Dynamic PSK for hotspots

• US 9,596,605 B2
• Filed: 12/28/2015
• Issued: 03/14/2017
• Est. Priority Date: 02/09/2012
• Status: Active Grant

• Current Assignee: Ruckus IP Holdings LLC
• Original Assignee: Ruckus Wireless, Inc. (CommScope Holding Company, Inc.)
• Inventors: Ranade, Prashant, Sheu, Ming-Jye
• Primary Examiner(s): LEE, JASON T
• Application Number:
  US14/981,579
• Publication Number:
  US 20160192196A1
• Time in Patent Office: 442 Days
• Field of Search: 726/6
• US Class Current: 1/1
• CPC Class Codes: H04L 63/062 for key distribution, e.g. centrally by trusted party cryptographic mechanisms or cryptographic arrangements for key distribution involving a central third party H04L9/0819
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 67/01 Protocols
• CPC Class Codes: H04L 67/02 based on web technology, e.g. hypertext transfer protocol [HTTP]
• CPC Class Codes: H04L 67/10 in which an application is distributed across nodes in the network software deployment G06F8/60; multiprogramming arrangements G06F9/46
• CPC Class Codes: H04W 12/04 Key management, e.g. using generic bootstrapping architecture [GBA]
• CPC Class Codes: H04W 12/0431 Key distribution or pre-distribution; Key agreement
• CPC Class Codes: H04W 12/08 Access security

Abstract

Systems and methods for providing secured network access are provided. A user device located within range of a hotspot initiates a request sent via an open communication network associated with the hotspot. The request concerns secured network access at the hotspot by the user device. A unique pre-shared key is generated for the user device based on information in the received request and transmitted over the open communication network for display on a webpage accessible to the user device. The unique pre-shared key is stored in association with information regarding the user device. The user device may then use the unique pre-shared key in subsequent requests for secured network access.

Claims

1. A method for providing access to a computer network via a hotspot, the method comprising:

receiving a first request to access the computer network from a user device located within a range of the hotspot;

redirecting the received request to an intermediary web portal server;

transmitting to the user device a selectable option for a secure access or an open access to the computer network;

receiving a selection from the user device regarding a secure access or an open access to the computer network;

when the received selection is for a secure access to the computer network;

generating and storing a pre-shared key unique to the user device;

transmitting the pre-shared key for display on a webpage accessible by the user device;

receiving a second request for securely accessing the computer network including the pre-shared key, from the user device;

granting the secure access to the computer network to the user device responsive to the received second request and the received pre-shared key; and

when the received selection is for an open access to the computer network, granting the open access to the computer network to the user device.

2. The method of claim 1, wherein said pre-shared key unique to the user device is generated based on information received from the user device.

3. The method of claim 1, wherein said pre-shared key unique to the user device is generated randomly.

4. The method of claim 1, further comprising storing in a memory information regarding a plurality of different user devices, each different user device associated with a different pre-shared key unique to the respective different user device.

5. The method of claim 4, wherein the information regarding the plurality of different user devices includes, for each user device, at least one parameter, and wherein secure access to the communication network granted to said each user device is governed at least in part by the at least one parameter, and wherein the at least one parameter includes one or more selected from the group consisting of an expiration date, a session duration, a bandwidth, a user identity, user rewards, and access policies.

6. The method of claim 5, wherein the pre-shared key unique to the user device is utilized to encrypt communications between the computer network and the user device.

7. The method of claim 1, wherein the transmitted pre-shared key is automatically entered into the user device by embedded instructions in a transmitted pre-shared key download package.

8. A non-transitory computer-readable storage medium having embodied thereon a plurality of instructions when executable by a hardware processor to perform a process for providing access to a computer network via a hotspot, the process comprising the steps of:

receiving a first request to access the computer network from a user device located within a range of the hotspot;

redirecting the received request to an intermediary web portal server;

transmitting to the user device a selectable option for a secure access or an open access to the computer network;

receiving a selection from the user device regarding a secure access or an open access to the computer network;

when the received selection is for a secure access to the computer network;

generating and storing a pre-shared key unique to the user device;

transmitting the pre-shared key for display on a webpage accessible by the user device;

receiving a second request for securely accessing the computer network including the pre-shared key, from the user device;

granting the secure access to the computer network to the user device responsive to the received second request and the received pre-shared key; and

when the received selection is for an open access to the computer network, granting the open access to the computer network to the user device.

9. The non-transitory computer-readable storage medium of claim 8, wherein said pre-shared key unique to the user device is generated based on information received from the user device.

10. The non-transitory computer-readable storage medium of claim 8, wherein said pre-shared key unique to the user device is generated randomly.

11. The non-transitory computer-readable storage medium of claim 8, wherein the transmitted pre-shared key is automatically entered into the user device by embedded instructions in a transmitted pre-shared key download package.

12. The non-transitory computer-readable storage medium of claim 8, further comprising storing in a memory information regarding a plurality of different user devices, each different user device associated with a different pre-shared key unique to the respective different user device.

13. The non-transitory computer-readable storage medium of claim 12, wherein the information regarding the plurality of different user devices includes, for each user device, at least one parameter, and wherein secure access to the communication network granted to said each user device is governed at least in part by the at least one parameter.

14. The non-transitory computer-readable storage medium of claim 13, wherein the at least one parameter includes one or more selected from the group consisting of an expiration date, a session duration, a bandwidth, a user identity, user rewards, and access policies.

15. A system for providing access to a computer network via a hotspot comprising:

a communication interface for receiving a first request to access the computer network from a user device located within a range of the hotspot;

a web portal server for receiving a redirected received request, wherein the web portal server transmits to the user device a selectable option for a secure access or an open access to the computer network, and wherein the communication interface receives a selection from the user device regarding a secure access or an open access to the computer network; and

a hardware processor for;

when the received selection is for a secure access to the computer network;

generating and storing a pre-shared key unique to the user device in a memory;

transmitting the pre-shared key for display on a webpage accessible by the user device;

receiving a second request for securely accessing the computer network including the pre-shared key, from the user device;

granting the secure access to the computer network to the user device responsive to the received second request and the received pre-shared key; and

when the received selection is for an open access to the computer network, granting the open access to the computer network to the user device.

16. The system of claim 15, wherein said pre-shared key unique to the user device is generated based on information received from the user device.

17. The system of claim 15, wherein said pre-shared key unique to the user device is generated randomly.

18. The system of claim 15, further comprising storing in a memory information regarding a plurality of different user devices, each different user device associated with a different pre-shared key unique to the respective different user device.

19. The system of claim 15, wherein the information regarding the plurality of different user devices includes, for each user device, at least one parameter, and wherein secure access to the communication network granted to said each user device is governed at least in part by the at least one parameter, and wherein the at least one parameter includes one or more selected from the group consisting of an expiration date, a session duration, a bandwidth, a user identity, user rewards, and access policies.

20. The system of claim 15, wherein the transmitted pre-shared key is automatically entered into the user device by embedded instructions in a transmitted pre-shared key download package.