Mobile phone authentication in WiFi coverage

A method of providing a wireless communication link to a mobile communication device. The method comprises providing a first wireless communication link by a first WiFi access point (AP) to the mobile device, where the first AP broadcasts a first SSID, establishing a communication session between the mobile device and a destination communication device via the first wireless communication link, determining locations of the mobile device by a server, and, based on a change of the locations of the mobile device, sending a WiFi handoff command by the server to a second WiFi AP, where the WiFi handoff command comprises authentication credentials of the mobile device. The method further comprises providing a second wireless communication link based on the authentication credentials by a second AP to the mobile device, where the second AP broadcasts the first SSID and the communication session is continued over the second wireless communication link.

CROSS-REFERENCE TO RELATED APPLICATIONS

Not applicable.

REFERENCE TO A MICROFICHE APPENDIX

Not applicable.

BACKGROUND

Mobile communication devices are typically associated with a service plan offered by a particular wireless communication service provider. When the mobile device is outside of the wireless coverage area of the network infrastructure of the wireless communication service provider, the mobile device may not be capable of conducting communication activity, although there may be wireless coverage available at that location that is provided by other wireless communication service providers. Some wireless communication service providers make roaming agreements with alternative service providers such that a wireless communication service provider can obtain a wireless link from the other wireless communication service provider. Such cellular roaming may involve the mobile communication device authenticating with the cell site of the other wireless communication service provider (i.e., the cell site of the roaming network provider) based on wireless credentials stored in a SIM card of the mobile communication device and provided to the cell site. Said in other words, the cell site may authenticate the roaming mobile communication device with the roaming network provider and not back in the home network.

SUMMARY

In an embodiment, a method of providing a wireless communication link to a mobile communication device is disclosed. The method comprises providing a first wireless communication link by a first WiFi access point to the mobile communication device, where the first WiFi access point broadcasts a first service set identifier (SSID), establishing a communication session between the mobile communication device and a destination communication device via the first wireless communication link, and determining locations of the mobile communication device by a server computer. The method further comprises, based on a change of the locations of the mobile communication device, sending a WiFi handoff command by the server computer to a second WiFi access point, where the WiFi handoff command comprises authentication credentials124of the mobile communication device and providing a second wireless communication link based on the authentication credentials by a second WiFi access point to the mobile communication device, where the second WiFi access point broadcasts the first SSID and the communication session is continued over the second wireless communication link, whereby the mobile communication device is provided mobile communications connectivity by a plurality of WiFi access points.

In another embodiment, a method of providing a wireless communication link to a mobile communication device is disclosed. The method comprises providing a first wireless communication link by a first WiFi access point to the mobile communication device, where the first WiFi access point broadcasts a first service set identifier (SSID), receiving mobile device credentials by the first WiFi access point via the first wireless communication link from the mobile communication device, sending the mobile device credentials by the first WiFi access point to a server in a first communication network, and determining by the server that the mobile device credentials are associated with a second communication network. The method further comprises the server executing an authentication method of an application programming interface (API) provided by the second communication network, where executing the authentication method comprises providing the mobile device credentials to the second communication network, receiving authentication confirmation by the server from the API provided by the second communication network, and creating authentication credentials for the mobile communication device by the server based on the authentication confirmation. The method further comprises sending the authentication credentials by the server to the first WiFi access point, receiving the authentication credentials by the first WiFi access point from the server, and, in response to receiving the authentication credentials, establishing a communication session between the mobile communication device and a destination communication device by the first WiFi access point via the first wireless communication link.

In yet another embodiment, a method of providing a wireless communication link to a mobile communication device is disclosed. The method comprises providing a first wireless communication link by a first WiFi access point to the mobile communication device, establishing a communication session between the mobile communication device and a destination communication device via the first wireless communication link, and determining locations of the mobile communication device by a server computer. The method further comprises, based on a change of the locations of the mobile communication device, sending a WiFi-to-cellular handoff command by the server computer to a cell site, where the WiFi-to-cellular handoff command comprises authentication credentials of the mobile communication device and providing a second wireless communication link based on the authentication credentials by the cell site to the mobile communication device, where the communication session is continued over the second wireless communication link.

DETAILED DESCRIPTION

The present disclosure teaches providing seamless communications connectivity to mobile communication devices when outside of customary wireless communication coverage. For example, a user may travel to a foreign country where the radio frequency bands of his or her mobile communication device are incompatible with the local cellular radio frequency bands. For example, a user may be inside a building, such as a large airport, where cellular coverage is unavailable. In this case, a WiFi radio transceiver of the mobile communication device may establish a wireless communication link with a first WiFi access point, where the first WiFi access point has a first service set identifier (SSID). The mobile communication device may use the wireless communication link to establish a communication session, for example a telephone voice call or a data session. As the user moves, for example walks down a corridor of an airport to reach his or her gate, the wireless communication link may be handed off from the first WiFi access point to a second WiFi access point, where the second WiFi access point also has the first SSID.

