Method for automated security configuration in a wireless network

• US 7,277,547 B1
• Filed: 10/23/2002
• Issued: 10/02/2007
• Est. Priority Date: 10/23/2002
• Status: Active Grant

• Current Assignee: Sprint Spectrum LLC (Deutsche Telekom AG)
• Original Assignee: Sprint Spectrum LP (Deutsche Telekom AG)
• Inventors: Miller, Robert H., Delker, Jason R., Kates, Jesse M.
• Primary Examiner(s): Song; Hosuk
• Application Number:
  US10/279,060
• Time in Patent Office: 1,805 Days
• Field of Search: 380/270, 726 1- 7, 726 14- 15, 726/27, 713/189, 713/192
• US Class Current: 380/270
• CPC Class Codes: H04L 63/0272 Virtual private networks
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/164 at the network layer
• CPC Class Codes: H04W 12/03 Protecting confidentiality, e.g. by encryption
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 12/79 Radio fingerprint
• CPC Class Codes: Y02D 30/70 in wireless communication networks

Abstract

A device in a wireless network may negotiate security parameters with an access point for the wireless network. The device and the access point may negotiate the security parameters using low power signals. The device and the access point may subsequently use the security parameters to implement security features, and they may communicate using normal power signals.

Claims

1. A method for negotiating security parameters in a wireless network, the method comprising:

detecting an indication to negotiate security parameters with a device;

using signals having a first power level to negotiate security parameters with the device; and

subsequently communicating with the device using signals having a second power level, wherein the second power level is greater than the first power level.

2. A computer readable medium having stored therein instructions for causing a central processing unit to execute the method of claim 1.

3. The method of claim 1, wherein detecting an indication comprises detecting an indication from a button.

4. The method of claim 1, wherein the indication occurs simultaneously with an indication on the device to negotiate security parameters.

5. The method of claim 1, wherein negotiating security parameters comprises providing an encryption key to the device.

6. The method of claim 1, wherein the wireless network is an 802.11 network, and wherein negotiating security parameters comprises:

providing a configuration service set identifier to the device; and

using the configuration service set identifier to communicate with the device while negotiating the security parameters.

7. The method of claim 6, further comprising:

providing an operating service set identifier to the device; and

after negotiating the security parameters with the device, using the operating service set identifier to communicate with the device.

8. The method of claim 1, wherein negotiating security parameters comprises:

receiving a MAC address for the device; and

storing the MAC address for the device in an access control list.

9. The method of claim 1, wherein negotiating security parameters comprises establishing a virtual private network tunnel with the device, wherein the virtual private network tunnel uses IPsec.

10. The method of claim 1, wherein the first power level is less than approximately 0.3 mW.

11. A method for an access point negotiating security parameters with a device on a wireless local area network, the method comprising:

using wireless signals having a first range to negotiate security parameters with the device; and

after negotiating the security parameters with the device, communicating with the device using signals having a second range, wherein the second range is greater than the first range.

12. A computer readable medium having stored therein instructions for causing a central processing unit to execute the method of claim 11.

13. The method of claim 11, wherein using signals having a first range comprises sending to the device signals having the first range.

14. The method of claim 11, wherein using signals having a first range comprises receiving from the device signals having the first range.

15. The method of claim 11, wherein the wireless local area network is an 802.11 network, and wherein negotiating security parameters comprises providing a service set identifier to the device.

16. The method of claim 11, wherein the first range is less than approximately five feet.

17. The method of claim 11, further comprising displaying on an access point an indication that the device has successfully negotiated the security parameters with the access point and has connected to the access point.

18. A method for negotiating security parameters in a wireless network, the method comprising:

detecting an indication to negotiate security parameters with an access point for the wireless network,

using signals having a first power level to negotiate security parameters with the access point, and

subsequently communicating with the access point using signals having a second power level, wherein the second power level is greater than the first power level.

19. A computer readable medium having stored therein instructions for causing a central processing unit to execute the method of claim 18.

20. The method of claim 18, wherein detecting an indication comprises detecting an indication from a button.

21. The method of claim 18, wherein the indication occurs simultaneously with an indication on the device to negotiate security parameters.

22. The method of claim 18, wherein negotiating security parameters comprises receiving an encryption key from the access point.

23. The method of claim 18, wherein the wireless network is an 802.11 network, and wherein negotiating the security parameters comprises receiving an operating service set identifier from the access point.

24. The method of claim 23, further comprising receiving a configuration service set identifier, wherein the device uses the configuration service set identifier while negotiating the security parameters with the access point.

25. The method of claim 18, wherein the first power level is less than approximately 0.3 mW.

26. A method for a device negotiating security parameters with an access point on a wireless local area network, the method comprising:

using signals having a first range to negotiate security parameters with the access point; and

after negotiating the security parameters with the access point, communicating with the access point using signals having a second range, wherein the second range is greater than the first range.

27. A computer readable medium having stored therein instructions for causing a central processing unit to execute the method of claim 26.

28. The method of claim 26, wherein using signals having a first range comprises sending to the access point signals having the first range.

29. The method of claim 26, wherein using signals having a first range comprises receiving from the access point signals having the first range.

30. The method of claim 26, wherein negotiating security parameters comprises receiving an encryption key from the access point.

31. The method of claim 26, wherein the wireless local area network is an 802.11 network, and wherein negotiating security parameter comprises receiving a service set identifier from the access point.

32. The method of claim 26, wherein the first range is less than approximately five feet.