METHOD FOR FACILITATING ACCESS TO A FIRST ACCESS NEWORK OF A WIRELESS COMMUNICATION SYSTEM, WIRELESS COMMUNICATION DEVICE, AND WIRELESS COMMUNICATION SYSTEM

• US 20120284785A1
• Filed: 05/05/2011
• Published: 11/08/2012
• Est. Priority Date: 05/05/2011
• Status: Abandoned Application

• Current Assignee: Motorola Mobility LLC (Lenovo Group Ltd.)
• Original Assignee: Motorola Mobility, Inc. (Lenovo Group Ltd.)
• Inventors: Salkintzis, Apostolis K., Stewart, Kenneth A.
• Application Number:
  US13/101,887
• Publication Number:
  US 20120284785A1
• Time in Patent Office: Days
• US Class Current: 726/7
• CPC Class Codes: G06F 21/43 wireless channels
• CPC Class Codes: H04L 2209/80 Wireless
• CPC Class Codes: H04L 2463/061 applying further key derivation, e.g. deriving traffic keys from a pair-wise master key
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 63/18 using different networks or channels, e.g. using out of band channels cryptographic mechanisms or cryptographic arrangements for key distribution involving distinctive intermediate devices or communication paths H04L9/0827; cryptographic mechanisms or cryptographic arrangements for authentication using a plurality of channels H04L9/3215
• CPC Class Codes: H04L 9/0866 involving user or device identifiers, e.g. serial number, physical or biometrical information, DNA, hand-signature or measurable physical characteristics
• CPC Class Codes: H04W 12/068 using credential vaults, e.g. password manager applications or one time password [OTP] applications
• CPC Class Codes: H04W 84/12 WLAN [Wireless Local Area Networks]

Abstract

A method for facilitating access to a first access network (110) of a wireless communication system (100) comprises authenticating (300) a wireless communication device (102) with a second access network (104) and generating temporary access credentials using access information provided by the second access network (104). The wireless communication device (102) then transforms (302) the temporary access credentials and an identifier of the first access network (110) to provide first transformed access credentials which are transmitted (304) for performing authentication with the first access network (110). The identifier of the first access network (110) is provided to the second access network (104) which generates (308) second transformed access credentials using the identifier of the first access network (110) and the temporary access credentials. Authentication is performed (310) with the first access network (110), which includes comparing the first transformed access credentials with the second transformed access credentials and allowing access to the first access network (110) when the first transformed access credentials and the second transformed access credentials are substantially the same. A wireless communication device, and a wireless communication system are also disclosed and claimed.

Claims

1. A method for facilitating access to a first access network of a wireless communication system, the method comprising:

authenticating a wireless communication device with a second access network and generating temporary access credentials using access information provided by the second access network;

transforming by the wireless communication device the temporary access credentials and an identifier of the first access network to provide first transformed access credentials; and

transmitting the first transformed access credentials for performing authentication with the first access network;

providing the identifier of the first access network to the second access network and generating by the second access network second transformed access credentials using the identifier of the first access network and the temporary access credentials; and

performing authentication with the first access network, including comparing the first transformed access credentials with the second transformed access credentials and allowing access to the first access network when the first transformed access credentials and the second transformed access credentials are substantially the same.

2. The method of claim 1, wherein the temporary access credentials include a temporary identifier for the wireless communication device.

3. The method of claim 2, wherein transforming includes performing a transformation function on the temporary access credentials and the identifier of the first access network to provide a first password, wherein the first transformed access credentials include the temporary identifier and the first password.

4. The method of claim 3, wherein generating by the second access network second transformed access credentials includes performing the transformation function on the temporary access credentials and the identifier of the first access network provided to the second access network to provide a second password, wherein the second transformed access credentials include the temporary identifier and the second password.

5. The method of claim 1, further including receiving at the second access network the first transformed access credentials, wherein comparing is performed by the second access network, and when the first and second transformed access credentials are substantially the same, sending by the second access network an access allowed message to the first access network.

