Devices and Methods for Secure Internet Transactions

• US 20100146614A1
• Filed: 12/10/2008
• Published: 06/10/2010
• Est. Priority Date: 12/10/2008
• Status: Active Grant

• Current Assignee: AT&T Intellectual Property I LP (AT&T, Inc.)
• Original Assignee: AT&T Intellectual Property I LP (AT&T, Inc.)
• Inventors: Savoor, Raghvendra
• Granted Patent: US 8,151,336 B2
• Time in Patent Office: Days
• US Class Current: 726/10
• CPC Class Codes: H04L 2209/80 Wireless
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 9/3263 involving certificates, e.g. public key certificate [PKC] or attribute certificate [AC]; Public key infrastructure [PKI] arrangements network architectures or network communication protocols for supporting authentication of entities using certificates in a packet data network H04L63/0823
• CPC Class Codes: H04L 9/3271 using challenge-response
• CPC Class Codes: H04W 12/069 using certificates or pre-shared keys
• CPC Class Codes: H04W 8/205 Transfer to or from user equipment or user record carrier
• CPC Class Codes: H04W 84/045 using private Base Stations, e.g. femto Base Stations, home Node B
• CPC Class Codes: H04W 88/08 Access point devices

Abstract

Devices and methods are disclosed which provide a mobile communications device with multiple methods of wireless communication which can use one method, such as WiFi, to connect to an independent wireless access point while using another method, such as cellular, to verify the security of the wireless access point. The wireless access point provides two SSID'"'"'s: one private SSID, which is usually encrypted to prevent access, and one public SSID, which is open to any mobile communications device. The mobile communications device connects to the public SSID and downloads a digital certificate. The mobile communications device then uses its cellular connection to verify the authenticity of the digital certificate with its service provider. If verified, the mobile communications device can make use of the wireless access point.

Claims

1. A wireless access point comprising:

a housing;

a memory within the housing;

a wireless communication module within the housing;

an antenna in communication with the wireless communication module, and coupled to the housing;

a private SSID stored on the memory,

a public SSID stored on the memory; and

a digital authenticator stored on the memory;

wherein the second SSID may be accessed and the digital authenticator downloaded to prove the wireless access point'"'"'s trustworthiness.

2. The wireless access point in claim 1, wherein the wireless communication module communicates using one of a WiFi, BLUETOOTH, and cellular protocol.

3. The wireless access point in claim 1, wherein the private SSID is not open to all users.

4. The wireless access point in claim 1, wherein the public SSID is open to all users.

5. The device in claim 1, wherein the digital authenticator comprises a service provider name, an SSID, and a physical location.

6. The digital authenticator in claim 5, wherein the service provider name is the name of the service provider that has approved the wireless access point for public access.

7. The digital authenticator in claim 6, wherein the SSID and physical location describe characteristics of the wireless access point.

8. The wireless access point in claim 1, wherein the memory comprises a first memory module and a second memory module.

9. The wireless access point in claim 8, wherein the private SSID resides on the first memory module.

10. The wireless access point in claim 8, wherein the public SSID resides on the second memory module.

11. A wireless router comprising:

A housing;

A memory within the housing;

A wireless communication logic within the memory;

An antenna in communication with the memory, and coupled to the housing;

A first SSID stored on the memory;

A second SSID stored on the memory; and

A certificate stored on the memory;

Wherein the second SSID may be accessed and the certificate downloaded to prove the wireless access point'"'"'s trustworthiness.

12. The wireless router in claim 11, wherein the wireless communication logic communicates using one of a WiFi, BLUETOOTH, and cellular protocol.

13. The wireless router in claim 11, wherein the first SSID is not open to all users.

14. The wireless router in claim 11, wherein the second SSID is open to all users.

15. The wireless router in claim 11, wherein the certificate comprises a service provider name, an SSID, and a physical location.

16. The certificate in claim 15, wherein the service provider name is the name of the service provider that has approved the wireless router for public access.

17. The digital authenticator in claim 16, wherein the SSID and physical location describe characteristics of the wireless access point.

18. The wireless access point in claim 11, wherein the memory comprises a first memory module and a second memory module.

19. The wireless access point in claim 18, wherein the first SSID resides on the first memory module.

20. The wireless access point in claim 18, wherein the second SSID resides on the second memory module.

21. A method of proving the trustworthiness of a wireless access point having a first and second SSID'"'"'s comprising:

connecting to the second SSID through a first connection;

downloading a certificate from the wireless access point; and

comparing the certificate with a database of certificates for verification of authenticity.

22. The method in claim 21, wherein the comparing further comprises connecting with the database of certificates through a second connection.

23. The method in claim 21, further comprising offering an authenticator for the wireless access point to evaluate a user'"'"'s trustworthiness.

24. The method in claim 21, further comprising switching to an encrypted connection.

25. The method in claim 21, wherein the first connection uses one of a WiFi, BLUETOOTH, and cellular protocol.

26. The method in claim 21, wherein the second connection uses one of a WiFi, BLUETOOTH, and cellular protocol that is not the same as the first connection.

27. The method in claim 21, wherein the comparing further comprises comparing with an internal database of certificates.