SYSTEMS AND METHODS FOR SECURE ACCESS TO REMOTE NETWORKS UTILIZING WIRELESS NETWORKS

• US 20110099280A1
• Filed: 10/28/2009
• Published: 04/28/2011
• Est. Priority Date: 10/28/2009
• Status: Abandoned Application

• Current Assignee: Symbol Technologies, Inc. (Zebra Technologies Corporation)
• Original Assignee: Symbol Technologies, Inc. (Zebra Technologies Corporation)
• Inventors: Nightingale, Todd, Vivek, Vibhu, THOMAS, David, Sinha, Amit
• Application Number:
  US12/607,151
• Publication Number:
  US 20110099280A1
• Time in Patent Office: Days
• US Class Current: 709/228
• CPC Class Codes: H04L 63/0281 Proxies
• CPC Class Codes: H04L 63/0471 applying encryption by an intermediary, e.g. receiving clear information at the intermediary and encrypting the received information at the intermediary before forwarding
• CPC Class Codes: H04W 12/03 Protecting confidentiality, e.g. by encryption
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 74/00 Wireless channel access
• CPC Class Codes: H04W 84/12 WLAN [Wireless Local Area Networks]
• CPC Class Codes: H04W 88/182 Network node acting on behalf of an other network entity, e.g. proxy
• CPC Class Codes: H04W 92/02 Inter-networking arrangements

Abstract

The present disclosure provides secure connectivity to remote networks on demand without requiring an interactive logon at a wireless client. Specifically, the present invention utilizes a proxy in a wireless network, such as an Access Point (AP) or the like, to provide client access to a remote, hosted network external to the wireless network. The present invention utilizes existing wireless security protocols and other security mechanisms between the proxy and the remote, hosted network. In operation, a wireless network proxy responds to a wireless client that is seeking a remote, hosted network, such as through an association request. The wireless network proxy then serves as an intermediary between the remote, hosted network and the wireless client to enable secure end-to-end communication.

Claims

1. A network, comprising:

a local wireless network comprising a wireless network proxy;

a hosted network connected through an external network to the wireless network proxy; and

a wireless client;

wherein the wireless network proxy is configured to enable a secure connection from the wireless client to the hosted network providing access for the wireless client to the hosted network.

2. The network of claim 1, wherein the wireless client communicates to the hosted network through the secure connection comprising any of IEEE 802.11i, AES encryption, and IEEE 802.1x, WPA, WPA2, TKIP, and WEP.

3. The network of claim 2, wherein the wireless proxy, responsive to a request from the client, encapsulates security credentials of the client and sends them to the hosted network over the external network.

4. The network of claim 1, further comprising a lookup server connected to the wireless network proxy, wherein the lookup server comprises a directory of a plurality of hosted networks including the hosted network.

5. The network of claim 2, further comprising:

a wireless network gateway in the hosted network;

wherein the wireless network proxy serves as an intermediary between the wireless network gateway and the wireless client to enable the secure tunnel through the external network.

6. The network of claim 5, wherein the wireless network gateway is configured to authenticate the wireless client, decrypt data from the wireless client, and forward decrypted data to the hosted network.

7. The network of claim 5, wherein the wireless network gateway and the wireless network proxy are configured to gather statistics relates to the wireless client and the hosted network, and wherein the wireless network gateway and the wireless network proxy are further configured to update the statistics to a centralized accounting system.

8. The network of claim 5, wherein the wireless network gateway is configured to publish local services on the local wireless network through a secure connection.

9. The wireless network of claim 3, wherein the secure connection comprises encryption between the wireless client and the hosted network and with the wireless network proxy is unaware of keys associated with the encryption.

10. The wireless network of claim 9, wherein the wireless client comprises a device compliant to IEEE 802.11 protocols, and wherein the wireless client communicates normally on the local wireless network with the wireless network proxy and wireless network gateway forming the secure connection.

11. The wireless network of claim 9, wherein the wireless network gateway comprises a virtual access point and the wireless client associates with the virtual access point.

12. A wireless infrastructure device, comprising:

a radio connected to a local wireless network;

a backhaul network interface connected to an external network;

a processor; and

a local interface communicatively coupling the radio, the backhaul network interface, and the processor;

wherein the radio, the backhaul network interface, and the processor are collectively configured to;

receive association requests from a wireless client, wherein the association requests comprise a request to access a remote network; and

enable a secure connection through the backhaul network interface to the remote network such that the wireless client can securely access the remote network.

13. The wireless infrastructure device of claim 12, wherein the radio, the backhaul network interface, and the processor are further configured to look up the remote network through one of a look up server and a public domain name server.

14. The wireless infrastructure device of claim 12, wherein the radio, the backhaul network interface, and the processor are further configured to enable the secure transmission of data from the wireless client to a wireless network gateway in the remote network.

15. The wireless infrastructure device of claim 14, wherein the wireless network gateway is configured to receive the data from the wireless client and to authenticate the wireless client, decrypt data from the wireless client, and forward decrypted data to devices in the remote network.

16. The wireless infrastructure device of claim 15, wherein the radio, the backhaul network interface, and the processor are further configured to receive published local services from the wireless network gateway.

17. The wireless infrastructure device of claim 12, wherein the radio, the backhaul network interface, and the processor are further configured to gather statistics relates to the wireless client and the remote network.

18. A remote wireless access method, comprising:

in a wireless network, receiving an association request from a client comprising a request to access a hosted network;

enabling a secure connection from the client to the hosted network; and

acting as a proxy between the client and the hosted network to securely transmit data between the client and the hosted network.

19. The remote wireless access method of claim 18, further comprising:

looking up the hosted network responsive to the association request and prior to enabling the secure connection.

20. The remote wireless access method of claim 18, wherein the data received from the client over the wireless network is secure through a wireless network security mechanism and wherein the data in thereafter transmitted encapsulating the wireless network security mechanism to the hosted network.