Methods and systems of wireless sensor authentication
AssigneeNile Global, Inc.
InventorsGopal Raman, Suresh Katukam, Promode Nedungadi, Sathish Damodaran, Tjandra Trisno, Avinash Kumar, Steve Alexander
Life of this patent
Estimating the term…
Abstract
Embodiments of a device and method are disclosed. In an embodiment, a method of communications involves from a wireless sensor deployed at a customer site, connecting to a wireless access point (AP) deployed at the customer site and based on a private key stored in the wireless sensor, performing mutual authentication between the wireless sensor and an authentication server connected to the wireless AP.
Claims17
A method of communications, the method comprising:
- from a wireless sensor deployed at a customer site, connecting to a wireless access point (AP) deployed at the customer site;
- and
- based on a client signature that is generated using a private key stored in a Trusted Platform Module (TPM) of the wireless sensor, performing mutual authentication between the wireless sensor and an authentication server connected to the wireless AP, wherein based on the client signature that is generated using the private key stored in the TPM of the wireless sensor, performing the mutual authentication between the wireless sensor and the authentication server connected to the wireless AP comprises exchanging a server message, a server certificate, a server signature, a client message, a client certificate, and the client signature between the wireless sensor and the authentication server using a Transport Layer Security (TLS) protocol where a TLS client is the wireless sensor.
A wireless sensor deployed at a customer site, the wireless sensor comprising:
- a wireless transceiver configured to connect to a wireless access point (AP) deployed at the customer site;
- and
- a controller comprising a Trusted Platform Module (TPM) configured to store a private key and configured to, based on a client signature that is generated using the private key stored in the TPM, perform mutual authentication with an authentication server connected to the wireless AP by exchanging a server message, a server certificate, a server signature, a client message, a client certificate, and the client signature between the wireless sensor and the authentication server using a Transport Layer Security (TLS) protocol where a TLS client is the wireless sensor,
- wherein the wireless transceiver and the controller are implemented using at least one processor.
A method of communications, the method comprising:
- from a wireless sensor deployed at a customer site, connecting to a wireless access point (AP) deployed at the customer site;
- based on a client signature that is generated using a private key stored in a Trusted Platform Module (TPM) of the wireless sensor, performing mutual authentication between the wireless sensor and an authentication server connected to the wireless AP, wherein based on the client signature that is generated using the private key stored in the TPM of the wireless sensor, performing the mutual authentication between the wireless sensor and the authentication server connected to the wireless AP comprises exchanging a server message, a server certificate, a server signature, a client message, a client certificate, and the client signature between the wireless sensor and the authentication server using a Transport Layer Security (TLS) protocol where a TLS client is the wireless sensor;
- deriving a Pairwise Transient Key (PTK) for communications between the wireless sensor and the wireless AP in response to a Pre-Master Key (PMK) generated as a result of the mutual authentication;
- and
- at the wireless sensor deployed at the customer site, conducting wireless communications with the wireless AP using the PTK.
Dependencies are inferred from the claim text.