No one knows carrier Wi-Fi better than we do!

Aptilo Carrier-Class Wi-Fi Solution Datasheet

Partner Network Roaming

OSS / BSS Integration Wi-Fi User Experience Hotel BYOD Home Wi-Fi Flexible APIs ServiceGlue Captive Portal Guest Internet

Existing portals B2B Adaptors Policy OCS / Prepaid Prepaid / & OFCS / Billing Charging Charging PCRF Smart Advanced Wi-Fi Sub Office Wi-Fi CRM Lookups Configurable Database Other databases Logic Quota Mgmt

EAP TLS Wi-Fi Policy DNS EAP TTLS EAP-SIM/AKA Public Wi-Fi HLR / HSS 3GPP AAA Wi-Fi AAA DHCP Diameter SS7 Trusted / Diameter RADIUS Untrusted RADIUS Local SOAP Access Gateway Adaptors (VSA) Break-out

Mobile Core Integration Wi-Fi Service Control

Small Cell Wi-Fi Wi-Fi Backhaul to mobile core through tunnels Gateway

EAP-SIM/AKA non-SIM

Carrier-Class Wi-Fi. Your challenge, our speciality The Aptilo Service Management Platform™ (SMP) With more than 90 service provider Wi-Fi customers in 60 coun- Aptilo offers a fast-track for launching Wi-Fi services with our tries under our belt, we understand that building a carrier-class optional pre-integrated functions for subscriber management, Wi-Fi service is a challenging task with a lot of considerations, prepaid & charging, web portals, access control as well as statis- • How to integrate with my existing OSS/BSS? tics and reporting; all optimized to work together on a single scal- • How to efficiently roll-out new sites? able system – the Aptilo Service Management Platform™ (SMP). • How to make Wi-Fi attractive to venue owners? What this means for you as a service provider is faster time-to- • Which business models should I use? market and happy subscribers with the best user experience avail- • Which Wi-Fi radio vendor should I select? able today. This list of daunting tasks goes on and on and becomes even The Aptilo Service Management Platform can easily adapt to your more complex in a mobile data offloading scenario, where inte- special needs, through the Aptilo ServiceGlue™ concept (see gration with the mobile core is required. below). Aptilo SMP works hand in hand with the Aptilo Service Since 2001, we have carefully built the Aptilo Service Manage- Portal™ (SPA) which provides monitoring, reporting and tailored ment Platform™ (SMP) into a strong weave. Each thread rep- statistics for different user groups through dedicated venue por- resents one of the thousands of demanding requirements we tals. have received from our service provider Wi-Fi customers. The user experience is controlled by the Aptilo Access Control- We play nicely with all carrier-class Wi-Fi vendors ler™ (AC) or third-party access gateways which securely commu- Aruba, Cisco, Ericsson and Ruckus are just a few examples of our nicate with the Aptilo SMP and oversees access and QoS control. Wi-Fi partners, all world-leading Wi-Fi vendors. Our system has Aptilo SMP works in concert with gateways from all leading ven- been adapted for and deployed with their products. dors including Alcatel-Lucent, Cisco and Ericsson. Seamless Wi-Fi Offload Seamless Wi-Fi offload is the new mass-market business opportu- nity for mobile network operators (MNO) and service providers sell- ing Wi-Fi capacity to MNOs. Seamless carrier-class Wi-Fi cuts down on CAPEX and can significantly reduce the need for more licensed spec- trum. The keyword here is “Seamless”, 3G/4G users are automati- cally authenticated to the Wi-Fi network through SIM-authentication or through a client in the device. Aptilo SMP can act as a 3GPP AAA for automatic authentication of users through the SIM credentials (EAP-SIM/AKA). This specific functionality is also available as a stand-alone product - the Aptilo SIM Authentication Server™. Although EAP-SIM/AKA authentication is clientless in the sense that no app or other third-party client is needed, devices still need to support EAP-SIM/AKA. Today most leading smartphone operat- ing systems support EAP-SIM/AKA including Apple’s iOS, Android The Aptilo Service Managment Platform (SMP) is the core component of 4.0 or above, Blackberry, Nokia (Symbian) and Windows 8. This list Aptilo’s carrier-class Wi-Fi service management and delivery solution. It is rapidly growing over time. works in concert with the Aptilo Service Portal™ (reporting & statistics) and Aptilo Access Controller™ (access control & policy enforcement) or third- Learn more about Aptilo’s award-winning offload solution: party access gateways. • Aptilo Mobile Data Offloading Solution - Data Sheet • Seamless Wi-Fi Offload WHY?: A business opportunity today - White Paper Just add the Wi-Fi Network • Seamless Wi-Fi Offload How?: From vision to Reality - White Paper The pre-integrated Aptilo SMP has all functionality needed to build Monetize Wi-Fi by providing hotspot services a carrier-class Wi-Fi hotspot service. All you need to do is to add the Do you want to provide ad-hoc Wi-Fi services with online sign-up Wi-Fi network and integrate with your existing OSS/BSS systems. for users through Web-portals? Aptilo SMP was originally built for The AAA+ and Policy PCRF+ core in Aptilo SMP is responsible for these kinds of business models and features rich support for a vari- the important access control, policy management and charging for ety of payment options. Payments through credit card, vouchers, the carrier Wi-Fi service. This is a case where the whole is greater premium SMS, Scratch cards and more can be executed through than the sum of its parts, which is why we have added a “plus” to the native payment support in the Aptilo Web Portals Applica- the standard terms. These plus values include: tion or through integration with external portals and systems. • A unique tight integration between the policy and charging functions. • Advanced APIs. • Aptilo ServiceGlue™ – with an intelligent database interface and configur- able functions facilitating integration with existing systems. • Dynamic Account Engine. • 3rd party gateway adapters with support for vendor specific attributes. • Extensive native interfaces toward OSS/BSS and mobile core. • Session management. • RADIUS and Diameter support and translation between them. • Wholesale support and Intelligent roaming. • Policies for differentiated services including time schedules.

