Pre-association mechanism to provide detailed description of wireless services

• US 8,566,596 B2
• Filed: 08/24/2010
• Issued: 10/22/2013
• Est. Priority Date: 08/24/2010
• Status: Active Grant

• Current Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Original Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Inventors: Stephenson, David, Torres, Esteban Raul, Salowey, Joseph, Ersoy, Chetin, Cam-Winget, Nancy
• Primary Examiner(s): OBEID, MAMON A
• Application Number:
  US12/862,149
• Publication Number:
  US 20120054106A1
• Time in Patent Office: 1,155 Days
• Field of Search: 705/14.58, 705/14.64, 705/14.65, 705/14.66, 713/175, 713/176
• US Class Current: 713/176
• CPC Class Codes: G06Q 30/0241 Advertisements
• CPC Class Codes: G06Q 30/0267 Wireless devices
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 63/12 Applying verification of the received information cryptographic mechanisms or cryptographic arrangements for data integrity or data verification H04L9/32
• CPC Class Codes: H04L 63/1441 Countermeasures against malicious traffic countermeasures against attacks on cryptographic mechanisms H04L9/002
• CPC Class Codes: H04W 12/106 Packet or message integrity
• CPC Class Codes: H04W 12/122 Counter-measures against attacks; Protection against rogue devices
• CPC Class Codes: H04W 4/21 for social networking applications
• CPC Class Codes: H04W 4/23 for mobile advertising
• CPC Class Codes: H04W 48/14 using user query or user detection

Abstract

In an example embodiment, an apparatus comprising a transceiver configured to send and receive data and logic coupled to the transceiver. The logic is configured to determine from a signal received by the transceiver whether an associated device sending the signal supports a protocol for advertising available services. The logic is configured to send a request for available services from the associated device via the transceiver responsive to determining the associated device supports the protocol. The logic is configured to receive a response to the request via the transceiver, the response comprising at least one service advertisement and a signature. The logic is configured to validate the response by confirming the signature.

Claims

1. An apparatus, comprising:

a transceiver configured to send and receive data;

a user interface;

a controller coupled to the transceiver and the user interface;

wherein the controller is configured to receive a signal received from the transceiver, the signal comprising data representative of a protocol for advertising available services;

the controller is configured to send a request for available services via the transceiver responsive to receiving the signal;

the controller is configured to receive a response to the request for available services via the transceiver, wherein the response comprises at least one service advertisement that comprises at least one service brief, and a first signature;

wherein the service advertisement comprises data representative of a name of service provider and data representative of an icon for the service provider;

wherein the service brief comprises data representative of a description of an available service and data representative of a uniform resource indicator associated with the service;

wherein the first signature comprises a hash of the at least one service advertisement and the at least one service brief;

the controller validates the response to the request for available services, the controller validates the response by determining whether the hash comprises the data representative of the at least one service advertisement and the at least one service brief;

the controller sends a certificate request, via the transceiver, the certificate request comprises a nonce;

the controller receives, via the transceiver, a response to the certificate request, the response to the certificate request comprises a certificate and a second signature, the second signature comprises a hash of the certificate and the nonce;

the controller validates the response to the certificate request by verifying the second signature comprises a hash of the certificate and the nonce;

the controller sends, via the transceiver, a validate certificate chain request;

the controller receives, via the transceiver, a response to the validate certificate chain request;

the controller determines from the response to the validate certificate chain request whether the certificate has been revoked; and

the controller displays on, an associated user interface, an icon associated with the service brief responsive to validating the response to the request for available services, validating the response to the certificate request, and determining from the response to the validate certificate chain request that the certificate has not been revoked.

2. The apparatus set forth in claim 1, wherein the controller obtains a nonce;

wherein the request for available services further comprises the nonce; and

wherein the controller is further configured to further validate the response to the request for available services by verifying the hash in the first signature includes the nonce.

3. The apparatus set forth in claim 1, further comprising a second wireless transceiver;

wherein the controller validates the certificate request is sent via the second wireless transceiver;

wherein the controller receives the response to the certificate request via the second wireless transceiver.

4. The apparatus set forth in claim 1, wherein the at least one service advertisement comprises data representative of an application on a mobile device for acquiring the service.

5. The apparatus set forth in claim 1, wherein the service advertisement further comprises data representative of a service provider domain name.

6. The apparatus set forth in claim 5, wherein the at least one service brief further comprises a service name, and a friendly service name.

7. The apparatus set forth in claim 5, wherein the at least one service brief further comprises data representative of a recommended application for accessing an advertised service.

8. The apparatus set forth in claim 5, wherein the at least one service brief further comprises keywords associated with an advertised service.

9. The apparatus set forth in claim 1, wherein the first signature is an Extensible Markup Language (XML) digital signature.

10. The apparatus set forth in claim 1, wherein the request for available services further comprises state information;

and

the controller validates the response to the request for available services further comprises determining whether the hash in the first signature includes the state information.

11. The apparatus set forth in claim 10, wherein the state information is received in a cookie.