CONCIERGE REGISTRY AUTHENTICATION SERVICE

• US 20110113252A1
• Filed: 11/06/2009
• Published: 05/12/2011
• Est. Priority Date: 11/06/2009
• Status: Abandoned Application

• Current Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Original Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Inventors: Burns, James Edward, Torres, Esteban Raul, Krischer, Mark, Cam-Winget, Nancy
• Application Number:
  US12/613,784
• Publication Number:
  US 20110113252A1
• Time in Patent Office: Days
• US Class Current: 713/175
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 63/126 the source of the received data
• CPC Class Codes: H04W 12/122 Counter-measures against attacks; Protection against rogue devices
• CPC Class Codes: H04W 48/08 Access restriction or access information delivery, e.g. discovery data delivery signalling during connection H04W76/00
• CPC Class Codes: H04W 48/18 Selecting a network or a communication service

Abstract

In an example embodiment described herein is an apparatus comprising a transceiver configured to send and receive data, and logic coupled to the transceiver. The logic is configured to determine from a beacon received by the wireless transceiver whether an associated wireless device sending the beacon supports a protocol for advertising available services from the associated wireless device. The logic is configured to send a request for available services from the associated wireless device via the wireless transceiver responsive to determining the associated wireless device supports the protocol. The logic is configured to receive a response to the request via the wireless transceiver, the response comprising a signature. The logic is configured to validate the response by confirming the signature comprises network data cryptographically bound with service data.

Claims

1. An apparatus, comprising:

a transceiver configured to send and receive data;

logic coupled to the transceiver;

wherein the logic is configured to determine from a signal received by the transceiver whether an associated device sending the signal supports a protocol for advertising available services from the associated device;

wherein the logic is configured to send a request for available services from the associated device via the transceiver responsive to determining the associated device supports the protocol;

wherein the logic is configured to receive a response to the request via the transceiver, the response comprising a signature; and

wherein the logic is configured to validate the response by confirming the signature comprises network data cryptographically bound with service data.

2. The apparatus set forth in claim 1, wherein the request for available services comprises a nonce;

and

wherein the logic is further configured to validate the request by verifying the signature includes the same nonce.

3. The apparatus set forth in claim 1, wherein the network data comprises a service set identifier.

4. The apparatus set forth in claim 1, wherein the network data comprises a service set identifier corresponding to an advertised service.

5. The apparatus set forth in claim 1, wherein the network data comprises a plurality of service set identifiers corresponding to a plurality of advertised services.

6. The apparatus set forth in claim 1, wherein the network data comprises a domain name.

7. The apparatus set forth in claim 1, wherein the network data comprises a network access identifier.

8. The apparatus set forth in claim 1, wherein the network data comprises a homogeneous extended service set identifier.

9. The apparatus set forth in claim 1, wherein the service data comprises an icon image.

10. The apparatus set forth in claim 1, wherein the service data comprises data referencing an icon.

11. The apparatus set forth in claim 1, wherein the service data comprises a service provider identity.

12. The apparatus set forth in claim 1, wherein the service data comprises a service Uniform Resource Locator.

13. The apparatus set forth in claim 1, wherein the service data comprises a public key.

14. The apparatus set forth in claim 1, wherein the service data comprises a certificate signed by a certificate authority;

and

wherein the logic is further configured to validate the certificate.

15. The apparatus set forth in claim 1, wherein the service data comprises a certificate signed by a registration authority;

and

wherein the logic is further configured to validate the certificate.

16. An apparatus, comprising:

a transceiver configured to send and receive data;

logic coupled to the transceiver;

wherein the logic is configured to receive a get advertising services request from the transceiver;

wherein the logic is configured to generate a response to the get advertising request, the response comprising a signature that comprises network data cryptographically bound with service data; and

wherein the logic is configured is configured to send the response to the get advertising request via the wireless transceiver.

17. The apparatus set forth in claim 16, wherein the get advertising request comprises a nonce;

wherein the nonce is cryptographically bound to network data and service data;

wherein the network data comprises a basic service set identifier for the access network provider, at least one service set identifier corresponding to an at least one service; and

wherein the service data comprises a uniform resource locator and one of a group consisting of an icon and data referencing an icon.

18. A method, comprising:

receiving a signal from an access network provider;

determining from the signal whether the access network provider supports a protocol for advertising available services;

requesting a list of available services from the access network provider;

receiving a response to the request, the response comprising a signature; and

validating the response, wherein validating the response comprises confirming the signature comprises network data cryptographically bound with service data.

19. The method set forth in claim 18, wherein the request for available services comprises a nonce;

and

validating the signature further comprises verifying the signature includes the nonce.

20. The method set forth in claim 18, wherein the network data comprises a basic service set identifier and the service data comprises a service uniform resource locator.