Method for establishing a security association between a wireless access point and a wireless node in a UPnP environment

• US 20050266826A1
• Filed: 06/01/2004
• Published: 12/01/2005
• Est. Priority Date: 06/01/2004
• Status: Abandoned Application

• Current Assignee: Nokia Corporation
• Original Assignee: Nokia Corporation
• Inventors: Vlad, Stirbu
• Application Number:
  US10/858,506
• Publication Number:
  US 20050266826A1
• Time in Patent Office: Days
• US Class Current: 455/410
• CPC Class Codes: H04L 63/0492 by using a location-limited connection, e.g. near-field communication or limited proximity of entities
• CPC Class Codes: H04L 63/101 Access control lists [ACL]
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227
• CPC Class Codes: H04L 67/02 based on web technology, e.g. hypertext transfer protocol [HTTP]
• CPC Class Codes: H04M 2207/18 wireless networks
• CPC Class Codes: H04M 3/16 with lock-out or secrecy provision in party-line systems
• CPC Class Codes: H04W 12/02 Protecting privacy or anonymity, e.g. protecting personally identifiable information [PII]
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 12/63 Location-dependent; Proximity-dependent
• CPC Class Codes: H04W 28/18 Negotiating wireless communication parameters
• CPC Class Codes: H04W 80/12 Application layer protocols, e.g. WAP [Wireless Application Protocol]
• CPC Class Codes: H04W 92/10 between terminal device and access point, i.e. wireless air interface

Abstract

A system and method provide for the intuitive establishment of a security association between devices. To join a network of devices, a user device sends user parameters for the user device to an administrator device using an out-of-band communication protocol. The administrator device sends the user parameters to an access point device using a Universal Plug and Play Simple Object Access Protocol (UPnP SOAP) Set action. The access point device saves the user parameters in a local database. The administrator device retrieves access point parameters from the access point device using the UPnP SOAP Get action. The administrator device sends the access point parameters to the user device using the out-of-band communication protocol. The user device connects to the access point device using the access point parameters to configure a secure connection. Preferably, a location limited channel is used by the user device to communicate with the administrator device.

Claims

1. A user device for establishing a security association, the user device comprising:

a memory that holds a security association application;

a location limiting component, wherein the location limiting component is configured to;

send user parameters to an administrator device; and

receive access point parameters from the administrator device;

a communication interface, wherein the communication interface connects to an access point using the received access point parameters; and

an electronic circuit coupled to the location limiting component and to the communication interface to execute the security association application.

2. The device of claim 1, wherein the electronic circuit is a processor.

3. The device of claim 1, wherein the location limiting component is further configured to use an out-of-band protocol.

4. The device of claim 1, wherein the location limiting component communicates using a location limited channel.

5. An administrator device for establishing a security association, the administrator device comprising:

a memory that holds a security association application;

a location limiting component, wherein the location limiting component is configured to;

receive user parameters from a user device; and

send access point parameters to the user device;

a communication interface, wherein the communication interface is configured to communicate with an access point using a Universal Plug and Play Simple Object Access Protocol (UPnP SOAP); and

an electronic circuit coupled to the location limiting component and to the communication interface to execute the security association application.

6. The device of claim 5, wherein the electronic circuit is a processor.

7. The device of claim 5, wherein the location limiting component is further configured to use an out-of-band protocol.

8. The device of claim 5, wherein the location limiting component communicates using a location limited channel.

9. The device of claim 5, wherein the communication interface is further configured to send the received user parameters to the access point using a UPnP SOAP Set action.

10. The device of claim 5, wherein the communication interface is further configured to retrieve the access point parameters from the access point using a UPnP SOAP Get action.

11. An access point device for establishing a security association, the access point device comprising:

a communication interface, wherein the communication interface is configured to receive user parameters from an administrator device using a Universal Plug and Play Simple Object Access Protocol (UPnP SOAP);

a memory that holds the received user parameters; and

a network communication interface.

12. The device of claim 11, wherein the communication interface is further configured to send access parameters to the administrator device using the UPnP SOAP.

13. The device of claim 11, wherein the network communication interface comprises an Ethernet interface.

14. The device of claim 11, wherein the network communication interface comprises a wireless local area network interface.

