Method for configuring an internal entity of a remote station with a certificate

• US 20130275760A1
• Filed: 03/06/2013
• Published: 10/17/2013
• Est. Priority Date: 04/17/2012
• Status: Active Application

• Current Assignee: Qualcomm, Inc.
• Original Assignee: Qualcomm, Inc.
• Inventors: HAWKES, Philip, PALANIGOUNDER, Anand, BENOIT, Olivier Jean
• Application Number:
  US13/787,510
• Publication Number:
  US 20130275760A1
• Time in Patent Office: Days
• US Class Current: 713/175
• CPC Class Codes: H04L 63/062 for key distribution, e.g. centrally by trusted party cryptographic mechanisms or cryptographic arrangements for key distribution involving a central third party H04L9/0819
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 9/3268 using certificate validation, registration, distribution or revocation, e.g. certificate revocation list [CRL]

Abstract

Disclosed is a method for configuring an internal entity of a WiFi-enabled remote station with a certificate. In the method, the remote station receives the certificate in at least one message from a registrar acting as a certificate authority. The remote station provides the certificate to the internal entity. The internal entity securely communicates with an external entity based on the certificate.

Claims

1. A method for configuring an internal entity of a WiFi-enabled remote station with a certificate, comprising:

the remote station receiving the certificate in at least one message from a registrar acting as a certificate authority;

the remote station providing the certificate to the internal entity; and

the internal entity securely communicating with an external entity based on the certificate.

2. A method for configuring as defined in claim 1, further comprising:

the remote station receiving a private key corresponding to the certificate in the at least one message;

the remote station providing the private key to the internal entity; and

the internal entity securely communicating with the external entity also based on the private key.

3. A method for configuring as defined in claim 2, wherein the remote station receives the private key with the certificate.

4. A method for configuring as defined in claim 2, wherein the certificate comprises a public key, corresponding to the private key, and a public key identifier.

5. A method for configuring as defined in claim 1, further comprising:

the remote station sending a public key to be certified in the at least one message, wherein the certificate is generated in association with the public key.

6. A method for configuring as defined in claim 5, further comprising:

the remote station generating the public key and a corresponding private key.

7. A method for configuring as defined in claim 1, further comprising:

the remote station receiving, with the certificate, a shared secret, an identity for the shared secret, a PIN, a password, and/or a certificate lifetime.

8. A method for configuring as defined in claim 1, wherein the at least one message comprises WSC M7 and/or M8 messages.

9. A method for configuring as defined in claim 1, wherein the internal entity is a SEP2 client, and the external entity is a SEP2 server.

10. A method for configuring as defined in claim 1, wherein the internal entity is a SEP2 server, and the external entity is a SEP2 client.

11. A method for configuring as defined in claim 1, wherein the registrar has a user interface.

12. A method for configuring as defined in claim 1, wherein the registrar is a smartphone.

13. A method for configuring as defined in claim 1, wherein the remote station does not have a user interface.

14. A method for configuring as defined in claim 1, wherein the registrar is an access point.

15. A method for configuring as defined in claim 1, wherein the registrar acts as a pseudo-certificate authority.

16. A method for configuring as defined in claim 1, wherein the certificate is a self-signed certificate containing a root-of-trust public key.

17. A WiFi-enable remote station with an internal entity, comprising:

means for receiving a certificate in at least one message from a registrar acting as a certificate authority;

means for providing the certificate to the internal entity; and

means for securely communicating with an external entity based on the certificate.

18. A remote station as defined in claim 17, further comprising:

means for receiving a private key corresponding to the certificate in the at least one message;

means for providing the private key to the internal entity; and

means for securely communicating with the external entity also based on the private key.

19. A remote station as defined in claim 18, wherein the private key is received with the certificate.

20. A remote station as defined in claim 18, wherein the certificate comprises a public key, corresponding to the private key, and a public key identifier.

21. A remote station as defined in claim 17, further comprising:

means for sending a public key to be certified in the at least one message, wherein the certificate is generated in association with the public key.

22. A remote station as defined in claim 21, further comprising:

means for generating the public key and a corresponding private key.

23. A remote station as defined in claim 17, further comprising:

means for receiving, with the certificate, a shared secret, an identity for the shared secret, a PIN, a password, and/or a certificate lifetime.

24. A remote station as defined in claim 17, wherein the at least one message comprises WSC M7 and/or M8 messages.

25. A remote station as defined in claim 17, wherein the internal entity is a SEP2 client, and the external entity is a SEP2 server.

26. A remote station as defined in claim 17, wherein the internal entity is a SEP2 server, and the external entity is a SEP2 client.

