Device-Specific Authorization at Distributed Locations
AssigneeWayport, Inc.
InventorsJames D. Keeler, John R. Melendez
Life of this patent
Estimating the term…
Abstract
A method includes receiving, at a client device, an authentication seed from a first network. The method also includes receiving a shared secret. The method further includes, in response to receiving the authentication seed, determining a network address of the client device. The method further includes computing a result of a one-way hash function of a combination of the network address, the authentication seed, and the shared secret. The method further includes transmitting the network address and the result of the one-way hash function to a server that provides access control of a second network coupled to the first network. The method further includes receiving permission from the server to access the second network.
Claims18
A method comprising:
- receiving, at a client device, an authentication seed from a first network;
- in response to receiving the authentication seed, determining a network address of the client device;
- receiving a shared secret;
- computing a result of a one-way hash function of a combination of the network address, the authentication seed, and the shared secret;
- transmitting the network address and the result of the one-way hash function to a server that provides access control of a second network coupled to the first network, wherein the first network is different from the second network;
- and
- receiving permission from the server to access the second network.
A method comprising:
- receiving, at a server, a network address of a client device coupled to a first network;
- receiving a first result of a one-way hash function of a combination of the network address, an authentication seed, and a first shared secret received from the client device;
- receiving a geographic location of the client device;
- computing a second result of the one-way hash function of a combination of the network address, the authentication seed, and a second shared secret;
- and
- in response to a determination that the first result matches the second result and a determination that the client device is authorized to access a second network coupled to the first network based on the geographic location, enabling the client device to access the second network, wherein the second network is different from the first network.
The method of claim 9, wherein the client device is authorized to access the second network from a first location and is not authorized to access the second network from a second location.
A device comprising:
- a processor;
- and
- a memory coupled to the processor, wherein the memory includes processor-executable instructions that, when executed by the processor, cause the processor to:
- in response to receiving an authentication seed from a first network, determine a network address of a client device;
- compute a result of a one-way hash function of a combination of the network address, the authentication seed, and a received shared secret;
- generate data to be transmitted to a server that provides access control of a second network coupled to the first network, wherein the data includes the network address and the result of the one-way hash function, and wherein the first network is different from the second network;
- and
- in response to receiving permission from the server, access the second network.
Dependencies are inferred from the claim text.