Furthermore, the Aptilo SMP comes with a number of optional pre-integrated additional functions for Prepaid & Charging, Sub- In addition Aptilo SMP creates Call Detail Records (CDRs) for bill- scriber Management, Web Portals, Statistics & Reporting and ing and can minimize the number of CDRs which are necessary to Access Control, learn more in our Aptilo SMP datasheet. handle the billing of each user session. It can aggregate CDRs that are generated between the policy enforcement nodes and the bill- Just name the Wi-Fi business model you need ing/mediation systems. In over 90 carrier-class Wi-Fi deployments in 60 countries, we have been through all the Business models based on online sign-up can be a very effective business models there are including recur- way of attracting new subscribers to your service. Even if you have ring credit-card billing and exotic pay- decided to go for a subscription based model with SIM authenti- ment options such as prepaid through ATM cation you will need to have alternative authentication methods machines. No matter what business mod- for the subscribers’ devices that do not have EAP-SIM/AKA sup- els you need we are confident that we will port. The good news is that Aptilo SMP supports them all includ- be able to accommodate it. Let us give a few ing MAC-based authentication, WiSPr Client, One-time-password examples. through SMS, UserID / Password, EAP-TLS and EAP-TTLS. With Aptilo you can provide B2B Wi-Fi services such as: • Enterprise: Internet Guest Access and support for the Bring-Your-Own- Device (BYOD) concept for employees. • Hospitality / Healthcare: Free Internet Guest Access and / or chargea- ble Wi-Fi services, often integrated with property management systems (PMS) so the end-user is charged through the Hotel Bill. • Municipality: Wi-Fi services with separation of public and private use. • Wi-Fi services at crowded public places such as Stadiums and Airports where support for roaming is particularly important. Not only will you gain additional revenue from these B2B Wi-Fi ser- vices, you will also get an excellent base for site acquisition for your Wi-Fi network. Site acquisition is very different for Wi-Fi compared to 3G/4G net- works. In 3G/4G, the mobile operator buys space for their base sta- tions from venue owners. In Wi-Fi, the service provider often has to sell Wi-Fi services to the venue owners instead which may already have some kind of Wi-Fi service. There is a huge opportunity for service providers to replace the existing Wi-Fi with real carrier-class Wi-Fi services. Service providers can agree with venue owners to get an additional SSID as described above and instantly increase their Wi-Fi footprint. For mobile operators, this additional SSID can be 802.1x based for There is a need for multiple authentication methods to cover the wide vari- SIM Authentication and automatic offloading of 3G/4G users to ety of Wi-Fi devices that subscribers have today. Aptilo SMP supports all the Wi-Fi network. popular authentication methods and any combination of them. Many times The B2B support in Aptilo SMP is crucial for your Wi-Fi project as it the service provider needs to balance security with user experience. will help you in your site acquisition efforts and provide additional Shared Wi-Fi Access Utilizing Excess Capacity revenue. There is often excess capacity in Wholesale of Wi-Fi services your customers Internet connec- Selling Wi-Fi services to other service providers requires features tions, especially during daytime that have been developed in Aptilo SMP over a long period of time. when residential subscribers are at With volume accounts for wholesale, the wholesale service provider work or at night when enterprise SSID: Public (overcapacity) can create prepaid volume accounts that can be sold to retailers. The subscribers are away from the main idea is that instead of selling individual accounts to end-users, office. Some operators have taken the wholesale service provider allows retailers such as hotels, airports advantage of this by dividing the and convention centers to create any type of account that is allowed Set-top box / Home Wi-Fi Router in the settings of the retailer’s prepaid volume account. The retailer can into two separate parts (SSIDs): Home Wi-Fi Router then create and sell end-user accounts based on their own prepaid • One for the subscriber (Prioritized) SSID: Private volume account and do top-up when the volume account is depleted. • One for public use. (Prioritized) By doing so they can deploy, The statistics and reporting function resides in the Aptilo Service Por- virtually overnight, a carrier-class tal™ (see separate data sheet) and