Coordination of the WiFi handoff from the first WiFi access point to the second WiFi access point may be coordinated by a server computer that tracks position and/or WiFi signal strength data associated with the mobile communication device and triggers the WiFi handoff. As part of this coordination effort, the server computer commands the second WiFi access point to communicate on the first SSID and further conveys communication session state information associated with the mobile communication device to the second WiFi access point, whereby the second WiFi access point is able to support the on-going call with the mobile communication device without an interruption. It is understood that the second WiFi access point may continue supporting on-going calls with other mobile communication devices based on one or more different SSIDs. For the user of the mobile communication device, the WiFi handoff from the first WiFi access point to the second WiFi access point and from the second WiFi access point to a third WiFi access point and so on is transparent. Said in other words, the user does not need to establish a new WiFi connection and the communication session does not terminate but continues uninterrupted and seamless. This provides improved functionality for users, who do not need to repeatedly establish communications with different WiFi access points as they move through an airport or other area. Or, alternatively, this avoids the users losing communication service and having to repeatedly re-establish a communication session. This system, further, can reduce the processing burden on WiFi access points in that they need not perform a full-up WiFi connection process (e.g., conduct authorization steps and/or authentication steps) when handoffs occur—rather the session state information is passed to it without having to be regenerated.

The WiFi access points that participate in the WiFi communication hand-off session described above may each be associated with a SSID that it broadcasts for initiating a communication link with an unconnected mobile communication device (e.g., a mobile communication device that is not connected in an on-going WiFi communication session). WiFi access points that participate in such a WiFi hand-off network may be assigned different SSIDs for broadcast purposes.

When the first WiFi access point initially interacts with the mobile communication device, the mobile communication device provides identifying information to the first WiFi access point. This identifying information may comprise a unique hardware identifier such as a mobile equipment identity (MEID) or an electronic serial number (ESN) or some other hardware identifier. This identifying information may comprise other information such as a phone number of the device. This identifying information may comprise an identity of a home carrier network or home wireless communication service provider with whom the mobile communication device has a wireless communication service subscription. The first WiFi access point provides the identifying information to the server computer.

The server computer determines a home wireless communication service provider with whom the mobile communication device has a service subscription. To authenticate the wireless communication device for wireless communication service, the server computer invokes a method of an application programming interface (API) of a computer system operated by the home service provider, including the identifying information in the method call. If the method call authenticates the wireless communication device, the method returns authentication credentials for the device comprising authentication information, authentication keys, and/or an authentication token to the server computer. If the device is authenticated successfully, the server sends the authentication credentials to the first WiFi access point, and the first WiFi access point provides a communication connection to the mobile communication device. If the method call fails, the server informs the first WiFi access point, and the first WiFi access point refuses the communication connection to the mobile communication device. When the server determines to handoff wireless coverage from the first WiFi access point to the second WiFi access point, the server sends a WiFi handoff command to the second WiFi access point with the authentication credentials and sends a WiFi drop command to the first WiFi access point. It is noted that the server can handoff the communication connection from a WiFi access point to a customary cell site or to a picocell site in the same seamless manner, passing the authentication credentials in the handoff command.

This method of providing wireless communication links and wireless communication service to mobile communication devices can be provided as an alternative to traditional roaming. This method of providing wireless communication links and wireless communication service to mobile communication devices can be provided to mobile communication devices from foreign countries whose radio frequency bands are not compatible with cellular radio bands in the United States, though in this case the mobile communication device may not be handed off from a WiFi access point to a cell site.

Turning now toFIG. 1, a communication system100is described. In an embodiment, system100comprises a mobile communication device102(user equipment—UE) having a WiFi radio transceiver104, a WiFi access point (AP)106, a network108, and a destination communication device110. The system100further comprises a mobility server116executing a mobility application118, and one or more home carrier computer systems. The mobile communication device102may be a mobile phone, a smart phone, a personal digital assistant (PDA), a headset computer, a wearable computer, a laptop computer, a notebook computer, a tablet computer, or other mobile communication device. In some embodiments, the mobile communication device102comprises a cellular radio transceiver126which may establish a wireless communication link with a cell site128according to a long term evolution (LTE), a code division multiple access (CDMA), a global system for mobile communication (GSM), or a worldwide interoperability for microwave access (WiMAX) wireless communication protocol. In some embodiments, the mobile communication device102may comprise a cellular radio transceiver126, but it may be unable to establish a communication link with the cell site128because the frequency bands supported by the cellular radio transceiver126may be incompatible with the frequency bands of the cell site128, as for example when the mobile communication device102is configured for use in a foreign country and the cell site128is configured for use in the United States. The network108comprises one or more public networks, one or more private networks, or a combination thereof.

