Securing credential distribution

• US 10,356,618 B2
• Filed: 02/26/2018
• Issued: 07/16/2019
• Est. Priority Date: 07/17/2014
• Status: Active Grant

• Current Assignee: Cypress Semiconductor Corporation (Infineon Technologies AG)
• Original Assignee: Cirrent, Inc.
• Inventors: Conant, Robert A., Nelson, Barbara
• Primary Examiner(s): Nowlin, Eric
• Application Number:
  US15/905,691
• Publication Number:
  US 20180184295A1
• Time in Patent Office: 505 Days
• CPC Class Codes: G06F 21/602 Providing cryptographic facilities or services
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/068 using credential vaults, e.g. password manager applications or one time password [OTP] applications

Abstract

Methods, systems and apparatus for securing credential distribution are disclosed. One method includes receiving, by a cloud system, a notification from a credential management system that a wireless device is associated with an authenticated user of the credential management system, wherein the credential management system stores private network credentials of the authenticated user, and wherein the cloud system further receives an identifier of the wireless device with the notification, authenticating, by the cloud system, the wireless device, receiving, by the cloud system, a request from the wireless device for private network credentials, and distributing, by the cloud system, the private network credentials to the wireless device, thereby allowing the wireless device to obtain local network access with the private network credentials.

Claims

1. A computer-implemented method for securing credential distribution, comprising:

receiving, by a cloud system, notification from a credential management system that a wireless device is associated with an authenticated user of the credential management system, wherein the credential management system stores private network credentials of the authenticated user, and wherein the cloud system further receives with the notification an identifier of the wireless device and information about the location or environment in which the wireless device is authorized to receive the private network credentials;

authenticating, by the cloud system, the wireless device, ensuring that the wireless device is authorized to receive private network credentials; and

receiving, by the cloud system, the location or environment information from the wireless device; and

comparing, by the cloud system, the location or environment information received from the wireless device with the location or environment in which the wireless device is authorized to receive the private network credentials,

receiving, by the cloud system, a request from the wireless device for private network credentials;

receiving, by the cloud system, the private network credentials of the authenticated user; and

distributing, by the cloud system, the private network credentials to the wireless device, thereby allowing the wireless device to obtain local network access with the private network credentials.

2. The computer-implemented method of claim 1, wherein the environment information includes a presence of one or more wireless networks.

3. The computer-implemented method of claim 1, wherein the private network credentials are encrypted.

4. The computer-implemented method of claim 1, further comprising a mobile device user of a mobile device that includes an application granting the credential management system authority to distribute the private network credentials of the authenticated user to the cloud system.

5. The computer-implemented method of claim 1, further comprising a mobile device user of a mobile device that includes an application granting the cloud system authority to receive and distribute the private network credentials of the authenticated user.

6. The computer-implemented method of claim 1, wherein the authenticated user is notified that the wireless device has the private network credentials to join a private network corresponding to the private network credentials.

7. A computer-implemented method for securing credential distribution, comprising:

receiving, by a cloud system, a notification from a credential management system that a wireless device is associated with an authenticated user of the credential management system, wherein the credential management system stores private network credentials of the authenticated user, and wherein the cloud system further receives with the notification an identifier of the wireless device;

authenticating, by the cloud system, the wireless device; and

receiving, by the cloud system, the location or environment information from the wireless device; and

sending, by the cloud system, the location or environment information from the wireless device to the credential management system; and

receiving, by the cloud system, a request from the wireless device for private network credentials;

receiving, by the cloud system, the private network credentials of the authenticated user;

distributing, by the cloud system, the private network credentials to the wireless device, thereby allowing the wireless device to obtain local network access with the private network credentials.

8. The computer-implemented method of claim 7, wherein the environment information includes a presence of one or more wireless networks.

9. The computer-implemented method of claim 7, wherein the private network credentials are encrypted.

10. The computer-implemented method of claim 7, further comprising a mobile device user of a mobile device that includes an application granting the credential management system authority to distribute the private network credentials of the authenticated user to the cloud system.

11. The computer-implemented method of claim 7, further comprising a mobile device user of a mobile device that includes an application granting the cloud system authority to receive and distribute the private network credentials of the authenticated user.

12. The computer-implemented method of claim 7, wherein the authenticated user is notified that the wireless device has the private network credentials to join a private network corresponding to the private network credentials.

13. A computer-implemented method for a credential management system, comprising:

receiving, by a cloud system, private network credentials for an authenticated user;

receiving, by the cloud system, a command to associate a wireless device with the authenticated user;

receiving, by the cloud system, a request to share private network credentials for the wireless device, wherein the message includes location or environment information associated with the wireless device;

comparing, by the cloud system, the location or environment information associated with the wireless device with the location or environment information associated with the authenticated user; and

sending, by the cloud system, the private network credentials of the authenticated user to a system that distributes the private network credentials to the wireless device after the wireless device is authenticated.

14. The computer-implemented method of claim 13, wherein the environment information includes a presence of one or more wireless networks.

15. The computer-implemented method of claim 13, wherein the private network credentials are encrypted.

16. The computer-implemented method of claim 13, further comprising a mobile device user of a mobile device that includes an application granting the credential management system authority to distribute the private network credentials of the authenticated user to the cloud system.

17. The computer-implemented method of claim 13, further comprising a mobile device user of a mobile device that includes an application granting the cloud system authority to receive and distribute the private network credentials of the authenticated user.

18. The computer-implemented method of claim 13, wherein the authenticated user is notified that the wireless device has the private network credentials to join a private network corresponding to the private network credentials.