Method and system for enhanced wireless network security

• US 20080134281A1
• Filed: 11/30/2006
• Published: 06/05/2008
• Est. Priority Date: 11/30/2006
• Status: Active Grant

• Current Assignee: McAfee, LLC
• Original Assignee: McAfee, Inc. (McAfee, LLC)
• Inventors: Awasthi, Harish Mohan, Shinde, Rajesh
• Granted Patent: US 9,148,422 B2
• Time in Patent Office: Days
• US Class Current: 726/1
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 2221/2129 Authenticate client device independently of the user
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/102 Entity profiles
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 12/50 Secure pairing of devices
• CPC Class Codes: H04W 84/18 Self-organising networks, e.g. ad-hoc networks or sensor networks

Abstract

A method, system, and computer program product for securing wireless network devices improves the security of wireless networks and devices, such as Bluetooth networks and devices, to prevent security attacks on and hacking of such networks and devices. A method for secure wireless communications, comprises the steps of requesting a connection with a wireless device, determining whether the wireless device is trusted, determining a security policy of the wireless device, and establishing a connection with the wireless device if the wireless device is trusted and if the security policy of the wireless device is as expected.

Claims

1. A method for secure wireless communications, comprising the steps of:

requesting a connection with a wireless device;

determining whether the wireless device is trusted;

determining a security policy of the wireless device; and

establishing a connection with the wireless device if the wireless device is trusted and if the security policy of the wireless device is as expected.

2. The method of claim 1, wherein the step of determining whether the wireless device is trusted comprises the step of:

determining that the wireless device is trusted if the wireless device has previously been paired with a device performing the method.

3. The method of claim 1, wherein the step of determining a security policy of the wireless device comprises the step of:

determining at least one of;

checking and controlling file transfers, checking implementation of traffic handling policies, checking the wireless device for an installed scanning engine, checking the wireless device for a level and a version of the scanning engine, and checking what was the kind of pairing that happened and what was the data shared between devices.

4. The method of claim 3, wherein the step of determining whether the wireless device is trusted comprises the step of:

determining that the wireless device is trusted if the wireless device has previously been paired with a device performing the method.

5. The method of claim 4, wherein the device performing the method is a Bluetooth device.

6. The method of claim 1, wherein the step of establishing a connection with the wireless device comprises the steps of:

pairing the wireless device with a device performing the method.

7. The method of claim 6, wherein the pairing step comprises the steps of:

obtaining a passkey or PIN;

transmitting the passkey or PIN to the wireless device; and

receiving from the wireless device an indication that the transmitted passkey matches a passkey or PIN of the wireless device.

8. The method of claim 7, wherein the step of determining whether the wireless device is trusted comprises the step of:

determining that the wireless device is trusted if the wireless device has previously been paired with the device performing the method.

9. The method of claim 8, wherein the step of determining a security policy of the wireless device comprises the step of:

determining at least one of;

checking and controlling file transfers, checking implementation of traffic handling policies, checking the wireless device for an installed scanning engine, checking the wireless device for a level and a version of the scanning engine, and checking what was the kind of pairing that happened and what was the data shared between devices.

10. The method of claim 9, wherein the device performing the method is a Bluetooth device.

11. A system for secure wireless communications comprising:

a processor operable to execute computer program instructions;

a memory operable to store computer program instructions executable by the processor; and

computer program instructions stored in the memory and executable to perform the steps of;

requesting a connection with a wireless device;

determining whether the wireless device is trusted;

determining a security policy of the wireless device; and

establishing a connection with the wireless device if the wireless device is trusted and if the security policy of the wireless device is as expected.

12. The system of claim 11, wherein the step of determining whether the wireless device is trusted comprises the step of:

determining that the wireless device is trusted if the wireless device has previously been paired with the system.

13. The system of claim 11, wherein the step of determining a security policy of the wireless device comprises the step of:

determining at least one of;

checking and controlling file transfers, checking implementation of traffic handling policies, checking the wireless device for an installed scanning engine, checking the wireless device for a level and a version of the scanning engine, and checking what was the kind of pairing that happened and what was the data shared between devices.

14. The system of claim 13, wherein the step of determining whether the wireless device is trusted comprises the step of:

determining that the wireless device is trusted if the wireless device has previously been paired with the system.

15. The system of claim 14, wherein the system comprises a Bluetooth device.

16. The system of claim 11, wherein the step of establishing a connection with the wireless device comprises the steps of:

pairing the wireless device with the system.

17. The system of claim 16, wherein the pairing step comprises the steps of:

obtaining a passkey or PIN;

transmitting the passkey or PIN to the wireless device; and

receiving from the wireless device an indication that the transmitted passkey matches a passkey or PIN of the wireless device.

18. The system of claim 17, wherein the step of determining whether the wireless device is trusted comprises the step of:

determining that the wireless device is trusted if the wireless device has previously been paired with the system.

19. The system of claim 18, wherein the step of determining a security policy of the wireless device comprises the step of:

determining at least one of;

checking and controlling file transfers, checking implementation of traffic handling policies, checking the wireless device for an installed scanning engine, checking the wireless device for a level and a version of the scanning engine, and checking what was the kind of pairing that happened and what was the data shared between devices.

20. The system of claim 19, wherein the system comprises a Bluetooth device.

21. A computer program product for secure wireless communications comprising:

a computer readable storage medium;

computer program instructions, recorded on the computer readable storage medium, executable by a processor, for performing the steps of

requesting a connection with a wireless device;

determining whether the wireless device is trusted;

determining a security policy of the wireless device; and

establishing a connection with the wireless device if the wireless device is trusted and if the security policy of the wireless device is as expected.

22. The method of claim 21, wherein the step of determining whether the wireless device is trusted comprises the step of:

determining that the wireless device is trusted if the wireless device has previously been paired with a second device.

23. The method of claim 21, wherein the step of determining a security policy of the wireless device comprises the step of:

determining at least one of;

checking and controlling file transfers, checking implementation of traffic handling policies, checking the wireless device for an installed scanning engine, checking the wireless device for a level and a version of the scanning engine, and checking what was the kind of pairing that happened and what was the data shared between devices.

24. The method of claim 23, wherein the step of determining whether the wireless device is trusted comprises the step of:

determining that the wireless device is trusted if the wireless device has previously been paired with a second device.

25. The system of claim 24, wherein the second device comprises a Bluetooth device.

26. The method of claim 21, wherein the step of establishing a connection with the wireless device comprises the steps of:

pairing the wireless device with a second device.

27. The method of claim 26, wherein the pairing step comprises the steps of:

obtaining a passkey or PIN;

transmitting the passkey or PIN to the wireless device; and

receiving from the wireless device an indication that the transmitted passkey matches a passkey or PIN of the wireless device.

28. The method of claim 27, wherein the step of determining whether the wireless device is trusted comprises the step of:

determining that the wireless device is trusted if the wireless device has previously been paired with the second device.

29. The method of claim 28, wherein the step of determining a security policy of the wireless device comprises the step of:

determining at least one of;

checking and controlling file transfers, checking implementation of traffic handling policies, checking the wireless device for an installed scanning engine, checking the wireless device for a level and a version of the scanning engine, and checking what was the kind of pairing that happened and what was the data shared between devices.

30. The system of claim 29, wherein the second device comprises a Bluetooth device.