Secure authentication and network management system for wireless LAN applications

• US 20060072527A1
• Filed: 03/03/2005
• Published: 04/06/2006
• Est. Priority Date: 03/04/2004
• Status: Active Grant

• Current Assignee: Directpointe Incorporated
• Original Assignee: Sweet Spot Solutions, Inc. (DigitalBridge Group, Inc.)
• Inventors: Beck, Justin M., Swensen, Chad L.
• Granted Patent: US 7,565,529 B2
• Time in Patent Office: Days
• US Class Current: 370/338
• CPC Class Codes: G06F 21/34 involving the use of external additional devices, e.g. dongles or smart cards
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 2209/80 Wireless
• CPC Class Codes: H04L 63/0272 Virtual private networks
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 63/162 at the data link layer
• CPC Class Codes: H04L 9/3268 using certificate validation, registration, distribution or revocation, e.g. certificate revocation list [CRL]
• CPC Class Codes: H04W 12/069 using certificates or pre-shared keys
• CPC Class Codes: H04W 84/12 WLAN [Wireless Local Area Networks]
• CPC Class Codes: H04W 88/08 Access point devices

Abstract

An authentication and network management system for Wi-Fi local area networks includes a network management device and a plurality of Wi-Fi local area networks coupled to the network management device. Each local network includes at least one access point device having a Wi-Fi radio. A plurality of end user devices are attachable to the network forming nodes thereof, and each end user device has input plugs, such as USB ports and the like, for coupling accessories thereto. An authentication device is provided in the network for authenticating the end user devices attached to the network. A plurality of authenticating keys is provided, with each key attachable to an input plug of an end user device. Each key contains a validation certificate therein, wherein the authentication device verifies the presence of a current validation certificate on a key coupled to the end users device prior to granting access to the network.

Claims

1. A Wi-Fi wireless local area network comprising:

At least one access point device having a Wi-Fi radio;

A plurality of end user devices attachable to the network forming nodes thereof, each end user device having input plugs for coupling accessories thereto;

An authentication device for authenticating the end user devices attached to the network; and

A plurality of authenticating keys, with each key attachable to an input plug of an end user device, each key containing a validation certificate therein, wherein the authentication device verifies the presence of a current validation certificate on a key coupled to the end users device prior to granting access to the network.

2. The Wi-Fi wireless local area network as claimed in claim 1 wherein each key establishes a virtual private network tunnel between the key and the authentication device for the authentication process.

3. The Wi-Fi wireless local area network as claimed in claim 1 wherein each key is on the order of 1″

to 5″ and

includes indicia thereon indicative of the Wi-Fi wireless local area network operator.

4. The Wi-Fi wireless local area network as claimed in claim 1 wherein the end users on the network are granted access to at least one of i) high speed internet service, ii) an in house database, and iii) specialized equipment.

5. The Wi-Fi wireless local area network as claimed in claim 1 wherein each key attaches to a universal serial bus port of the end user device.

6. The Wi-Fi wireless local area network as claimed in claim 1 further a network management device coupled to the authentication device, wherein the management device maintains an active directory of valid certificates of the keys and will communicate this list to the authentication device.

7. The Wi-Fi wireless local area network as claimed in claim 8 wherein the access point device further includes a signal amplifier therein and wherein the network management device is coupled to the authentication device through the internet.

8. The Wi-Fi wireless local area network as claimed in claim 1 wherein each key further includes at least one of (i) incorporation of a personal profile on an individual'"'"'s key that grant privileges on the network associated with the particular user to whom the key is assigned, and (ii) network protection software that at least verifies the presence of a minimal level of network protection software on the users device.

9. A secure local area network comprising:

A plurality of end user devices attachable to the network forming nodes thereof, each end user device having input plugs for coupling accessories thereto;

An authentication device for authenticating the end user devices attached to the network;

A plurality of authenticating keys, with each key attachable to an input plug of an end user device, each key containing a validation certificate therein, wherein the authentication device verifies the presence of a current validation certificate on a key coupled to the end users device prior to granting access to the network; and

A network management device coupled to the authentication device, wherein the management device maintains an active directory of valid certificates of the keys and will communicate this list to the authentication device.

10. The secure local area network as claimed in claim 9 wherein each key attaches to a universal serial bus port of the end user device and establishes a virtual private network tunnel between the key and the authentication device for the authentication process.

11. The secure local area network as claimed in claim 9 wherein the network is a wireless Wi-Fi network including at least one access point device having a Wi-Fi radio, wherein each key is on the order of 1″

to 5″ and

attaches to a universal serial bus port of the end user device, and wherein the end users on the network are granted access to at least one of i) high speed internet service, ii) an in house database, and iii) specialized equipment.

12. The secure local area network as claimed in claim 9 wherein each key further includes at least one of (i) incorporation of a personal profile on an individual'"'"'s key that grant privileges on the network associated with the particular user to whom the key is assigned, and (ii) network protection software that at least verifies the presence of a minimal level of network protection software on the users device.

13. An authentication and network management system for Wi-Fi local area networks comprising:

A) A network management device; and

B) A plurality of Wi-Fi local area networks coupled to the network management device, each local network including

i) At least one access point device having a Wi-Fi radio;

ii) A plurality of end user devices attachable to the network forming nodes thereof, each end user device having input plugs for coupling accessories thereto;

iii) An authentication device for authenticating the end user devices attached to the network; and

iv) A plurality of authenticating keys, with each key attachable to an input plug of an end user device, each key containing a validation certificate therein, wherein the authentication device verifies the presence of a current validation certificate on a key coupled to the end users device prior to granting access to the network.

14. The authentication and network management system for Wi-Fi local area networks as claimed in claim 13 wherein the network management device is coupled to the authentication device of each local network, wherein the management device maintains an active directory of valid certificates of the keys for the networks and will communicate this list to the respective authentication devices.

15. The authentication and network management system for Wi-Fi local area networks as claimed in claim 13 wherein each key is attached to a USB port of the end user device, establishes a virtual private network tunnel between the key and the authentication device for the authentication process, is on the order of 1″

to 5″ and

includes indicia thereon indicative of the Wi-Fi wireless local area network operator.

16. The authentication and network management system for Wi-Fi local area networks as claimed in claim 13 wherein the end users on each local network are granted access to at least one of i) high speed internet service, ii) an in house database, and iii) specialized equipment, and wherein the access point device of each local network further includes a signal amplifier therein.

17. An authentication and network management method for Wi-Fi local area networks having at least one access point device having a Wi-Fi radio and a plurality of end user devices attachable to the network forming nodes thereof, each end user device having input plugs for coupling accessories thereto, the method comprising the steps of:

Providing an authentication device for authenticating the end user devices attached to the network, and a plurality of authenticating keys, with each key attachable to an input plug of an end user device, each key containing a validation certificate therein; and

Verifying the presence of a current validation certificate on a key coupled to the end users device with the authentication device prior to granting access to the network.

18. The authentication and network management method as claimed in claim 17 wherein each key establishes a virtual private network tunnel between the key and the authentication device for the authentication process, and each key is on the order of 1″

to 5″

in length and includes indicia thereon indicative of the Wi-Fi wireless local area network operator, and attaches to a universal serial bus port of the end user device.

19. The authentication and network management method as claimed in claim 17 further comprising the steps of providing a network management device coupled to the authentication device, and maintaining an active directory of valid certificates of the keys on the management device, and communicating this list to the authentication device.

20. The authentication and network management method as claimed in claim 19 wherein the network management device is coupled to the authentication device through the internet.