System and method for wireless network security

• US 20050245235A1
• Filed: 04/29/2004
• Published: 11/03/2005
• Est. Priority Date: 04/29/2004
• Status: Abandoned Application

• Current Assignee: Symbol Technologies, Inc. (Zebra Technologies Corporation)
• Original Assignee: Symbol Technologies, Inc. (Zebra Technologies Corporation)
• Inventors: Vesuna, Sarosh
• Application Number:
  US10/834,736
• Publication Number:
  US 20050245235A1
• Time in Patent Office: Days
• US Class Current: 455/411
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04M 3/382 using authorisation codes or passwords
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/47 using near field communication [NFC] or radio frequency identification [RFID] modules
• CPC Class Codes: H04W 12/50 Secure pairing of devices
• CPC Class Codes: H04W 12/77 Graphical identity
• CPC Class Codes: H04W 74/00 Wireless channel access
• CPC Class Codes: H04W 88/08 Access point devices
• CPC Class Codes: H04W 92/10 between terminal device and access point, i.e. wireless air interface

Abstract

Described are a system and method for a wireless network security. The system may include a wireless electronic device and a wireless access point. The access point includes a memory and is capable of wirelessly communicating with the device. The memory stores an access scheme which defines an authentication procedure for allowing the wireless communications between the electronic device and the further asset. The authentication procedure utilizes data as defined by the access scheme. The access point is situated in a location accessible to an authorized user and provides access for the electronic device to a further asset. The access point allows the wireless communications between the electronic device and the further asset only when the authentication procedure is successful. Before the authentication procedure, the data is transferred between the device and the access point via a physical access to at least one of the access point and the electronic device.

Claims

1. An access point, comprising:

a memory storing an access scheme which defines an authentication procedure for allowing the wireless communications between a wireless electronic device and a further asset, the authentication procedure utilizing data as defined by the access scheme; and

a processor capable of performing the authentication procedure,

wherein the access point allows the wireless communications between the device and the further asset only when the authentication procedure is successful, and

wherein before the authentication procedure, the data is transferred between the device and the access point via a physical access to at least one of the access point and the device.

2. The access point according to claim 1, wherein the access scheme includes a unique identifier for at least one of the device and a wireless communication arrangement of the device matches a further unique identifier, the further unique identifier being stored in the memory during the physical access.

3. The access point according to claim 1, wherein the further asset is one of a wide area network and the Internet.

4. The access point according to claim 1, wherein the device includes at least one of a desktop computer, a printer, a laptop, a server, a mobile computing unit, a PDA, a cell phone, a VOIP phone, and a two-way pager.

5. The access point according to claim 2, wherein the access point is situated in a location accessible only to an authorized user and wherein the memory includes a software for storing the unique identifier.

6. The access point according to claim 5, wherein the software permits storing the unique identifier into the memory only when there is a direct contact with the access point at the location.

7. The access point according to claim 5, wherein the software does not permit storing the unique identifier wirelessly.

8. The access point according to claim 5, wherein the software does not permit storing the unique identifier from an area located outside of the location.

9. The access point according to claim 2, wherein the device is a mobile computing device including a wireless removable radio card, the radio card being inserted into a slot of the access point to provide of the unique identifier.

10. The access point according to claim 2, wherein the device is connected using a wire with the access point to provide the unique identifier.

11. The access point according to claim 2, wherein the device stores the unique identifier onto a portable memory device, the memory device being connected to the access point to provide the unique identifier.

12. The access point according to claim 11, wherein the portable memory device is one a compact flash card, a secure digital card and a memory stick.

13. The access point according to claim 2, further comprising:

an input arrangement removably attached to the access point,

wherein the unique identifier is one of provided and removed to/from the memory via the input arrangement.

14. The access point according to claim 13, wherein the input arrangement includes at least one of a barcode reader, an RFID reader, a keypad and a keyboard.

15. The access point according to claim 14, wherein the unique identifier is stored as a barcode, the unique identifier being provided to the access point by reading the barcode using the barcode reader.

16. The access point according to claim 14, wherein the unique identifier is stored as an RFID tag, the unique identifier being provided to the access point by the RFID tag using the RFID reader.

