WIRELESS ACCESS POINT AND METHOD FOR PROVIDING BACKUP NETWORK CONNECTIONS

Description

TECHNICAL FIELD

[0001] The present disclosure relates generally to wireless networks and in particular to provision of backup connections in such networks.BACKGROUND

[0002] This section is intended to introduce the reader to various aspects of art, which may be related to various aspects of the present disclosure that are described and / or claimed below. This discussion is believed to be helpful in providing the reader with background information to facilitate a better understanding of the various aspects of the present disclosure. Accordingly, it should be understood that these statements are to be read in this light, and not as admissions of prior art.

[0003] Today's world revolves around being connected to the Internet or other networks at all times. Broadband connectivity is for instance considered a basic right in Finland, France and Spain, and the European Union has issued a directive to the effect that all its citizens have a right to broadband connection. While the broadband infrastructure is constantly improving, the risk for service interruption is still present. An interruption of services is likely to cause even more problems to users in the society in general and in commercial activities in particular in the future for example because of the indispensability of access to the Internet, the Internet providing triple-play services including access to digital television, world wide web, and telephony.

[0004] It will thus be appreciated that it is important to find solutions that work towards keeping the downtime of a broadband service to a strict minimum.

[0005] A first source of service interruption is due to disruption of the broadband link for reasons of failure of the infrastructure. While service interruptions owing to breaking of a broadband link is problematic, they are typically of a random and infrequent nature. A second source of broadband service interruptions can occur when consumers move to a new address, when the broadband access method is changed (typically upgraded) or when switching from one broadband technology to another. These cases are more common than the infrastructure failure. In some cases it can take days before the broadband services are operational again. For many services, end users rely on a mobile broadband network provided through their smartphones or tablets when the local network cannot use the fix broadband connection. However, this solution works only for the device itself, not for the broad range of services that an end user can enjoy when connected to a broadband access gateway (GW). Services such as remote backup to a Network Access Server (NAS), remote home control and Internet Protocol TV (IPTV) typically cannot be used when the end user connects to a mobile network directly through the smartphone or the tablet.

[0006] Various solutions have been proposed to overcome this problem. The first solutions consisted of devices having dual xDSL type Wide Area Network (WAN) connection capabilities (e.g. Integrated Services Digital Network (ISDN) and Asymmetric digital subscriber line (ADSL)), which enabled switching from one broadband connection to the other in case of connection problems. Being rather expensive, such devices were typically deployed only in non-residential environments. A more recent solution, hybrid gateways, provided a more elegant, yet still expensive, alternative. A hybrid gateway contains a regular broadband WAN interface such as xDSL, Pon or Docsis and an additional mobile broadband interface such as 5G, 4G or 3G / LTE (Long-Term Evolution), for example via a LTE dongle. When the regular WAN connection breaks, a hybrid gateway switches over to the mobile broadband connection.

[0007] A problem with these conventional solutions is cost, product cost or network infrastructure cost, which can delay or impede their acceptance.

[0008] It will be appreciated that it is desired to have a solution that overcomes at least part of the conventional problems related to interruption of broadband services. The present principles provide such a solution.

[0009] Document D1 (US 2016 / 360430 A1) relates to connection of data terminals to a data network through wireless access points, and in particular to fault reporting in the event of failure of a primary connection between an access point and the data network.SUMMARY OF DISCLOSURE

[0010] The scope of protection is defined by the appended set of claims.BRIEF DESCRIPTION OF DRAWINGS

[0011] Preferred features of the present principles will now be described, by way of non-limiting example, with reference to the accompanying drawings, in which: Figure 1 illustrates an exemplary system according to an embodiment of the present principles; Figure 2 illustrates the exemplary system when a broadband connection is unavailable; Figure 3 illustrates the exemplary system when a broadband connection is obtained via a neighbouring network; Figure 4 illustrates an embodiment of a method for obtaining a broadband connection according to the present principles; and Figure 5 illustrates an embodiment of a connection method according to the present principles. DESCRIPTION OF EMBODIMENTS

[0012] Conventional broadband access devices, also called Access Points (APs), such as gateways have a minimum of one integrated Wireless Local Area Network (WLAN) interface. However, the majority of present day devices have at least two WLAN interfaces (dual band, tri-band,...).

