Seamless device configuration in a communication network

• US 10,154,025 B2
• Filed: 03/15/2013
• Issued: 12/11/2018
• Est. Priority Date: 03/15/2013
• Status: Active Grant

• Current Assignee: Qualcomm, Inc.
• Original Assignee: Qualcomm, Inc.
• Inventors: Tinnakornsrisuphap, Peerapol, Benoit, Olivier Jean, Kumar, Rajesh
• Primary Examiner(s): Patel, Ashokkumar B
• Assistant Examiner(s): Farooqui, Quazi
• Application Number:
  US13/837,703
• Publication Number:
  US 20140282960A1
• Time in Patent Office: 2,097 Days
• Field of Search: 713168-174, 713182-186, 713202, 726 2- 9, 709225, 709229, 709206, 709249, 709389, 380255, 380266, 380270, 380273
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04W 12/068 using credential vaults, e.g. password manager applications or one time password [OTP] applications

Abstract

One embodiment of seamless device configuration between a network device and an access point sends a device credential associated with the network device to the access point before the network device communicates with the access point. The device credential can be used to verify the identity of the network device and can authenticate the network device with the access point without requiring user interaction. Another embodiment can incorporate a central authority maintaining a database of network devices, access points and associated users. The central authority can determine when one or more network devices can seamlessly be configured for use with a particular access point. The central authority can send the device credential associated with the one or more network devices to the access point before the network device communicates with the access point.

Claims

1. A method of device authentication comprising:

receiving, at a first device in a first network, a device credential for a second device before the second device has communicated with an access point of a second network;

identifying a user device associated with the second network, the user device configured to forward the device credential to the access point in response to an indication that a first user identifier associated with the access point is related to a second user identifier associated with the second device, wherein the first user identifier and the second user identifier are different; and

transmitting the device credential from the first device to the user device for the user device to forward the device credential to the access point, wherein the device credential authenticates the second device for communication with the access point prior to the second device communicating with the access point.

2. The method of claim 1, wherein the user device is a cellular modem integrated within the access point.

3. The method of claim 2, wherein transmitting the device credential comprises transmitting a short message service (SMS) message.

4. The method of claim 3, further comprising,

determining whether a source of the SMS message is verified, and

ignoring the SMS message if the source is not verified.

5. The method of claim 1, wherein the user device is a cellular phone identified by a phone number.

6. The method of claim 1, wherein the users device is configured to forward the device credential to the access point after receiving an indication of approval that the second device is allowed to authenticate with the access point.

7. The method of claim 1, wherein the device credential is stored at the second device prior to deployment of the second device.

8. The method of claim 1, wherein

the device credential comprises at least one member of a group consisting of a Personal Identification Number and a Device Password, and

the device credential is associated with the second device prior to deployment of the second device.

9. The method of claim 1, wherein receiving the device credential comprises using a scanner to read a quick response (QR) code associated with the second device.

10. The method of claim 1, wherein receiving the device credential comprises using a scanner to read a barcode associated with the second device.

11. The method of claim 1, wherein receiving the device credential comprises reading a near field communication tag associated with the second device.

12. The method of claim 1, further comprising receiving a validation phrase in response to transmitting the device credential.

13. The method of claim 1, wherein the device credential is an encrypted device credential.

14. The method of claim 13, further comprising transmitting, from the first device to a third device, the encrypted device credential, wherein the third device decrypts the encrypted device credential and provides the decrypted device credential to the second device.

15. The method of claim 14, further comprising transmitting an identity of the user device to the third device.

16. The method of claim 15, wherein the identity of the user device is a phone number.

17. The method of claim 14, wherein transmitting the encrypted device credential comprises determining that the user device received approval that the second device is allowed to authenticate with the access point.

18. A method of device authentication comprising:

generating, at a first device in a first network, a one-time password for a second device before the second device has communicated with an access point of a second network;

transmitting the one-time password to the second device for storage at the second device;

identifying a user device associated with the second network, the user device configured to forward the one-time password to the access point in response to an indication that a first user identifier associated with the access point is related to a second user identifier associated with the second device, wherein the first user identifier and the second user identifier are different; and

transmitting the one-time password from the first device to the user device for the user device to forward the one-time password to the access point, wherein the one-time password authenticates the second device for communication with the access point prior to the second device communicating with the access point.

19. The method of claim 18, wherein the user device is a cellular phone identified by a phone number.

20. The method of claim 19, wherein transmitting the one-time password comprises transmitting a short message service (SMS) message to the cellular phone.

21. The method of claim 18, wherein the user device is configured to forward the one-time password after receiving an indication of approval that the second device is allowed to authenticate with the access point.

22. A method performed by a user device comprising:

receiving, by the user device from a first device in a first network, a device credential for a second device before the second device has communicated with an access point of a second network;

associating a first user identifier with the access point;

associating a second user identifier with the second device; and

forwarding the device credential from the user device to the access point in response to a determination that the first user identifier is associated with related to the second user identifier, wherein the first user identifier and the second user identifier are different, and wherein the device credential authenticates the second device for communication with the access point prior to the second device communicating with the access point.

