Method and apparatus for multiple pre-shared key authorization

• US 20070280481A1
• Filed: 06/06/2006
• Published: 12/06/2007
• Est. Priority Date: 06/06/2006
• Status: Abandoned Application

• Current Assignee: General Instrument Corporation (CommScope Holding Company, Inc.)
• Original Assignee: General Instrument Corporation (CommScope Holding Company, Inc.)
• Inventors: Eastlake, Donald E., Harvey, George A., Hoang, Minh N.
• Application Number:
  US11/447,429
• Publication Number:
  US 20070280481A1
• Time in Patent Office: Days
• US Class Current: 380/277
• CPC Class Codes: H04L 2209/80 Wireless network architectures or network communication protocols for wireless network security H04W12/00
• CPC Class Codes: H04L 63/062 for key distribution, e.g. centrally by trusted party cryptographic mechanisms or cryptographic arrangements for key distribution involving a central third party H04L9/0819
• CPC Class Codes: H04L 63/0846 using time-dependent-passwords, e.g. periodically changing passwords
• CPC Class Codes: H04L 63/0869 for achieving mutual authentication cryptographic mechanisms or cryptographic arrangements for mutual authentication H04L9/3273
• CPC Class Codes: H04L 63/101 Access control lists [ACL]
• CPC Class Codes: H04L 63/108 when the policy decisions are valid for a limited amount of time
• CPC Class Codes: H04L 9/0844 with user authentication or key authentication, e.g. ElGamal, MTI, MQV-Menezes-Qu-Vanstone protocol or Diffie-Hellman protocols using implicitly-certified keys
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/50 Secure pairing of devices
• CPC Class Codes: H04W 12/61 Time-dependent

Abstract

A system and method of providing security in a wireless network is provided. A plurality of pre-shared keys is created. Each pre-shared key provides access to the wireless network. A list of the plurality of pre-shared keys is transmitted to an access point device in the wireless network so that the access point device can authenticate a station attempting to access the network by performing an analysis with the list of the plurality of pre-shared keys.

Claims

1. A method of providing security in a wireless network, the method comprising:

creating a plurality of pre-shared keys that each provide access to the wireless network; and

transmitting a list of the plurality of pre-shared keys to an access point device in the wireless network so that the access point device can authenticate a station attempting to access the network by performing an analysis with the list of the plurality of pre-shared keys.

2. The method of claim 1, wherein the analysis includes a determination as to the presence of a station pre-shared key on the list of the plurality of pre-shared keys.

3. The method of claim 2, further comprising assigning a start time to each of the plurality of pre-shared keys.

4. The method of claim 3, wherein the analysis includes a determination as to whether the start time has begun for the pre-shared key on the list of the plurality of pre-shared keys that matches with the station pre-shared key.

5. The method of claim 4, wherein the Access Point 204 grants the station access if the start time has begun.

6. The method of claim 2, further comprising assigning an end time to each of the plurality of pre-shared keys.

7. The method of claim 6, wherein the analysis includes a determination as to whether the end time has been reached for the pre-shared key on the list of the plurality of pre-shared keys that matches with the station pre-shared key.

8. The method of claim 7, wherein the Access Point 204 terminates access if the end time has been reached.

9. The method of claim 1, further comprising transmitting an updated list of the plurality of pre-shared keys to the access point device when the list of the plurality of pre-shared keys is changed.

10. The method of claim 9, wherein the list of the plurality of pre-shared keys is changed by adding a pre-shared key to the list of the plurality of pre-shared keys.

11. The method of claim 9, wherein the list of the plurality of pre-shared keys is changed by deleting a pre-shared key from the list of the plurality of pre-shared keys.

12. The method of claim 9, wherein the list of the plurality of pre-shared keys is changed by changing a start time associated with a pre-shared key in the list of the plurality of pre-shared keys.

13. The method of claim 9, wherein the list of the plurality of pre-shared keys is changed by changing an end time associated with a pre-shared key in the list of the plurality of pre-shared keys.

14. A method of providing access to a wireless network, comprising:

receiving a list of a plurality of pre-shared keys from a controller;

receiving a request from a station for access to the wireless network;

receiving information that is dependent on a station pre-shared key from the station;

authenticating the pre-shared key by performing an analysis on the information that is dependent on the pre-shared key and the list of the plurality of pre-shared keys; and

granting access to the wireless network if the pre-shared key is authenticated.

15. The method of claim 14, wherein the access is restricted to only a subset of services that are provided through the wireless network.

16. The method of claim 14, wherein the analysis includes determining if the pre-shared key is present in the list of the plurality of pre-shared keys.

17. The method of claim 14, wherein the analysis includes determining if a start date associated with the shared key has begun yet.

18. The method of claim 14, wherein the analysis includes determining if an end date associated with the shared key has been reached yet.

19. A method of securely accessing a wireless network, comprising:

requesting access to the wireless network;

providing information that is dependent on a pre-shared key to authenticate the pre-shared key; and

accessing the wireless network upon receiving authentication that the shared key is present on a list of a plurality of pre-shared keys.

20. The method of claim 19, wherein a subset of services based on attributes associated with the pre-shared key is provided through the wireless network.