for the prohibition of such data traffic is also advantageous, as the need to prohibit the data traffic may be short-lived or temporary, and the source of such data traffic may otherwise be a reliable source. The processing burden of repeated control messaging is relatively small in the network.

Thus, techniques for use in controlling data traffic in a wireless local area network (WLAN) which includes at least one access point (AP) have been described. In one illustrative example, a wireless mobile terminal is associated with the AP and receives data traffic from a source device via the AP. The wireless mobile terminal identifies whether a processing requirement for processing data traffic exceeds a predetermined threshold. In response to such identifying, the wireless mobile terminal produces a control message which includes a source address corresponding to the source device and a destination address corresponding to the terminal, and sends the control message to the AP. The control message is defined to instruct the AP to prohibit transmission of the data traffic originating from the source address and destined to the destination address. In one embodiment, the control message also includes a time value indication, for instructing the AP to prohibit transmission of the data traffic for a time period indicated by the time value indication.

A corresponding technique in an AP or controller thereof may also be employed. A control message is received from a wireless mobile terminal at the AP or controller thereof. The control message includes a source address corresponding to a source device and a destination address corresponding to the wireless mobile terminal. In response to receiving the control message, the AP or controller thereof prohibits AP transmission of data traffic which originates from the source address and is destined to the destination address of the wireless mobile terminal. In one embodiment, the control message further includes a time value indication, and the prohibiting of transmission of the data traffic is performed only for a time period indicated by the time value indication, after which the AP or controller thereof causes further data traffic to be transmitted from the AP to the wireless mobile terminal.

In other embodiments, the technique may be employed in any network controller or processor, different from an AP or controller thereof. In such technique, the controller receives a control message from a wireless mobile terminal. The control message includes a destination address corresponding to the wireless mobile terminal, a source address corresponding to a source device, and a time value indication. In response to receiving the control message, the controller prohibits the transmission of the data traffic originating from the source address and destined to the destination address, only for a time period indicated by the time value indication.

The above-described embodiments of the present disclosure are intended to be examples only. Those of skill in the art may affect alterations, modifications and variations to the particular embodiments without departing from the scope of the application. In other environments or embodiments, for example, any controller or processor in the network may be utilized for such control. The invention described herein in the recited claims intends to cover and embrace all suitable changes in technology.