23. The method of claim 22, further comprising receiving the second user identifier from a point of sale.

24. The method of claim 22, further comprising:

receiving an access point credential from the access point;

transmitting the access point credential to a manufacturer of the access point in response to receiving the access point credential; and

receiving a public encryption key associated with the access point.

25. The method of claim 24, wherein the access point credential is a serial number.

26. The method of claim 24, wherein transmitting the device credential to the access point comprises transmitting the device credential using a secure connection to the access point.

27. The method of claim 24, wherein a private encryption key is stored at the access point.

28. The method of claim 22, wherein the device credential is a personal identification number (PIN) code.

29. The method of claim 22, further comprising storing the first user identifier, the device credential, and the second user identifier in a database.

30. The method of claim 22, wherein the first user identifier and the second user identifier are associated with different users.

31. A first device comprising:

a processor; and

a memory coupled with the processor, the memory storing instructions which, when executed by the processor, cause the first device to,

receive, in a first network, a device credential for a second device before the second device has communicated with an access point of a second network,

identify a user device associated with the second network, the user device configured to forward the device credential to the access point in response to an indication that a first user identifier associated with the access point is related to a second user identifier associated with the second device, wherein the first user identifier and the second user identifier are different, and

transmit the device credential from the first device to the user device for the user device to forward the device credential to the access point, wherein the device credential authenticates the second device for communication with the access point prior to the second device communicating with the access point.

32. The first device of claim 31, wherein the user device is configured to forward the device credential to the access point after receiving an indication of approval that the second device is allowed to authenticate with the access point.

33. The first device of claim 31, wherein the user device is configured to forward the device credential to the access point using a short message service (SMS) message.

34. The first device of claim 33, wherein the access point comprises a cellular modem configured to receive the SMS message from the user device.

35. The first device of claim 31, wherein the device credential is an encrypted device credential.

36. The first device of claim 35, wherein the instructions, when executed, further cause the first device to,

transmit the encrypted device credential to a fourth device, wherein the fourth device is configured to decrypt the encrypted device credential and provide a decrypted device credential to the second device.

37. The first device of claim 36, wherein the instructions, when executed, further cause the first device to transmit the encrypted device credential in response to determining that the user device received approval that the second device is allowed to authenticate with the access point.

38. A non-transitory machine-readable medium having instructions stored therein, wherein the instructions, when executed by a processor of a first device, cause the first device to:

receive, at the first device in a first network, a device credential for a second device before the second device has communicated with an access point of a second network;

identify a user device associated with the second network, the user device configured to forward the device credential to the access point in response to an indication that a first user identifier associated with the access point is related to a second user identifier associated with the second device, wherein the first user identifier and the second user identifier are different; and

transmit the device credential from the first device to the user device for the user device to forward the device credential to the access point, wherein the device credential authenticates the second device for communication with the access point prior to the second device communicating with the access point.

39. The non-transitory machine-readable medium of claim 38, wherein the user device is configured to forward the device credential after receiving an indication of approval that the second device is allowed to authenticate with the access point.

40. The non-transitory machine-readable medium of claim 38, wherein the instructions to transmit the device credential comprise instructions to forward the device credential using a short message service message (SMS).

41. The non-transitory machine-readable medium of claim 38, wherein the device credential is an encrypted device credential.

42. The non-transitory machine-readable medium of claim 41, wherein the instructions are further to,

transmit, from the first device to a fourth device, the encrypted device credential, wherein the fourth device is configured to decrypt the encrypted device credential and provide the decrypted device credential to the user device.

43. The non-transitory machine-readable medium of claim 42, wherein the instructions are further to transmit the encrypted device credential in response to determining that the user device received approval that the second device is allowed to authenticate with the access point.

44. A user device comprising:

a processor; and

a memory coupled with the processor, the memory storing instructions which, when executed by the processor, cause the apparatus to,

receive, by the user device from a first device in a first network, a device credential for a second device before the second device has communicated with an access point of a second network;

associate a first user identifier with the access point;

associate a second user identifier with the second device; and

forward the device credential from the user device to the access point in response to a determination that the first user identifier is related to the second user identifier, wherein the first user identifier and the second user identifier are different, and wherein the device credential authenticates the second device for communication with the access point prior to the second device communicating with the access point.

45. The user device of claim 44, further comprising receiving the second user identifier from a point of sale.

46. The user device of claim 44, wherein the device credential is a personal identification number (PIN) code.

47. The user device of claim 44, wherein the first user identifier and the second user identifier are associated with different users.

48. The user device of claim 44, wherein the apparatus comprises a cellular modem or radio integrated with the access point.

49. The user device of claim 44, wherein the apparatus comprises a user device capable of communicating with the access point.