[0013] With the WLAN interfaces, all the necessary hardware is present to exploit, in many cases, a novel approach to restoring a broadband connection that has gone down. Indeed, while many users and equipment vendors complain about the presence of "neighbouring networks", i.e. wireless networks that interfere with the network in first location, these can be used as part of a backup solution to handle the loss of broadband connectivity in a broadband access device.

[0014] In urban areas, at least one neighbouring network can always be found and this is also the case in the majority of rural areas. The neighbouring network can be provided by any one of stakeholders such as for example: The same operator, i.e. telecommunication services provider, as that of the broadband device in the first location. A different operator. A hotspot service, not linked to a telecommunication services provider (e.g. a virtual network operator such as Fon). A private person (e.g. a company or a residential AP that cannot be linked to a known operator).

[0015] Thus, typically at least one neighbouring network can be within comfortable range of the broadband device in trouble - i.e. close enough to enable wireless communication.

[0016] As will be further described hereinafter, an idea of the present principles is to share the WLAN network of a neighbouring network to re-establish a potentially reduced or interrupted set of broadband services.

[0017] A factor making this possible is the WLAN hardware. WLAN chipsets installed on broadband access devices are physically able to function in an AP role or a in client ("STA" for STAtion) role, in some cases simultaneously. The WLAN chipsets can be loaded with different software to perform these different functions. From a software point of view, the majority of WLAN chipsets support some form of WLAN client (STA) mode, which can be added to the functionality of the broadband access device.

[0018] With these building blocks (WLAN chipset hardware + WLAN client driver) in place, a broadband access device can apply the same detection algorithm as is used on the hybrid broadband GWs that have an LTE dongle as a backup connection solution as described in the background section.

[0019] Figure 1 illustrates an exemplary system 100 according to an embodiment of the present principles. The system 100 includes a first broadband access device (AP1) 110, exemplified by a gateway, and a second broadband access device (AP2) 130.

[0020] AP1 manages a first WLAN 120 that for exemplary purposes includes at least a first client device (STA1) 121 and a second client device (STA2) 122, but it should be understood that the first WLAN 120 can include fewer (even zero) or more devices. AP1 is operative to provide broadband connections to the client devices 121, 122 through (wired or wireless) Wide Area Network (WAN) connection 116 using any suitable connection technology.

[0021] AP1 110 includes at least one hardware processor ("processor") 111, memory 112, a first and a second Wireless Local Area Network (WLAN) interface 113, 114, which can use distinct frequency bands (such as 2.4 GHz and 5 GHz) and are implemented at least partly in hardware, and a hardware WAN interface 115. It will be appreciated that the WLAN interfaces 113, 114 can be implemented in a single physical interface in case this interface is able to function both in the AP role and in the client (STA) role simultaneously and that a WLAN interface can implement multiple virtual WLAN interfaces, for example to manage a home WLAN and a hotspot using the same physical WLAN interface. It will also be appreciated that both client devices STA1 121, STA2 122 are illustrated as being connected to the first WLAN interface 113 for illustrational reasons only; in case at least one of the plurality of WLAN interfaces 113, 114 can function in both roles (or in case there are more than two WLAN interfaces), there is no need for the client devices to connect to the same WLAN interface.

[0022] The client devices STA1 121, STA2 122 are beyond the scope of the present principles and can be any suitable conventional client devices.

[0023] AP2 130 manages a neighbouring WLAN 140 to which it provides broadband access via backhaul or WAN connection 136. AP2 130 can be implemented like AP1 110, but can also in some embodiments be a conventional broadband access device.

[0024] The processor 111 is configured to monitor the broadband connection passing through WAN connection 116 and, if this connection becomes unavailable, enable the WLAN client mode on at least one WLAN interface 113, 114 and use this interface to search for a neighbouring network 140 to which it can connect in order to obtain at least a limited broadband connection.

[0025] Figure 2 illustrates the exemplary system 100 when the broadband connection via WAN connection 116 is unavailable.