6. The method of claim 1, further including receiving at the first access network the first transformed access credentials and the second transformed access credentials, wherein comparing is performed by the first access network, and when the first and second transformed access credentials are substantially the same, allowing by the first access network access to the first access network.

7. The method of claim 1, wherein the wireless communication device is authenticated with the first access network using the transformed access credentials for allowing the wireless communication device to access the first access network.

8. The method of claim 1, further comprising receiving at the wireless communication device a request from a remote device to access the first access network, the request including the identifier of the first access network, wherein transforming includes transforming the temporary access credentials and the identifier of the first access network received from the remote device to provide first transformed access credentials and wherein transmitting includes transmitting the first transformed access credentials for performing authentication of the remote device with the first access network using the transformed access credentials for allowing the remote device to access the first access network.

9. A method in a wireless communication device for facilitating access to a first access network, the method comprising:

authenticating the wireless communication device with a second access network and generating temporary access credentials using access information provided by the second access network;

transforming by the wireless communication device the temporary access credentials by using an identifier of the first access network to provide first transformed access credentials; and

transmitting by the wireless communication device the first transformed access credentials for performing authentication with the first access network to allow access to the first access network.

10. A wireless communication system including a first access network and a second access network and at least one wireless communication device, the system being arranged to facilitate access to the first access network:

the wireless communication device and second access network being arranged to generate temporary access credentials using access information provided by the second access network for authenticating the wireless communication device with the second access network;

the wireless communication device including;

a transformation element for transforming the temporary access credentials and an identifier of the first access network to provide first transformed access credentials; and

a transmitter for transmitting the first transformed access credentials for performing authentication with the first access network;

the second access network being arranged to receive the identifier of the first access network and to generate second transformed access credentials using the identifier of the first access network and the temporary access credentials; and

an element of the wireless communication system being arranged to compare the first transformed access credentials with the second transformed access credentials and to allow access to the first access network when the first transformed access credentials and the second transformed access credentials are substantially the same.

11. The wireless communication system of claim 10, wherein the temporary access credentials include a temporary identifier for the wireless communication device.

12. The wireless communication system of claim 11, wherein the transformation element is arranged to perform a transformation function on the temporary access credentials and the identifier of the first access network to provide a first password, wherein the first transformed access credentials include the temporary identifier and the first password.

13. The wireless communication system of claim 12, wherein the second access network is arranged to perform the transformation function on the temporary access credentials and the identifier of the first access network received at the second access network to provide a second password, wherein the second transformed access credentials include the temporary identifier and the second password.

14. The wireless communication system of claim 10, wherein the second access network is arranged to receive the first transformed access credentials, and wherein the element is the second access network, and when the first and second transformed access credentials are determined to be substantially the same by the second access network, the second access network is arranged to send an access allowed message to the first access network.

15. The wireless communication system of claim 10, wherein the first access network is arranged to receive the first transformed access credentials and the second transformed access credentials, wherein the element is the first access network, and when the first and second transformed access credentials are determined to be substantially the same by the first access network, the first access network is arranged to allow access to the first access network.

16. The wireless communication system of claim 10, wherein the wireless communication device is authenticated with the first access network using the transformed access credentials for allowing the wireless communication device to access to the first access network.

17. The wireless communication system of claim 10, further comprising a remote device communicably coupled to the wireless communication device,

the wireless communication device being arranged to receive a request from the remote device to access the first access network, the request including the identifier of the first access network, wherein the transformation element of the wireless communication device is arranged to transform the temporary access credentials and the identifier of the first access network received from the remote device to provide first transformed access credentials and wherein the transmitter of the wireless communication device is arranged to transmit the first transformed access credentials for performing authentication of the remote device with the first access network using the first transformed access credentials for allowing the remote device to access the first access network.

18. A wireless communication device for facilitating access to a first access network of a wireless communication system including the first access network and a second access network:

the wireless communication device being arranged to authenticate with the second access network and to generate temporary access credentials using access information provided by the second access network;

the wireless communication device including;

a transformation element for transforming the temporary access credentials and an identifier of the first access network to provide first transformed access credentials; and

a transmitter for transmitting the first transformed access credentials for performing authentication with the first access network to allow access to the first access network.