Patent ID: 8413213

Claim:
A method comprising: determining by a first communication device a security class from a set of security classes each security class based at least on a type of encryption algorithm or a type of authentication method implemented by the first communication device for establishing secured data transactions between the first communication device and one of multiple available access points over a communication network; selecting by the first communication device a particular access point from among the multiple available access points for establishing a connection between the first communication device and the particular access point based on said security class, said particular access point selected satisfies a security policy of said security class; and validating an authentication server associated with said one of the multiple available access points in response to said one of the multiple available access points is determined to satisfy said security policy; wherein said determining comprises analyzing beacons from the access points to determine available encryption algorithms and authentication methods available from the access points, wherein said selecting said one of the multiple available access points comprises determining whether one or more security-related characteristics of a second communication device satisfy said security policy corresponding to said security class, and wherein said validating said authentication server comprises comparing between received identification details of said authentication server and stored server details.