[0026] Figure 3 illustrates the exemplary system 100 when a broadband connection for the first WLAN 120 is obtained via the neighbouring network 140. The neighbouring network 140 then includes AP1, which is illustrated by 'cloud' 140 including AP1. The client devices STA1, STA2 can now, as before, communicate with the first WLAN interface 113 working in the AP role. AP1 transfers received traffic from the client devices through the second WLAN interface 114 working in the client role so that AP2 'sees' AP1 as a 'client', and AP2 forwards the traffic through the WAN connection 136. Traffic can also go the opposite way, from WAN connection 136 to AP1 to the client devices The thick line between STA2 and WAN connection 136 is intended to illustrate this. The connection via neighboring network 140 and AP2 to WAN 136 is hereinafter referred to as the backup connection.

[0027] Non-transitory storage media 170 stores instructions that, when executed by processor 111, perform the functions of AP1 as further described hereinafter with reference to Figure 4.

[0028] Figure 4 illustrates an embodiment of a method 400 for obtaining a broadband connection according to the present principles.

[0029] In step S410, the processor 111 of AP1 110 monitors the status of the broadband connection (also known as the Wide Area Network (WAN) connection) passing through the WAN connection 116. The broadband connection is typically a combination of a physical and a logical interface. If either one breaks, the connection is lost. It is thus preferred to monitor the logical connection (e.g. Point-to-Point Protocol over Ethernet (PPPoE) or Internet Protocol over Ethernet (IPoE)) interface rather than the physical connection, to establish if the WAN connection is available or unavailable.

[0030] Once it is established in step S410 that the WAN connection is unavailable ("broken," "down"), the processor 111, in step S420, enables, as is well known in the art, the client role on a WLAN interface 113, 114, which will be known in at least the description of Figure 4 as the STA interface. To do this, one or more client devices (e.g., client devices STA1 121 and STA2 122) are handed over (transferred) to a different client interface (e.g., from WLAN I / O 114 to WLAN I / O 113). This is the case if a client interface is unable to function in both the AP role and the client role at the same time; then, before one of the WLAN interfaces is switched to the client role, any client devices already attached to that interface will be handed over from that interface to the WLAN interface remaining in the AP role, thereby avoiding communication disruption between these devices and the AP.

[0031] In step S430, the processor 111 checks, via the STA interface 113, 114, for an available backup connection on the current channel; the AP can for example scan for presence of a neighbouring wireless network on the same radio frequency channel as that used in its own wireless network. This is because while the WAN is down, the WLAN is not and some WLAN services such as file sharing between the client devices of the AP might still be used. If a backup connection is found on the current channel then this is used, in step S440, to provide broadband connection; it is not necessary to reconnect the current client devices 121, 122 in the first WLAN 120.

[0032] If no backup connection is found on the current channel, in step S450, the processor 111 performs, via the STA interface 113, 114, a scan on available channels for at least one neighbouring network.

[0033] As already described, neighbouring networks can for example be provided by: The same operator as that of the broadband device in the first location. A different operator. A (public) hotspot service, not linked to a telecommunication services provider (e.g. a virtual network operator such as Fon). A private person (e.g. a company or a residential AP that cannot be linked to a known operator).

[0034] It can be seen that there are two distinct possibilities: The neighbouring network is a hotspot, e.g. provided by a virtual network operator. The neighbouring network is provided by a telecommunication services provider or is a privately owned network.

[0035] In step S460, the processor 111 tries to connect to the neighbouring networks found, depending on the kind of neigbouring network found, as described hereinafter. If the processor 111 succeeds in connecting to a neigbouring network, then in step S470 a broadband connection is provided to devices in its WLAN 120; if not, no broadband connection can be established and the method ends, but the processor may continue to monitor the state of the lost connection to the WAN, and may restore the state of connection before the connection loss when the connection is restored.

[0036] Accessing a neigbouring network provided by a hotspot is simple, if for example the operator of AP1 has established a partnership with the corresponding virtual operator or if the hotspot otherwise accepts the access attempt, e.g. the hotspot provides public access ('public hotspot'). Such a partnership can be exploited in two ways. First, the virtual operator is added as a service (e.g. FON service) to the broadband devices (including AP1) of the operator. Second, a device / service set of credentials specific to the virtual operator is installed on the broadband devices of the broadband operator so that in client mode, a broadband device can access the hotspot of the virtual network operator.

