Systems and methods for acquiring network credentials

• US 20080060066A1
• Filed: 09/06/2007
• Published: 03/06/2008
• Est. Priority Date: 09/06/2006
• Status: Active Grant

• Current Assignee: Channel IP BV
• Original Assignee: Devicescape Software, Inc. (Pareteum Corp.)
• Inventors: Wynn, Simon, Gordon, John
• Granted Patent: US 8,191,124 B2
• Time in Patent Office: Days
• US Class Current: 726/6
• CPC Class Codes: H04L 61/5014 using dynamic host configuration protocol [DHCP] or bootstrap protocol [BOOTP]
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/0807 using tickets, e.g. Kerberos cryptographic mechanisms or cryptographic arrangements for entity authentication using tickets or tokens H04L9/3213
• CPC Class Codes: H04W 12/068 using credential vaults, e.g. password manager applications or one time password [OTP] applications
• CPC Class Codes: H04W 12/069 using certificates or pre-shared keys

Abstract

Exemplary methods and systems for acquiring network credentials for network access are described. The exemplary method comprises receiving network configuration information from a network device on a communication network, generating a credential request, transmitting the credential request to a credential server over a standard protocol of the network device, receiving the credential request response, and providing a network credential from the credential request response to the network device to access the communication network.

Claims

1. A method for acquiring network credentials, the method comprising:

receiving network configuration information from a network device on a communication network;

generating a credential request;

transmitting the credential request to a credential server over a standard protocol of the network device;

receiving the credential request response; and

providing a network credential from the credential request response to the network device to access the communication network.

2. The method of claim 1, further comprising encrypting the credential request.

3. The method of claim 1, further comprising decrypting the credential request response.

4. The method of claim 1, further comprising digitally signing the credential request.

5. The method of claim 1, wherein the standard protocol is DNS.

6. The method of claim 1, wherein the credential request comprises a location identifier.

7. The method of claim 6, wherein the location identifier is based on at least some of the network configuration information.

8. The method of claim 1, wherein the credential request response comprises a command to not cache the credential request response

9. The method of claim 1, wherein providing the credential from the credential request response comprises analyzing a network access page and posting form information within the network access page.

10. The method of claim 1, wherein the standard protocol of the network device is user datagram protocol (UDP).

11. The method of claim 1, wherein the credential request comprises a digital device identifier.

12. A system for acquiring network credentials, the system comprising:

a network module configured to receive network configuration information from a network device on a communication network and transmit a credential request to a credential server over a standard protocol of the network device;

a credential request module configured to generate the credential request;

a credential engine configured to receive a credential request response; and

a network access engine configured to provide a network credential from the credential request response to the network device to access the communication network.

13. The system of claim 12, further comprising an encryption/decryption module configured to encrypt the credential request.

14. The system of claim 12, further comprising an encryption/decryption module configured to decrypt the credential request response.

15. The system of claim 12, further comprising an encryption/decryption module configured to digitally sign the credential request.

16. The system of claim 12, wherein the standard protocol is DNS.

17. The system of claim 12, wherein the credential request comprises a location identifier.

18. The system of claim 17, wherein the location identifier is based on at least some of the network configuration information.

19. The system of claim 12, wherein the credential request response comprises a command to not cache the credential request response.

20. The system of claim 12, wherein providing the credential from the credential request response comprises the network access engine configured to analyze a network access page and post form information within the network access page.

21. The system of claim 12, wherein the standard protocol of the network device is user datagram protocol (UDP).

22. The system of claim 12, wherein the credential request comprises a digital device identifier.

23. A computer readable medium having embodied thereon a program, the program being executable by a processor for performing a method for acquiring network credentials, the method comprising:

receiving network configuration information from a network device on a communication network;

generating a credential request;

transmitting the credential request to a credential server over a standard protocol;

receiving the credential request response; and

providing a network credential from the credential request response to the network device to access the communication network.

24. The computer readable medium of claim 23, wherein the standard protocol is DNS.