Secure initialization of communication with a network resource

• US 7,349,972 B2
• Filed: 02/01/2002
• Issued: 03/25/2008
• Est. Priority Date: 02/01/2002
• Status: Active Grant

• Current Assignee: Hewlett-Packard Development Company, L.P. (HP Inc.)
• Original Assignee: Hewlett-Packard Development Company, L.P. (HP Inc.)
• Inventors: Khieu, Andrew K., Lucas, Mark C., Robinson, Mike C.
• Primary Examiner(s): Wiley; David
• Assistant Examiner(s): BOUTAH, ALINA A
• Application Number:
  US10/061,619
• Publication Number:
  US 20030149778A1
• Time in Patent Office: 2,244 Days
• Field of Search: 709/225, 709/226, 709227-229, 709/230, 709/232, 709202-203, 709217-219, 709220-222, 358/1.1
• US Class Current: 709/229
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/062 for key distribution, e.g. centrally by trusted party cryptographic mechanisms or cryptographic arrangements for key distribution involving a central third party H04L9/0819
• CPC Class Codes: H04L 63/18 using different networks or channels, e.g. using out of band channels cryptographic mechanisms or cryptographic arrangements for key distribution involving distinctive intermediate devices or communication paths H04L9/0827; cryptographic mechanisms or cryptographic arrangements for authentication using a plurality of channels H04L9/3215
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227
• CPC Class Codes: H04L 67/14 Session management for real-time applications in data packet communications networks H04L65/1066
• CPC Class Codes: H04W 12/02 Protecting privacy or anonymity, e.g. protecting personally identifiable information [PII]
• CPC Class Codes: H04W 12/50 Secure pairing of devices
• CPC Class Codes: H04W 84/18 Self-organising networks, e.g. ad-hoc networks or sensor networks

Abstract

A method for initialization of secure communication between a network resource and a client via a network. The method includes receiving an access at the network resource from a management application of a client. In response to the access, configuration parameters are generated for initializing secure communication with the client via the network. Security configuration information is printed showing the configuration parameters. The security configuration information is for enabling manual input of the configuration parameters into the management application. Secure communication is implemented with the management application in accordance with the configuration parameters.

Claims

1. A method for initialization of secure communication between a network resource and a client via a network, comprising:

receiving access in an unsecured mode to the network resource from a management application of the client via the network;

in the unsecured mode, generating configuration parameters for initializing secure communication between the network resource and the client via the network;

printing a security configuration page showing the configuration parameters for initializing secure communication between the network resource and the client;

receiving manual input of the configuration parameters into the management application of the client; and

after receiving manual input of the configuration parameters, implementing secure communication between the network resource and the management application of the client in accordance with the configuration parameters.

2. The method of claim 1 wherein the network resource is a print server and the security configuration page is printed using a printer coupled to the print server.

3. The method of claim 1 wherein the secure communication is in accordance with a version of SNMPv3 standards.

4. The method of claim 1 further comprising:

generating random security parameters to generate the configuration parameters for initializing the secure comnmunication.

5. The method of claim 1 further comprising:

setting a security configuration print page object in response to contact from the management application.

6. The method of claim 5 wherein the security configuration print page object is in accordance with a version of SNMPv3 standards.

7. A system for initialization of secure communication between a network resource and a client via a network, comprising:

means for receiving access in an unsecured mode to the network resource from a management application of the client via the network;

means for generating configuration parameters for initializing secure communication between the network resource and the client via the network, while in the unsecured mode;

means for printing a security configuration page showing the configuration parameters for initializing secure communication between the network resource and the client;

means for receiving manual input of the configuration parameters into the management application of the client; and

means for implementing secure communication between the network resource and the management application of the client in accordance with the configuration parameters after receiving manual input of the configuration parameters.

8. The system of claim 7 wherein the network resource is a print server and the security configuration page is printed using a printer coupled to the print server.

9. The system of claim 7 wherein the means for implementing secure communication are in accordance with a version of SNMPv3 standards.

10. The system of claim 7 further comprising:

means for generating random security parameters to generate the configuration parameters for initializing the secure communication.

11. The system of claim 7 further comprising:

means for setting a security configuration print page object in response to contact from the management application.

12. The system of claim 7 wherein the means for setting a security configuration print page object are in accordance with a version of SNMPv3 standards.

13. A network resource system for initializing secure communication with a client via a network, comprising:

a network interface configured to receive access in an unsecured mode via the network from a management application of the client; and

an SNMP daemon configured to generate configuration parameters for initializing secure communication with the client via the network, while in the unsecured mode;

wherein the SNMP daemon is configured to generate a configuration page event causing a printer coupled to the network resource to print a security configuration page showing the configuration parameters, and

wherein upon manual input of the configuration parameters from the security configuration page into the management application of the client, secure communication with the client is implemented.

14. The system of claim 13 further comprising:

an SNMP user table within a data structure of the network resource, the SNMP user table for access by the SNMP daemon and configured to store a user account created in accordance with the configuration parameters.

