SECURE ON-LINE SIGNUP AND PROVISIONING OF WIRELESS DEVICES

摘要

Embodiments of a mobile device and method for secure online sign-up and provisioning of credentials for Wi-Fi hotspots are generally described herein. In some embodiments, provisioning occurs using a service set identifier (SSID) to associate with a hotspot and retrieve a virtual LAN (VLAN) identifier. The VLAN identifier is used to complete the signup and provisioning process. In some embodiments, a hotspot may implement a primary SSID and a dependent SSID. The mobile device associates with the hotspot using the dependent SSID to perform the secure online signup and provisioning process. Once credentials are obtained using the signup and provisioning process, the device can connect to the hotspot using the primary SSID and the already provisioned credentials. The provisioned credentials may include certificates, username/password, or SIM-type credentials.

主权项

1. A station (STA) configured for secure on-line sign-up and provisioning of credentials for Wi-Fi Hotspot 2.0 networks, the STA configured to:
identify a Wi-Fi hotspot implementing a primary Service Set Identifier (SSID) and a dependent SSID; associate with the Wi-Fi hotspot using the dependent SSID; establish a transport-layer-security (TLS) session with an online signup (OSU) server through the Wi-Fi hotspot; exchange provisioning messages with the OSU server to sign up for a Wi-Fi subscription and to provision credentials; retrieve a subscription management object that includes a credential section; disassociate with the Wi-Fi hotspot; and associate with the Wi-Fi hotspot using the primary SSID and information in the credential section of the subscription management object.