Method of and apparatus for providing access control information to a wireless node of a wireless data network

• US 20040120297A1
• Filed: 08/29/2003
• Published: 06/24/2004
• Est. Priority Date: 08/31/2002
• Status: Abandoned Application

• Current Assignee: Hewlett-Packard Development Company, L.P. (HP Inc.)
• Original Assignee: Hewlett-Packard Development Company, L.P. (HP Inc.)
• Inventors: Haddad, Wassim, McDonnell, James Thomas Edward, Williamson, Matthew Murray, Waters, John Deryk
• Application Number:
  US10/651,246
• Publication Number:
  US 20040120297A1
• Time in Patent Office: Days
• US Class Current: 370/338
• CPC Class Codes: H04L 63/068 using time-dependent keys, e.g. periodically changing keys cryptographic mechanisms or cryptographic arrangements for controlling usage of secret information H04L9/088
• CPC Class Codes: H04L 63/18 using different networks or channels, e.g. using out of band channels cryptographic mechanisms or cryptographic arrangements for key distribution involving distinctive intermediate devices or communication paths H04L9/0827; cryptographic mechanisms or cryptographic arrangements for authentication using a plurality of channels H04L9/3215
• CPC Class Codes: H04W 12/043 using a trusted network node as an anchor
• CPC Class Codes: H04W 12/0471 Key exchange
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 12/65 Environment-dependent, e.g. using captured environmental data
• CPC Class Codes: H04W 74/00 Wireless channel access
• CPC Class Codes: H04W 84/10 Small scale networks; Flat hierarchical networks
• CPC Class Codes: H04W 84/12 WLAN [Wireless Local Area Networks]
• CPC Class Codes: H04W 88/06 adapted for operation in multiple networks or having at least two operational modes, e.g. multi-mode terminals

Abstract

A wireless data network, which covers a first physical area and has a wireless node is increased by generating access control information for the wireless data network. The access control information is communicated to a second wireless network associated with a mains power supply, e.g. a lighting circuit, operative in at least one part of the first physical area located within a secure environment. The access control information is transmitted to the wireless node using the second wireless network. The access control information is changed from time to time (preferably at predetermined intervals). The preceding steps are repeated for each change.

Claims

1. A method of providing access control information to a wireless node of a wireless data network which operates in a predetermined physical space comprising the steps of:

supplying the access control information and to the wireless data network and a second wireless network associated with a mains power supply operative at in least part of the predetermined physical space;

transmitting the access control information to the node using the second wireless network.

2. A method according to claim 1, wherein the mains power supply comprises a lighting circuit.

3. A method according to claim 1 further comprising transporting the node into a location within the at least part of the predetermined physical space where the node can receive the transmissions of the second wireless network.

4. A method according to claim 1 further including enabling the node to receive transmission of the access control information from the second wireless network while the second wireless network operates in accordance with a different protocol to that employed by the wireless data network.

5. Apparatus for providing access control information to a wireless node of a wireless data network such that the wireless node can gain access to the wireless data network, the wireless data network covering a first physical area, the apparatus comprising a second wireless network associated with a mains power supply operative in at least part of the first physical area, the second wireless network having:

a control unit including the access control information, and

a transmitter for transmission of the access control information to the node.

6. The apparatus according to claim 5 wherein the mains power supply comprises a lighting circuit.

7. Apparatus according to claim 6 wherein the second wireless network further includes a data addition element for adding data for transmission of the access control information to the lighting circuit operative within the at least a part of the first physical area covered by the wireless data network, and a data recovery element for recovering the data for transmission of the access control information from the lighting circuit and passing it to the transmitter.

8. Apparatus according to claim 7 wherein the data recovery element and the transmitter of the second wireless network are located adjacent to a light emitting unit of the lighting circuit.

9. Apparatus according to claim 5 wherein the transmitter of the second wireless network comprises a short range transmitter close to which the node must be taken for receipt of the access control information.

10. Apparatus according to claim 7 wherein the second wireless network further includes one or more filter elements for preventing the data added to the lighting circuit from passing out of the first physical area on that or any other electrical circuit.

11. Apparatus according to claim 5 wherein the transmitter of the second wireless network is arranged for transmitting in accordance with a different protocol to that employed by the wireless data network and the apparatus further includes an appropriate receiver and associated control unit within the node.

12. Apparatus according to claim 11 wherein the transmitter of the second wireless network is arranged to operate in the infra red.

13. Apparatus according to claim 11 wherein the transmitter of the second wireless network is arranged to operate at radio frequencies and only at short range.

14. Apparatus according to claim 11 wherein the transmitter of the second wireless network is arranged to operate in accordance with Bluetooth technology.

15. Apparatus according to claim 5 wherein control unit of the second wireless network is connected to the wireless data network for supplying the access control information thereto.

16. Apparatus according to claim 5 wherein the control unit of the second wireless network and the wireless data network include synchronised clocks and are arranged to receive at predetermined intervals schedules of the access control information and validity periods thereof, for enabling at any time the second wireless network to transmit the current access control information for the wireless data network.

17. A method of increasing the security of a wireless data network, which covers a first physical area, and has a wireless node comprising the steps of:

communicating access control information for the wireless data network to a second wireless network associated with a mains power circuit operative in at least one part of the first physical area located within a secure environment;

transmitting the access control information to the wireless node using the second wireless network;

changing the access control information at predetermined intervals and repeating the preceding steps upon each change.

18. A method according to claim 17, wherein the mains power supply comprises a lighting circuit.

19. A method according to claim 17 further comprising changing the access control information at predetermined intervals of short duration, of less than one hour, when the node is able to receive the access control information whilst in the whole of the first physical area.

20. A method according to claim 18 further comprising changing the access control information at predetermined intervals of relatively long duration, in excess of one hour but less than 48 hours, when the node is not able to receive the access control information whilst in the whole of the first physical area.

21. Apparatus for providing access control keys to a wireless node of a wireless data network such that the wireless node can gain access to the wireless data network, the wireless data network covering a first physical area, the apparatus comprising a second wireless network associated with a mains power circuit operative in at least part of the first physical area, the second wireless network including:

a control unit having the access control information;

a data addition element for adding data for transmission of the access control information to the mains circuit;

a data recovery element for recovering the data for transmission of the access control information from the mains circuit and passing it to the transmitter, and

a transmitter for transmission of the access control information to the node.

22. The apparatus according to claim 21 wherein the mains power supply comprises a lighting circuit.