17. The access point according to claim 2, wherein the unique identifier is generated as a function of a serial number of the device, an identifier of the device'"'"'s manufacturer, and a preprogrammed number.

18. The access point according to claim 2, wherein the unique identifier is encrypted during the wireless communication of the device with the access point.

19. The access point according to claim 2, further comprising:

an output arrangement activating when there is a match of the unique identifier.

20. The access point according to claim 19, wherein the output arrangement includes at least one of an LED and a sound device.

21. The access point according to claim 1, wherein the access scheme periodically requests performance of the authentication procedure to further allow the wireless communications.

22. The access point according to claim 1, wherein when the authentication procedure is unsuccessful, the access scheme executes an alarm procedure.

23. A system, comprising:

an electronic device including a wireless communication arrangement; and

a wireless access point including a memory and capable of wirelessly communicating with the device, the memory storing an access scheme which defines an authentication procedure for allowing the wireless communications between the device and a further asset, the authentication procedure utilizing data as defined by the access scheme,

wherein the access point allows the wireless communications between the device and the further asset only when the authentication procedure is successful, and

wherein before the authentication procedure, the data is transferred between the device and the access point via a physical access to at least one of the access point and the device.

24. The system according to claim 23, wherein the access scheme includes a unique identifier of at least one of the device and the wireless communication arrangement of the device matches a further unique identifier, the further unique identifier being stored in the memory during the physical access.

25. The system according to claim 24, wherein the access point is situated in a location accessible only to an authorized user and wherein the memory includes a software for storing the unique identifier.

26. The system according to claim 25, wherein the software permits storing the unique identifier into the memory only when there is a direct contact with the access point at the location.

27. The system according to claim 24, wherein the device is a mobile computing device including a wireless removable radio card, the radio card being inserted into a slot of the access point to provide of the unique identifier.

28. The system according to claim 24, wherein the device includes an input arrangement removably attached to the access point, the unique identifier being one of provided and removed to/from the memory via the input arrangement.

29. The system according to claim 28, wherein the unique identifier is stored as a barcode, the unique identifier being provided to the access point by reading the barcode using the barcode reader.

30. The system according to claim 28, wherein the unique identifier is stored as an RFID tag, the unique identifier being provided to the access point by the RFID tag using the RFID reader.

31. The system according to claim 24, wherein the access scheme periodically requests performance of the authentication procedure to further allow the wireless communications.

32. A method, comprising the steps of:

transferring data between a wireless electronic device and a wireless access point via a physical access to at least one of the access point and the device, the access point including a memory storing an access scheme which defines an authentication procedure for allowing the wireless communications between the device and a further asset, the authentication procedure utilizing the data as defined by the access scheme; and

allowing by the access point the wireless communications between the device and the further asset only when the authentication procedure is successful.

33. The method according to claim 32, wherein the access scheme includes a unique identifier of at least one of the device and a wireless communication arrangement of the device matches a further unique identifier, the further unique identifier being stored in the memory during the physical access.

34. The method according to claim 33, wherein the access point is situated in a location accessible only to an authorized user and wherein the memory includes a software for storing the unique identifier.

35. The method according to claim 34, wherein the software permits storing the unique identifier into the memory only when there is a direct contact with the access point at the location.

36. The method according to claim 33, wherein the device is a mobile computing device including a wireless removable radio card, the method further comprising the step of:

inserting the radio card into a slot of the access point to provide of the unique identifier.

37. The method according to claim 33, wherein the device includes an input arrangement removably attached to the access point, the method further comprising the step of:

providing the identifier to the memory via the input arrangement.

38. The method according to claim 37, wherein the unique identifier is stored as a barcode and the input arrangement includes a barcode reader, the method further comprising the step of:

reading the barcode using the barcode reader to obtain the unique identifier.

39. The method according to claim 37, wherein the unique identifier is stored as an RFID tag and the input arrangement includes an RFID reader, the method further comprising the step of:

reading the RFID tag using the RFID reader to obtain the unique identifier.

40. The method according to claim 32, wherein the access scheme periodically requests performance of the authentication procedure to further allow the wireless communications.