Dynamic Authentication in Secured Wireless Networks

• US 20110055898A1
• Filed: 07/28/2010
• Published: 03/03/2011
• Est. Priority Date: 04/24/2006
• Status: Active Grant

• Current Assignee: Ruckus IP Holdings LLC
• Original Assignee: Ruckus Wireless, Inc. (CommScope Holding Company, Inc.)
• Inventors: Kuo, Ted Tsei, Yang, Bo-Chieh, Lin, Tian-Yuan, Jou, Tyan-Shu, Sheu, Ming
• Granted Patent: US 8,272,036 B2
• Time in Patent Office: Days
• US Class Current: 726/3
• CPC Class Codes: H04L 63/06 for supporting key management in a packet data network cryptographic mechanisms or cryptographic arrangements for key management H04L9/08
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/0869 for achieving mutual authentication cryptographic mechanisms or cryptographic arrangements for mutual authentication H04L9/3273
• CPC Class Codes: H04L 63/0876 based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint
• CPC Class Codes: H04L 63/101 Access control lists [ACL]
• CPC Class Codes: H04L 63/102 Entity profiles
• CPC Class Codes: H04W 12/041 Key generation or derivation
• CPC Class Codes: H04W 12/068 using credential vaults, e.g. password manager applications or one time password [OTP] applications
• CPC Class Codes: H04W 12/069 using certificates or pre-shared keys
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 8/18 Processing of user or subscriber data, e.g. subscribed services, user preferences or user profiles; Transfer of user or subscriber data

Abstract

Systems and methods for authentication using paired dynamic secrets in secured wireless networks are provided. Each authenticated user is assigned a random secret generated so as to be unique to the user. The secret is associated with a wireless interface belonging to the user, so that no other wireless interface may use the same secret to access the network. The secret may be updated either periodically or at the request of a network administrator, and reauthentication of the wireless network may be required.

Claims

1. (canceled)

2. A method for enabling access to a wireless network, the method comprising:

receiving an authentication request from a wireless device;

determining that a security key is associated with the wireless device;

verifying that the security key is valid; and

granting the wireless device access to the wireless network following a determination that the security key is valid and has not expired.

3. The method of claim 2, wherein receiving an authentication request includes receiving a request to access a secured wireless network as a guest.

4. The method of claim 2, wherein determining that the security key is associated with the wireless device includes receiving the security key as a part of the authentication request.

5. The method of claim 2, wherein verifying that the security key is valid includes comparing the security key against a database of unique security keys.

6. The method of claim 2, wherein determining that the security key has not expired includes determining that a predetermined period time has not yet passed following issuance of the security key.

7. The method of claim 2, wherein determining that the security key has not expired includes determining that the security key has not previously been revoked.

8. The method of claim 2, further comprising assigning an access profile to the wireless device based on the security key.

9. The method of claim 2, further comprising revoking the security key after a predetermined period of time following issuance of the security key.

10. A method for enabling access to a wireless network, the method comprising:

receiving an access request from a wireless device, the access request including a security key;

verifying that the security key is valid;

determining that the security key has not expired; and

granting the wireless interface access to the wireless network only after determining that the security key is valid and has not expired.

11. A method for enabling access to a wireless network, the method comprising:

generating a plurality of unique security keys;

associating a first one of the plurality of unique security keys with an account for a user;

receiving a request from the user to access the wireless network, the request including the first one of the plurality of unique security keys;

determining that the first one of the plurality of unique security keys has not expired; and

granting the user access to the wireless network in response to the determination that the first one of the plurality of unique security keys has not expired.

12. A method for enabling access to a wireless network, the method comprising:

generating a plurality of unique security keys for a plurality of users, each user having an account with an access profile type;

associating a first one of the plurality of unique security keys to a first account having a first access profile type;

associating a second one of the plurality of unique security keys to a second account having a second access profile type; and

granting a first level of access to the first account and a second level of access to the second account, wherein each account allows the associated user to access the wireless network, but with different access privileges within the wireless network.

13. A method for enabling access to a wireless network, the method comprising:

generating a plurality of unique security keys for a plurality of users;

maintaining the plurality of unique security keys in a database;

receiving a request from one of the plurality of users to access the wireless network, the request including a security key;

verifying that the security key is valid;

determining that the security key has not expired; and

granting a wireless device associated with the one of the plurality of users access to the wireless network upon a determination that the security key is valid and has not expired.

14. A method for enabling access to a wireless network, the method comprising:

generating a plurality of unique secret keys at an authentication server communicatively coupled to a wireless network;

maintaining the plurality of unique secret keys in a database of secrets, the database communicatively coupled to the authentication server;

receiving a request from a user to access the wireless network, the request including a security key and received at the authentication server;

verifying that the security key is valid, the verification taking place at the authentication server;

determining that the security key has not expired, the determination taking place at the database of secrets in response to a query by the authentication server as to whether the security key has expired; and

granting the user access to the wireless network following the determination that the security key is both valid and not expired.

15. A method for enabling access to a wireless network, the method comprising:

generating a plurality of unique secret keys, wherein each secret key has a predetermined expiration;

maintaining the unique secret keys in a database of secrets;

updating the database of secrets when a secret key has exceeded the predetermined expiration;

revoking a secret key prior to a predetermined expiration and updating the database following the revocation;

receiving a request from a user to access the wireless network, the request including a security key;

verifying that the security key is valid;

granting the user access to the wireless network following a determination that the security key has not expired or otherwise been revoked in response to a query to the database of secrets.