[0037] Fon is provided as an example. An AP running the Fon service could install client credentials and establish a connection to the Fon network of a neighbour broadband device running the Fon service when its own broadband connection goes down.

[0038] The case where the neighbouring network is provided by a telecommunication services provider or is a privately owned network, i.e. without the use of a public hotspot, preferably includes an identification step as these networks may not be provided by the operator whose broadband device lost the broadband connection. Typically, these networks will not allow access without a suitable credential set and / or service agreement in place. In other words, to access such a neighbouring network, proper access credentials should be provided. As will be seen, this can be done in different ways.

[0039] In one embodiment, at least two broadband service providers have come to an agreement to allow APs of the other access to their own networks in certain cases, such as when their own broadband connection is down. To this end, an AP can provide an "emergency" SSID that uses Wi-Fi Protected Access II (WPA2) enterprise. An AP can then connect to such an SSID and be authenticated by a Remote Authentication Dial-In User Service (RADIUS) server that holds the necessary verification capacities to authorize all the different operators that participated in the agreement. It will be appreciated that this applies also in case the two WLANs are provided by the same broadband service provider; if so, the agreement is not necessary and the authentication can be simplified.

[0040] In another embodiment, whose method 500 is illustrated in Figure 5, the Wi-Fi Protected Setup (WPS) protocol of the Wi-Fi Alliance is used. WPS uses a pushbutton configuration mechanism that does not require any credentials. However, for WPS to work in the context of the present principles, the regular WPS protocol needs to be modified, as follows.

[0041] First, APs that are willing to provide a backup WAN connection to another AP, should announce this via their beacons by including a vendor specific IEEE 802.11 Information Element (IE), which carries tag number 221 and typically uses a MAC address as identification. This MAC address (6 byte) can be chosen freely but preferably remains linked to the specific backup service of the present principles. For instance, 0x101331AABBCC is a valid vendor specific IE tag for which the first 3 bytes (101331) could indicate the service provider (in this case Technicolor) and the following 3 bytes (AABBCC) could indicate the service.

[0042] In step S510, AP1 listens for such a beacon.

[0043] In step, S520, AP1 notifies the AP of the neighbouring network (AP2), for example by transmitting a "distress message" that can be a modified version of an 802.11 unicast probe request in order to identify itself and to notify the neighbouring AP that a backup connection is needed. Thus, the AP without broadband connection (AP1) could send the following information to the neighbouring AP (AP2): its own Basic Service Set IDentifier (BSSID), a timestamp, and an X.509 (Transport Layer Security, TLS) certificate (including for example its Universally unique identifier, UUID).

[0044] In step S530, AP2 then verifies the X.509 certificate using a corresponding root certificate. Upon successful verification, AP2 then answers, in step S540, with a modified probe response to AP1 as already described, further including a timestamp that marks the point at which the neighbouring AP will start the Wi-Fi Protected Setup-Push Button Configuration (WPS-PBC) session. Further, AP2 also sends, possibly included in the modified probe response, its X.509 certificate so that the AP1 can verify the identity of AP2.

[0045] In step S550, AP1 verifies the identify of AP2 and, upon successful verification, sends, in step S560 an ACK frame to AP2, the ACK frame including its vendor specific IE with confirmation of the timestamp and its BSSID. AP1 then waits, in step S570, for the time of the timestamp to start WPS-PBC.

[0046] Upon reception of the ACK frame, AP2 waits, in step S580, for the time of the timestamp to start WPS-PBC.

[0047] Using WPS-PBC, in step S590, the APs are able to connect using a WPS handshake during which the "device identifier" of AP1 is again checked by AP2. If this device ID does not match a predefined device, e.g. "operatorID@indistress", the session is aborted.

[0048] Once a connection is active, broadband services can be become operational via the WLAN link that now acts as WAN connection, as illustrated in Figure 3.

