Localized network authentication and security using tamper-resistant keys

• US 9,294,915 B2
• Filed: 06/09/2014
• Issued: 03/22/2016
• Est. Priority Date: 10/08/2002
• Status: Expired due to Term

• Current Assignee: KoolSpan, Inc.
• Original Assignee: KoolSpan, Inc.
• Inventors: Fascenda, Anthony C.
• Primary Examiner(s): CHEN, SHIN HON
• Application Number:
  US14/299,618
• Publication Number:
  US 20140331051A1
• Time in Patent Office: 652 Days
• Field of Search: None
• US Class Current: 1/1
• CPC Class Codes: H04L 2209/80 Wireless network architectures or network communication protocols for wireless network security H04W12/00
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/061 for key exchange, e.g. in peer-to-peer networks cryptographic mechanisms or cryptographic arrangements for key agreement H04L9/0838
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 9/0897 involving additional devices, e.g. trusted platform module [TPM], smartcard or USB
• CPC Class Codes: H04L 9/3234 involving additional secure or trusted devices, e.g. TPM, smartcard, USB or software token network architectures or network communication protocols for supporting authentication of entities using an additional device in a packet data network H04L63/0853
• CPC Class Codes: H04L 9/3271 using challenge-response
• CPC Class Codes: H04W 12/04 Key management, e.g. using generic bootstrapping architecture [GBA]
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/50 Secure pairing of devices

Abstract

The invention provides a secure Wi-Fi communications method and system. In an embodiment of the invention, unique physical keys, or tokens, are installed at an access point and each client device of the network. Each key comprises a unique serial number and a common network send cryptographic key and a common network receive cryptographic key used only during the authentication phase by all components on the LAN. Each client key further includes a secret cryptographic key unique to each client device. During authentication, two random numbers are generated per communications session and are known by both sides of the wireless channel. Only the random numbers are sent across the wireless channel and in each case these numbers are encrypted. A transposed cryptographic key is derived from the unique secret cryptographic key using the random numbers generated during authentication. Thus, both sides of the wireless channel know the transposed cryptographic key without it ever being transmitted between the two.

Claims

1. A physical key for use with a computing device, the physical key comprising:

a port connector adapted to connect to a corresponding communication port of the computing device and upon connection establish a physical interface between the computing device and the physical key externally located from the computing device, and wherein the physical key is configured to generate a cryptographic key from a token within the physical key and store the generated cryptographic key inside the token, wherein the generated cryptographic key is never exposed outside of the physical key;

a random number generator adapted to generate one or more random numbers, wherein the one or more random numbers are employed to generate a transposed version of the generated cryptographic key, and further wherein the transposed cryptographic key is employed to encrypt and/or decrypt communication across a wireless channel; and

a memory card adapted to store network keys for accessing one or more networks, wherein the network keys comprise a network send (NKS) key and a network receive (NKR) key.

2. The physical key of claim 1, wherein the port connector comprises a Universal Serial Bus (USB) connector.

3. The physical key of claim 1, wherein the communication port of the computing device comprises a serial port or a parallel port.