System and method for extending secure authentication using unique session keys derived from entropy

• US 8,413,215 B2
• Filed: 03/25/2011
• Issued: 04/02/2013
• Est. Priority Date: 04/11/2003
• Status: Active Grant

• Current Assignee: Intel Corporation
• Original Assignee: Intel Corporation
• Inventors: Greenwood, Martin, Kim, Yoon Hee, Hui, David Ka-Wai, Alperovich, Vlad, Satarasinghe, Prasanna J
• Primary Examiner(s): LANIER, BENJAMIN E
• Application Number:
  US13/072,013
• Publication Number:
  US 20120144463A1
• Time in Patent Office: 739 Days
• Field of Search: None
• US Class Current: 726/3
• CPC Class Codes: H04L 63/0838 using one-time-passwords
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04W 12/068 using credential vaults, e.g. password manager applications or one time password [OTP] applications
• CPC Class Codes: H04W 88/06 adapted for operation in multiple networks or having at least two operational modes, e.g. multi-mode terminals

Abstract

In some aspects of the present disclosure a device is disclosed that includes a processor; a storage unit; a user interface; a transceiver; a device identifying unit arranged to store device identifying data; a memory unit arranged to store machine-executable instructions that when executed by the processor causes a password to be generated, based on the device identifying data, that is arranged to allow the device to access a public wireless local area network (PWLAN).

Claims

1. A device comprising:

a CPU;

an input/output device;

an external interface to enable the device to access a mobile network and a public wireless local area network (PWLAN);

a device identifier arranged to store device identifying data to access the mobile network; and

a memory unit storing machine-executable instructions which, when executed by the CPU, cause a first password to be generated based on the device identifying data to allow the device to access the PWLAN,

wherein the device is adapted to receive a notification from an adapter, the notification indicating generation of a second password at the adapter, wherein the second password is identical to the first password.

2. The device of claim 1, wherein the external interface is a modem, a wireless transceiver, a network interface card, or combinations thereof.

3. The device of claim 1, wherein the device identifier includes a subscriber identity module (SIM) card, a universal SIM card or an international mobile subscriber identity (IMSI) module.

4. The device of claim 1, wherein the first password is a one-time password.

5. The device of claim 1, wherein the machine-executable instructions, when executed by the CPU, cause the device to initiate an authentication request to a server of the PWLAN using the first password.

6. The device of claim 1, wherein the adaptor is adapted to authenticate the device to the mobile network.

7. The device of claim 1, wherein the second password is a one-time password.

8. The device of claim 1, wherein mobile network is at least one of a GSM network, a GPRS network, a AMPS network or a PCS network.

9. The device of claim 1, the password is generated by combining the device identifying data and an encryption key provided by the PWLAN.

10. A device comprising:

an adaptor including;

a CPU;

a memory unit storing machine-executable instructions which, when executed by the CPU, cause a first password to be generated based on identifying data of a client device and an encryption key to allow the client device to access a public wireless local area network (PWLAN); and

a transceiver configured to transmit a notification indicating generation of the first password to the client device such that a second password identical to the first password is generated at the client device.

11. The device of claim 10, wherein the client device includes a mobile computing device.

12. The device of claim 10, the password is generated by combining the identifying data and the encryption key, wherein the encryption key is provided by the PWLAN.

13. The device of claim 10, wherein the first password is a one-time password.

14. The device of claim 10, wherein the first password is used to authenticate, provide access and/or manage and deliver accounting data to the client device based on access to the PWLAN.

18. The device of claim 10, wherein the transceiver is further configured to transmit information to the client device, the information indicating a part of the identifying data of the client device which is used for the generation of the first password at the adapter.

15. A method comprising:

receiving a notification at a client device that a first password has been generated; and

generating, at the client device, a second password based on client device identifying data and an encryption key,

wherein the second password is identical to the first password and is utilized to allow the client device to access a public wireless local area network (PWLAN).

16. The method of claim 15, further comprising sending an authentication request including the second password from the client device to an authentication server, wherein the authentication server is configured to store the first password.

19. The method of claim 15, further comprising receiving information indicating a part of the client device identifying data used for the generation of the first password,

wherein said generating includes generating, at the client device, the second password based on the part of the client device identifying data used for the generation of the first password and the encryption key.

17. A device comprising:

a CPU;

an input/output device;

an external interface to enable the device to access a mobile network and a public wireless local area network (PWLAN);

a device identifier arranged to store device identifying data to access the mobile network; and

a memory unit storing machine-executable instructions which, when executed by the CPU, cause a first password to be generated based on the device identifying data to allow the device to access the PWLAN,

wherein the device is adapted to receive a message from an adapter, the message including;

information indicating a part of the device identifying data used for the generation of a second password at the adapter, and

wherein, upon receipt of the message, the first password is generated based on the part of the device identifying data used for the generation of the second password at the adapter, the second password being identical to the first password.