Authentication for Ad Hoc network setup

• US 7,571,313 B2
• Filed: 12/28/2004
• Issued: 08/04/2009
• Est. Priority Date: 12/28/2004
• Status: Active Grant

• Current Assignee: Bison Patent Licensing, LLC
• Original Assignee: Motorola, Inc. (Motorola Solutions, Inc.)
• Inventors: Puhl, Larry C., Messerges, Thomas S.
• Primary Examiner(s): Barron, Jr., Gilberto
• Assistant Examiner(s): Armouche, Hadi
• Application Number:
  US11/024,281
• Publication Number:
  US 20090063852A1
• Time in Patent Office: 1,680 Days
• Field of Search: 713/150, 713155-156, 713/161, 713/163, 713168-169, 713171-173, 713175-176, 713/164, 713/189, 380/270
• US Class Current: 713/156
• CPC Class Codes: H04L 2209/805 Lightweight hardware, e.g. radio-frequency identification [RFID] or sensor
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 63/107 wherein the security policies are location-dependent, e.g. entities privileges depend on current location or allowing specific operations only from locally connected terminals
• CPC Class Codes: H04L 9/321 involving a third party or a trusted authority
• CPC Class Codes: H04L 9/3263 involving certificates, e.g. public key certificate [PKC] or attribute certificate [AC]; Public key infrastructure [PKI] arrangements network architectures or network communication protocols for supporting authentication of entities using certificates in a packet data network H04L63/0823
• CPC Class Codes: H04W 12/069 using certificates or pre-shared keys

Abstract

A device (110) performs a method 200 for authentication and Ad Hoc network setup. The device (110) receives (210) a first security configuration; receives (220) a second security configuration based on location; authenticates (230) at least a second node (110) having the first security configuration and the second security configuration; and forms (240) a network with the at least a second node (110).

Claims

1. A method for authentication for use in a first node, the method comprising the steps of:

receiving a first security configuration into the first node;

receiving a second security configuration based on location into the first node after the first security configuration is verified; and

authenticating at least a second node already having both the first and the second security configurations, wherein both the first and the second security configurations are used in the authenticating step in order to form a network with the at least a second node.

2. The method of claim 1 further comprising the step of being authenticated by the at least a second node using the first and the second security configurations in order to form the network with the at least a second node.

3. The method of claim 2, wherein the first and the at least a second nodes are wireless devices that form the network.

4. The method of claim 1, wherein the first security configuration is one of a network key and a digital certificate.

5. The method of claim 1, wherein the second security configuration is one of a network key and a digital certificate.

6. The method of claim 1, wherein location is determined based on a signal strength parameter.

7. The method of claim 1, wherein location is determined based on a time-of-arrival parameter.

8. The method of claim 1, wherein location is determined based on an angle-of-arrival parameter.

9. The method of claim 1, wherein the second security configuration is received based on being within a predetermined proximity to a device that provides the second security configuration.

10. The method of claim 9, wherein the second security configuration is automatically received upon coming within the predetermined proximity of the first location.

11. An apparatus for authenticating wireless nodes, the apparatus comprising:

means for receiving a first security configuration into the apparatus;

means for receiving a second security configuration based on location into the apparatus after the first security configuration is verified; and

means for authenticating at least a first wireless node already having both the first and second security configurations, wherein both the first and the second security configurations are used in the authenticating step in order to form a network with the at least a first wireless node.

12. The apparatus of claim 11, wherein the apparatus is a wireless device.

13. The apparatus of claim 11, wherein the apparatus is attached to an article of clothing.

14. The apparatus of claim 11, wherein the apparatus is attached to a radio.

15. The apparatus of claim 11, wherein the apparatus is attached to a vehicle.

16. The apparatus of claim 11, wherein the apparatus is further configured for receiving the second configuration based on being within a predetermined proximity to a device that provides the second security configuration.

17. The apparatus of claim 11, wherein the first security configuration is one of a network key and a digital certificate.

18. The apparatus of claim 11, wherein the second security configuration is one of a network key and a digital certificate.

19. A system for authenticating wireless nodes, the system comprising:

at least a first and second apparatus each comprising;

means for receiving a first security configuration;

means for receiving a second security configuration based on location after the first security configuration is verified;

means for authenticating at least one wireless node already having both the first and second security configurations, wherein both the first and the second security configurations used in the authenticating step to form a network with the at least one wireless node.