27. A remote station as defined in claim 17, wherein the registrar has a user interface.

28. A remote station as defined in claim 17, wherein the registrar is a smartphone.

29. A remote station as defined in claim 17, wherein the remote station does not have a user interface.

30. A remote station as defined in claim 17, wherein the registrar is an access point.

31. A remote station as defined in claim 30, wherein the registrar acts as a pseudo-certificate authority.

32. A remote station as defined in claim 17, the certificate is a self-signed certificate containing a root-of-trust public key.

33. A WiFi-enabled remote station with an internal entity, comprising:

a processor configured to;

receive a certificate in at least one message from a registrar acting as a certificate authority; and

provide the certificate to the internal entity for securely communicating with an external entity based on the certificate.

34. A remote station as defined in claim 33, wherein the processor is further configured to:

receive a private key corresponding to the certificate in the at least one message; and

provide the private key to the internal entity for securely communicating with the external entity also based on the private key.

35. A remote station as defined in claim 34, wherein the private key is received with the certificate.

36. A remote station as defined in claim 34, wherein the certificate comprises a public key, corresponding to the private key, and a public key identifier.

37. A remote station as defined in claim 33, wherein the processor is further configured to:

send a public key to be certified in the at least one message, wherein the certificate is generated in association with the public key.

38. A remote station as defined in claim 37, wherein the processor is further configured to:

generate the public key and a corresponding private key.

39. A remote station as defined in claim 33, wherein the processor is further configured to:

receive, with the certificate, a shared secret, an identity for the shared secret, a PIN, a password, and/or a certificate lifetime.

40. A remote station as defined in claim 33, wherein the at least one message comprises WSC M7 and/or M8 messages.

41. A remote station as defined in claim 33, wherein the internal entity is a SEP2 client, and the external entity is a SEP2 server.

42. A remote station as defined in claim 33, wherein the internal entity is a SEP2 server, and the external entity is a SEP2 client.

43. A remote station as defined in claim 33, wherein the registrar has a user interface.

44. A remote station as defined in claim 33, wherein the registrar is a smartphone.

45. A remote station as defined in claim 33, wherein the remote station does not have a user interface.

46. A remote station as defined in claim 33, wherein the registrar is an access point.

47. A remote station as defined in claim 46, wherein the registrar acts as a pseudo-certificate authority.

48. A remote station as defined in claim 33, wherein the certificate is a self-signed certificate containing a root-of-trust public key.

49. A computer program product, comprising:

computer-readable medium, comprising;

code for causing a computer to receive a certificate in at least one message from a registrar acting as a certificate authority; and

code for causing a computer to provide the certificate to an internal entity for securely communicating with an external entity based on the certificate.

50. A computer program product as defined in claim 49, wherein the computer readable medium further comprises:

code for causing a computer to receive a private key corresponding to the certificate in the at least one message; and

code for causing a computer to provide the private key to the internal entity for securely communicating with the external entity also based on the private key.

51. A computer program product as defined in claim 50, wherein the private key is received with the certificate.

52. A computer program product as defined in claim 50, wherein the certificate comprises a public key, corresponding to the private key, and a public key identifier.

53. A computer program product as defined in claim 49, wherein the computer readable medium further comprises:

code for causing a computer to send a public key to be certified in the at least one message, wherein the certificate is generated in association with the public key.

54. A computer program product as defined in claim 53, wherein the computer readable medium further comprises:

code for causing a computer to generate the public key and a corresponding private key.

55. A computer program product as defined in claim 49, wherein the computer readable medium further comprises:

code for causing a computer to receive, with the certificate, a shared secret, an identity for the shared secret, a PIN, a password, and/or a certificate lifetime.

56. A computer program product as defined in claim 49, wherein the at least one message comprises WSC M7 and/or M8 messages.

57. A computer program product as defined in claim 49, wherein the internal entity is a SEP2 client, and the external entity is a SEP2 server.

58. A computer program product as defined in claim 49, wherein the internal entity is a SEP2 server, and the external entity is a SEP2 client.

59. A computer program product as defined in claim 49, wherein the registrar has a user interface.

60. A computer program product as defined in claim 49, wherein the registrar is a smartphone.

61. A computer program product as defined in claim 49, wherein the remote station does not have a user interface.

62. A computer program product as defined in claim 49, wherein the registrar is an access point.

63. A computer program product as defined in claim 62, wherein the registrar acts as a pseudo-certificate authority.

64. A computer program product as defined in claim 49, wherein the certificate is a self-signed certificate containing a root-of-trust public key.