System and method for authenticating a wireless computing device

• US 20070165582A1
• Filed: 01/18/2006
• Published: 07/19/2007
• Est. Priority Date: 01/18/2006
• Status: Abandoned Application

• Current Assignee: Symbol Technologies, Inc. (Zebra Technologies Corporation)
• Original Assignee: Symbol Technologies, Inc. (Zebra Technologies Corporation)
• Inventors: Batta, Puneet
• Application Number:
  US11/334,648
• Publication Number:
  US 20070165582A1
• Time in Patent Office: Days
• US Class Current: 370/338
• CPC Class Codes: H04L 2463/061 applying further key derivation, e.g. deriving traffic keys from a pair-wise master key cryptographic mechanisms or cryptographic arrangements for generation of secret information including derivation or calculation of cryptographic keys or passwords H04L9/0861
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 63/166 at the transport layer
• CPC Class Codes: H04W 12/065 Continuous authentication
• CPC Class Codes: H04W 12/069 using certificates or pre-shared keys

Abstract

Described is a method, comprising receiving an authentication request by a server from a first wireless device, the authentication request including request data corresponding to a second wireless device. The second wireless device is authenticated by the server as a function of the request data. The server generates authentication data as a function of the request data. The server transmits the authentication data to the first wireless device so that the first wireless device authenticates the second wireless device using the authentication data upon receipt of a further authentication request from the second wireless device.

Claims

1. A method, comprising:

receiving an authentication request by a server from a first wireless device, the authentication request including request data corresponding to a second wireless device;

authenticating the second wireless device by the server as a function of the request data;

generating authentication data by the server as a function of the request data;

transmitting the authentication data to the first wireless device so that the first wireless device authenticates the second wireless device using the authentication data upon receipt of a further authentication request from the second wireless device.

2. The method according to claim 1, wherein the further authentication request includes the request data.

3. The method according to claim 1, wherein the request data includes at least one of (i) a session identifier, (ii) a security key, (iii) a security certificate, and (iv) user identification data indicative of a user of the second wireless device.

4. The method according to claim 1, wherein the authenticating step includes the following substep:

comparing the request data to stored data in an authentication database.

5. The method according to claim 1, wherein the authentication data includes at least one of (i) a session identifier, (ii) a security key and (iii) a hash of user identification data indicative of a user of the second wireless device.

6. The method according to claim 1, further comprising:

establishing a communication session between the second wireless device and the server using a TLS protocol.

7. The method according to claim 1, further comprising:

upon receipt of the further authentication request, establishing a communication session between the first and second wireless devices using a PAP protocol.

8. The method according to claim 1, wherein the first wireless device includes at least one of a switch, an access point and an access port.

9. The method according to claim 1, wherein the second wireless device includes at least one of a laser-based scanner, an image-based scanner, an RFID reader, an RFID tag, a phone, a PDA, a tablet, a network interface card and a laptop.

10. The method according to claim 1, wherein the server is a RADIUS server.

11. The method according to claim 1, further comprising:

transmitting the authentication data to at least a third wireless device within a predetermined range of the second wireless device so that the at least the third wireless device authenticates the second wireless device upon receipt of the further authentication request.

12. A system, comprising:

a server;

a first wireless device communicatively coupled to the server; and

a second wireless communicatively coupled to the first wireless device, the second wireless device transmitting an authentication request to the server via the first wireless device, the authentication request including request data corresponding to the second wireless device,

wherein, the server authenticates the second wireless as a function of the request data, the server generating authentication data as a function of the request data, the server transmitting the authentication data to the first wireless device so that the first wireless device authenticates the second wireless device using the authentication data upon receipt of a further authentication request from the second wireless device.

13. The system according to claim 12, wherein the first wireless device includes at least one of a switch, an access point and an access port.

14. The system according to claim 12, wherein the second wireless device includes at least one of a laser-based scanner, an image-based scanner, an RFID reader, an RFID tag, a phone, a PDA, a tablet, a network interface card and a laptop.

15. The system according to claim 12, wherein the server is a RADIUS server.

16. The system according to claim 12, wherein the further authentication request includes the request data.

17. The system according to claim 12, wherein the request data includes at least one of (i) a session identifier, (ii) a security key, (iii) a security certificate, and (iv) user identification data indicative of a user of the second wireless device.

18. The system according to claim 12, wherein the authentication data includes at least one of (i) a session identifier, (ii) a security key and (iii) a hash of user identification data indicative of a user of the second wireless device.

19. The system according to claim 12, wherein the second wireless device and the server establish a communication session using a TLS protocol.

20. The system according to claim 12, wherein, upon receipt of the further authentication request, the first wireless device establishes a communication session with the second wireless devices using to a PAP protocol.

21. An arrangement, comprising:

a communication arrangement forwarding an authentication request from a wireless device to a server, the authentication request including request data corresponding to the wireless device, the communication arrangement receiving authentication data from the server, the authentication data indicative of an authentication of the wireless device by the server as a function of the request data;

a memory storing the authentication data;

a processor authenticating the wireless device upon receipt of a further authentication request from the wireless device.

22. The arrangement according to claim 21, wherein the arrangement is one of a switch, an access point and an access port.

23. An arrangement, comprising:

a communication means for forwarding an authentication request from a wireless device to a server, the authentication request including request data corresponding to the wireless device, the communication arrangement receiving authentication data from the server, the authentication data indicative of an authentication of the wireless device by the server as a function of the request data;

a storage means for storing the authentication data;

an authenticating means for authenticating the wireless device upon receipt of a further authentication request from the wireless device.