# US 10,873,857 B2 · Dynamic wireless link security > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 10,873,857 B2 - Document ID: US10873857B2 - Status: Granted - Kind: B2 - Application number: 15/994,484 - Filed: 2018-05-31 - Published: 2019-12-05 - Granted: 2020-12-22 - Earliest claimed: 2018-05-31 - Assignees: AT&T Intellectual Property I, L.P. - Applicants: AT&T Intellectual Property I, L.P. - Inventors: Sheldon Meredith; William Cottrill; Brandon Hilliard - Web page: https://patentgrep.com/patent/US10873857B2 ## CPC - H04W 12/08: Access security - H04L 63/0428: {wherein the data content is protected, e.g. by encrypting or encapsulating the payload} - H04L 63/105: {Multiple levels of security} - H04W 12/03: Protecting confidentiality, e.g. by encryption - H04L 2101/622: Layer-2 addresses, e.g. medium access control [MAC] addresses - H04L 2209/80: Wireless - H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72) - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) ## Abstract Dynamic wireless link security can be used to connect a wireless computing device to a wireless network. A determination is made as to the minimum level of security required and a wireless communication channel corresponding to that level of security is selected from among multiple, available wireless communication channels with varying levels of security. At least one of the wireless communication channels is an unencrypted channel with access control, which can be used when information is already encrypted or when encryption is not needed due to low sensitivity of the information. The determination can be made with user input or by inspecting metadata in content to be sent over the wireless link. ## Claims ### Claim 1 A system comprising: a wireless local area network interface; a processor communicatively coupled to the wireless local area network interface, wherein the processor is configured to perform operations comprising: connecting to a wireless computing device using an encrypted channel from among a plurality of simultaneous wireless communication channels with varying levels of security; determining a level of security required for a data communication link between the wireless local area network interface and the wireless computing device; selecting a wireless communication channel corresponding to the level of security required from among the plurality of simultaneous wireless communication channels with varying levels of security, wherein the plurality of simultaneous wireless communication channels comprises an unencrypted channel with access control along with the encrypted channel; providing a seed media access control (MAC) address to the wireless computing device over the encrypted channel; providing a polynomial to the wireless computing device over the encrypted channel, the polynomial configured to enable rolling the seed MAC address to a current MAC address from a series of MAC addresses over time; and establishing the data communication link over the wireless communication channel using the current MAC address and the wireless local area network interface. ### Claim 2 (depends on 1) The system of claim 1 wherein the level of security is determined by receiving an identification of the level of security from the wireless computing device. ### Claim 3 (depends on 1) The system of claim 1 wherein the operations further comprise directing the wireless computing device to the wireless communication channel using the encrypted channel. ### Claim 4 (depends on 1) The system of claim 1 wherein the access control comprises an encrypted internet protocol header based at least in part on the series of MAC addresses over time. ### Claim 5 A method comprising: connecting to a wireless local area network access point using an encrypted channel from among a plurality of simultaneous wireless communication channels with varying levels of security; determining a level of security required for a data communication link to the wireless local area network access point; selecting a wireless communication channel corresponding to the level of security required from among the plurality of simultaneous wireless communication channels with varying levels of security, wherein at least one of the plurality of simultaneous wireless communication channels is an unencrypted channel with access control; receiving a seed media access control (MAC) address over the encrypted channel; receiving a polynomial over the encrypted channel, the polynomial configured to enable rolling the seed MAC address to a current MAC address from a series of MAC addresses over time; and establishing the data communication link over the wireless communication channel using the current MAC address. ### Claim 6 (depends on 5) The method of claim 5 wherein the level of security is determined by receiving user input selecting the level of security. ### Claim 7 (depends on 5) The method of claim 5 wherein the level of security is determined at least in part by scanning metadata of content to be sent over the wireless communication channel. ### Claim 8 (depends on 5) The method of claim 5 further comprising receiving an identification of the wireless communication channel over the encrypted channel. ### Claim 9 (depends on 5) The method of claim 5 wherein the access control comprises an encrypted internet protocol (IP) header based at least in part on the series of MAC addresses over time. ### Claim 10 A non-transitory computer-readable medium that includes instructions that are executable by a computing device for causing the computing device to perform operations for accessing a wireless network, the operations comprising: connecting to a wireless local area network access point using an encrypted channel from among a plurality of simultaneous wireless communication channels with varying levels of security; determining a level of security required for a data communication link to the wireless local area network access point; selecting a wireless communication channel corresponding to the level of security required from among the plurality of simultaneous wireless communication channels with varying levels of security, wherein at least one of the plurality of simultaneous wireless communication channels is an unencrypted channel with access control; receiving a seed media access control (MAC) address over the encrypted channel; receiving a polynomial over the encrypted channel, the polynomial configured to enable rolling the seed MAC address to a current MAC address from a series of MAC addresses over time; and establishing the data communication link over the wireless communication channel using the current MAC address. ### Claim 11 (depends on 10) The non-transitory computer-readable medium of claim 10 wherein the level of security is determined by receiving user input selecting the level of security. ### Claim 12 (depends on 10) The non-transitory computer-readable medium of claim 10 wherein the level of security is determined at least in part by scanning metadata of content to be sent over the wireless communication channel. ### Claim 13 (depends on 10) The non-transitory computer-readable medium of claim 10 wherein the instructions further comprise receiving an identification of the wireless communication channel over the encrypted channel. ### Claim 14 (depends on 10) The non-transitory computer-readable medium of claim 10 wherein the access control comprises an encrypted internet protocol (IP) header based at least in part on the series of MAC addresses over time.