Access point device and authentication method thereof

• US 20010048744A1
• Filed: 05/01/2001
• Published: 12/06/2001
• Est. Priority Date: 06/01/2000
• Status: Abandoned Application

• Current Assignee: Sharp Kabushiki Kaisha (Hon Hai Precision Industry Co., Ltd.)
• Original Assignee: Sharp Kabushiki Kaisha (Hon Hai Precision Industry Co., Ltd.)
• Inventors: Kimura, Shinya
• Application Number:
  US09/846,907
• Publication Number:
  US 20010048744A1
• Time in Patent Office: Days
• US Class Current: 380/247
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04W 12/069 using certificates or pre-shared keys
• CPC Class Codes: H04W 68/00 User notification, e.g. alerting and paging, for incoming communication, change of service or the like
• CPC Class Codes: H04W 84/12 WLAN [Wireless Local Area Networks]
• CPC Class Codes: H04W 88/08 Access point devices
• CPC Class Codes: H04W 92/10 between terminal device and access point, i.e. wireless air interface

Abstract

An access point device and its authentication method are provided which can dramatically improve a wireless LAN system in security level. The access point device includes: authentication request display means for notifying a network administrator administering the LAN of the presence of an authentication-requesting mobile station so as to gain the final authorization of an authentication procedure when a mobile station in the area perform the authentication procedure before the initiation of an association procedure; and authentication input means from which the network administrator notified inputs an authentication-authorizing or -rejecting instruction with respect to the authentication-requesting mobile station.

Claims

1. An access point device having an interface function with a network constructed of wired transmission channels and establishing datalink connection with a plurality of mobile stations within the area of a radio LAN, the device comprising:

notification means for notifying a network administrator administering said LAN of the presence of an authentication-requesting mobile station so as to gain the final authorization of an authentication procedure when a mobile station in the area perform said authentication procedure before the initiation of an association procedure; and

input means from which said network administrator notified inputs an authentication-authorizing or -rejecting instruction with respect to said authentication-requesting mobile station.

2. An authentication method for an access point device having an interface function with a network constructed of wired transmission channels and establishing datalink connection with a plurality of mobile stations within the area of a radio LAN, the method initiating an association procedure after authentication is completed of said mobile stations by performing:

a first step in which said mobile stations and said access point device initiate a predetermined authentication procedure in response to an authentication request from said mobile stations to said access point device;

a second step in which said access point device, in authorizing the authentication of said mobile stations by said authentication procedure, notifies a network administrator administering said LAN of the final authorization of said authentication procedure and starts an authentication wait timer before said access point device returns an authentication response message, or the final message in said authentication procedure, to said mobile stations, said authentication wait timer being set at a maximum wait time up to the final authentication;

a third step in which said network administrator provides a final authentication-authorizing or -rejecting instruction to said access point device before the timeout of said authentication wait timer;

a fourth step in which said access point device, when said network administrator provides a final authentication-authorizing instruction before the timeout of said authentication wait timer, returns said authentication response message to said mobile stations as authentication authorization; and

a fifth step in which said mobile stations receiving said authentication response message start said association procedure.

3. The authentication method for an access point device according to

claim 2

, wherein in the third step, said authentication response message is returned to said mobile stations as authentication rejection when said network administrator provides the authentication-rejecting instruction to said access point device.

4. The authentication method for an access point device according to

claim 2

, wherein in the third step, said authentication response message is returned to said mobile stations as authentication rejection when said authentication wait timer goes time-out before said network administrator provides the authentication-rejecting or -authorizing instruction to said access point device.

5. The authentication method for an access point device according to any one of claims 2-4, wherein said authentication procedure is the Shared Key Authentication procedure defined in IEEE 802.11.