Back to results
US 8,429,404 B2Granted
Method and system for secure communications on a managed network
AssigneeIntel Corporation
InventorsBenjamin M. Greenstein, Jesse Walker
Life of this patent
Estimating the term…
Abstract
A system and method for discovery and/or authentication of clients to a network, particularly a managed network, substantially without requiring the client and/or access device to transmit an unencrypted address or identification.
Claims19
A method comprising:
- receiving at a client device an assigned client session key and a plurality of access device session keys from an authentication server, the plurality of access device session keys corresponding to a plurality of access devices;
- deriving, at said client device, a probe request key based on said assigned client session key and a common data element;
- broadcasting, by said client device, a probe request including said probe request key for discovering one or more access devices;
- receiving at said client device a probe receipt from an access device having said common data element, the probe receipt including an access device session key of said access device encrypted using said common data element;
- and
- validating said probe receipt based on said common data element and an access device session key of said plurality of access device session keys.
3 more elements
A method comprising:
- receiving at an access device a plurality of client session keys from an authentication server;
- deriving at said access device a plurality of probe request keys based on said plurality of client session keys and a common data element;
- receiving at said access device a probe request, which is broadcast by a client device to discover one or more access devices, the received probe request including a received probe request key;
- validating said received probe request based on matching said received probe request key to at least one of said plurality of derived probe request keys;
- and
- transmitting from said access device to said client device a probe receipt including an access device session key of said access device encrypted using said common data element.
3 more elements
A system comprising:
- at least one client device to receive from an authentication server an assigned client session key and a plurality of access device session keys corresponding to a plurality of access devices, to derive a probe request key based on said assigned client session key and a common data element, to broadcast a probe request including said probe request key for discovering one or more access devices, to receive a probe receipt from an access device having said common data element, the probe receipt including an access device session key of said access device encrypted using said common data element, and to validate said probe receipt based on said common data element and an access device session key of said plurality of access device session keys.
A system comprising:
- at least one access device to receive a plurality of client session keys from an authentication server, to derive a plurality of probe request keys based on said plurality of client session keys and a common data element, to receive a probe request, which is broadcast by a client device to discover one or more access devices, the received probe request including a received probe request key, to validate said received probe request based on matching said received probe request key to at least one of said plurality of derived probe request keys, and to transmit to said client device a probe receipt including an access device session key of said access device encrypted using said common data element.
Dependencies are inferred from the claim text.