15. The device of claim 11, wherein the network communication interface comprises a Bluetooth interface.

16. A system for establishing a security association, the system comprising:

a first device, the first device comprising;

a first device memory that holds a first security association application;

a first location limiting component, wherein the first location limiting component is configured to;

send user parameters to a second device; and

receive access point parameters from the second device;

a first communication interface, wherein the first communication interface connects to a third device using the received access point parameters; and

a first electronic circuit coupled to the first location limiting component and to the first communication interface to execute the first security association application;

the second device comprising;

a second memory that holds a second security association application;

a second location limiting component, wherein the second location limiting component is configured to;

receive the user parameters from the first device; and

send the access point parameters to the first device;

a second communication interface, wherein the second communication interface is configured to communicate with the third device using a Universal Plug and Play Simple Object Access Protocol (UPnP SOAP); and

a second electronic circuit coupled to the second location limiting component and to the second communication interface to execute the second security association application; and

the third device comprising;

a third communication interface, wherein the third communication interface is configured to receive the user parameters from the second device using the UPnP SOAP;

a third memory that holds the received user parameters; and

a network communication interface.

17. The system of claim 16, wherein the first location limiting component is further configured to use an out-of-band protocol.

18. The system of claim 16, wherein the second location limiting component is further configured to use an out-of-band protocol.

19. The system of claim 16, wherein the first location limiting component communicates using a location limited channel.

20. The system of claim 16, wherein the second location limiting component communicates using a location limited channel.

21. The system of claim 16, wherein the second communication interface is further configured to send the received user parameters to the third device using a UPnP SOAP Set action.

22. The system of claim 16, wherein the second communication interface is further configured to retrieve the access point parameters from the third device using a UPnP SOAP Get action.

23. The system of claim 16, wherein the third communication interface is further configured to send the access parameters to the second device using the UPnP SOAP.

24. The system of claim 16, wherein the network communication interface comprises an Ethernet interface.

25. The system of claim 16, wherein the network communication interface comprises a wireless local area network interface.

26. The system of claim 16, wherein the network communication interface comprises a Bluetooth interface.

27. A method of establishing a security association, the method comprising:

sending user parameters from a user device to an administrator device using an out-of-band communication protocol;

sending the user parameters from the administrator device to an access point using a Universal Plug and Play Simple Object Access Protocol (UPnP SOAP);

saving the user parameters in a local database at the access point;

retrieving access point parameters from the access point by the administrator device using the UPnP SOAP; and

sending the access point parameters from the administrator device to the user device using the out-of-band communication protocol.

28. The method of claim 27, wherein sending the user parameters from the user device to the administrator device is performed using a location limited channel.

29. The method of claim 27, wherein sending the access point parameters from the administrator device to the user device is performed using a location limited channel.

30. The method of claim 27, wherein sending the user parameters from the administrator device to the access point is performed using a UPnP SOAP Set action.

31. The method of claim 27, wherein retrieving the access point parameters from the access point by the administrator device is performed using a UPnP SOAP Get action.

32. The method of claim 27, wherein the access point comprises a network bridge.

33. A computer program product for establishing a security association at a user device, the computer program product comprising:

computer code configured to;

send user parameters to an administrator device using an out-of-band communication protocol;

receive access point parameters from the administrator device using the out-of-band communication protocol; and

connect to an access point using the received access point parameters.

34. The computer program product of claim 33, wherein the computer code is further configured to send the user parameters to the administrator device using a location limited channel.

35. The computer program product of claim 33, wherein the computer code is further configured to receive the access point parameters from the administrator device using a location limited channel.

36. A computer program product for establishing a security association for a second device using an administrator device, the computer program product comprising:

computer code configured to;

receive user parameters from a user device using an out-of-band communication protocol;

send the user parameters to an access point using a Universal Plug and Play Simple Object Access Protocol (UPnP SOAP);

retrieve access point parameters from the access point using the UPnP SOAP; and

send the access point parameters to the user device using the out-of-band communication protocol.

37. The computer program product of claim 36, wherein the computer code is further configured to receive the user parameters from the user device using a location limited channel.

38. The computer program product of claim 36, wherein the computer code is further configured to send the access point parameters to the user device using a location limited channel.

39. The computer program product of claim 36, wherein the computer code is further configured to send the user parameters to the access point using a UPnP SOAP Set action.

40. The computer program product of claim 36, wherein the computer code is further configured to retrieve the access point parameters from the access point using a UPnP SOAP Get action.