Method and system for onboarding wireless-enabled products in a network

Patent metadata

Field	Value
Publication number	US-9935962-B2
Application number	US-201615000105-A
Country	US
Kind code	B2
Filing date	Jan 19, 2016
Priority date	Jan 19, 2016
Publication date	Apr 3, 2018
Grant date	Apr 3, 2018

Abstract

Various embodiments provide systems and methods for connecting wireless-enabled products to wireless networks. Customer network credentials may be stored in a server along with a customer identifier (“customer ID”) during one-time registration. When a wireless-enabled product is purchased, a product identifier (“product ID”) and the customer's ID are forwarded to the server, which correlates the two identifiers, linking the purchased product to the customer. When the wireless-enabled product is powered on, the product accesses the server via a public network connection, and sends the product ID and a security token to the server. The server uses the product ID and the security token to authenticate the product. Once authenticated, the server uses the correlated customer ID to look up the network credentials for the customer's private network, and provides the network credentials to the wireless-enabled product. The wireless-enabled product then uses the downloaded credentials to access the customer's private network.

First claim

What is claimed is:

1. A method of facilitating connecting a wireless-enabled product to a private communication network, comprising:
obtaining, by a server, a customer ID and network credentials for accessing a customer's private communication network during a sign up procedure for a customer loyalty program;
storing in the server the received customer ID and the received network credentials;
receiving in the server from a computing device enabling a purchase transaction in which the customer purchases the wireless-enabled product, a device ID associated with the wireless-enabled product and the customer ID of the customer;
storing in the server an association of the customer ID with the device ID;
receiving in the server the device ID and a security token from the wireless-enabled product through a network connection initiated by the wireless-enabled product;
authenticating, by the server, the wireless-enabled product based on the received device ID and security token; and
providing, by the server to the wireless-enabled product, the network credentials for accessing the private communication network of the customer in response to authenticating the wireless-enabled product.

2. The method of claim 1 , further comprising:
receiving by the server the device ID and a device security key from a manufacturer of the wireless-enabled product; and
storing the device security key in memory accessible by the server linked to the device ID,
wherein authenticating, by the server, the wireless-enabled product based on the received device ID and security token comprises:
using the received device ID to access the device security key from memory;
using the stored device security key to authenticate the received security token; and
authenticating the wireless-enabled product if the received device ID enables the server to access the device security key that authenticates the received security token.

3. The method of claim 2 , wherein:
the device security key received from the manufacturer of the wireless-enabled product comprises information that the server can use to generate a security token; and
using the stored device security key to authenticate the received security token comprises:
using the device security key received from the manufacturer of the wireless-enabled product to obtain a generated security token; and
comparing the generated security token to the received security token.

4. The method of claim 2 , wherein:
the device security key received from the manufacturer of the wireless-enabled product comprises a manufacturer-provided security token; and
using the stored device security key to authenticate the received security token comprises comparing the manufacturer-provided security token to the received security token.

5. The method of claim 1 , wherein the network connection initiated by the wireless-enabled product is a connection to the server through a guest access mechanism of an access device for the customer's private communication network.

6. The method of claim 1 , wherein the network connection initiated by the wireless-enabled product is a connection through a public network.

7. A server configured to facilitate connecting a wireless-enabled product to a private communication network, comprising:
a memory,
a server processor coupled to the memory, wherein the server processor is configured with processor-executable instructions to perform operations comprising:
obtaining a customer ID and network credentials for accessing a customer's private communication network during a sign up procedure for a customer loyalty program;
storing the received customer ID and the received network credentials;
receiving from a computing device involved in a purchase of the wireless-enabled product by the customer the customer ID and a device ID of the wireless-enabled product;
storing an association of the customer ID with the device ID;
receiving the device ID and a security token from the wireless-enabled product through a network connection established by the wireless-enabled product;
authenticating the wireless-enabled product based on the received device ID and security token; and
providing to the wireless-enabled product the network credentials for accessing the private communication network of the customer in response to authenticating the wireless-enabled product.

8. The server of claim 7 , wherein the server processor is configured with processor-executable instructions to perform operations further comprising:
receiving the device ID and a device security key from a manufacturer of the wireless-enabled product; and
storing the device security key in memory accessible by the server linked to the device ID,
wherein the server processor is configured with processor-executable instructions to authenticate the wireless-enabled product based on the received device ID and security token by:
using the received device ID to access the device security key from memory;
using the stored device security key to authenticate the received security token; and
authenticating the wireless-enabled product if the received device ID enables the server to access the device security key that authenticates the received security token.

9. The server of claim 8 , wherein the device security key received from the manufacturer of the wireless-enabled product comprises information that the server can use to generate a security token; and
the server processor is configured with processor-executable instructions to use the stored device security key to authenticate the received security token by:
using the device security key received from the manufacturer of the wireless-enabled product to obtain a generated security token; and
comparing the generated security token to the received security token.

10. The server of claim 8 , wherein the device security key received from the manufacturer of the wireless-enabled product comprises a manufacturer-provided security token; and
the server processor is configured with processor-executable instructions to use the stored device security key to authenticate the received security token by comparing the manufacturer-provided security token to the received security token.

11. A system for facilitating connections of wireless-enabled products to private communication networks, comprising:
a server configured to be accessible via a public network;
a wireless-enabled product;
an access device providing a private communication network of a customer; and
a computing device coupled to the public network and configured to support a purchase transaction by the customer of the wireless-enabled product,
wherein the server is configured to perform operations comprising:
obtaining a customer ID and network credentials for accessing a customer's private communication network during a sign up procedure for a customer loyalty program; and
storing the received customer ID and the received network credentials,

wherein the computing device is configured to perform operations comprising:
obtaining a device ID associated with the wireless-enabled product and the customer ID of the customer; and
providing the customer ID and the device ID to the server;

wherein the server is configured to perform operations further comprising storing an association of the customer ID and the device ID,
wherein the wireless-enabled product is configured to perform operations comprising:
establishing a connection to the server; and
transmitting the device ID and a security token to the server through the established connection;

wherein the server is configured to perform operations further comprising:
authenticating the wireless-enabled pro

Assignees

• Qualcomm Inc

Inventors

• Burns Gregory
• Kavas Christopher
• Lioy Marcello
• Swinson Kenneth
• Malsbary Todd
• Michael Matthew

Classifications

• G06Q10/00 Primary

  Administration; Management · CPC title

• H04W12/04 Primary

  Key management, e.g. using generic bootstrapping architecture [GBA] · CPC title

• H04L63/0876

  based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint · CPC title

• G06Q30/0267

  Wireless devices · CPC title

• G06Q30/0236

  Incentive or reward received by requiring registration or ID from user · CPC title