System and method for wireless handheld device security in a data center environment

• US 9,877,200 B2
• Filed: 01/20/2017
• Issued: 01/23/2018
• Est. Priority Date: 02/10/2015
• Status: Active Grant

• Current Assignee: Dell Products LP (Dell Technologies Inc.)
• Original Assignee: Dell Products LP (Dell Technologies Inc.)
• Inventors: Masuyama, Jinsaku, Ahmed, Sajjad S., Palmer, John R.
• Primary Examiner(s): Karikari, Kwasi
• Application Number:
  US15/411,532
• Publication Number:
  US 20170134955A1
• Time in Patent Office: 368 Days
• CPC Class Codes: H04L 2463/062 applying encryption of the keys
• CPC Class Codes: H04L 63/0435 wherein the sending and receiving network entities apply symmetric encryption, i.e. same key used for encryption and decryption cryptographic mechanisms or cryptographic arrangements for symmetric key encryption H04L9/06
• CPC Class Codes: H04L 63/18 using different networks or channels, e.g. using out of band channels cryptographic mechanisms or cryptographic arrangements for key distribution involving distinctive intermediate devices or communication paths H04L9/0827; cryptographic mechanisms or cryptographic arrangements for authentication using a plurality of channels H04L9/3215
• CPC Class Codes: H04W 12/04 Key management, e.g. using generic bootstrapping architecture [GBA]
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 12/35 Protecting application or service provisioning, e.g. securing SIM application provisioning
• CPC Class Codes: H04W 12/50 Secure pairing of devices
• CPC Class Codes: H04W 4/80 Services using short range communication, e.g. near-field communication [NFC], radio-frequency identification [RFID] or low energy communication
• CPC Class Codes: H04W 84/12 WLAN [Wireless Local Area Networks]
• CPC Class Codes: H04W 88/06 adapted for operation in multiple networks or having at least two operational modes, e.g. multi-mode terminals
• CPC Class Codes: H04W 88/12 Access point controller devices

Abstract

A data center includes an access controller with a short range wireless communication controller, and an access point with a long range wireless communication controller. The access point is coupled to the access controller via a secure link. The access controller, receives a security credential from a mobile device via the short range wireless communication controller, authenticates the mobile device, receives access information for the mobile device via the short range wireless communication controller in response to authenticating the mobile device, and provides the access information to the access point via the secure link. The access point uses the access information to connect to the mobile device via the long range wireless communication controller.

Claims

1. A system, comprising:

an access controller including a short range wireless communication controller; and

an access point including a long range wireless communication controller, wherein the access point is coupled to the access controller via a secure link;

wherein the access controller;

receives a security credential from a mobile device via the short range wireless communication controller;

authenticates the mobile device;

requests an encryption key from the access point;

provides the encryption key to the mobile device via the short range wireless communication controller;

receives access information from the mobile device via the short range wireless communication controller; and

provides the access information to the access point via the secure link; and

wherein the access point;

uses the access information to connect to the mobile device via the long range wireless communication controller; and

encrypts communications with the mobile device over the long range wireless communication controller with the encryption key.

2. The system of claim 1, wherein the access information includes a Media Access Control address.

3. The system of claim 1, wherein the access information includes an Internet Protocol address.

4. The system of claim 1, wherein the access information includes a unique identifier for the mobile device.

5. The system of claim 1, wherein the short range wireless communication controller comprises a Near Field Communication device.

6. The system of claim 1, wherein the long range wireless communication controller comprises a WiFi device.

7. The system of claim 1, wherein the secure link comprises a wired connection between the access controller and the access point.

8. The system of claim 1, wherein the secure link comprises an encrypted communication between the access controller and the access point.

9. A method comprising:

receiving, at a short range wireless communication controller of an access controller for a data center, a security credential from a mobile device via the short range wireless communication controller;

authenticating, by the access controller, the mobile device in response to receiving the security credential;

requesting, by the access controller, an encryption key from the access point;

providing, by the access controller, the encryption key to the mobile device via the short range wireless communication controller;

receiving, by the access controller, access information from the mobile device via the short range wireless communication controller;

providing the access information to an access point of the data center via a secure link between the access point and the access controller, wherein the access point includes a long range wireless communication controller;

establishing, by the access point, a connection to the mobile device via the long range wireless communication controller, wherein the connection is established using the access information; and

encrypting, by the access point, communications with the mobile device over the long range wireless communication controller with the encryption key.

10. The method of claim 9, wherein the access information includes a Media Access Control address.

11. The method of claim 9, wherein the access information includes an Internet Protocol address.

12. The method of claim 9, wherein the access information includes a unique identifier for the mobile device.

13. The method of claim 9, wherein the short range wireless communication controller comprises a Near Field Communication device.

14. The method of claim 9, wherein the long range wireless communication controller comprises a WiFi device.

15. The method of claim 9, wherein the secure link comprises a wired connection between the access controller and the access point.

16. The method of claim 9, wherein the secure link comprises a encrypted communication between the access controller and the access point.

17. A method comprising:

sending, by a mobile communication device that includes a short range communication controller and a long range communication controller, a security credential to an access controller via the short range wireless communication controller;

receiving, by the mobile communication device, an encryption key from the access controller via the short range wireless communication controller in response to sending the security credential;

sending, by the mobile communication device, access information associated with the mobile communication device to the access device via the short range communication controller;

receiving, by the mobile communication device, the access information from an access point via the long range wireless communication controller; and

establishing, by the mobile communication device, a connection with the access point via the long range communication controller in response to receiving the access information from the access point.

18. The method of claim 17, wherein the access information includes a unique identifier for the mobile device.

19. The method of claim 17, wherein the short range wireless communication controller comprises a Near Field Communication device.

20. The method of claim 17, wherein the long range wireless communication controller comprises a WiFi device.