System and method for establishing a secure connection in communications systems

• US 9,585,012 B2
• Filed: 05/14/2012
• Issued: 02/28/2017
• Est. Priority Date: 05/14/2012
• Status: Active Grant

• Current Assignee: Futurewei Technologies Incorporated (Huawei Investment & Holding Co., Ltd.)
• Original Assignee: Futurewei Technologies Incorporated (Huawei Investment & Holding Co., Ltd.)
• Inventors: Wong, Marcus
• Primary Examiner(s): Holder, Bradley
• Assistant Examiner(s): MALINOWSKI, WALTER J
• Application Number:
  US13/471,207
• Publication Number:
  US 20130301833A1
• Time in Patent Office: 1,751 Days
• US Class Current: 1/1
• CPC Class Codes: H04W 12/041 Key generation or derivation
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/106 Packet or message integrity
• CPC Class Codes: H04W 84/12 WLAN [Wireless Local Area Networks]

Abstract

A method for establishing a secure connection between a station and an access point includes transmitting a communications system management message to the station, the communications system management message including an access point nonce. The method also includes receiving a station nonce from the station, and determining a first security key according to the access point nonce and the station nonce. The method further includes securing a connection between the station and the access point using the first security key.

Claims

1. A method for establishing a secure connection between a station and an access point in a wireless system, the method comprising:

transmitting, by the access point, a beacon or probe response to the station, the beacon or probe response including a system time used by the access point for the wireless system, wherein an access point nonce is the system time of the beacon or probe response, respectively;

receiving, by the access point, a station nonce from the station;

determining, by the access point, a first security key according to the access point nonce and the station nonce; and

securing, by the access point, a connection between the station and the access point using the first security key.

2. The method of claim 1, wherein the transmitting by the access point transmits the beacon.

3. The method of claim 1, wherein the transmitting by the access point transmits the probe response.

4. The method of claim 3, further comprising, prior to the transmitting the probe response, receiving a probe request from the station.

5. The method of claim 1, further comprising receiving a first integrity code for the station nonce.

6. The method of claim 1, further comprising confirming security information.

7. The method of claim 6, wherein confirming the security information comprises:

transmitting the access point nonce and a first integrity code to the station; and

receiving a second integrity code from the station.

8. The method of claim 1, wherein securing the connection comprises installing the first security key.

9. The method of claim 1, further comprising:

determining that a secured transmission on the secured connection is undecipherable;

changing the access point nonce;

determining a second security key based on the changed access point nonce and the station nonce; and

securing the connection between the station and the access point using the second security key.

10. A method for establishing a secure connection between a station and an access point in a wireless system, the method comprising:

receiving, by the station, a beacon or probe response from the access point, the beacon or probe response including a system time used by the access point for the wireless system, wherein an access point nonce is the system time of the beacon or probe response, respectively;

determining, by the station, a first security key according to the access point nonce and a station nonce;

transmitting, by the station, the station nonce to the access point; and

securing, by the station, a connection between the station and the access point using the first security key.

11. The method of claim 10 wherein the receiving by the station receives the beacon.

12. The method of claim 10, wherein the receiving by the station receives the probe response.

13. The method of claim 12, further comprising prior to receiving the probe response, transmitting a probe request to the access point.

14. The method of claim 10, further comprising transmitting a first integrity code for the station nonce to the access point.

15. The method of claim 10, further comprising:

receiving the access point nonce and a first integrity code from the access point; and

transmitting a second integrity code to the access point.

16. An access point in a wireless system comprising:

a transmitter configured to transmit a beacon or probe response to a station, the beacon or probe response including a system time used by the access point for the wireless system, wherein an access point nonce is the system time of the beacon or probe response, respectively;

a receiver configured to receive a station nonce from the station; and

a processor operatively coupled to the transmitter and to the receiver, the processor configured to determine a first security key according to the access point nonce and the station nonce, and to secure a connection between the station and the access point using the first security key.

17. The access point of claim 16, wherein the beacon or probe response is the beacon.

18. The access point of claim 16, wherein the beacon or probe response is the probe response.

19. The access point of claim 16, wherein the transmitter is configured to transmit the access point nonce and a first integrity code to the station, and wherein the receiver is configured to receive a second integrity code.

20. The access point of claim 16, wherein the processor is configured to determine that a secured transmission on the secured connection is undecipherable, to change the access point nonce, to determine a second security key based on the changed access point nonce and the station nonce, and to secure the connection between the station and the access point using the second security key.

21. A station in a wireless system comprising:

a receiver configured to receive a beacon or probe response from an access point, the beacon or probe response including a system time used by the access point for the wireless system, wherein an access point nonce is the system time of the beacon or probe response, respectively;

a transmitter configured to transmit a station nonce to the access point; and

a processor operatively coupled to the receiver and to the transmitter, the processor configured to determine a first security key according to the access point nonce and the station nonce, and to secure a connection between the station and the access point using the first security key.

22. The station of claim 21, wherein the beacon or probe response is the beacon.

23. The station of claim 21, wherein the beacon or probe response is the probe response.

24. The station of claim 21, wherein the receiver is configured to receive the access point nonce and a first integrity code from the access point, and wherein the transmitter is configured to transmit a second integrity code to the access point.