PROXIMITY BASED DUAL AUTHENTICATION FOR A WIRELESS NETWORK

• US 20150113620A1
• Filed: 01/28/2014
• Published: 04/23/2015
• Est. Priority Date: 10/17/2013
• Status: Active Grant

• Current Assignee: Globalfoundries US Incorporated (GlobalFoundries, Inc.)
• Original Assignee: International Business Machines Corporation
• Inventors: Brewer, Derek R., Wilhelm, Robert D., Langford, Kerry M.
• Granted Patent: US 9,590,982 B2
• Time in Patent Office: Days
• US Class Current: 726/7
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/63 Location-dependent; Proximity-dependent

Abstract

A method of accessing a network wirelessly is described. In the method an authentication is provided to access the network from a wireless device to a first network node via a first wireless signal having a first range. A proximity validation is provided to access the network through the first network node. The proximity validation is provided to the first network node when the wireless device is within a second range of a second wireless signal of a second network node. The second range is less than the first range. The method further provides for accessing the network when both the authentication and the proximity validation are valid.

Claims

1. A system for accessing a network wirelessly, comprising:

a first network node configured to;

provide an authentication to access the network from a wireless device to the first network node via a first wireless signal having a first range;

provide a proximity validation to access the network through the first network node, the proximity validation provided to the first network node when the wireless device is within a second range of a second wireless signal of a second network node, wherein the second range is less than the first range; and

access the network when both the authentication and the proximity validation are valid.

2. The system of claim 1, wherein the first network node is further configured to:

request a proximity validation from a wireless device to the second network node for accessing the network; and

receive an address of a recommended first network node for accessing the network through a proximity validation when the wireless device is within the second range of the second wireless signal.

3. The system of claim 1, wherein which first network node address provided by the second network node is determined based on one or more factors including distance between the wireless device and the first node, signal strength of the first network node, and usage of the first network node.

4. The system of claim 1, wherein the first network node is obfuscated from the wireless device until the proximity of the device is validated by the second network node.

5. The system of claim 1, wherein the second network node is configured within the first network node.

6. The system of claim 1, wherein the first wireless signal is a wireless local area network signal.

7. The system of claim 1, wherein the second wireless signal is a wireless personal area network signal.

8. A computer program product for accessing a network wirelessly, the computer program product comprising a computer readable storage medium having program code embodied therewith, the program code executable by a first network node to:

provide an authentication to access the network from a wireless device to the first network node via a first wireless signal having a first range;

provide a proximity validation to access the network through the first network node, the proximity validation provided to the first network node when the wireless device is within a second range of a second wireless signal of a second network node, wherein the second range is less than the first range; and

access the network when both the authentication and the proximity validation are valid.

9. The computer program product of claim 8, wherein the program code executable by a first network node is further configured to:

request a proximity validation from a wireless device to the second network node for accessing the network; and

receive an address of a recommended first network node for accessing the network through a proximity validation when the wireless device is within the second range of the second wireless signal.

10. The computer program product of claim 8, wherein which first network node address provided by the second network node is determined based on one or more factors including distance between the wireless device and the first node, signal strength of the first network node, and usage of the first network node.

11. The computer program product of claim 8, wherein the first network node is obfuscated from the wireless device until the proximity of the device is validated by the second network node.

12. The computer program product of claim 8, wherein the second network node is configured within the first network node.

13. The computer program product of claim 8, wherein the first wireless signal is a wireless local area network signal.