Method of securing network access radio systems

• US 8,649,274 B2
• Filed: 08/27/2010
• Issued: 02/11/2014
• Est. Priority Date: 12/09/2005
• Status: Expired due to Fees

• Current Assignee: AT&T Intellectual Property II LP (AT&T, Inc.)
• Original Assignee: AT&T Intellectual Property II LP (AT&T, Inc.)
• Inventors: Brown, Sanford
• Primary Examiner(s): MILLS, DONALD L
• Application Number:
  US12/869,965
• Publication Number:
  US 20100316037A1
• Time in Patent Office: 1,264 Days
• Field of Search: None
• US Class Current: 370/244
• CPC Class Codes: H04L 63/0876 based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04W 12/0471 Key exchange
• CPC Class Codes: H04W 12/084 using delegated authorisation, e.g. open authorisation [OAuth] protocol

Abstract

A method of providing security for network access radio systems and associated access radio security systems used with the systems. The method includes connecting an access radio having a radio link to a network; communicating between the access radio and a computer over the network using a ping application having ping commands and unique encrypted codes; and enabling operation of the access radio when the access radio is receiving ping commands. Typically, the access radio and the computer are nodes on the network and the network is a local area network (LAN). The ping application sends packets of information from the computer to the access radio and receives a response from the access radio. The ping application must be functioning (i.e., sending and receiving commands between the computer and the access radio) to enable the access radio to communicate via the radio link with a remote network.

Claims

1. A computer-readable device comprising instructions that, when executed by a processing device, cause the processing device to perform operations comprising:

communicating between an access radio and a network using a radio interface link, the access radio being coupled to the network, the access radio comprising the radio interface link and executing a first ping application, the first ping application providing for continuous ping communication using a verified unique code;

communicating between the access radio and a processing device associated with the network using the first ping application; and

disabling the radio interface link in response to termination of the continuous ping communication between the access radio and the processing device.

2. The computer-readable device according to claim 1, wherein the network is a local area network (LAN), the access radio and the processing device being nodes on the network.

3. The computer-readable device according to claim 1, wherein the operations further comprise executing a second ping application.

4. The computer-readable device according to claim 3, wherein the operations further comprise sending packets of information between the processing device and the access radio using the first ping application and the second ping application.

5. The computer-readable device according to claim 1, wherein the operations further comprise transferring files using a file transfer protocol during operation of the first ping application.

6. The computer-readable device according to claim 3, wherein the first and second ping applications are associated with the verified unique code associated with the access radio.

7. The computer-readable device according to claim 6, wherein the verified unique code is used with a key exchange encrypted tunneling methodology.

8. The computer-readable device according to claim 1, wherein the processing device includes a server.

9. The computer-readable device according to claim 1, wherein the operations further comprise communication with a remote network using the access radio.

10. The computer-readable device according to claim 3, wherein the first ping application and the second ping application include commands, the commands including packets of information.

11. A computer-readable device comprising instructions that, when executed by a processing device, cause the processing device to perform operations comprising:

establishing network communications in a network comprising a network access radio including a radio interface link, a processing device, and a ping application, the ping application continuously sending and receiving encrypted ping commands including a verified unique code;

communicating between the access radio and the network using the radio interface link;

sending and receiving encrypted ping commands between the processing device and the access radio; and

enabling operation of the radio interface link in response to the access radio receiving the encrypted ping commands.

12. The computer-readable device according to claim 11, wherein the encrypted ping commands include packets of information and the verified unique code associated with the access radio.

13. The computer-readable device according to claim 11, wherein the processing device includes a server.

14. The computer-readable device according to claim 11, wherein the processing device includes a central processing unit.

15. A network access radio system comprising:

a radio link to each of a plurality of access radios, the radio link being coupled to a network and used to communicate between the plurality of access radios and the network; and

a ping application that continuously sends and receives ping commands between a plurality of network devices and the plurality of access radios, the ping application including a verified unique code, each radio link being operative in response to the ping application receiving ping commands.

16. The security system according to claim 15, wherein the plurality of network devices includes a central processing unit.

17. The security system according to claim 15, wherein the network is a local area network (LAN).

18. The security system according to claim 15, wherein the plurality of network devices includes a server.

19. The security system according to claim 15, wherein each of the plurality of network devices is a node on the network.

20. The security system according to claim 15, wherein the ping application includes commands, the commands including packets of information and verified code associated with the access radio.