Wireless Device Connection Control via Service Provider Identifier Matching

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

There is a need for efficient control of connectivity to wireless networks in devices such as smartphones and tablets, which currently lack effective methods to manage connections based on user preferences and network policies, especially in enterprise and public environments.

Innovation Solution

A wireless device receives a communication policy that includes allowable service provider identifiers and device types, allowing connections only to matching networks and devices in specific modes of operation, such as 'work' or 'personal' modes, to enforce network access restrictions and preferences.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Ease of operation

If the device allows connections to multiple wireless networks without restriction, then connectivity flexibility and ease of operation are improved, but security and network control deteriorate

Engineering Contradiction:
Improveconnectivity flexibilityVSAvoidsecurity risk
Core Design Contradiction:
Ease of operationVSObject-affected harmful factors

Solution Approach 1:

The device dynamically adjusts its connection policy based on operational mode. In work mode, the device restricts connections to only authorized networks identified by matching service provider identifiers. In personal mode, the device allows broader connectivity. This dynamic adaptation resolves the contradiction by providing strict security control when needed while maintaining flexibility when appropriate.

Inventive Principle:
Principle #15Dynamics

Solution Approach 2:

The connection control mechanism changes the parameter of network identification matching. The device compares service provider identifiers from available networks against authorized identifiers stored in memory. By changing the identification parameter used for connection decisions, the device can enforce security restrictions or allow flexibility based on the selected operational mode.

Inventive Principle:
Principle #35Parameter changes

2Reliability

If the device implements strict network connection control based on service provider identifiers, then security and network policy enforcement are improved, but device complexity and ease of operation worsen

Engineering Contradiction:
Improvenetwork policy enforcementVSAvoidconnection management complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The device performs self-service by automatically comparing service provider identifiers against authorized identifiers and making connection decisions without user intervention. The connection manager autonomously evaluates available networks, matches identifiers, and selects appropriate networks based on the current operational mode, thereby enforcing policy while maintaining operational simplicity.

Inventive Principle:
Principle #25Self-service

Solution Approach 2:

The connection manager implements a feedback mechanism where it continuously monitors available wireless networks, compares their service provider identifiers against the authorized list, and adjusts connection decisions based on the match results. This feedback loop ensures reliable policy enforcement while automating the complex matching process.

Inventive Principle:
Principle #23Feedback

3Adaptability or versatility

If the device stores and processes multiple service provider identifiers and connection profiles, then network adaptability and versatility are improved, but memory requirements and device complexity increase

Engineering Contradiction:
Improvenetwork compatibilityVSAvoidstored data volume
Core Design Contradiction:
Adaptability or versatilityVSQuantity of substance

Solution Approach 1:

The invention extracts only the essential identifying information (service provider identifiers) from complete network profiles and stores only these critical elements in memory. When connection decisions are needed, the device retrieves and compares these extracted identifiers against available networks, thereby maintaining high network adaptability while minimizing the quantity of stored data.

Inventive Principle:
Principle #2Taking out (Extraction)

4Reliability

If the device performs scanning and matching operations to identify authorized networks, then connection precision and reliability are improved, but time consumption and productivity worsen

Engineering Contradiction:
Improveconnection accuracyVSAvoidconnection establishment time
Core Design Contradiction:
ReliabilityVSLoss of time

Solution Approach 1:

The device performs preliminary actions by pre-storing authorized service provider identifiers and operational mode configurations in memory before connection needs arise. When a connection is required, the device simply compares available networks against this pre-prepared authorization list, significantly reducing the time needed to establish accurate connections while maintaining high reliability.

Inventive Principle:
Principle #10Preliminary action

Data Source

PatentEP2744247B1Controlling connections to wireless networks
Publication Date: 2018.08.01 BLACKBERRY LTD
  • EP2744247B1 patent drawingFigure 1
  • EP2744247B1 patent drawingFigure 2
  • EP2744247B1 patent drawingFigure 3~4

AI summary

In one illustrative example, a wireless device receives a communication policy from a private network (704). The communication policy includes allowable service provider identifiers (e.g. domain names, realms) corresponding to allowable service providers (706). The wireless device stores these identifiers in its memory. When roaming, the wireless device encounters a wireless network ("hotspot") and receives via the wireless network one or more reachable service provider identifiers corresponding to one or more reachable service providers. In a work mode of operation, the wireless device allows a connection to the wireless network based on a match between one of the allowable and reachable service provider identifiers, but otherwise disallows the connection (708). The communication policy may additionally or alternatively include device types for P2P networks (706), and/or allowable private network identifiers (e.g. ESSIDs), and/or allowable hotspot aggregator service identifiers or names706) , for use in the work mode.