System and method for the secure recognition of a network device

• US 20070033404A1
• Filed: 08/04/2005
• Published: 02/08/2007
• Est. Priority Date: 08/04/2005
• Status: Abandoned Application

• Current Assignee: Toshiba Corporation, Toshiba Tec Corporation (Toshiba Corporation)
• Original Assignee: Toshiba Corporation, Toshiba Tec Corporation (Toshiba Corporation)
• Inventors: Koppich, George, Cozianu, Costin
• Application Number:
  US11/197,107
• Publication Number:
  US 20070033404A1
• Time in Patent Office: Days
• US Class Current: 713/171
• CPC Class Codes: H04L 63/068 using time-dependent keys, e.g. periodically changing keys cryptographic mechanisms or cryptographic arrangements for controlling usage of secret information H04L9/088
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/0876 based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint
• CPC Class Codes: H04L 63/18 using different networks or channels, e.g. using out of band channels cryptographic mechanisms or cryptographic arrangements for key distribution involving distinctive intermediate devices or communication paths H04L9/0827; cryptographic mechanisms or cryptographic arrangements for authentication using a plurality of channels H04L9/3215

Abstract

A system and method for the secure recognition of network devices. The method begins with the receiving of a first communication via a first communication network. The first communication includes identification data representing a network device to be added to a selected network. In response to the identification data, a first data key associated with an initial login of the network device is transmitted and entered into the network device. The identification data entered into the network device is validated and upon validation, the network device is connected so as to enable it for initial data communication via a second network. Via the second network, the network device receives a second data key, which enables the network device for further data communication via the second network.

Claims

1. A system for the secure recognition of a network device comprising:

means adapted for receiving a first communication via a first communication network, the first communication inclusive of identification data representative of a network device to be added to a selected network;

means adapted for transmitting, responsive to the identification data, first data key associated with an initial login of the network device;

means adapted for entering the first data key in to the network device;

means adapted for validating identification data entered into the network device;

means adapted for connecting, upon validation of identification data, the network device so as to enable it for initial data communication via a second network;

means adapted for receiving into the network device, via the second network, a second data key; and

means adapted for enabling the network device for further data communication via the second network upon receipt of the second data key.

2. The system for the secure recognition of a network device of claim 1, further comprising:

means adapted for generating first key data inclusive of temporal limits for validity thereof; and

testing means adapted for testing the first key data for expiration of the temporal limits prior to the enablement of the network device for initial data communication via the second network.

3. The system for the secure recognition of a network device of claim 2 wherein the first communication network includes a verbal transmission of the identification data.

4. The system for the secure recognition of a network device of claim 3 wherein the first communication further includes identification of a requestor of the first data key.

5. The system for the secure recognition of a network device of claim 2 further comprising testing means adapted for testing, via the network device, the first key data prior to enabling the initial data communication via the second network.

6. The system for the secure recognition of a network device of claim 5, wherein the network device is one of the group consisting of a personal computer, a document processing device, a personal data assistant, and a laptop computer.

7. The system for the secure recognition of a network device of claim 6, wherein the network device is a document processing device and wherein the document processing device is located in a self-contained kiosk.

8. A method of secure recognition of a network device comprising the steps of:

receiving a first communication via a first communication network, the first communication inclusive of identification data representative of a network device to be added to a selected network;

transmitting, responsive to the identification data, first data key associated with an initial login of the network device;

entering the first data key in to the network device;

validating identification data entered into the network device;

upon validation of identification data, connecting the network device so as to enable it for initial data communication via a second network;

receiving into the network device, via the second network, a second data key; and

enabling the network device for further data communication via the second network upon receipt of the second data key.

9. The method of secure recognition of a network device of claim 8, further comprising the steps of:

generating first key data inclusive of temporal limits for validity thereof; and

testing the first key data for expiration of the temporal limits prior to enabling the network device for initial data communication via the second network.

10. The method of secure recognition of a network device of claim 9 wherein the first communication network includes a verbal transmission of the identification data.

