Remotely configurable bridge system and method for use in secure wireless networks

• US 20060224885A1
• Filed: 02/21/2006
• Published: 10/05/2006
• Est. Priority Date: 04/05/2005
• Status: Active Grant

• Current Assignee: McAfee, LLC
• Original Assignee: McAfee, Inc. (McAfee, LLC)
• Inventors: Wiedmann, Christian, Lillie, Terrance L., Sneiderman, Richard P., Zeljko, Robert, Wiedmann, Ulrich, Lynch, Sean R., Chu, Gigi C.
• Granted Patent: US 7,822,972 B2
• Time in Patent Office: Days
• US Class Current: 713/153
• CPC Class Codes: H04L 2209/80 Wireless network architectures or network communication protocols for wireless network security H04W12/00
• CPC Class Codes: H04L 63/061 for key exchange, e.g. in peer-to-peer networks cryptographic mechanisms or cryptographic arrangements for key agreement H04L9/0838
• CPC Class Codes: H04L 63/068 using time-dependent keys, e.g. periodically changing keys cryptographic mechanisms or cryptographic arrangements for controlling usage of secret information H04L9/088
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/166 at the transport layer
• CPC Class Codes: H04L 63/18 using different networks or channels, e.g. using out of band channels cryptographic mechanisms or cryptographic arrangements for key distribution involving distinctive intermediate devices or communication paths H04L9/0827; cryptographic mechanisms or cryptographic arrangements for authentication using a plurality of channels H04L9/3215
• CPC Class Codes: H04L 9/0841 involving Diffie-Hellman or related key agreement protocols
• CPC Class Codes: H04L 9/0891 Revocation or update of secret information, e.g. encryption key update or rekeying
• CPC Class Codes: H04W 12/04 Key management, e.g. using generic bootstrapping architecture [GBA]
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/43 using shared identity modules, e.g. SIM sharing
• CPC Class Codes: H04W 84/18 Self-organising networks, e.g. ad-hoc networks or sensor networks
• CPC Class Codes: H04W 88/02 Terminal devices
• CPC Class Codes: H04W 88/08 Access point devices
• CPC Class Codes: H04W 92/02 Inter-networking arrangements

Abstract

A system, method and computer program product are provided. Included is a bridge capable of communication with a non-wireless capable device and a wireless network. In use, such bridge incorporates security functionality for remotely and automatically securing the non-wireless capable device during use of the wireless network.

Claims

1. A system, comprising:

a bridge capable of communication with a non-wireless capable device and a wireless network;

wherein the bridge incorporates security functionality for remotely and automatically securing the non-wireless capable device during use of the wireless network.

2. The system as recited in claim 1, wherein the non-wireless capable device is selected from the group consisting of a scanner, a camera, and a printer.

3. The system as recited in claim 1, wherein the wireless network includes a peer-to-peer network.

4. The system as recited in claim 1, wherein the wireless network includes a centrally-based network.

5. The system as recited in claim 1, wherein the security function includes exchanging a first key between a granting node and a requesting node via a peer-to-peer wireless network.

6. The system as recited in claim 5, wherein the security function includes generating a human-perceptible hash at the granting node and the requesting node, utilizing the first key.

7. The system as recited in claim 6, wherein the security function includes comparing the human-perceptible hashes via an out-of-band communication channel.

8. The system as recited in claim 7, wherein the security function includes transmitting a second key to the requesting node for providing access to a centrally-based wireless network based on the comparison.

9. The system as recited in claim 1, wherein the security function includes advertising a peer-to-peer wireless network utilizing a granting node.

10. The system as recited in claim 9, wherein the security function includes connecting to the peer-to-peer wireless network utilizing a requesting node.

11. The system as recited in claim 10, wherein the security function includes redirecting the requesting node to a portal.

12. The system as recited in claim 11, wherein the security function includes downloading a software application to the requesting node via the peer-to-peer utilizing the portal.

13. The system as recited in claim 1, wherein the security function includes distributing a key to a plurality of nodes a wireless network for use in securing the nodes during use of the wireless network.

14. The system as recited in claim 13, wherein the security function includes automatically updating the key at the nodes in the wireless network based on predetermined criteria.

15. The system as recited in claim 14, wherein the predetermined criteria requires that the key be automatically updated with a new key.

16. The system as recited in claim 14, wherein the predetermined criteria requires that the key be automatically updated based on rotation of a plurality of predetermined keys.

17. The system as recited in claim 14, wherein the predetermined criteria requires that the key be automatically updated based on a predetermined schedule.

18. The system as recited in claim 14, wherein the predetermined criteria requires that the key be automatically updated periodically.

19. A method, comprising:

establishing communication between a bridge, and a non-wireless capable device and a wireless network; and

utilizing the bridge to incorporate security functionality for remotely and automatically securing the non-wireless capable device during use of the wireless network.

20. A computer program product embodied on a compute readable medium, comprising:

computer code for establishing communication between a bridge, and a legacy device and a wireless network; and

computer code for utilizing the bridge to incorporate security functionality for remotely and automatically securing the legacy device during use of the wireless network.