[0049] Firewalling and LAN / WAN separation is beyond the scope of the present principles.

[0050] As already mentioned, in case no suitable candidate appears, then no broadband connection can be offered. The STA interface 113, 114 can still periodically scan available channels to find a candidate backup solution.

[0051] The processor 111 preferably also continues to monitor the status of the regular broadband connection, i.e. the one via WAN connection 116. If this regular broadband connection becomes operational again, then it can be used to provide broadband connectivity and the STA interface may be changed to work in the AP role.

[0052] As will be appreciated, the present principles can provide a backup connection by having an AP connect as a client in a neighbouring network.

[0053] It should be understood that the elements shown in the figures may be implemented in various forms of hardware, software or combinations thereof. Preferably, these elements are implemented in a combination of hardware and software on one or more appropriately programmed general-purpose devices, which may include a processor, memory and input / output interfaces.

[0054] The present description illustrates the principles of the present disclosure. It will thus be appreciated that those skilled in the art will be able to devise various arrangements that, although not explicitly described or shown herein, embody the principles of the disclosure and are included within the scope of protection, as defined by the appended set of claims.

[0055] All examples and conditional language recited herein are intended for educational purposes to aid the reader in understanding the principles and concepts of the disclosure .

[0056] Thus, for example, it will be appreciated by those skilled in the art that the block diagrams presented herein represent conceptual views of illustrative circuitry embodying the principles of the disclosure. Similarly, it will be appreciated that any flow charts, flow diagrams, state transition diagrams, pseudocode, and the like represent various processes which may be substantially represented in computer readable media and so executed by a computer or processor, whether or not such computer or processor is explicitly shown.

[0057] The functions of the various elements shown in the figures may be provided through the use of dedicated hardware as well as hardware capable of executing software in association with appropriate software. When provided by a processor, the functions may be provided by a single dedicated processor, by a single shared processor, or by a plurality of individual processors, some of which may be shared. Moreover, explicit use of the term "processor" or "controller" should not be construed to refer exclusively to hardware capable of executing software, and may implicitly include, without limitation, digital signal processor (DSP) hardware, read only memory (ROM) for storing software, random access memory (RAM), and non-volatile storage.

[0058] Other hardware, conventional and / or custom, may also be included. Similarly, any switches shown in the figures are conceptual only. Their function may be carried out through the operation of program logic, through dedicated logic, through the interaction of program control and dedicated logic, or even manually, the particular technique being selectable by the implementer as more specifically understood from the context.

[0059] In the claims hereof, any element expressed as a means for performing a specified function is intended to encompass any way of performing that function including, for example, a) a combination of circuit elements that performs that function or b) software in any form, including, therefore, firmware, microcode or the like, combined with appropriate circuitry for executing that software to perform the function. The disclosure as defined by such claims resides in the fact that the functionalities provided by the various recited means are combined and brought together in the manner which the claims call for.

Claims

1. A first wireless access point, AP, (110) comprising: a first (113) wireless local area network, WLAN, interface and a second (114) WLAN interface, the first WLAN interface and the second WLAN interface configured for wireless communication with WLAN devices (121, 122) in a first WLAN (120); a first link (116) to a wide area network, WAN; a network interface (115) configured for communication with the WAN, via the first link (116); at least one processor (111) configured: to route traffic between WLAN devices (121, 122) in the first WLAN and the WAN via the first WLAN interface and / or the second WLAN interface and the first link, the first and / or the second WLAN interface being in Access Point mode, AP mode, and the WLAN devices in the first WLAN being in client mode; to monitor availability of the first link to the WAN; when the first link to the WAN is unavailable: to keep the first WLAN interface in AP mode; to transfer at least one of said WLAN devices in the first WLAN that are attached to the second WLAN interface, from the second WLAN interface to the first WLAN interface; to enable client mode for the second WLAN interface and to connect the second WLAN interface to a second WLAN (140) provided by a second wireless AP (130) having a second link (136) to the WAN; and to route traffic between the WLAN devices in the first WLAN and the WAN, via the first WLAN interface in AP mode, the second WLAN interface in client mode connected to the second WLAN and the second link of the second wireless AP to the WAN.

