Backscatter device certificate on-boarding for secure communication
AssigneeCisco Technology, Inc.
InventorsRobert E. Barton, Jerome Henry, Indermeet S. Gandhi
Life of this patent
Estimating the term…
Abstract
In Wi-Fi 8, backscatter devices (BKDs) may be viewed as part of the 802.11 wireless local area network (WLAN). BKDs in a WLAN have limited transmission interactions with a Wi-Fi access point (AP). Onboarding BKDs to the WLAN is described, which allows for the AP and BKD to participate as elements of the same local network, with security controls. The onboarding of the BKD to a WLAN may occur after discovery of the BKD at an AP and includes replacing an Initial Device Identifier (IDevID) on the BKD with a Local Device Identifier (LDevID) in order to provide for secure communications between the BKD and the WLAN.
Claims20
A method comprising:
- detecting a backscatter device (BKD) at an Access Point (AP);
- validating an identity of the BKD using an initial device identifier (IDevID) at the BKD;
- onboarding the BKD to a local network by:
- energizing the BKD to provide sufficient energy for a certificate enrollment process to be completed;
- replacing the IDevID with a different device identifier based on the certificate enrollment process;
- and
- upon receiving a success message from the BKD at the AP, entering a normal communication state with the BKD in the local network.
An access point (AP), comprising:
- a processor;
- and
- a memory comprising instructions which, when executed on the processor, performs an operation, the operation comprising:
- detecting a backscatter device (BKD);
- validating an identity of the BKD using an initial device identifier (IDevID) at the BKD;
- onboarding the BKD to a local network by:
- energizing the BKD to provide sufficient energy for a certificate enrollment process to be completed;
- replacing the IDevID with a different device identifier based on the certificate enrollment process;
- and
- upon receiving a success message from the BKD, entering a normal communication state with the BKD in the local network.
A non-transitory computer-readable storage medium having program instructions embodied therewith, the program instructions executable by a processor to perform an operation comprising:
- detecting a backscatter device (BKD) at an Access Point (AP);
- validating an identity of the BKD using an initial device identifier (IDevID) at the BKD;
- onboarding the BKD to a local network by:
- energizing the BKD to provide sufficient energy for a certificate enrollment process to be completed;
- replacing the IDevID with a different device identifier based on the certificate enrollment process;
- and
- upon receiving a success message from the BKD at the AP, entering a normal communication state with the BKD in the local network.
Dependencies are inferred from the claim text.