System and Method for Establishing a Secure Connection in Communications Systems

• US 20130301833A1
• Filed: 05/14/2012
• Published: 11/14/2013
• Est. Priority Date: 05/14/2012
• Status: Active Grant

• Current Assignee: Futurewei Technologies Incorporated (Huawei Investment & Holding Co., Ltd.)
• Original Assignee: Futurewei Technologies Incorporated (Huawei Investment & Holding Co., Ltd.)
• Inventors: Wong, Marcus
• Granted Patent: US 9,585,012 B2
• Time in Patent Office: Days
• US Class Current: 380/255
• CPC Class Codes: H04W 12/041 Key generation or derivation
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/106 Packet or message integrity
• CPC Class Codes: H04W 84/12 WLAN [Wireless Local Area Networks]

Abstract

A method for establishing a secure connection between a station and an access point includes transmitting a communications system management message to the station, the communications system management message including an access point nonce. The method also includes receiving a station nonce from the station, and determining a first security key according to the access point nonce and the station nonce. The method further includes securing a connection between the station and the access point using the first security key.

Claims

1. A method for establishing a secure connection between a station and an access point, the method comprising:

transmitting, by the access point, a communications system management message to the station, the communications system management message including an access point nonce;

receiving, by the access point, a station nonce from the station;

determining, by the access point, a first security key according to the access point nonce and the station nonce; and

securing, by the access point, a connection between the station and the access point using the first security key.

2. The method of claim 1, wherein the communications system management message comprises a beacon.

3. The method of claim 2, wherein the access point nonce comprises a timestamp of the beacon.

4. The method of claim 1, wherein the communications system management message comprises a probe response.

5. The method of claim 4, further comprising prior to transmitting the communications system management message, receiving a probe request from the station.

6. The method of claim 1, further comprising receiving a first integrity code for the station nonce.

7. The method of claim 1, further comprising confirming security information.

8. The method of claim 7, wherein confirming the security information comprises:

transmitting the access point nonce and a second integrity code to the station; and

receiving a third integrity code from the station.

9. The method of claim 1, wherein securing the connection comprises installing the security key.

10. The method of claim 1, further comprising:

determining that a secured transmission on the secured connection is undecipherable;

changing the access point nonce;

determining a second security key based on the changed access point nonce and the station nonce; and

securing the connection between the station and the access point using the second security key.

11. A method for establishing a secure connection between a station and an access point, the method comprising:

receiving, by the station, a communications system management message from the access point, the communications system management message including an access point nonce;

determining, by the station, a first security key according to the access point nonce and a station nonce;

transmitting, by the station, the station nonce to the access point; and

securing, by the station, a connection between the station and the access point using the first security key.

12. The method of claim 11 wherein the communications system management message is a beacon.

13. The method of claim 12, wherein the access point nonce is a timestamp of the beacon.

14. The method of claim 11, wherein the communications system management message is a probe response.

15. The method of claim 14, further comprising prior to receiving the communications system management message, transmitting a probe request to the access point.

16. The method of claim 11, further comprising transmitting a first integrity code for the station nonce to the access point.

17. The method of claim 11, further comprising:

receiving the access point nonce and a second integrity code from the access point; and

transmitting a third integrity code to the access point.

18. An access point comprising:

a transmitter configured to transmit a communications system management message to a station, the communications system management message including an access point nonce;

a receiver configured to receive a station nonce from the station; and

a processor operatively coupled to the transmitter and to the receiver, the processor configured to determine a first security key according to the access point nonce and the station nonce, and to secure a connection between the station and the access point using the first security key.

19. The access point of claim 18, wherein the communications system management message is a beacon.

20. The access point of claim 19, wherein the access point nonce is a timestamp of the beacon.

21. The access point of claim 18, wherein the communications system management message is a probe response.

22. The access point of claim 18, wherein the transmitter is configured to transmit the access point nonce and a first integrity code to the station, and wherein the receiver is configured to receive a second integrity code.

23. The access point of claim 18, wherein the processor is configured to determine that a secured transmission on the secured connection is undecipherable, to change the access point nonce, to determine a second security key based on the changed access point nonce and the station nonce, and to secure the connection between the station and the access point using the second security key.

24. A station comprising:

a receiver configured to receive a communications system management message from an access point, the communications system management message including an access point nonce;

a transmitter configured to transmit a station nonce to the access point; and

a processor operatively coupled to the receiver and to the transmitter, the processor configured to determine a first security key according to the access point nonce and the station nonce, and to secure a connection between the station and the access point using the first security key.

25. The station of claim 24, wherein the communications system management message is a beacon.

26. The station of claim 25, wherein the access point nonce is a timestamp of the beacon.

27. The station of claim 24, wherein the communications system management message is a probe response.

28. The station of claim 24, wherein the receiver is configured to receive the access point nonce and a first integrity code from the access point, and wherein the transmitter is configured to transmit a second integrity code to the access point.