15. The system of claim 13 wherein the network resource is a print server.

16. The system of claim 13 wherein the SNMP daemon is configured to implement secure communication in accordance with a version of SNMPv3 standards.

17. The system of claim 13 wherein the SNMP daemon is configured to generate random security parameters in order to generate the configuration parameters for initializing the secure communication.

18. The system of claim 13 wherein the network interface includes a plurality of interface components for interfacing with a corresponding plurality of network communication protocols.

19. The system of claim 18 wherein the network communication protocols include TCP/IP, IPX, and Apple Talk.

20. A method for initialization of secure communication between a network resource and a client via a network wireless access point, comprising:

receiving ad hoc access in an unsecured mode to the network resource from a management application of the client;

in the unsecured mode, generating a security key for initializing secure communication between the network resource and the client via a wireless access point;

printing a security configuration page showing the security key;

receiving manual input of the security key into the management application of the client;

receiving encrypted ad hoc access to the network resource from the management application in accordance with the security key for configuration of infrastructure mode parameters for the wireless access point; and

upon manual input of the security key from the security configuration page, implementing secure communication between the network resource and the management application of the client in accordance with the security key via the wireless access point in an infrastructure mode.

21. The method of claim 20 wherein the network resource is a print server and the security configuration page is printed using a printer coupled to the print server.

22. The meted of claim 20 wherein the secure communication is in accordance with a version of 802.11 standards.

23. The method of claim 20 wherein the security key is a randomly generated 802.11 Wired Equivalent Privacy key for initializing the secure communication.

24. The method of claim 20 further comprising:

setting a 802.11 security configuration print page object in response to contact from the management application.

25. A system for initialization of secure communication between a network resource and a client via a network wireless access point, comprising:

means for receiving ad hoc access in an unsecured mode to the network resource from a management application of the client;

means for generating a security key for initializing secure communication between the network resource and the client via a wireless access point while in the unsecured mode;

means for printing a security configuration page showing the security key;

means for receiving manual input of the security key into the management application of the client;

means for receiving an encrypted ad hoc access to the network resource from the management application in accordance with the security key for configuration of infrastructure mode parameters for the wireless access point; and

means for implementing secure communication between the network resource and the management application of the client in accordance with the security key via the wireless access point in an infrastructure mode after receiving manual input of the security key.

26. The system of claim 25 wherein the network resource is a print server and the means for printing a security configuration page comprises a printer coupled to the print server.

27. The system of claim 25 wherein the means for implementing secure communication is in accordance with a version of 802.11 standards.

28. The system of claim 25 wherein the security key is a randomly generated 802.11 Wired Equivalent Privacy key for initializing the secure communication.

29. The system of claim 25 further comprising:

setting a 802.11 security configuration print page object in response to contact from the management application.

30. The computer readable storage media having computer readable code which when executed by a computer system of a network resource causes the network resource to implement a method for initialization of secure communication between the network resource and a client via a network, comprising:

receiving access in an unsecured mode to the network resource from a management application of the client via the network;

in the unsecured mode, generating configuration parameters for initializing secure communication between the network resource and the client via the network;

printing a security configuration page showing the configuration parameters for initializing secure communication between the network resource and the client;

receiving manual input of the configuration parameters into the management application of the client; and

after receiving manual input of the configuration parameters, implementing secure communication between the network resource and the management application of the client in accordance with the configuration parameters.

31. The computer readable media of claim 30 wherein the network resource is a print server and the security configuration page is printed using a printer coupled to the print server.

32. The computer readable media of claim 30 wherein the secure communication is in accordance with a version of SNMPv3 standards.

33. The computer readable media of claim 30 further comprising:

generating random security parameters to generate the configuration parameters for initializing the secure communication.

34. The computer readable media of claim 30 further comprising:

setting a security configuration print page object in response to contact from the management application.

35. The computer readable media of claim 34 wherein the security configuration print page object is in accordance with a version of SNMPv3 standards.

36. The computer readable storage media having computer readable code which when executed by a computer system of a network resource causes the network resource to implement a method for initialization of secure communication between the network resource and a client via a network wireless access point, comprising:

receiving ad hoc access in an unsecured mode to the network resource from a management application of the client;

in the unsecured mode, generating a security key for initializing secure communication between the network resource and the client via a wireless access point;

printing a security configuration page showing the security key;

receiving manual input of the security key into the management application of the client;

receiving encrypted ad hoc access to the network resource from the management application in accordance with the security key for configuration of infrastructure mode parameters for the wireless access point; and

upon manual input of the security key from the security configuration page, implementing secure communication between the network resource and the management application of the client in accordance with the security key via the wireless access point in an infrastructure mode.

37. The computer readable storage media of claim 36 wherein the network resource is a print server and the security configuration page is printed using a printer coupled to the print server.

38. The computer readable storage media of claim 36 wherein the secure communication is in accordance with a version of 802.11 standards.

39. The computer readable storage media of claim 36 wherein the security key is a randomly generated 802.11 Wired Equivalent Privacy key for initializing the secure communication.

40. The computer readable storage media of claim 36 further comprising:

setting a 802.11 security configuration print page object in response to contact from the management application.