Digital certificate related to user terminal hardware in a wireless network

• US 20050086468A1
• Filed: 10/17/2003
• Published: 04/21/2005
• Est. Priority Date: 10/17/2003
• Status: Abandoned Application

• Current Assignee: ArrayComm LLC (Ygomi LLC)
• Original Assignee: ArrayComm LLC (Ygomi LLC)
• Inventors: Dogan, Mithat C., Goldburg, Marc, Meandzija, Branislav
• Application Number:
  US10/687,675
• Publication Number:
  US 20050086468A1
• Time in Patent Office: Days
• US Class Current: 713/156
• CPC Class Codes: H04L 2209/80 Wireless
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 63/12 Applying verification of the received information cryptographic mechanisms or cryptographic arrangements for data integrity or data verification H04L9/32
• CPC Class Codes: H04L 9/3268 using certificate validation, registration, distribution or revocation, e.g. certificate revocation list [CRL]
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/10 Integrity
• CPC Class Codes: H04W 12/71 Hardware identity

Abstract

A user terminal of a wireless access network can use a digital certificate to authenticate itself to access points of the wireless access network. In one embodiment, the user terminal includes a memory to store an identity certificate signed by a certificate that the user terminal can use for authentication, where the identity certificate being based, at least in part, on hardware included in the user terminal. In one specific embodiment, the identity certificate is tied to the serial number of the user terminal.

Claims

1. A user terminal capable of communicating with a wireless access network, the user terminal comprising:

a memory to store an identity certificate signed by a certificate authority to be used by an access point of the wireless access network to authenticate the user terminal, the identity certificate being based, at least in part, on hardware included in the user terminal.

2. The user terminal of claim 1, wherein the identity certificate includes a serial number of the user terminal.

3. The user terminal of claim 2, wherein the serial number comprises a Media Access Control (MAC) address of the user terminal.

4. The user terminal of claim 1, wherein the identity certificate is factory seeded into the memory of the user terminal.

5. The user terminal of claim 1, wherein the identity certificate authenticates the user terminal to multiple wireless access networks.

6. A method comprising:

authenticating a user terminal of a wireless access network by an access point of the wireless access network using an identity certificate signed by a certificate authority, the identity certificate being bound to user terminal hardware.

7. The method of claim 6, wherein the identity certificate being bound to user terminal hardware comprises the identity certificate including a serial number of the user terminal.

8. The method of claim 7, wherein the serial number comprises a Media Access Control (MAC) address of the user terminal.

9. The method of claim 6, further comprising authenticating the user by an access point of a second wireless access network using the identity certificate.

10. The method of claim 6, wherein the identity certificate is factory seeded into the user terminal.

11. An access point of a wireless access network, the access point comprising:

a receiver to receive an authenticator message from a user terminal capable of communicating with the wireless access network that is requesting access, the authenticator message including an identity certificate of the user terminal signed by a certificate authority, the identity certificate being bound to user terminal hardware; and

a processor coupled to the receiver to authenticate the user terminal using the identity certificate.

12. The access point of claim 11, wherein the identity certificate being bound to user terminal hardware comprises the identity certificate including a serial number of the user terminal.

13. The access point of claim 12, wherein the serial number comprises a Media Access Control (MAC) address of the user terminal.

14. The access point of claim 11, wherein the identity certificate is factory seeded into the user terminal.

15. A digital certificate to be seeded into a user terminal capable of communicating with a wireless access network, the certificate comprising:

a serial number of the user terminal;

an identification of a certificate authority that signs the certificate; and

a signature of the identified certificate authority.

16. The certificate of claim 15, wherein the serial number comprises a Media Access Control (MAC) address of the user terminal.

17. The certificate of claim 15, wherein the certificate authenticates the user terminal to multiple wireless access networks.

18. A machine-readable medium having stored thereon data representing instructions that, when executed by a processor of an access point of a wireless access network, cause the processor to perform operations comprising:

authenticating a user terminal of a wireless access network using an identity certificate signed by a certificate authority, the identity certificate being bound to user terminal hardware.

19. The machine-readable medium of claim 18, wherein the identity certificate being bound to user terminal hardware comprises the identity certificate including a serial number of the user terminal.

20. The machine-readable medium of claim 19, wherein the serial number comprises a Media Access Control (MAC) address of the user terminal.

21. The machine-readable medium of claim 18, wherein the instructions further cause the processor to authenticate the user by an access point of a second wireless access network using the identity certificate.

22. The machine-readable medium of claim 18, wherein the identity certificate is factory seeded into the user terminal.