DISTRIBUTED CONFIGURATOR ENTITY

• US 20160360407A1
• Filed: 04/12/2016
• Published: 12/08/2016
• Est. Priority Date: 06/05/2015
• Status: Abandoned Application

• Current Assignee: Qualcomm, Inc.
• Original Assignee: Qualcomm, Inc.
• Inventors: Benoit, Olivier Jean, Tinnakornsrisuphap, Peerapol
• Application Number:
  US15/097,229
• Publication Number:
  US 20160360407A1
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04W 12/04 Key management, e.g. using generic bootstrapping architecture [GBA]
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/50 Secure pairing of devices
• CPC Class Codes: H04W 84/12 WLAN [Wireless Local Area Networks]

Abstract

A system and method for distributed storage and/or management of network credentials in a wireless network. A first device of the wireless network receives a set of network credentials from a first configurator. The network credentials may be used to authorize one or more devices to access the wireless network. The first device further receives a user authentication credential from a second device, and authenticates the second device as a second configurator for the wireless network based at least in part on the user authentication credential. Upon authenticating the second device as the second configurator, the first device may then transmit the set of network credentials to the second configurator.

Claims

1. A method of distributing network credentials for a wireless network, the method being performed by a first device of the wireless network and comprising:

receiving, from a first configurator, a set of network credentials used to authorize one or more devices to access the wireless network;

receiving a user authentication credential from a second device;

authenticating the second device as a second configurator for the wireless network based at least in part on the user authentication credential; and

transmitting the set of network credentials to the second configurator.

2. The method of claim 1, wherein the set of network credentials includes a list of trusted public keys associated with the one or more devices.

3. The method of claim 1, wherein the set of network credentials includes a pair of public and private keys used to certify the one or more devices as members of the wireless network.

4. The method of claim 1, further comprising:

receiving a reference credential from the first configurator.

5. The method of claim 4, wherein the authenticating comprises:

comparing the user authentication credential with the reference credential; and

authenticating the second device as the second configurator upon determining that the user authentication credential substantially matches the reference credential.

6. The method of claim 5, further comprising:

offloading the comparison to be performed by one or more processing resources external to the wireless network.

7. The method of claim 1, wherein the user authentication credential includes at least one of a password, voice data, or image data input by a user of the second device.

8. The method of claim 1, wherein receiving the user authentication credential comprises:

establishing a secure channel with the second device based at least in part on a public identity key of the first device; and

receiving the user authentication credential, from the second device, via the secure channel.

9. The method of claim 8, wherein the public identity key is provided to the second device in an out-of-band manner.

10. The method of claim 1, wherein the authenticating comprises:

enabling the second device to authorize additional devices to access the wireless network.

11. A wireless device comprising:

one or more processors; and

a memory storing instructions that, when executed by the one or more processors, cause the wireless device to;

receive, from a first configurator, a set of network credentials used to authorize one or more devices to access a wireless network;

receive a user authentication credential from another wireless device;

authenticate the other wireless device as a second configurator for the wireless network based at least in part on the user authentication credential; and

transmit the set of network credentials to the second configurator.

12. The wireless device of claim 11, wherein the set of network credentials includes a list of trusted public key associated with the one or more devices.

13. The wireless device of claim 11, wherein the set of network credentials includes a pair of public and private keys used to certify the one or more devices as members of the wireless network.

14. The wireless device of claim 11, wherein execution of the instructions further causes the wireless device to:

receive a reference credential from the first configurator.

15. The wireless device of claim 14, wherein execution of the instructions to authenticate the other wireless device causes the wireless device to:

compare the user authentication credential with the reference credential; and

authenticate the other wireless device as the second configurator upon determining that the user authentication credential substantially matches the reference credential.

16. The wireless device of claim 11, wherein the user authentication credential includes at least one of a password, voice data, or image data input by a user of the other wireless device.

17. The wireless device of claim 11, wherein execution of the instructions to receive the user authentication credential causes the wireless device to:

establish a secure channel with the other wireless device based at least in part on a public identity key of the wireless device, wherein the public identity key is provided to the other wireless device in an out-of-band manner; and

receive the user authentication credential, from the other wireless device, via the secure channel.

18. The wireless device of claim 11, wherein execution of the instructions to authenticate the other wireless device causes the wireless device to:

enable the other wireless device to authorize additional devices to access the wireless network.

19. The wireless device of claim 11, wherein the wireless device is a wireless access point (AP).

20. A wireless device comprising:

means for receiving, from a first configurator, a set of network credentials used to authorize one or more devices to access a wireless network;

means for receiving a user authentication credential from another wireless device;

means for authenticating the other wireless device as a second configurator for the wireless network based at least in part on the user authentication credential; and

means for transmitting the set of network credentials to the second configurator.

21. The wireless device of claim 20, wherein the set of network credentials includes a list of trusted public keys associated with the one or more devices.

22. The wireless device of claim 20, wherein the set of network credentials includes a pair of public and private keys used to certify the one or more devices as members of the wireless network.

23. The wireless device of claim 20, wherein the means for authenticating the other wireless device is to:

compare the user authentication credential with a reference credential received from the first configurator; and

authenticate the other wireless device as the second configurator upon determining that the user authentication credential substantially matches the reference credential.

24. The wireless device of claim 20, wherein the user authentication credential includes at least one of a password, voice data, or image data input by a user of the other wireless device.

25. The wireless device of claim 20, wherein the means for receiving the user authentication credential is to:

establish a secure channel with the other wireless device based at least in part on a public identity key of the wireless device, wherein the public identity key is provided to the other wireless device in an out-of-band manner; and

receive the user authentication credential, from the other wireless device, via the secure channel.

26. The wireless device of claim 20, wherein the means for authenticating the other wireless device is to:

enable the other wireless device to authorize additional devices to access the wireless network.

27. A non-transitory computer-readable medium storing instructions that, when executed by a processor of a wireless device, causes the wireless device to:

receive, from a first configurator, a set of network credentials used to authorize one or more devices to access a wireless network;

receive a user authentication credential from another wireless device;

authenticate the other wireless device as a second configurator for the wireless network based at least in part on the user authentication credential; and

transmit the set of network credentials to the second configurator.

28. The non-transitory computer-readable medium of claim 27, wherein the set of network credentials includes a list of trusted public keys associated with the one or more devices.

29. The non-transitory computer-readable medium of claim 27, wherein the set of network credentials includes a pair of public and private keys used to certify the one or more devices as members of the wireless network

30. The non-transitory computer-readable medium of claim 27, wherein the user authentication credential includes at least one of a password, voice data, or image data input by a user of the other wireless device.