Method of securing network access radio systems

• US 9,030,946 B2
• Filed: 01/15/2014
• Issued: 05/12/2015
• Est. Priority Date: 12/09/2005
• Status: Active Grant

• Current Assignee: AT&T Corporation (AT&T, Inc.)
• Original Assignee: AT&T Intellectual Property I LP (AT&T, Inc.)
• Inventors: Brown, Sanford
• Primary Examiner(s): MILLS, DONALD L
• Application Number:
  US14/156,067
• Publication Number:
  US 20140130133A1
• Time in Patent Office: 482 Days
• Field of Search: None
• US Class Current: 370/244
• CPC Class Codes: H04L 63/0876 based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04W 12/0471 Key exchange
• CPC Class Codes: H04W 12/084 using delegated authorisation, e.g. open authorisation [OAuth] protocol

Abstract

A method of providing security for network access radio systems and associated access radio security systems used with the systems. The method includes connecting an access radio having a radio link to a network; communicating between the access radio and a computer over the network using a ping application having ping commands and unique encrypted codes; and enabling operation of the access radio when the access radio is receiving ping commands. Typically, the access radio and the computer are nodes on the network and the network is a local area network (LAN). The ping application sends packets of information from the computer to the access radio and receives a response from the access radio. The ping application must be functioning (i.e., sending and receiving commands between the computer and the access radio) to enable the access radio to communicate via the radio link with a remote network.

Claims

1. A method of providing security for a network access radio system comprising:

communicating between an access radio and a first network using an interface link, the first network being remote from the access radio, the access radio being coupled to a second network, the second network being different from the first network, the access radio establishing the interface link, the access radio executing a first ping application, the first ping application providing for continuous ping communication using a verified unique code;

communicating between the access radio and a processing device associated with the second network using the first ping application; and

disabling establishment of the interface link by the access radio in response to termination of the continuous ping communication between the access radio and the processing device.

2. The method according to claim 1, wherein the second network is a local area network, the access radio and the processing device being nodes on the second network.

3. The method according to claim 1, wherein the operations further comprise executing a second ping application.

4. The method according to claim 3, wherein the operations further comprise sending packets of information between the processing device and the access radio using the first ping application and the second ping application.

5. The method according to claim 1, wherein the operations further comprise transferring files using a file transfer protocol during operation of the first ping application.

6. The method according to claim 3, wherein the first and second ping applications are associated with the verified unique code associated with the access radio.

7. The method according to claim 6, wherein the verified unique code is used with a key exchange encrypted tunneling methodology.

8. The method according to claim 1, wherein the processing device includes a server.

9. The method according to claim 1, wherein when the interface link is enabled, the operations further comprise communication between the first network and the second network using the access radio.

10. The method according to claim 3, wherein the first ping application and the second ping application include commands, the commands including packets of information.

11. A method of providing security for a network access radio system comprising:

establishing network communications in a first network comprising a network access radio including an interface link, a processing device, and a ping application, the ping application continuously sending and receiving encrypted ping commands including a verified unique code;

communicating between the access radio and a second network using the interface link, the second network being remote from the access radio, the second network being different from the first network;

sending and receiving encrypted ping commands between the processing device and the access radio; and

enabling operation of the interface link in response to the access radio receiving the encrypted ping commands.

12. The method according to claim 11, wherein the encrypted ping commands include packets of information and the verified unique code associated with the access radio.

13. The method according to claim 11, wherein the processing device includes a server.

14. The method according to claim 11, wherein the processing device includes a central processing unit.

15. A network access radio system comprising:

an access radio;

an interface link, the interface link enabling communication between the access radio and a first network, the first network being remote from the access radio, the access radio comprising the interface link;

a first ping application executed by the access radio, the first ping application providing for continuous ping communication using a verified unique code, the access radio communicating with a second network using the first ping application, the second network being different from the first network, communication via the interface link being terminated in response to termination of the continuous ping communication between the access radio and the network.

16. The network access radio system according to claim 15, further comprising a second ping application.

17. The network access radio system according to claim 16, wherein the network sends packets of information to the access radio using the first ping application and the second ping application.

18. The network access radio system according to claim 15, wherein files are transferred using a file transfer protocol during operation of the first ping application.

19. The network access radio system according to claim 16, wherein the first and second ping applications are associated with the verified unique code associated with the access radio.

20. The network access radio system according to claim 15, wherein the verified unique code is used with a key exchange encrypted tunneling methodology.