Radio frequency identification (RFID) based network access management

• US 20040268132A1
• Filed: 06/30/2003
• Published: 12/30/2004
• Est. Priority Date: 06/30/2003
• Status: Abandoned Application

• Current Assignee: Nokia Solutions and Networks US LLC (Nokia Corporation)
• Original Assignee: Nokia Corporation
• Inventors: Waris, Heikki
• Application Number:
  US10/610,974
• Publication Number:
  US 20040268132A1
• Time in Patent Office: Days
• US Class Current: 713/185
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32

Abstract

A user terminal includes an RFID reader. When the user swipes or otherwise places the reader in proximity to a compatible RFID tag, the RFID tag sends a set of information to the terminal. This set of information contains the identifier of the preferred network point of connectivity (e.g. an IP address), as well as possible authentication information. Because of the short range, the information is not broadcast to a large audience. The information can also be encrypted, in which case only previously known keys allow the terminal to use the tags.

Claims

1. A method for radio frequency identification based network access management comprising:

providing a terminal that comprises an RFID reader;

wirelessly coupling to at least one RFID tag external to said terminal; and

initiating an authentication process whereby at least one of link layer information and IP layer information is sent from the at least one RFID tag to the terminal.

2. A method as described in claim 1, where the information comprises the identifier of a preferred network point of connectivity.

3. A method as described in claim 1, where the information comprises authentication information.

4. A method as described in claim 1, where the information is sent in an encrypted format.

5. A method as described in claim 1, where the information is sent in an unencrypted format.

6. A method as described in claim 1, where the information is utilized to gain network connectivity.

7. A method as described in claim 1, where the point of internet connectivity comprises a cellular access network.

8. A method as described in claim 1, where at least two RFID tags are used:

where a first RFID tag comprises an Access Point address; and

a second RFID tag comprises a decryption key.

9. A method as described in claim 1, where at least one RFID tag may be disposed under a shield that attenuates a signal transmitted by said tag.

10. A method as described in claim 1, where said RFID tag is periodically replaced with another RFID tag that stores an updated access key to the Access Point.

11. A method as described in claim 1, where said RFID tag is wirelessly coupled to a key management system to rewrite the contents of said RFID tag.

12. A method as described in claim 1, where at least two RFID tags are used:

where a first RFID tag comprises a clear text address of the Access Point; and

a second RFID tag comprises a decryption key for encrypted broadcasts sent by the Access Point.

13. A method as described in claim 1, where at least two RFID tags are used:

where a first RFID tag comprises a decryption algorithm and key; and

a second RFID tag comprises a clear text address of the Access Point.

14. A method as described in claim 1, where at least two RFID tags are used:

where a first RFID tag comprises the local or remote access controller IP address; and

a second RFID tag comprises a decryption key.

15. A method as described in claim 1, where at least two RFID tags are used:

where a first RFID tag comprises a decryption algorithm and key; and

a second RFID tag comprises the local or remote access controller IP address.

16. A method as described in claim 1, where at least two RFID tags are used:

where a first RFID tag comprises an Access Point channel, network name and Wired Equipment Privacy key; and

a second RFID tag comprises a decryption key.

17. A method as described in claim 1, where at least two RFID tags are used:

where a first RFID tag comprises a decryption algorithm and key; and

a second RFID tag comprises the local or remote access controller IP address, Access Point channel, network name and Wired Equipment Privacy key.

18. A method as described in claim 1, where at least one RFID tag comprises a key material tag.

19. A method as described in claim 1, where at least one RFID tag comprises an access availability tag.

20. A method as described in claim 1, where at least one RFID tag comprises a link layer tag.

21. A mobile terminal, comprising a wireless transceiver, a data processor, and an RFID reader coupled to said data processor for receiving a transmission from at least one RFID tag, comprising information descriptive of at least one of link layer information and IP layer information for use by said mobile terminal for gaining access to a network.

22. A wireless communication system comprising a radio frequency identification based network access management system that includes a terminal that comprises a data processor and an RFID reader for being wirelessly coupled to at least one RFID tag external to said terminal, said data processor being responsive to information received via said RFID reader for initiating access to a network, said information comprising at least one of link layer information and IP layer information.

23. A wireless communication system as described in claim 22, where the information comprises the identifier of a preferred network point of connectivity.

24. A wireless communication system as described in claim 22, where the information comprises authentication information.

25. A wireless communication system as described in claim 22, where the information is sent in an encrypted format.

26. A wireless communication system as described in claim 22, where the information is sent in an unencrypted format.

27. A wireless communication system as described in claim 22, where the information is utilized to gain network connectivity.

28. A wireless communication system as described in claim 22, where the point of internet connectivity comprises a cellular access network.

29. A wireless communication system as described in claim 22, where said data processor is responsive to information received from at least two RFID tags, where information in a first RFID tag comprises an Access Point address and where information in a second RFID tag comprises a decryption key.

30. A wireless communication system as described in claim 22, where at least one RFID tag may be disposed under a shield that attenuates a signal transmitted by said tag.

31. A wireless communication system as described in claim 22, where said RFID tag is periodically replaced with another RFID tag that stores an updated access key to the Access Point.

32. A wireless communication system as described in claim 22, where said RFID tag is wirelessly coupled to a key management system to rewrite the contents of said RFID tag.

33. A wireless communication system as described in claim 22, where said data processor is responsive to information received from at least two RFID tags, where information in a first RFID tag comprises a clear text address of the Access Point and where information in a second RFID tag comprises a decryption key for encrypted broadcasts sent by the Access Point.

34. A wireless communication system as described in claim 22, where said data processor is responsive to information received from at least two RFID tags, where information in a first RFID tag comprises a decryption algorithm and key and where information in a second RFID tag comprises a clear text address of the Access Point.

35. A wireless communication system as described in claim 22, where said data processor is responsive to information received from at least two RFID tags, where information in a first RFID tag comprises the local or remote access controller IP address and where information in a second RFID tag comprises a decryption key.

36. A wireless communication system as described in claim 22, where said data processor is responsive to information received from at least two RFID tags, where information in a first RFID tag comprises a decryption algorithm and key and information in a second RFID tag comprises the local or remote access controller IP address.

37. A wireless communication system as described in claim 22, where said data processor is responsive to information received from at least two RFID tags, where information in a first RFID tag comprises an Access Point channel, network name and Wired Equipment Privacy key and information in a second RFID tag comprises a decryption key.

38. A wireless communication system as described in claim 22, where said data processor is responsive to information received from at least two RFID tags, where information in a first RFID tag comprises a decryption algorithm and key and information in a second RFID tag comprises the local or remote access controller IP address, Access Point channel, network name and Wired Equipment Privacy key.

39. A wireless communication system as described in claim 22, where the RFID tag comprises a key material tag comprising information that specifies an encryption algorithm.

40. A wireless communication system as described in claim 22, where the RFID tag comprises an access availability tag.

41. A wireless communication system as described in claim 22, where the RFID tag comprises a link layer tag.

42. An RFID tag comprising an RF device and data storage for storing information for use by a mobile device when initiating access to a wireless network node.

43. An RFID tag as described in claim 42, where said data storage stores key material information comprising an encryption algorithm used with the key and information descriptive of the use of the key.

44. An RFID tag as described in claim 42, where said data storage stores access availability information.

45. An RFID tag as described in claim 42, where said data storage stores link layer information.