Methods and apparatus to discover authentication information in a wireless networking environment

• US 8,943,552 B2
• Filed: 07/16/2009
• Issued: 01/27/2015
• Est. Priority Date: 04/24/2009
• Status: Active Grant

• Current Assignee: Malikie Innovations Limited (Key Patent Innovations Limited)
• Original Assignee: Blackberry Limited
• Inventors: McCann, Stephen, Montemurro, Michael
• Primary Examiner(s): HOLDER, BRADLEY W
• Application Number:
  US12/504,500
• Publication Number:
  US 20100275249A1
• Time in Patent Office: 2,021 Days
• Field of Search: 726/4, 726/2, 726/3, 726/5
• US Class Current: 726/4
• CPC Class Codes: H04L 61/4511 using domain name system [DNS]
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/0876 based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint
• CPC Class Codes: H04L 67/02 based on web technology, e.g. hypertext transfer protocol [HTTP]
• CPC Class Codes: H04W 12/068 using credential vaults, e.g. password manager applications or one time password [OTP] applications
• CPC Class Codes: H04W 12/069 using certificates or pre-shared keys
• CPC Class Codes: H04W 48/14 using user query or user detection
• CPC Class Codes: H04W 88/08 Access point devices

Abstract

Example methods and apparatus to discover authentication information in a wireless networking environment are disclosed. A disclosed example method involves transmitting a request message to a network access point requesting identifiers indicative of authentication information required by the network access point to authenticate a wireless terminal. In addition, at least one authentication requirement identifier is retrieved from a response message transmitted by the network access point. The at least one authentication requirement identifier is indicative of an authentication value obtainable using operations performed by the wireless terminal at a media access control layer without providing access to an internet protocol layer to retrieve the authentication value.

Claims

1. A method for a wireless device, the method comprising:

transmitting, during network discovery and prior to authentication, a Generic Advertisement Services (GAS) request to a network access point, the GAS request requesting authentication information, the authentication information being indicative of an extensible authentication protocol method and indicative of a credential required from a wireless terminal to use for authentication of the wireless terminal, the credential being indicative of a subscriber identity module credential; and

receiving, by the wireless terminal, a response to the GAS request from the network access point, wherein the response includes the authentication information.

2. The method of claim 1, wherein the credential is obtainable by the wireless terminal.

3. The method of claim 1, further comprising obtaining, by the wireless terminal, the credential by performing an operation at a media access control layer.

4. The method of claim 1, wherein the credential is pre-stored in the wireless terminal.

5. The method of claim 1 further comprising sending the credential to the network access point.

6. The method of claim 1 wherein the response includes second authentication information.

7. The method of claim 1, further comprising:

determining that the credential is located in the wireless terminal; and

displaying a service identifier based on the credential being located in the wireless terminal.

8. The method of claim 1, wherein the wireless terminal is a mobile communication device.

9. The method of claim 1, wherein the credential enables access to a subscription service provider network communicatively coupled to the network access point.

10. An apparatus comprising:

a hardware processor configured to;

transmit, during network discovery and prior to authentication, a Generic Advertisement Services (GAS) request to a network access point, the GAS request requesting authentication information, the authentication information being indicative of an extensible authentication protocol method and indicative of a credential required from a wireless terminal to use for authentication of the wireless terminal, the credential being indicative of a subscriber identity module credential; and

receive a response to the GAS request from the network access point, wherein the response includes the authentication information.

11. The apparatus of claim 10, wherein the credential is obtainable by the wireless terminal.

12. The apparatus of claim 10, wherein the processor is further configured to obtain, by the wireless terminal, the credential by performing an operation at a media access control layer.

13. The apparatus of claim 10, wherein the processor is further configured to send the credential to the network access point.

14. The apparatus of claim 10, wherein the credential is locally stored in the wireless terminal.

15. The apparatus of claim 10, wherein the response includes second authentication information.

16. The apparatus of claim 10, wherein the processor is further configured to:

determine that the credential is located in the wireless terminal; and

display a service identifier based on the credential being located in the wireless terminal.

17. The apparatus of claim 10, wherein the credential enables access to a subscription service provider network communicatively coupled to the network access point.