2. The first wireless AP of claim 1, wherein the at least one processor is further configured to scan, using the second WLAN interface in client mode, for presence of at least one second wireless network.

3. The first wireless AP of claim 2, wherein the at least one processor is further configured to try to connect to said at least one second wireless network found in said scan until access is granted to one of said at least one second wireless network, and to select said one of said at least one second wireless network to which access is granted, as said second WLAN.

4. The first wireless AP according to claim 3, wherein the at least one second wireless network found in said scan, to which the at least one processor is configured to try to connect, is a hotspot and wherein the at least one processor is further configured to provide access credentials when trying to connect to said at least one second wireless network found in said scan.

5. The first wireless AP of claim 4, wherein the second WLAN is a network provided by a telecommunication services provider or a privately owned network and wherein the at least one processor is further configured to scan for a specific network identifier to select said one of said at least one second wireless network found in said scan having said specific network identifier.

6. The first wireless AP of claim 4, wherein the second WLAN is a network provided by a telecommunication services provider or a privately owned network and wherein the at least one processor is further configured to scan for a specific beacon to select said one of said at least one second wireless network and to: send on the selected second wireless network a probe request comprising a Basic Service Set Identifier, BSSID, of the first wireless AP, a timestamp, and a first certificate; receive a modified probe response comprising a timestamp and a second certificate; verify the second certificate; and connect to the selected said one of said at least one second wireless network at a time included in the timestamp.

7. The first wireless AP of claim 1, wherein the at least one processor is further configured to continue monitoring the first link to the WAN to determine if said first link becomes available and when said first link becomes available to route traffic between the WLAN devices (121, 122) in the first WLAN (120) and the WAN via the first WLAN interface (113, 114) and the network interface (115) configured for communication with the WAN, and to enable AP mode for the second WLAN interface.

8. A method for providing a connection by a first wireless access point, AP, (110), the method being executed by said first wireless AP, said method comprising: routing traffic between wireless local area network, WLAN, devices (121, 122) in a first WLAN (120) and a wide area network, WAN, via a first WLAN interface (113) and / or a second WLAN interface (114) and a first link (116) between the first wireless AP and the WAN, the first and / or the second WLAN interface being in Access Point mode, AP mode, and the WLAN devices in the first WLAN being in client mode; monitoring (S410) availability of the first link to the WAN; when the first link to the WAN is unavailable: keeping the first WLAN interface in AP mode; transferring at least one of said WLAN devices in the first WLAN that are attached to the second WLAN interface, from the second WLAN interface to the first WLAN interface; enabling (S420) client mode for the second WLAN interface and connecting (S460) the second WLAN interface to a second WLAN (140) provided by a second wireless AP (130) having a second link (136) to the WAN; and routing (S470) traffic between the WLAN devices in the first WLAN and the WAN via the first WLAN interface in AP mode, the second WLAN interface in client mode connected to the second WLAN and the second link of the second wireless AP to the WAN.

9. The method according to claim 8, further comprising, when the first link to the WAN is unavailable and when at least one of said WLAN devices in the first WLAN is attached to the second WLAN interface, before the enabling of the client mode for the second WLAN interface, transferring said at least one of said WLAN devices in the first WLAN attached to the second WLAN from the second WLAN interface to the first WLAN interface.

10. The method of claim 8 or 9, further comprising scanning, using the second WLAN interface in client mode, for presence of at least one second wireless network.

11. The method of claim 10, further comprising trying to connect to said at least one second wireless network found in said scanning until access is granted to one of said at least one second wireless network, and to select the one of said at least one second wireless network to which access is granted, as said second WLAN.

12. The method according to claim 11, wherein the second WLAN is a hotspot and wherein the method further comprises providing access credentials when trying to connect to said at least one second wireless network found in said scanning.

13. A computer program comprising program code instructions executable by the at least one processor of the first wireless AP of claim 1 for implementing the steps of a method according to any of claims 8 to 12.

14. A computer readable medium comprising program code instructions executable by the at least one processor of the first wireless AP of claim 1 for implementing the steps of a method according to any of claims 8 to 12.