Automated network security system and method

• US 20050254652A1
• Filed: 07/14/2003
• Published: 11/17/2005
• Est. Priority Date: 07/16/2002
• Status: Abandoned Application

• Current Assignee: Drew Tick, Haim Engler
• Original Assignee: Drew Tick, Haim Engler
• Inventors: Engler, Haim, Tick, Drew
• Application Number:
  US10/521,429
• Publication Number:
  US 20050254652A1
• Time in Patent Office: Days
• US Class Current: 380/270
• CPC Class Codes: H04L 2209/80 Wireless network architectures or network communication protocols for wireless network security H04W12/00
• CPC Class Codes: H04L 63/062 for key distribution, e.g. centrally by trusted party cryptographic mechanisms or cryptographic arrangements for key distribution involving a central third party H04L9/0819
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227
• CPC Class Codes: H04L 9/3263 involving certificates, e.g. public key certificate [PKC] or attribute certificate [AC]; Public key infrastructure [PKI] arrangements network architectures or network communication protocols for supporting authentication of entities using certificates in a packet data network H04L63/0823
• CPC Class Codes: H04L 9/3273 for mutual authentication network architectures or network communication protocols for achieving mutual authentication in a packet data network H04L63/0869
• CPC Class Codes: H04W 12/0431 Key distribution or pre-distribution; Key agreement
• CPC Class Codes: H04W 12/0433 Key management protocols
• CPC Class Codes: H04W 12/069 using certificates or pre-shared keys
• CPC Class Codes: H04W 74/00 Wireless channel access

Abstract

A method is presented for automatically providing a secure connection between a wireless network including a server and server software installed thereon and a device seeking access to the wireless network. In response to an initial request for access to the wireless network by the device, a software agent is installed on the device which gathers identification information from the device and prompts the user to provide authentication information which is transmitted to the server. If successfully verified, the server stores the identification and authentication information in an authorized access list, provides a unique encryption key to the requesting device and grants the authenticated user and identified device access to the wireless network. The method also includes procedures for when authentication fails and for granting subsequent access to an authenticated device and user.

Claims

1. In a wireless network comprising a server and server software including an intelligent software agent, a method of automatically providing a secure connection between the wireless network and a user-operated device seeking access to the wireless network, the method comprising:

in response to an initial request for access to the wireless network by the device—

(a) automatically installing the software agent on the device;

(b) executing the software agent on the device to gather information from the requesting device, including device information and user authentication information;

(c) transmitting the device identification and user authentication information to the server; and

(d) verifying the device identification and user authentication information;

wherein when successfully verified, storing the identification and authentication information on an authorized access list, providing a unique encryption key to the device for storage thereon and granting the requesting device access to the wireless network; and

when unsuccessfully verified, storing the identification and authentication information on an unauthorized access list and denying the device access to the wireless network.

2. The method of claim 1 further comprising, in response to a subsequent request for access to the wireless network by the device—

(a) receiving the unique key corresponding to the device;

(b) retrieving the identification and authentication information corresponding to the unique key;

(c) comparing the identification and authentication information with the authorized and unauthorized lists; and

(d) based on the comparison, one of granting and denying the device access to the wireless network.

3. The method of claim 1, wherein the step of denying access comprises generating a notification message that an unauthorized device has attempted to access the network.

4. The method of claim 1, wherein the step of granting access comprises providing access in accordance with existing network access rights of the user operating the device.

5. The method of claim 1, further comprising the step of collecting information relevant for billing the user for services accessed through the network.

6. The method of claim 1, further comprising the step of collecting information relevant for bandwidth allocation over the network.

7. The method of claim 1, further comprising the step of determining the geographical location of the device.

8. The method of claim 1, further comprising the step of automatically installing application software on the device.

9. The method of claim 1, wherein the encryption key is a certificate.

10. The method of claim 1, wherein the network comprises an isolated network segment and the initial connection between the device and the network is limited to the isolated network segment.

11. The method of claim 1, wherein the step of granting access further comprises conformity to a security policy with respect to access from multiple devices.

12. The method of claim 1, wherein the user is defined as a guest user and given a temporary encryption key with guest network access rights.