Remote device authentication

• US 20030120920A1
• Filed: 12/20/2001
• Published: 06/26/2003
• Est. Priority Date: 12/20/2001
• Status: Abandoned Application

• Current Assignee: Telefonaktiebolaget LM Ericsson
• Original Assignee: Telefonaktiebolaget LM Ericsson
• Inventors: Svensson, Sven Anders Borje
• Application Number:
  US10/028,583
• Publication Number:
  US 20030120920A1
• Time in Patent Office: Days
• US Class Current: 713/168
• CPC Class Codes: H04L 2209/80 Wireless
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/18 using different networks or channels, e.g. using out of band channels cryptographic mechanisms or cryptographic arrangements for key distribution involving distinctive intermediate devices or communication paths H04L9/0827; cryptographic mechanisms or cryptographic arrangements for authentication using a plurality of channels H04L9/3215
• CPC Class Codes: H04L 9/3271 using challenge-response
• CPC Class Codes: H04W 12/068 using credential vaults, e.g. password manager applications or one time password [OTP] applications
• CPC Class Codes: H04W 12/069 using certificates or pre-shared keys
• CPC Class Codes: H04W 84/12 WLAN [Wireless Local Area Networks]
• CPC Class Codes: H04W 84/18 Self-organising networks, e.g. ad-hoc networks or sensor networks
• CPC Class Codes: H04W 88/04 adapted for relaying to or from another terminal or user

Abstract

A wireless local area network authenticates access by a user'"'"'s device utilizing an authentication key provisioned in another of the user'"'"'s devices. The network transmits a challenge to the non-provisioned device. The non-provisioned device forwards the challenge to the provisioned device across a wire-based or wireless interface connecting the two devices, such as a BLUETOOTH network link. The provisioned device calculates a response using the authentication key, and forwards the response to the non-provisioned device. The non-provisioned device then transmits the response to the wireless local area network for authentication.

Claims

1. A method of authenticating a wireless device for accessing a first wireless network challenging said device, comprising:

receiving an authentication challenge from said first wireless network at a first wireless device;

forwarding said authentication challenge from said first wireless device to a second wireless device storing an authentication key;

calculating an authentication response based on said authentication key at said second wireless device;

forwarding said authentication response from said second wireless device to said first wireless device; and

transmitting said authentication response from said first wireless device to said first wireless network.

2. The method of claim 1 wherein said second wireless device is a wireless communication mobile terminal.

3. The method of claim 1 wherein receiving said authentication challenge and transmitting said authentication response occur across a wireless communication interface.

4. The method of claim 3 wherein said wireless communication interface is a wireless local area network interface.

5. The method of claim 1 wherein forwarding said authentication challenge and forwarding said authentication response occur across a communication interface connecting said first and second wireless devices.

6. The method of claim 5 wherein said communication interface is a wire or optical cable interface.

7. The method of claim 5 wherein said communication interface is a wireless communication interface.

8. The method of claim 7 wherein said wireless communication interface is an optical interface.

9. The method of claim 7 wherein said wireless communication interface is a radio frequency interface.

10. The method of claim 9 wherein said radio frequency interface is a BLUETOOTH interface.

11. The method of claim 1 wherein said authentication key is a private key, and wherein said authentication challenge is generated based on a public key associated with said private key.

12. The method of claim 1 wherein calculating an authentication response based on said authentication key comprises performing a mathematical operation on said authentication challenge using said authentication key to obtain said authentication response.

13. The method of claim 1 further comprising authenticating said first wireless device by said first wireless network based on said authentication response.

14. The method of claim 13 wherein said authentication key comprises a shared key known to said first wireless network.

15. The method of claim 14 wherein authenticating said first wireless device by said first wireless network comprises:

using said authentication challenge and said shared key to compute an expected authentication response at said first wireless network; and

comparing said expected authentication response with the actual authentication response received from said first wireless device.

16. The method of claim 13 wherein said authentication key is a private key known only to the second wireless device, and wherein said private key has a corresponding public key that is known to the first wireless network.

17. The method of claim 16 wherein said first wireless network encrypts a data pattern using said public key to generate the authentication challenge, and wherein authenticating said first wireless device by said first wireless network further comprises comparing the authentication response to the original data pattern used to generate the authentication challenge.

18. The method of claim 17 wherein calculating an authentication response based on said authentication key comprises decrypting said authentication challenge to obtain the data pattern.

19. The method of claim 14 further comprising:

generating said authentication challenge at a second wireless network;

forwarding said authentication response from said first wireless network to said second wireless network; and

authenticating said first wireless device by said second wireless network based on said authentication response.

20. The method of claim 19 further comprising:

sending an authentication result from the second wireless network to the first wireless network; and

providing or denying access for the first wireless device to the first wireless network based on said authentication result.

21. The method of claim 19 wherein said authentication key comprises a shared key known to said second wireless network.

22. The method of claim 21 wherein authenticating said first wireless device by said second wireless network comprises:

using said authentication challenge and said shared key to compute an expected authentication response at said second wireless network; and

comparing said expected authentication response with the actual authentication response received from said first wireless network.

23. The method of claim 19 wherein said authentication key is a private key known only to the second wireless device, and wherein said private key has a corresponding public key that is known to the second wireless network.

24. The method of claim 23 wherein said second wireless network encrypts a data pattern using said public key to generate the authentication challenge, and wherein authenticating said first wireless device by said second wireless network further comprises comparing the authentication response to the original data pattern used to generate the authentication challenge.

25. The method of claim 19 wherein said second wireless network is a wireless communication network.

26. A wireless device comprising:

a first interface to communicate with a wireless network;

a second interface to communicate with a provisioned wireless device having an authentication key used to access the wireless network;

a microprocessor connected to said first and second interfaces and programmed to;

forward an authentication challenge received from the wireless network via said first interface to the provisioned wireless device via said second interface;

receive an authentication response from the provisioned wireless device via said second interface; and

forward the authentication response via said first interface to the wireless network.

27. The wireless device of claim 26 wherein the first interface is a WLAN interface.

28. The wireless device of claim 26 wherein the second interface is wireless interface.

29. The wireless device of claim 28 wherein the second interface a radio frequency interface.

30. The wireless device of claim 29 wherein the second interface is a BLUETOOTH interface.

31. A wireless device having an authentication key used to access a wireless network comprising:

an interface to communicate with a non-provisioned wireless device;

an authentication unit connected to said interface and having a memory for storing the authentication key and a processor for performing calculations using said authentication key, said authentication unit being operative to;

receive an authentication challenge via said interface from the non-provisioned wireless device attempting to access the wireless network,

compute an authentication response using the authentication challenge and the authentication key; and

forward the authentication response via the interface to the non-provisioned wireless device to be used by the non-provisioned wireless device to access the wireless network.

32. The wireless device of claim 31 wherein the interface is a wireless interface.

33. The wireless device of claim 32 wherein the interface a radio frequency interface.

34. The wireless device of claim 33 wherein the interface is a BLUETOOTH interface.