In an embodiment, the mobile communication device102further comprises a memory111, and the memory111stores a device identity112and/or other information that is unique to the device102or to a subscription account associated with the device102. In an embodiment, the device identity112may be stored in something other than the memory111such as some other electronically readable media. The WiFi radio transceiver104may establish a wireless link with the WiFi AP106and provide the device identity112to the WiFi AP106. For example, the WiFi radio transceiver104may send a communication connection request message to the WiFi AP106, where the connection request message embeds or otherwise carries the device identity112. In an embodiment, the communication connection request message may identify the communication requested by the mobile communication device102to be something other than a customary device-WiFi communication, for example the connection request message may identify a seamless communication session type of communication.

The WiFi AP106may respond to the connection request message by sending a authentication request message along with the device identity112to the mobility application118executing on the mobility server116. The mobility application118determines a home carrier network associated with the mobile communication device102(i.e., the wireless communication service provider with which the mobile communication device102has a service subscription) based on the device identity112. The mobility application118then invokes an authentication method of an application programming interface (API) provided by the home carrier computer system120provided by that home carrier network, providing device identity112and optionally a location of the device102in the method call. In an embodiment, the mobile communication device102is a foreign device and the home computer carrier computer system120is a foreign communication network. In another embodiment, the device102is a United States-based device and the home computer carrier computer system120is a United States-based communication network. The home carrier computer system120uses the device identity112to determine if the mobile communication device102has a subscription account and whether the device102is authorized to use the seamless communication session type of communication. If the device is authorized, authorization credentials are returned by the home carrier computer120to the mobility application118, and the mobility application118stores the authentication credentials122in a non-transitory memory of the mobility server116.

The WiFi AP106may then provide a communication session or communication connection to the mobile communication device102. The device102may use the communication session to communicate to the destination communication device110, such as to another mobile communication device to complete a voice call, to a web server to download or upload data, to a computer system, or to another device. The communication session or communication channel may be a vehicle over which a plurality of data messages pass over an extended time duration. In an embodiment, the communication session or communication channel may be provided as a transport control protocol (TCP) session or connection.

As the mobile communication device102moves, the mobility application118monitors this movement and evaluates the desirability of handing off the wireless link between the device102and the WiFi AP106to a different WiFi AP or to the cell site128. The mobility application118may learn of the location of the mobile communication device102by receiving self-location information from the device102via the WiFi AP106. Alternatively, the mobility application118may locate the mobile communication device102using trilateration techniques (e.g., comparing signal strengths received by a plurality of WiFi APs themselves located at known locations and determining location of the device102by analyzing these signal strengths in the context of the known locations of the WiFi APs).

Turning now toFIG. 2, migration of the communication session from a first WiFi AP106to other WiFi APs or to the cell site128is described. The mobile communication device102is shown at a first location where it is labeled102a, a second location labeled102b, a third location labeled102c, and a fourth location labeled102d. The first WiFi AP106, the second WiFi AP140, and the third WiFi AP142all employ the same SSID. In an embodiment, all WiFi APs that support the behavior described herein, for example all WiFi APs within the United States that support the described behavior, share the same single SSID. Alternatively, in an embodiment, all WiFi APs that support the behavior described herein and that are located within a contiguous area, for example within the same airport, all share the same single SSID. The use of the same SSID promotes seamless and transparent handoff of a communication session or communication connection among a plurality of different WiFi APs.

At the first location, the device102is provided a wireless communication link by the first WiFi AP106. The device102may establish a communication session or communication connection via the first WiFi AP106and the network108to the destination communication device110. As the mobile communication device102moves, for example as a user of the device102walks in an airport or other location, the mobility application118may send a handoff command message along with the authentication credential122for the device102to the second WiFi AP140. The second WiFi AP140provides a wireless link to the mobile communication device102, and the first WiFi AP106takes down its wireless link to the mobile communication device102, for example in response to receiving a link release command message from the mobility application118.

As the mobile communication device102continues to move from location102bto102c, the mobility application118may send a handoff command message along with the authentication credential122to the third WiFi AP142. The third WiFi AP142provides a wireless link to the mobile communication device102based on receiving the authentication credential122in the handoff command message from the mobility application118, and the second WiFi AP140takes down its wireless link to the mobile communication device102, for example in response to receiving a link release command message from the mobility application118.

