Method and apparatus for maintaining local area network (“LAN”) and wireless LAN (“WLAN”) security associations

• US 7,882,255 B2
• Filed: 03/29/2006
• Issued: 02/01/2011
• Est. Priority Date: 03/29/2006
• Status: Active Grant

• Current Assignee: Intel Corporation
• Original Assignee: Intel Corporation
• Inventors: Sood, Kapil, Walker, Jesse R., Grewal, Karanvir S.
• Primary Examiner(s): Serrao, Ranodhi N
• Application Number:
  US11/393,018
• Publication Number:
  US 20070239875A1
• Time in Patent Office: 1,770 Days
• Field of Search: 709/230, 709/249, 709/250, 370/338, 713/150, 713/168, 455/410, 455/411, 726/2
• US Class Current: 709/230
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227
• CPC Class Codes: H04W 52/0254 detecting a user operation or a tactile contact or a motion of the device
• CPC Class Codes: H04W 52/0258 controlling an operation mode according to history or models of usage information, e.g. activity schedule or time of day
• CPC Class Codes: H04W 84/12 WLAN [Wireless Local Area Networks]
• CPC Class Codes: Y02D 30/70 in wireless communication networks

Abstract

Cooperating entities share a signaling interface. Each entity establishes a security association between itself and an endpoint, and one of the entities transmits keepalive messages over a channel associated with the security association. Chipsets and systems to implement related methods are also described and claimed.

Claims

1. A mobile device, comprising:

a host entity on the mobile device having a first host embedded controller interface and a first power control profile, the host entity comprising at least a wireless network driver to provide command and control functions that comply with at least IEEE 802.11 communications standards, a supplicant that performs authentication functions, and network protocol logic that bundles unreliable, packet data into reliable stream or packet data;

an active management agent entity on the mobile device having a second host embedded controller interface and a second power control profile, wherein the first power control profile and the second power control profile are independent of each other such that one of the host entity and active management agent entity may be turned off while the other remains active, the active management agent entity comprising at least functional blocks that provide network authentication in an Extensible Authentication Protocol (EAP)-compliant manner;

a network interface device on the mobile device shared by the host entity and the active management agent entity;

access control logic on the mobile device to perform a network access protocol transaction and generate a security association for the mobile device, wherein the security association is shared between the host entity and the active management agent entity via the first and second host embedded controller interfaces; and

keepalive logic on the mobile device to transmit a keepalive message from the active management agent entity over the network interface device while the host entity is in a low-power state.

2. The mobile device of claim 1, wherein the network interface device is a wired or wireless local area network device.

3. The mobile device of claim 1, wherein the network protocol transaction is an 802.1x transaction.

4. The mobile device of claim 1, wherein the keepalive message is a gratuitous address resolution protocol (“

GARP”

) message or other idempotent protocol message.