Method of securely pairing devices with an access point for an IP-based wireless network

• US 8,484,457 B2
• Filed: 03/10/2009
• Issued: 07/09/2013
• Est. Priority Date: 03/10/2009
• Status: Active Grant

• Current Assignee: T-Mobile USA, Inc. (Deutsche Telekom AG)
• Original Assignee: T-Mobile USA, Inc. (Deutsche Telekom AG)
• Inventors: Winkler, David B., Brock, Yaro P., Chugh, Jasdeep S., Kemery, Michael C.
• Primary Examiner(s): McNally, Michael S
• Application Number:
  US12/401,550
• Publication Number:
  US 20100235621A1
• Time in Patent Office: 1,582 Days
• Field of Search: 713/153, 380/270, 380/283, 370/401, 345/2.3
• US Class Current: 713/153
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/06 for supporting key management in a packet data network cryptographic mechanisms or cryptographic arrangements for key management H04L9/08
• CPC Class Codes: H04W 12/02 Protecting privacy or anonymity, e.g. protecting personally identifiable information [PII]
• CPC Class Codes: H04W 12/50 Secure pairing of devices
• CPC Class Codes: H04W 84/12 WLAN [Wireless Local Area Networks]
• CPC Class Codes: H04W 88/08 Access point devices

Abstract

A wireless access point and method of using a wireless access point to allow a user to use a pre-determined security key provided with the access point or a personal security key that is provided by the user. The access point is purchased with a pre-determined security key. A user of the access point may press a pairing button on the access point to automatically pair other devices with the access point using the pre-determined security key. A label with a passphrase that corresponds to the pre-determined security key is provided with the access point, allowing the user to manually enter the passphrase into devices that cannot automatically pair with the access point. The wireless access point also has a “security on/off” button. When the user presses the security on/off button, the access point may cease use of the pre-determined security key in favor of a personal security key.

Claims

1. A wireless router system that facilitates the installation and pairing of a wireless router to create an access point to an IP-based wireless telecommunications network, the wireless router solution comprising:

a wireless router comprising;

a communication component for wirelessly communicating Internet Protocol (IP) formatted data with a remote device,

wherein the remote device is configured to transmit and receive communications via a wireless connection;

a security component coupled to the communication component for encrypting the IP-formatted data in accordance with a security key;

a first key storage area containing a pre-determined security key that is chosen by a manufacturer of the wireless router;

a second key storage area which is suitable for storing a user-created security key that is received from a user, and

wherein the user-created security key differs from the pre-determined security key;

a first control that allows a user to select whether the pre-determined security key or the user-created security key is used as the security key to encrypt the IP-formatted data by the security component, and

wherein selection of the first control enables use of the user-created security key;

a second control that when enabled, causes the selected security key to be transmitted to the remote device to permit the remote device to pair with the wireless router and to communicate with the wireless router in a secure fashion,

wherein the first control is selected prior to selecting the second control; and

a label associated with the wireless router that contains a passphrase that corresponds to the pre-determined security key stored in the first key storage area,

wherein the passphrase allows the pre-determined security key to be generated by the remote device when the passphrase is used in a key derivation function that is executed by the remote device.

2. The wireless router system of claim 1, wherein the first and second controls are push button switches.

3. The wireless router system of claim 1, wherein the label is affixed to the wireless router.

4. The wireless router system of claim 3, wherein the label is removable from the wireless router.

5. The wireless router system of claim 1, wherein the label is affixed to a set of instructions associated with the wireless router.

6. The wireless router system of claim 1, wherein the label is affixed to packaging associated with the wireless router.

7. The wireless router system of claim 1, wherein the label comprises a first portion containing the passphrase and a removable second portion that covers the first portion and prevents access to the passphrase until the second portion is removed.

8. The wireless router system of claim 1, wherein the pre-determined security key is a WPA or WPA2 key.

9. The wireless router system of claim 1, wherein the security component disables the encryption before transmitting the selected security key to the remote device.

10. The wireless router system of claim 9, wherein the security component re-enables the encryption after transmitting the selected security key to the remote device.

11. The wireless router system of claim 1, further comprising a display that displays when the selected security key has been successfully transmitted to the remote device.

12. The wireless router system of claim 1, wherein the selected security key is a WPA or WPA2 key.

13. The wireless router system of claim 1, wherein the user-created security key is received from a computer that is coupled to the wireless router.

14. The wireless router system of claim 1, wherein the first key storage area and the second key storage area are within a common storage area.

15. The wireless router system of claim 1, wherein upon operating the first control a first time, the pre-determined security key is disabled from use, and, upon operating the first control a second time, the user-created security key is enabled for use.

16. The wireless router system of claim 1, wherein upon operating the first control a first time, the pre-determined security key is disabled from use and the user-created security key is enabled for use.

17. The wireless router system of claim 1, further comprising a third control that enables the user to enter the user-created security key.

18. The wireless router system of claim 17, wherein the third control is a rotary dial.

19. A method that facilitates the installation and pairing of a wireless router to create an access point for a remote device to wirelessly communicate with an IP-based wireless telecommunications network, the method comprising:

retrieving a pre-determined security key that is stored in a first storage area of the wireless router,

wherein the pre-determined security key is chosen by a manufacturer of the wireless router;

using the retrieved pre-determined security key to encrypt Internet Protocol (IP) formatted data for communication with one or more remote devices via a wireless communication link;

detecting a first selection of a first control that allows a user to select whether the pre-determined security key or a user-created security key is to be used as the security key to encrypt the IP-formatted data by the security component, and

wherein selection of the first control enables use of the user-created security key;

upon selection of the first control, receiving a user-created security string from the user,

wherein the user-created security string differs from the pre-determined security key;

using the received user-created security string to generate and store a user-created security key in a second storage area; and

detecting a second selection of a second control that, when enabled, causes the user-created security key to be transmitted to the remote device to permit the remote device to pair with the wireless router and to communicate with the wireless router in a secure fashion, wherein the first control is selected prior to selecting the second control.

20. The method of claim 19, where the pre-determined security key is selected by a manufacturer of the wireless router.

21. The method of claim 19, wherein using the received user-created security string to generate a user-created security key comprises using the received user-created security string in a key derivation function to generate the user-created security key.

22. The method of claim 19, wherein the first and second storage areas are within a common storage area.

23. The method of claim 19, wherein the user-created security string is a passphrase.

24. The method of claim 19, wherein the first and second controls are push button switches.

25. The method of claim 19, further comprising sending a command to a display to cause the display to indicate whether the pre-determined security key is being used by the wireless router or whether the user-created security key is being used by the wireless router.

26. The wireless router of claim 19, wherein the pre-selected security key and the user-created security key are WPA or WPA2 keys.

27. The wireless router of claim 19, wherein the user-created security string is received from a user computer that is coupled to the wireless router.