In an embodiment (i.e., in an embodiment of the device102in which the cellular radio transceiver126is able to communicate on at least one of the frequency bands supported by the cell site128), as the mobile communication device102continues to move from location102cto location102d, the mobility application118may send a handoff command message along with the authentication credential122to the cell site128. The cell site128provides a cellular wireless link to the mobile communication device102based on receiving the authentication credential122in the handoff command message from the mobility application118. It is noted that the device102does not authenticate directly with the cell site128and does not provide information from its SIM card to the cell site128. The third WiFi AP142takes down its wireless link to the mobile communication device102, for example in response to receiving a link release command message from the mobility application118. In some embodiments (i.e., in an embodiment of the device102in which the cellular radio transceiver126is not able to communicate on any of the frequency bands supported by the cell site128), the communication session or communication connection may be taken down or dropped as the mobile communication device102moves away from the wireless coverage of the third WiFi AP142.

In this way, the mobile communication device102is provided an uninterrupted communication session or communication connection while migrating seamlessly from the first WiFi AP106to the second WiFi AP140, from the second WiFi AP140to the third WiFi AP142, and, optionally, from the third WiFi AP142to the cell site128, without re-authenticating, and without providing SIM information.

Turning now toFIG. 3, a method200is described. At block202, a first WiFi access point provides a first wireless communication link to the mobile communication device, where the first WiFi access point broadcasts a first service set identifier (SSID). At block204, establish a communication session between the mobile communication device and a destination communication device via the first wireless communication link

At block206, a server computer determines locations of the mobile communication device. At block208, based on a change of the locations of the mobile communication device, the server computer sends a WiFi handoff command to a second WiFi access point, where the WiFi handoff command comprises authentication credentials of the mobile communication device.

At block210, a second WiFi access point provides a second wireless communication link based on the authentication credentials to the mobile communication device, where the second WiFi access point broadcasts the first SSID and the communication session is continued over the second wireless communication link.

The method200may further comprise, based on a change of the locations of the mobile communication device, sending a WiFi handoff command by the server computer to a third WiFi access point, where the WiFi handoff command comprises authentication credentials of the mobile communication device and providing a third wireless communication link based on the authentication credentials by a third WiFi access point to the mobile communication device, where the third WiFi access point broadcasts the first SSID and the communication session is continued over the third wireless communication link.

Turning now toFIG. 4AandFIG. 4B, a method220is described. At block222, a first WiFi access point provide a first wireless communication link to the mobile communication device, where the first WiFi access point broadcasts a first service set identifier (SSID). At block224, the first WiFi access point receives mobile device credentials via the first wireless communication link from the mobile communication device. At block226, the first WiFi access point sends the mobile device credentials to a server in a first communication network.

At block228, the server determines that the mobile device credentials are associated with a second communication network. At block230, the server executes an authentication method of an application programming interface (API) provided by the second communication network, where executing the authentication method comprises providing the mobile device credentials to the second communication network

At block232, the server receives authentication confirmation from the API provided by the second communication network. At block234, the server creates authentication credentials for the mobile communication device based on the authentication confirmation. At block236, the server sends the authentication credentials to the first WiFi access point.

At block238, the first WiFi access point receives the authentication credentials from the server. At block240, in response to receiving the authentication credentials, the first WiFi access point establishes a communication session between the mobile communication device and a destination communication device via the first wireless communication link.

Turning now toFIG. 5, a method250is described. At block252, A first WiFi access point provides a first wireless communication link to the mobile communication device, where the first WiFi access point broadcasts a first service set identifier (SSID). At block254, establish a communication session between the mobile communication device and a destination communication device via the first wireless communication link. At block256, a server computer determines locations of the mobile communication device.

At block258, based on a change of the locations of the mobile communication device, the server computer sends a WiFi-to-cellular handoff command to a cell site, where the WiFi handoff command comprises authentication credentials of the mobile communication device. At block260, the cell site provides a second wireless communication link based on the authentication credentials to the mobile communication device, where the communication session is continued over the second wireless communication link and the cell site provides the second wireless communication link according to one of a long term evolution (LTE), a code division multiple access (CDMA), a global system for mobile communication (GSM), or a worldwide interoperability for microwave access (WiMAX) wireless communication protocol.

In an embodiment, the method250further comprises, based on a change of the locations of the mobile communication device, sending a WiFi handoff command by the server computer to a second WiFi access point, where the WiFi handoff command comprises authentication credentials of the mobile communication device and providing a third wireless communication link based on the authentication credentials by a second WiFi access point to the mobile communication device, where the second WiFi access point broadcasts the first SSID and the communication session is continued over the third wireless communication link. The server computer may further send a wireless link release command to the cell site.