Method for establishing classes within a communication network

• US 5,513,263 A
• Filed: 11/30/1994
• Issued: 04/30/1996
• Est. Priority Date: 11/30/1994
• Status: Expired due to Term

• Current Assignee: Google Technology Holdings LLC (Alphabet Inc.)
• Original Assignee: Motorola, Inc. (Motorola Solutions, Inc.)
• Inventors: White, Richard E., Demange, Mark G.
• Primary Examiner(s): CANGIALOSI, SALVATORE A
• Application Number:
  US08/347,022
• Time in Patent Office: 517 Days
• Field of Search: 380/44-50
• US Class Current: 380/44
• CPC Class Codes: H04L 2209/043 of tables, e.g. lookup, substitution or mapping
• CPC Class Codes: H04L 2209/80 Wireless
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/105 Multiple levels of security
• CPC Class Codes: H04L 9/0836 using tree structure or hierarchical structure
• CPC Class Codes: H04L 9/0863 involving passwords or one-time passwords network architectures or network communication protocols for using one-time keys in a packet data network H04L63/067
• CPC Class Codes: H04L 9/40 Network security protocols

Abstract

User device (12) classes are established in a communications network (100). An access point (10) utilizes a first password to create an encryption key, then generates a plurality of secondary passwords for use by devices (12). User device (12) classes are established by assigning a secondary password to a respective class of users, determining the network access permitted the class, determining the network services provided to the class and finally assigning the secondary password to a device (12'"'"') seeking to communicate within the network (100).

Claims

1. In a communication network having an central controller, said controller having a key generator that utilizes a first password comprising characters to generate an encryption key, a method for establishing hierarchical user classes within said network, said method comprising the steps of:

generating a number of secondary passwords that when entered into the key generator, will generate the encryption key, said secondary passwords having different characters than the first password;

assigning to each secondary password a user class and associated information;

storing each secondary password and associated user class information in central controller memory; and

assigning at least one secondary password to at least one remote device seeking to communicate with said central controller.

2. The method of claim 1 further comprising the steps of:

determining a level of network access for a respective class; and

determining a level of network service provided a respective class.

3. The method of claim 2 wherein the step of determining a level of network access further comprises the steps of:

determining whether the class receives limited network access; and

determining whether the class receives unlimited network access.

4. The method of claim 2 wherein the step of determining a level of network service further comprises at least one of the steps of:

establishing a priority level for the class;

establishing a security level for the class; and

establishing channel quality levels for the class.

5. The method of claim 1 wherein the step of generating secondary passwords further comprises the steps of:

determining a modular remainder for each first password character; and

indexing into a lookup table to retrieve characters having modular remainders identical to the modular remainders exhibited by the first password characters.

6. The method of claim 1 wherein the step of generating secondary passwords further comprises the steps of:

selecting the first password from a first set of password characters;

determining a second set of password characters;

providing a bit value to each password character, at least some of the password characters of the first set having identical bit value representations as some of the password characters of the second set;

determining the bit value representations for each character of the first password; and

selecting characters from the second set of password characters having bit value representations identical to the bit value representations exhibited by the characters of the first password.

7. The method of claim 1 wherein the step of generating secondary passwords further comprises the steps of:

retrieving the key by entering the first password into the key generator;

identifying, from the key, a modular remainder for each first password character; and

indexing into a lookup table to retrieve characters having modular remainders, said modular remainders being identical to the modular remainders exhibited by the first password characters.

8. The method of claim 1 further comprising the steps of:

the at least one remote device

communicating the secondary password to the communications controller;

the communications controller;

identifying a user class based upon the secondary password; and

providing the at least one remote device the level of network access and the level of network service associated with the identified class.

9. The method of claim 1 further comprising the step of:

generating a number of secondary passwords that when entered into the key generator, will generate the encryption key, said secondary passwords having characters different from the characters of the first password, said secondary passwords further having characters different from one another.