Systems and methods for acquiring network credentials

• US 8,191,124 B2
• Filed: 09/06/2007
• Issued: 05/29/2012
• Est. Priority Date: 09/06/2006
• Status: Active Grant

• Current Assignee: Channel IP BV
• Original Assignee: Devicescape Software, Inc. (Pareteum Corp.)
• Inventors: Wynn, Simon, Gordon, John
• Primary Examiner(s): ARMOUCHE, HADI S
• Application Number:
  US11/899,697
• Publication Number:
  US 20080060066A1
• Time in Patent Office: 1,727 Days
• Field of Search: 726/5, 726/6, 726/27, 713/186
• US Class Current: 726/6
• CPC Class Codes: H04L 61/5014 using dynamic host configuration protocol [DHCP] or bootstrap protocol [BOOTP]
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/0807 using tickets, e.g. Kerberos cryptographic mechanisms or cryptographic arrangements for entity authentication using tickets or tokens H04L9/3213
• CPC Class Codes: H04W 12/068 using credential vaults, e.g. password manager applications or one time password [OTP] applications
• CPC Class Codes: H04W 12/069 using certificates or pre-shared keys

Abstract

Exemplary methods and systems for acquiring network credentials for network access are described. The exemplary method includes receiving network configuration information from a network device on a communication network, generating a credential request, transmitting the credential request to a credential server over a standard protocol of the network device, receiving the credential request response, and providing a network credential from the credential request response to the network device to access the communication network.

Claims

1. A method for acquiring network credentials, the method comprising:

receiving, at a digital device, network configuration information from a network device on a communication network;

generating, by the digital device, a credential request, the credential request comprising an identifier associated with the network device;

transmitting, from the digital device, the credential request over the network device to a credential server using a DNS protocol;

receiving, at the digital device, a credential request response over the network device from the credential server; and

providing, by the digital device, a network credential from the credential request response to the network device to access the communication network.

2. The method of claim 1, further comprising encrypting the credential request.

3. The method of claim 1, further comprising decrypting the credential request response.

4. The method of claim 1, further comprising digitally signing the credential request.

5. The method of claim 1, wherein the credential request comprises a location identifier.

6. The method of claim 5, wherein the location identifier is based on at least some of the network configuration information.

7. The method of claim 1, wherein the credential request response comprises a command to not cache the credential request response.

8. The method of claim 1, wherein providing the credential from the credential request response comprises analyzing a network access page and posting form information within the network access page.

9. The method of claim 1, wherein the credential request comprises a digital device identifier.

10. A digital device for acquiring network credentials, the digital device comprising:

a processor;

a network module configured to receive network configuration information from a network device on a communication network and transmit a credential request over the network device to a credential server using a DNS protocol;

a credential request module configured to generate the credential request, the credential request comprising an identifier associated with the network device;

a credential engine configured to receive a credential request response over the network device from the credential server; and

a network access engine configured to provide a network credential from the credential request response to the network device to access the communication network.

11. The digital device of claim 10, further comprising an encryption/decryption module configured to encrypt the credential request.

12. The digital device of claim 10, further comprising an encryption/decryption module configured to decrypt the credential request response.

13. The digital device of claim 10, further comprising an encryption/decryption module configured to digitally sign the credential request.

14. The digital device of claim 10, wherein the credential request comprises a location identifier.

15. The digital device of claim 14, wherein the location identifier is based on at least some of the network configuration information.

16. The digital device of claim 10, wherein the credential request response comprises a command to not cache the credential request response.

17. The digital device of claim 10, wherein providing the credential from the credential request response comprises the network access engine configured to analyze a network access page and post form information within the network access page.

18. The digital device of claim 10, wherein the credential request comprises a digital device identifier.

19. A non-transitory computer readable medium having embodied thereon a program, the program being executable by a processor for performing a method for acquiring network credentials, the method comprising:

receiving, at a digital device, network configuration information from a network device on a communication network;

generating, at the digital device, a credential request, the credential request comprising an identifier associated with the network device;

transmitting, from the digital device, the credential request over the network device to a credential server using a DNS protocol;

receiving, by the digital device, the credential request response over the network device from the credential server; and

providing, from the digital device, a network credential from the credential request response to the network device to access the communication network.