complements the Aptilo SMP by hotspot service with excellent being the main tool for automatic processing and display of data out- capacity and coverage. They can put from the provided service. This includes storage of usage informa- also gain additional revenue from tion and events as well as aggregated statistics and monitoring data. ad-hoc users and by offering offload capacity to mobile operators. With the rich reporting features in the Aptilo Service Portal it is easy With Aptilo, you can make sure that excess capacity is used by utiliz- to create billing data for individual virtual service providers. ing the Wi-Fi policy control in the Aptilo SMP so that the subscriber/ Not building your own footprint? You still need SMP! venue owner does not suffer from the additional public SSID. Some mobile operators choose not to build their own Wi-Fi foot- Selling Wi-Fi Services to other Businesses (B2B) print but instead work with Wireless Internet Service Providers Healthcare, hospitality, municipalities, airports and the enterprise (WISPs). There is a common misunderstanding that these mobile sector. Our installations can be found in nearly every vertical you operators do not need an advanced Wi-Fi service management could think of. Tap into that business-to-business (B2B) experience1 platform; that it is enough with a generic AAA server. That is sim- when developing your own Wi-Fi offerings to make your service ply not the case. Operators that want to maintain control over their attractive to venue owners. Wi-Fi service need a platform such as Aptilo SMP regardless, if they build their own Wi-Fi network or not. 1 20% of Aptilo’s revenue has come from the B2B verticals since 2001 Critical functions in Aptilo SMP that mobile operators - utilizing a The functions can utilize the intelligent database interface in Aptilo Wi-Fi service provider partner - still need to have in-house include: ServiceGlue to perform multiple lookups and intelligently map the • Advanced roaming features. different parameters from these sources to another set of param- • 3GPP AAA with SIM-authentication. eters in the wireless network or other nodes and systems. • Charging and billing aggregation. • Integration with mobile core and OSS / BSS for policy and charging. Based on the result from these intelligent lookups, new functions can • Statistics & Reporting to validate charges and understand user behaviours. be triggered in the Aptilo ServiceGlue building up a highly flexible logic. • Use of so-called opaque login. The user is securely forwarded to their home portal for login (HTTPS). Aptilo SMP creates temporary credentials In a mobile data offloading scenario, policy decisions can involve to login in to the WISP’s network. lookups from several locations and then be intelligently mapped to the corresponding parameters in the Wi-Fi network. Scalability and Reliability With Aptilo’s next-generation architecture you can take the scala- With the Aptilo ServiceGlue logic, the Aptilo Service Management bility issue out of the equation and obtain a linear scalability when Platform becomes a powerful glue between the OSS/BSS/Core and adding more servers. The functionality is divided into three distinct the wireless network, providing truly unique capabilities. layers: • A management layer for configuration and monitoring Future proof next generation hotspot 2.0 ready system • A control layer for protocol-level interactions with external systems In late 2010 the Wi-Fi Alliance launched a concept they call Hotspot • An execution layer for application logic processing 2.0 primarily focusing on Wi-Fi radio vendor certification and the The different layers are distributed over several server nodes to new IEEE 802.11u standard which facilitates an automatic network increase capacity where it is needed most and obtain high availabil- discovery and selection of carrier operated Wi-Fi networks. ity including geographic redundancy and disaster recovery. At the same time the Wireless Broadband Alliance (WBA) – of which Aptilo is a member – launched their Next Generation Hot- Aptilo ServiceGlue™ spot (NGH) program which primarily focuses on interoperability Aptilo ServiceGlue™ is an integral part of the Aptilo SMP and the between operators’ Wi-Fi networks and roaming. Together the two smart new way to deploy wireless services. With the Aptilo Service initiatives aim to create advanced Wi-Fi hotspot networks with an Glue new customer adapted logic can to be added by configuration. improved end-user experience for authentication, security, network selection and roaming. Aptilo ServiceGlue™ Ingredients when building a Next Generation Hotspot / Hotspot 2.0

