Method of auto-configuration and auto-prioritizing for wireless security domain

• US 20060117174A1
• Filed: 11/29/2004
• Published: 06/01/2006
• Est. Priority Date: 11/29/2004
• Status: Abandoned Application

• Current Assignee: Arcadyan Technology Corporation (Compal Electronics Incorporated)
• Original Assignee: Arcadyan Technology Corporation (Compal Electronics Incorporated)
• Inventors: Lee, Chih-Fang
• Application Number:
  US10/999,010
• Publication Number:
  US 20060117174A1
• Time in Patent Office: Days
• US Class Current: 713/154
• CPC Class Codes: H04L 2463/061 applying further key derivation, e.g. deriving traffic keys from a pair-wise master key
• CPC Class Codes: H04L 41/0886 Fully automatic configuration
• CPC Class Codes: H04L 63/06 for supporting key management in a packet data network cryptographic mechanisms or cryptographic arrangements for key management H04L9/08
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04W 12/04 Key management, e.g. using generic bootstrapping architecture [GBA]
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/71 Hardware identity
• CPC Class Codes: H04W 12/73 Access point logical identity

Abstract

The present invention provides an optimization routing method for a communication network comprising obtaining a MAC address & SSID of an access point and encrypting a security key for network traffic by the obtained MAC address & SSID. Then, the client terminal accesses the network through the access point with an authentication key. An individual key is generated after the authentication key is approval. Next, the user designates a priority channel to a priority domain for priority traffic.

Claims

1. A auto-prioritizing traffic method for security domain of a communication network, comprising:

obtaining a MAC address &

priority level of each SSID of said access point;

designating a priority channel to a priority domain for priority traffic base on application type.

obtaining a wireless security key based on said obtained MAC address &

SSID;

encrypting said security key for network traffic;

accessing said network through said access point with an authentication key;

generating an security key after said authentication key is approval;

Communication based on this security key.

2. The method of claim 1, further comprising steps of:

calculating said security key base on said MAC address &

SSID;

connecting said user to said access point by said security key;

sending command to force router to use PPPOE pass through mode or use Stun protocol;

starting said PPPOE section;

sending said PPPOE request to a server;

waiting for said PPPOE reply;

forcing said router to use a PPPOE authentication key as said security key; and

changing said security key to said authentication key.

3. The method of claim 1, wherein said security key encryption is based on said MAC address &

SSID with RC4 encrypt method.

4. The method of claim 1, wherein said security key encryption is based on said MAC address with DES/3DES/AES encrypt method.

5. The method of claim 1, wherein said MAC address is obtained by site survey function. Priority level of SSID is obtained by auto-negotiation function.

6. The method of claim 1, wherein said authentication procedure is performed from a remote server.

7. The method of claim 1, further comprising a step of informing said user'"'"'s terminal after the connection is established between said access point and an internet.

8. The method of claim 1, wherein said security key is generated for each client terminal based on an authentication result and an authentication method is PPPOE or 802.1x.

9. The method of claim 1, wherein said priority domain includes management SSID, Voice SSID, Video SSID and Data SSID.

10. The method of claim 1, wherein said management SSID, Voice SSID, Video SSID and Data SSID are hidden to the user.

11. The method of claim 1, wherein said priority traffic is separate by different SSID access automatically.

12. The method of claim 1, wherein a lower priority traffic which access to Data SSID will go through the low priority queue and bound to lower priority VC.

13. The method of claim 1, wherein a higher priority Video traffic which access Video SSID will go through the higher priority queue and bound to the higher priority VC.

14. The method of claim 1, wherein a second priority Voice traffic which access to Voice SSID will go through the second priority queue and bound to second priority VC.

15. The method of claim 1, wherein a highest priority Management traffic which access to Management SSID will go through highest priority queue and bound to highest VC.

16. The method of claim 1, wherein said security key is defined from client site authentication result.

17. The method of claim 1, wherein the capability of said access point is obtained from auto-negotiation including bandwidth limitation, quantity of client and load of traffic for each SSID or each frequency channel.

18. The method of claim 1, wherein a SSID extension is obtained by an auto-negotiation of the capability of said access point.

19. The method of claim 1, wherein the capability of said access point is obtained from multiple SSID or multiple channels information with different priority level.