Method and system for provisioning device specific WLAN credentials
AssigneeBlackBerry Limited
InventorsMichael Peter Montemurro, James Randolph Winter Lepp, Stephen McCann
Life of this patent
Estimating the term…
Abstract
A method at an electronic device, the method including initiating authentication with a network through a network element; providing a configuration request, the configuration request including an attribute set for the electronic device; and receiving a configuration response, the configuration response including a certificate or credential for future authentication with the network.
Claims13
A method at an electronic device, the method comprising:
- initiating authentication with a network through a network element;
- providing a Device Provisioning Protocol (DPP) request to a server of the network, the DPP request including an attribute set for the electronic device, wherein the attribute set contains a global Media Access Control (MAC) address of the electronic device or a hash of the global MAC address of the electronic device;
- receiving a DPP response from the server of the network, the DPP response including a certificate or credential for future authentication with the network, wherein the certificate or credential includes a hash of at least a portion of the attribute set;
- obtaining a new MAC address, wherein the obtaining comprises choosing a random MAC address;
- sending a request to find a connection point, the request comprising the new MAC address;
- receiving a response to the request;
- and
- providing the certificate or credential to the network for authentication;
- wherein the certificate or credential is used to map the new MAC address to the electronic device.
An electronic device comprising:
- a processor;
- and
- a communications subsystem,
- wherein the electronic device is configured to:
- initiate authentication with a network through a network element;
- provide a Device Provisioning Protocol (DPP) request to a server of the network, the DPP request including an attribute set for the electronic device, wherein the attribute set contains a global Media Access Control (MAC) address of the electronic device or a hash of the global MAC address of the electronic device;
- receive a DPP response from the server of the network, the DPP response including a certificate or credential for future authentication with the network, wherein the certificate or credential includes a hash of at least a portion of the attribute set;
- obtain a new MAC address, wherein the obtaining comprises choosing a random MAC address;
- send a request to find a connection point, the request comprising the new MAC address;
- receive a response to the request from the network;
- and
- provide the certificate or credential to the network for authentication;
- wherein the certificate or credential is used to map the new MAC address to the electronic device.
A non-transitory computer readable medium for storing instruction code, which, when executed by a processor of an electronic device cause the electronic device to:
- initiate authentication with a network through a network element;
- provide a Device Provisioning Protocol (DPP) request to a server of the network, the DPP request including an attribute set for the electronic device, wherein the attribute set contains a global Media Access Control (MAC) address of the electronic device or a hash of the global MAC address of the electronic device;
- receive a DPP response from the server of the network, the DPP response including a certificate or credential for future authentication with the network, wherein the certificate or credential includes a hash of at least a portion of the attribute set;
- obtain a new MAC address, wherein the obtaining comprises choosing a random MAC address;
- send a request to find a connection point, the request comprising the new MAC address;
- receive a response to the request from the network;
- and
- provide the certificate or credential to the network for authentication;
- wherein the certificate or credential is used to map the new MAC address to the electronic device.
Dependencies are inferred from the claim text.