System and method for wireless handheld device security in a data center environment

• US 9,578,510 B2
• Filed: 02/10/2015
• Issued: 02/21/2017
• Est. Priority Date: 02/10/2015
• Status: Active Grant

• Current Assignee: Dell Products LP (Dell Technologies Inc.)
• Original Assignee: Dell Products LP (Dell Technologies Inc.)
• Inventors: Masuyama, Jinsaku, Ahmed, Sajjad S., Palmer, John R.
• Primary Examiner(s): Karikari, Kwasi
• Application Number:
  US14/618,051
• Publication Number:
  US 20160234688A1
• Time in Patent Office: 742 Days
• Field of Search: 455/411
• US Class Current: 1/1
• CPC Class Codes: H04L 2463/062 applying encryption of the keys cryptographic mechanisms or cryptographic arrangements for key distribution using key encryption key H04L9/0822
• CPC Class Codes: H04L 63/0435 wherein the sending and receiving network entities apply symmetric encryption, i.e. same key used for encryption and decryption cryptographic mechanisms or cryptographic arrangements for symmetric key encryption H04L9/06
• CPC Class Codes: H04L 63/18 using different networks or channels, e.g. using out of band channels cryptographic mechanisms or cryptographic arrangements for key distribution involving distinctive intermediate devices or communication paths H04L9/0827; cryptographic mechanisms or cryptographic arrangements for authentication using a plurality of channels H04L9/3215
• CPC Class Codes: H04W 12/04 Key management, e.g. using generic bootstrapping architecture [GBA]
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 12/35 Protecting application or service provisioning, e.g. securing SIM application provisioning
• CPC Class Codes: H04W 12/50 Secure pairing of devices
• CPC Class Codes: H04W 4/80 Services using short range communication, e.g. near-field communication [NFC], radio-frequency identification [RFID] or low energy communication
• CPC Class Codes: H04W 84/12 WLAN [Wireless Local Area Networks]
• CPC Class Codes: H04W 88/06 adapted for operation in multiple networks or having at least two operational modes, e.g. multi-mode terminals
• CPC Class Codes: H04W 88/12 Access point controller devices

Abstract

A data center includes an access controller with a short range wireless communication controller, and an access point with a long range wireless communication controller. The access point is coupled to the access controller via a secure link. The access controller, receives a security credential from a mobile device via the short range wireless communication controller, authenticates the mobile device, receives access information for the mobile device via the short range wireless communication controller in response to authenticating the mobile device, and provides the access information to the access point via the secure link. The access point uses the access information to connect to the mobile device via the long range wireless communication controller.

Claims

1. A system, comprising:

an access controller including a short range wireless communication controller; and

an access point including a long range wireless communication controller, wherein the access point is coupled to the access controller via a secure link;

wherein the access controller;

receives a security credential from a mobile device via the short range wireless communication controller;

authenticates the mobile device based on the security credential;

generates an encryption key in response to authenticating the mobile device;

provides the encryption key to the mobile device via the short range wireless communication controller;

receives access information from the mobile device via the short range wireless communication controller; and

provides the access information and the encryption key to the access point via the secure link; and

wherein the access point;

uses the access information to connect to the mobile device via the long range wireless communication controller; and

encrypts communications with the mobile device over the long range wireless communication controller with the encryption key.

2. The system of claim 1, wherein the encryption key comprises a private key for a symmetrical key encryption.

3. The system of claim 2, wherein, in providing the encryption key to the mobile device, the access controller further encrypts the encryption key.

4. The system of claim 1, wherein the encryption key comprises a public key for an asymmetrical key encryption.

5. The system of claim 1, wherein the access information includes at least one of a Media Access Control address, an Internet Protocol address, and a unique identifier for the mobile device.

6. The system of claim 1, wherein the short range wireless communication controller comprises a Near Field Communication device.

7. The system of claim 1, wherein the long range wireless communication controller comprises a WiFi device.

8. The system of claim 1, wherein the short range wireless communication controller provides for communication between the access controller and the mobile device at a range of less than eighteen inches.

9. A method comprising:

receiving, at a short range wireless communication controller of an access controller for a data center, a security credential from a mobile device via the short range wireless communication controller;

authenticating, by the access controller, the mobile device based upon the security credential;

generating, by the access controller, an encryption key in response to authenticating mobile device;

providing, by the access controller, the encryption key to the mobile device via the short range wireless communication controller;

receiving, by the access controller, access information from the mobile device via the short range wireless communication controller;

providing the access information and the encryption key to an access point of the data center via a secure link between the access point and the access controller, wherein the access point includes a long range wireless communication controller;

establishing, by the access point, a connection to the mobile device via the long range wireless communication controller, wherein the connection is established using the access information; and

encrypting, by the access point, communications with the mobile device over the long range wireless communication controller with the encryption key.

10. The method of claim 9, wherein the encryption key comprises a private key for a symmetrical key encryption.

11. The method of claim 10, wherein, in providing the encryption key to the mobile device, the access controller further encrypts the encryption key.

12. The method of claim 9, wherein the encryption key comprises a public key for an asymmetrical key encryption.

13. The method of claim 9, wherein the access information includes at least one of a Media Access Control address, an Internet Protocol address, and a unique identifier for the mobile device.

14. The method of claim 9, wherein the short range wireless communication controller comprises a Near Field Communication device.

15. The method of claim 9, wherein the long range wireless communication controller comprises a WiFi device.

16. The method of claim 9, wherein the short range wireless communication controller provides for communication between the access controller and the mobile device at a range of less than eighteen inches.

18. The computer-readable medium of claim 15, wherein the access information includes at least one of a Media Access Control address, an Internet Protocol address, and a unique identifier for the mobile device.

19. The computer-readable medium of claim 15, wherein the short range wireless communication controller comprises a Near Field Communication device.

17. A non-transitory computer-readable medium including code for performing a method, the method comprising:

receiving, at a short range wireless communication controller of an access controller, a security credential from a mobile device via the short range wireless communication controller;

authenticating, by the access controller, the mobile device based upon the security credential;

receiving, by the access controller, access information from the mobile device via the short range wireless communication controller;

generating, by the access controller, an encryption key in response to authenticating the mobile device;

providing, by the access controller, the encryption key to the mobile device via the short range wireless communication controller;

providing the access information and the encryption key to an access point via a secure link between the access point and the access controller, wherein the access point includes a long range wireless communication controller;

establishing, by the access point, a connection to the mobile device via the long range wireless communication controller, wherein the connection is established using the access information; and

encrypting communications with the mobile device over the Ion range wireless communication controller with the encryption key.

20. The computer-readable medium of claim 17, wherein the short range wireless communication controller provides for communication between the access controller and the mobile device at a range of less than eighteen inches.