SOAP/XML Lookups & Configurable Functions parameter LDAP Wi-Fi network: mapping RADIUS 100 Diameter RequesRequest IDI • An IEEE 802.11u enabled Wi-Fi network (facilitates interworking OSSOSS 101 102 with external networks) ActionAction LookupLoookkuupp BSSBSS 103 104 • An IEEE 802.1x enabled Wi-Fi network with WPA2-Enterprise air Action/PostAction/Post Gateway RequesRequest interface encryption (radio link as secure as 3G/4G) 105 Action HLR/HSS LookupLookup • Support for EAP-SIM/AKA SIM-based authentication or TLS/TTLS ActionAction LookupLookup clients (authentication as secure and seamless as 3G/4G) PCRF ActionAction RequesRequest • Support for roaming The Aptilo Service Management Platform provides all the necessary Diameter, RADIUS, BGPDiameter, RADIUS back-end service management functionality for a Next Generation Hotspot / Hotspot 2.0 Wi-Fi network. These functions are also avail- The Aptilo ServiceGlue features advanced configurable ruleset- able in the Aptilo 3GPP AAA+ Server™ for a mobile data offload- based functions. The functions can receive requests and triggers ing scenario. from gateways and other nodes such as PCRFs and CRM systems, process advanced rule-set based configurable logic, and then push the required actions back to the external gateways and systems. Note that one request can result in multiple actions toward differ- ent nodes in the wireless network.

About Aptilo Networks Americas Aptilo Networks is a leading provider of systems to manage mobile data services for Wi-Fi, WiMAX and 3G/LTE networks, +1-866 861 3900 including mobile data offloading. Aptilo’s carrier-class solutions boast pre-integrated authentication, policy control and charging functions to maximize functionality and fast-track deployments while minimizing impact on existing systems. Asia / Middle East Aptilo has a proven interoperability with vendors in the wireless echo-system and a multitude of interfaces and APIs for +60 3 2780 6900 seamless integration to external systems of choice. Customers can enjoy the option of a hosted delivery using Aptilo www.aptilo.com Managed Service™ provided as a cloud service from one of our many regional data centers located worldwide, or handled Europe / Africa [email protected] remotely by Aptilo’s experts from servers at customer premises. Aptilo’s solutions are currently in operation in more than +46-8 5089 8900 v1 05-13 © Copyright Aptilo Networks 60 countries.