Protected mutual authentication over an unsecured wireless communication channel

A computer readable medium having stored therein computer readable codes adapted for causing a computer system to perform a process for authenticating a network user over an unsecured wireless communication channel, said process comprising steps of:

• a) transmitting over said unsecured wireless communication channel a user identifier to said network that is operable to look up a first secret access code associated with said user identifier and operable to generate a first hashed representation of said first secret access code;
• b) receiving over said unsecured wireless communication channel said first hashed representation from said network;
• c) receiving a second secret access code from said network user and generating a second hashed representation thereof;
• d) verifying said first hashed representation against said second hashed representation;
• e) provided that said first hashed representation and said second hashed representation match, generating a third hashed representation of said second secret access code;
• and
• f) transmitting said third hashed representation to said network for verifying against a fourth hashed representation of said first secret access code.

In a wireless computer network access point for coupling to a wireless client computer system, a process for authenticating a network user over an unsecured wireless communication channel, said process comprising steps of:

• a) receiving over said unsecured wireless communication channel a user identifier from said wireless client computer system;
• b) looking up a first secret access code associated with said user identifier;
• c) generating a first hashed representation of said first secret access code;
• d) sending over said unsecured wireless communication channel said first hashed representation to said wireless client computer system, wherein said wireless client computer system is operable to verify said first hashed representation against a second hashed representation of a second secret access code provided by said network user;
• e) receiving over said unsecured wireless communication channel a third hashed representation of said second secret access code from said wireless client computer system;
• f) generating a fourth hashed representation of said first secret access code;
• and
• g) provided that said third hashed representation and said fourth hashed representation match, authenticating said network user.

A wireless network access point comprising:

• a) logic for receiving over an unsecured wireless communication channel a user identifier from a wireless client computer system;
• b) logic for looking up a first secret access code associated with said user identifier;
• c) logic for generating a first hashed representation of said first secret access code;
• d) logic for sending over said unsecured wireless communication channel said first hashed representation to said wireless client computer system, wherein said wireless client computer system is operable to verify said first hashed representation against a second hashed representation of a second secret access code provided by said network user;
• e) logic for receiving over said unsecured wireless communication channel a third hashed representation of said second secret access code from said wireless client computer system;
• f) logic for generating a fourth hashed representation of said first secret access code;
• and
• g) logic for authenticating said network user provided that said third hashed representation matches said fourth hashed representation.

A wireless network comprising:

• a wireless client computer system;
• a wireless network access point coupled to said wireless client computer system via a wireless connection, wherein said network access point is operable to receive a user identifier from said wireless client computer system, and operable to look up a first secret access code corresponding to said user identifier, and operable to generate a first hashed representation of said first secret access code,
• wherein said wireless client computer system is operable to verify said first hashed representation of said first secret access code against a second hashed representation of a second secret access code provided by a network user, and operable to generate a third hashed representation of said second secret access code provided said first hashed representation is identical to said second hashed representation, and
• wherein said network access point is operable to generate a fourth hashed representation of said first secret access code for verifying against said third hashed representation.