Methods and systems for exchanging security information via peer-to-peer wireless networks

• US 7,757,274 B2
• Filed: 02/21/2006
• Issued: 07/13/2010
• Est. Priority Date: 04/05/2005
• Status: Active Grant

• Current Assignee: McAfee, LLC
• Original Assignee: McAfee, Inc. (McAfee, LLC)
• Inventors: Wiedmann, Christian, Lillie, Terrance L., Sneiderman, Richard P., Zeljko, Robert, Wiedmann, Ulrich, Lynch, Sean R., Chu, Gigi C.
• Primary Examiner(s): Parthasarathy; Pramila
• Application Number:
  US11/359,208
• Publication Number:
  US 20070233860A1
• Time in Patent Office: 1,603 Days
• Field of Search: 713/168, 380/149, 380/150, 380/247, 380/250, 709/225, 709/226, 709/229, 705/67
• US Class Current: 726/4
• CPC Class Codes: H04L 63/061 for key exchange, e.g. in peer-to-peer networks cryptographic mechanisms or cryptographic arrangements for key agreement H04L9/0838
• CPC Class Codes: H04L 63/062 for key distribution, e.g. centrally by trusted party cryptographic mechanisms or cryptographic arrangements for key distribution involving a central third party H04L9/0819
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/18 using different networks or channels, e.g. using out of band channels cryptographic mechanisms or cryptographic arrangements for key distribution involving distinctive intermediate devices or communication paths H04L9/0827; cryptographic mechanisms or cryptographic arrangements for authentication using a plurality of channels H04L9/3215
• CPC Class Codes: H04W 12/062 Pre-authentication
• CPC Class Codes: H04W 12/069 using certificates or pre-shared keys
• CPC Class Codes: H04W 84/10 Small scale networks; Flat hierarchical networks
• CPC Class Codes: H04W 88/02 Terminal devices

Abstract

A system, method and computer program product are provided. In use, a first key is exchanged between a granting node and a requesting node via a peer-to-peer wireless network. Further, a human-perceptible hash is generated at the granting node and the requesting node, utilizing the first key. Such human-perceptible hashes are then compared via an out-of-band communication channel. To this end, a second key may then be transmitted to the requesting node for providing access to a centrally-based wireless network.

Claims

1. A method, comprising:

exchanging a first key between a granting node and a requesting node via a peer-to-peer wireless network;

generating a human-perceptible hash at the granting node and the requesting node, utilizing the first key;

comparing the human-perceptible hashes via an out-of-band communication channel; and

securely transmitting a second key to the requesting node based on the comparison of the human-perceptible hashes, the second key for providing access to a centrally-based wireless network.

2. The method as recited in claim 1, wherein the peer-to-peer wireless network includes an ad-hoc wireless network.

3. The method as recited in claim 1, wherein the centrally-based wireless network includes a network operating in an infrastructure mode.

4. The method as recited in claim 1, wherein the first key is utilized to establish a secure communication channel between the granting node and the requesting node.

5. The method as recited in claim 4, wherein the secure communication channel is established utilizing a transport layer security (TLS) session.

6. The method as recited in claim 1, wherein the first key is exchanged in response to a request by the requesting node.

7. The method as recited in claim 6, wherein the first key is exchanged based on user input through a graphical user interface presented on the granting node.

8. The method as recited in claim 6, wherein the granting node informs other nodes if the request is denied.

9. The method as recited in claim 1, wherein the human-perceptible hash includes an audibly-perceptible hash.

10. The method as recited in claim 1, wherein the human-perceptible hash includes a visually-perceptible hash.

11. The method as recited in claim 10, wherein the visually-perceptible hash includes text.

12. The method as recited in claim 10, wherein the visually-perceptible hash includes graphical images.

13. The method as recited in claim 1, wherein the human-perceptible hash is generated by the requesting node generating a first random value and the granting node generating a second random value.

14. The method as recited in claim 13, wherein the human-perceptible hash is further generated by the requesting node generating a first derived value utilizing the first random value, and the granting node generating a second derived value utilizing the second random value.

15. The method as recited in claim 14, wherein the human-perceptible hash is further generated by the requesting node and the granting exchanging the first and second derived values.

16. The method as recited in claim 15, wherein the human-perceptible hash is further generated by the requesting node combining the second derived value with the first random value, and the granting node combining the first derived value with the second random value.

17. The method as recited in claim 1, wherein the first key is utilized to establish a secure communication channel between the granting node and the requesting node, and the second key, which is different from the first key, provides access to the centrally-based wireless network.

18. A computer program product embodied on a computer readable storage medium, comprising:

computer code for communicating a first key between a granting node and a requesting node via a peer-to-peer wireless network;

computer code for generating a human-perceptible hash at at least one of the granting node and the requesting node, utilizing the first key, whereby the human-perceptible hash is capable of being compared via an out-of-band communication channel; and

computer code for securely transmitting a second key to the requesting node based on the comparison of the human-perceptible hash, the second key for providing access to a centrally-based wireless network.

19. A system, comprising:

a granting node and a requesting node for generating a human-perceptible hash utilizing a first key communicated via a peer-to-peer wireless network, and comparing the human-perceptible hash via an out-of-band communication channel;

wherein the system is operable such that a second key is securely transmitted to the requesting node based on the comparison of the human-perceptible hash, the second key for providing access to a centrally-based wireless network.