System, method and computer program product for updating security criteria in wireless networks

• US 20060251258A1
• Filed: 02/21/2006
• Published: 11/09/2006
• Est. Priority Date: 04/05/2005
• Status: Active Grant

• Current Assignee: McAfee, LLC
• Original Assignee: McAfee, Inc. (McAfee, LLC)
• Inventors: Wiedmann, Christian, Lillie, Terrance L., Sneiderman, Richard P., Zeljko, Robert, Wiedmann, Ulrich, Lynch, Sean R., Chu, Gigi C.
• Granted Patent: US 7,606,370 B2
• Time in Patent Office: Days
• US Class Current: 380/270
• CPC Class Codes: H04L 2209/80 Wireless network architectures or network communication protocols for wireless network security H04W12/00
• CPC Class Codes: H04L 63/061 for key exchange, e.g. in peer-to-peer networks cryptographic mechanisms or cryptographic arrangements for key agreement H04L9/0838
• CPC Class Codes: H04L 63/062 for key distribution, e.g. centrally by trusted party cryptographic mechanisms or cryptographic arrangements for key distribution involving a central third party H04L9/0819
• CPC Class Codes: H04L 63/068 using time-dependent keys, e.g. periodically changing keys cryptographic mechanisms or cryptographic arrangements for controlling usage of secret information H04L9/088
• CPC Class Codes: H04L 63/166 at the transport layer
• CPC Class Codes: H04L 63/18 using different networks or channels, e.g. using out of band channels cryptographic mechanisms or cryptographic arrangements for key distribution involving distinctive intermediate devices or communication paths H04L9/0827; cryptographic mechanisms or cryptographic arrangements for authentication using a plurality of channels H04L9/3215
• CPC Class Codes: H04L 9/0841 involving Diffie-Hellman or related key agreement protocols
• CPC Class Codes: H04L 9/0891 Revocation or update of secret information, e.g. encryption key update or rekeying
• CPC Class Codes: H04W 12/062 Pre-authentication
• CPC Class Codes: H04W 12/069 using certificates or pre-shared keys
• CPC Class Codes: H04W 84/10 Small scale networks; Flat hierarchical networks
• CPC Class Codes: H04W 88/02 Terminal devices
• CPC Class Codes: H04W 88/08 Access point devices

Abstract

A system, method and computer program product are provided. In use, a key is distributed to a plurality of nodes of a wireless network for use in securing the nodes during use of the wireless network. Further, the key is automatically updated at the nodes in the wireless network based on predetermined criteria.

Claims

1. A method, comprising:

distributing a key to a plurality of nodes of a wireless network for use in securing the nodes during use of the wireless network; and

automatically updating the key at the nodes in the wireless network based on predetermined criteria.

2. The method as recited in claim 1, wherein the wireless network includes a 802.11 wireless network.

3. The method as recited in claim 1, wherein the securing includes authenticating the nodes.

4. The method as recited in claim 1, wherein the securing includes encrypting communications between a plurality of the nodes.

5. The method as recited in claim 1, wherein the predetermined criteria requires that the key be automatically updated with a new key.

6. The method as recited in claim 1, wherein the predetermined criteria requires that the key be automatically updated based on rotation of a plurality of predetermined keys.

7. The method as recited in claim 1, wherein the predetermined criteria requires that the key be automatically updated based on a predetermined schedule.

8. The method as recited in claim 1, wherein the predetermined criteria requires that the key be automatically updated periodically.

9. The method as recited in claim 1, wherein the predetermined criteria requires that the key be automatically updated based on a random number.

10. The method as recited in claim 1, wherein the predetermined criteria requires that the key be automatically updated based on a pseudo-random number.

11. The method as recited in claim 10, wherein the pseudo-random number is generated utilizing a pseudo-random process capable of being carried out utilizing each of the nodes.

12. The method as recited in claim 11, wherein the pseudo-random process utilizes a seed value distributed to each of the nodes.

13. The method as recited in claim 1, wherein the predetermined criteria requires that the key be automatically updated in response to an instruction.

14. The method as recited in claim 13, wherein the instruction is received from an access point.

15. The method as recited in claim 1, wherein the predetermined criteria requires that the key be automatically updated utilizing a hint.

16. The method as recited in claim 15, wherein the hint includes a service set identifier.

17. The method as recited in claim 1, wherein the key includes a wireless equivalency privacy (WEP) key.

18. The method as recited in claim 1, wherein the key is updated utilizing a software application downloaded by:

advertising a peer-to-peer wireless network utilizing a granting node;

connecting to the peer-to-peer wireless network utilizing a requesting node;

redirecting the requesting node to a portal; and

downloading the software application to the requesting node via the peer-to-peer utilizing the portal.

19. A computer program product embodied on a computer readable medium, comprising:

computer code for distributing a key to a plurality of nodes of a 802.11 wireless network for use in securing the nodes during use of the wireless network; and

computer code for automatically updating the key at the nodes in the wireless network based on predetermined criteria.

20. A system, comprising:

a processor for distributing a key to a plurality of nodes of an 802.11 wireless network for use in securing the nodes during use of the wireless network;

wherein the key is updated automatically updated at the nodes in the wireless network.