SUPPORTING WPS SESSIONS USING TCP-BASED CONNECTIONS

• US 20130173702A1
• Filed: 01/03/2012
• Published: 07/04/2013
• Est. Priority Date: 01/03/2012
• Status: Active Grant

• Current Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Original Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Inventors: OWENS, John-Anthony, LANG, Joshua, HOBBS, Craig, KELLY, Steve
• Granted Patent: US 8,601,135 B2
• Time in Patent Office: Days
• US Class Current: 709/204
• CPC Class Codes: H04L 41/0846 based on copy from other elements
• CPC Class Codes: H04L 41/28 Restricting access to network management systems or functions, e.g. using authorisation function to access network configuration
• CPC Class Codes: H04L 63/062 for key distribution, e.g. centrally by trusted party cryptographic mechanisms or cryptographic arrangements for key distribution involving a central third party H04L9/0819
• CPC Class Codes: H04L 63/18 using different networks or channels, e.g. using out of band channels cryptographic mechanisms or cryptographic arrangements for key distribution involving distinctive intermediate devices or communication paths H04L9/0827; cryptographic mechanisms or cryptographic arrangements for authentication using a plurality of channels H04L9/3215
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 12/50 Secure pairing of devices

Abstract

Techniques are disclosed for a client application on a computing device to perform a configuration process with a wireless access point. The access point exposes an isolated, unsecured Access Point which provides access to the DHCP services and services by which a client application can run the WPS registration process over a TCP (or higher layer protocol) connection.

Claims

1. A method, comprising:

exposing, on a wireless access point, a first wireless network used to configure client devices to access a second wireless network configured on the wireless access point;

establishing a network connection with a client application on a client device over the first wireless network;

receiving, over the network connection, by the wireless access point, one or more network messages generated by the client application; and

sending, over the network connection, to the client application, a set of credentials used to join the second wireless network.

2. The method of claim 1, further comprising:

receiving, from the client device, a request to join the second wireless network, wherein the request includes the set of credentials; and

establishing a wireless network connection between the client device and the second wireless network.

3. The method of claim 2, wherein the set of credentials includes a service set identifier (SSID) and a network password.

4. The method of claim 1, wherein the network connection is a TCP connection.

5. The method of claim 1, wherein the one or more network messages encapsulate Extensible Authentication Protocol (EAP) messages passed to a setup application on the wireless access point.

6. The method of claim 1, wherein the first wireless network is enabled in response to a user pressing a button on the wireless access point.

7. The method of claim 1, wherein the first wireless network is enabled in response to a user pressing a button on a graphical user interface of a management interface on the wireless access point.

8. The method of claim 1, wherein the first wireless network is enabled in response to a user entering a PIN number in a graphical user interface of a management interface on the wireless access point.

9. A computer-readable storage medium storing code for execution by a processor on a wireless access point, wherein the code, when executed by the processor, performs an operation, comprising:

exposing, on the wireless access point, a first wireless network used to configure client devices to access a second wireless network configured on the wireless access point;

establishing a network connection with a client application on a client device over the first wireless network;

receiving, over the network connection, by the wireless access point, one or more network messages generated by the client application; and

sending, over the network connection, to the client application, a set of credentials used to join the second wireless network.

10. The computer-readable storage medium of claim 9, wherein the operation further comprises:

receiving, from the client device, a request to join the second wireless network, wherein the request includes the set of credentials; and

establishing a wireless network connection between the client device and the second wireless network.

11. The computer-readable storage medium of claim 10, wherein the set of credentials includes a service set identifier (SSID) and a network password.

12. The computer-readable storage medium of claim 9, wherein the network connection is a TCP connection.

13. The computer-readable storage medium of claim 9, wherein the one or more network messages encapsulate Extensible Authentication Protocol (EAP) messages passed to a setup application on the wireless access point.

14. The computer-readable storage medium of claim 9, wherein the first wireless network is enabled in response to a user pressing a button on the wireless access point.

15. The computer-readable storage medium of claim 9, wherein the first wireless network is enabled in response to a user pressing a button on a graphical user interface of a management interface on the wireless access point.

16. The computer-readable storage medium of claim 9, wherein the first wireless network is enabled in response to a user entering a PIN number in a graphical user interface of a management interface on the wireless access point.

17. An apparatus, comprising:

a processor; and

a memory storing executable instructions which, when executed on the processor, perform an operation, comprising;

exposing, on the wireless access point, a first wireless network used to configure client devices to access a second wireless network configured on the wireless access point,

establishing a network connection with a client application on a client device over the first wireless network,

receiving, over the network connection, by the wireless access point, one or more network messages generated by the client application, and

sending, over the network connection, to the client application, a set of credentials used to join the second wireless network.

18. The apparatus of claim 17, wherein the operation further comprises:

receiving, from the client device, a request to join the second wireless network, wherein the request includes the set of credentials; and

establishing a wireless network connection between the client device and the second wireless network.

19. The apparatus of claim 18, wherein the set of credentials includes a service set identifier (SSID) and a network password.

20. The apparatus of claim 17, wherein the network connection is a TCP connection.

21. The apparatus of claim 17, wherein the one or more network messages encapsulate Extensible Authentication Protocol (EAP) messages passed to a setup application on the wireless access point.

22. The apparatus of claim 17, wherein the first wireless network is enabled in response to a user pressing a button on the wireless access point.

23. The apparatus of claim 17, wherein the first wireless network is enabled in response to a user pressing a button on a graphical user interface of a management interface on the wireless access point.

24. The apparatus of claim 17, wherein the first wireless network is enabled in response to a user entering a PIN number in a graphical user interface of a management interface on the wireless access point.