11. The method of secure recognition of a network device of claim 10 wherein the first communication further includes identification of a requestor of the first data key.

12. The method of secure recognition of a network device of claim 9 further comprising the step of testing, via the network device, the first key data prior to enabling the initial data communication via the second network.

13. The method of secure recognition of a network device of claim 12, wherein the network device is one of the group consisting of a personal computer, a document processing device, a personal data assistant, and a laptop computer.

14. The method of secure recognition of a network device of claim 13, wherein the network device is a document processing device and wherein the document processing device is located in a self-contained kiosk.

15. A computer-readable medium of instructions with computer-readable instructions stored thereon for the secure recognition of a network device comprising:

instructions for receiving a first communication via a first communication network, the first communication inclusive of identification data representative of a network device to be added to a selected network;

instructions for transmitting, responsive to the identification data, first data key associated with an initial login of the network device;

instructions for entering the first data key in to the network device;

instructions for validating identification data entered into the network device;

instructions for upon validation of identification data, connecting the network device so as to enable it for initial data communication via a second network;

instructions for receiving into the network device, via the second network, a second data key; and

instructions for enabling the network device for further data communication via the second network upon receipt of the second data key.

16. The computer-readable medium of instructions with computer-readable instructions stored thereon for the secure recognition of a network device of claim 15, further comprising:

instructions for generating first key data inclusive of temporal limits for validity thereof; and

instructions for testing the first key data for expiration of the temporal limits prior to enabling the network device for initial data communication via the second network.

17. The computer-readable medium of instructions with computer-readable instructions stored thereon for the secure recognition of a network device of claim 16 wherein the first communication network includes a verbal transmission of the identification data.

18. The computer-readable medium of instructions with computer-readable instructions stored thereon for the secure recognition of a network device of claim 17 wherein the first communication further includes identification of a requestor of the first data key.

19. The computer-readable medium of instructions with computer-readable instructions stored thereon for the secure recognition of a network device of claim 16 further comprising instructions for testing, via the network device, the first key data prior to enabling the initial data communication via the second network.

20. The computer-readable medium of instructions with computer-readable instructions stored thereon for the secure recognition of a network device of claim 19, wherein the network device is one of the group consisting of a personal computer, a document processing device, a personal data assistant, and a laptop computer.

21. The computer-readable medium of instructions with computer-readable instructions stored thereon for the secure recognition of a network device of claim 20, wherein the network device is a document processing device and wherein the document processing device is located in a self-contained kiosk.

22. A computer-implemented method of secure recognition of a network device comprising the steps of:

receiving a first communication via a first communication network, the first communication inclusive of identification data representative of a network device to be added to a selected network;

transmitting, responsive to the identification data, first data key associated with an initial login of the network device;

entering the first data key in to the network device;

validating identification data entered into the network device;

upon validation of identification data, connecting the network device so as to enable it for initial data communication via a second network;

receiving into the network device, via the second network, a second data key; and

enabling the network device for further data communication via the second network upon receipt of the second data key.

23. The computer-implemented method of secure recognition of a network device of claim 22, further comprising the steps of:

generating first key data inclusive of temporal limits for validity thereof; and

testing the first key data for expiration of the temporal limits prior to enabling the network device for initial data communication via the second network.

24. The computer-implemented method of secure recognition of a network device of claim 23 wherein the first communication network includes a verbal transmission of the identification data.

25. The computer-implemented method of secure recognition of a network device of claim 24 wherein the first communication further includes identification of a requestor of the first data key.

26. The computer-implemented method of secure recognition of a network device of claim 23 further comprising the step of testing, via the network device, the first key data prior to enabling the initial data communication via the second network.

27. The computer-implemented method of secure recognition of a network device of claim 26, wherein the network device is one of the group consisting of a personal computer, a document processing device, a personal data assistant, and a laptop computer.

28. The computer-implemented method of secure recognition of a network device of claim 27, wherein the network device is a document processing device and wherein the document processing device is located in a self-contained kiosk.