# US 8,542,662 B2 · Method and apparatus for securing devices in a network

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 8,542,662 B2
- Document ID: US8542662B2
- Status: Granted
- Kind: B2
- Application number: 13/455,000
- Filed: 2012-04-24
- Published: 2012-08-16
- Granted: 2013-09-24
- Earliest claimed: 2004-09-29
- Assignees: Intel Corporation
- Applicants: Francis M. Tharappel; Ajay Garg; Nandakishore R. Kushalnagar
- Inventors: Francis M. Tharappel; Ajay Garg; Nandakishore R. Kushalnagar
- Web page: https://patentgrep.com/patent/US8542662B2

## CPC

- H04L 63/0428: {wherein the data content is protected, e.g. by encrypting or encapsulating the payload}
- H04L 63/08: {for authentication of entities (cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32)}
- H04W 12/03: Protecting confidentiality, e.g. by encryption
- H04W 12/069: using certificates or pre-shared keys
- H04W 4/00: Services specially adapted for wireless communication networks; Facilities therefor
- H04W 68/00: User notification, e.g. alerting and paging, for incoming communication, change of service or the like
- H04W 88/08: Access point devices
- H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M)
- H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72)

## Abstract

An access point receives a notification (or advertisement) from a device, which lacks a service. The access point adds the service to the notification, and forwards the notification to other devices on the network. Upon receiving from a control point a request to use the added service, the access point provides the service on behalf of the device.

## Claims

### Claim 1

An access point, comprising:
at least one network connection point;
control logic to provide a first service;
a connector to establish a secure connection with a control point using said first service;
a receiver to receive a notification from a device via the network connection point, the notification including a second service, wherein the receiver is operative to receive a request to utilize said second service from said control point using the secure connection;
an adder to add said first service to said notification;
a decrypter to decrypt said request to utilize said second service; and
a transmitter to transmit said notification including said first service via the network connection point, wherein the transmitter is operative to forward said decrypted request to said device.

### Claim 2 (depends on 1)

An access point according to claim 1, wherein the at least one network connection point includes a wireless network connection point.

### Claim 3 (depends on 1)

An access point according to claim 1, wherein said first service includes a security service.

### Claim 4 (depends on 1)

An access point according to claim 1, wherein:
the receiver is operative to receive a reply from said device;
the access point further comprises an encrypter to encrypt said reply; and
the transmitter is operative to forward said encrypted reply to said control point.

### Claim 5 (depends on 1)

An access point according to claim 1, further comprising an authenticator to authenticate said control point.

### Claim 6 (depends on 1)

An access point according to claim 1, wherein:
the access point further comprises a second network connection point; and
the transmitter is operative to transmit said notification including said first service via the second network connection point.

### Claim 7

A system, comprising:
a device, including:
at least a first network connection point;
control logic to provide a first service; and
a first transmitter to transmit a notification including said first service via the at least first network connection point;
an access point, including:
at least a second network connection point;
a second service;
a receiver to receive said notification from the device via the at least second network connection point;
an adder to add the second service to said notification; and
a second transmitter to transmit said notification including the second service via the at least second network connection point;
a control point, including:
at least a third network connection point; and
a second receiver to receive said notification from the access point via the at least third network connection point;
a communications medium connecting the at least first network connection point, the at least second network connection point, and the at least third network connection point; and
a connector to establish a secure connection with the control point using the first service across the communications medium, wherein the first receiver is operative to receive a request to utilize said second service from said control point using the secure connection.

### Claim 8 (depends on 7)

A system according to claim 7, wherein:
the access point further comprises a decrypter to decrypt said request to utilize said second service, and
the second transmitter is operative to forward said decrypted request to said device.

### Claim 9 (depends on 7)

A system according to claim 7, wherein:
the at least first network connection point includes a first wireless network connection point;
the at least second network connection point includes a second wireless network connection point; and
the communications medium supports wireless communication between the first wireless network connection point and the second wireless network connection point.

### Claim 10 (depends on 7)

A system according to claim 7, wherein:
the first receiver is operative to receive a reply from said device;
the access point further comprises an encrypter to encrypt said reply; and
the second transmitter is operative to forward said encrypted reply to said control point.

### Claim 11 (depends on 7)

A system according to claim 7, further comprising an authenticator to authenticate said control point.

### Claim 12 (depends on 7)

A system according to claim 7, wherein:
the access point further comprises a third network connection point; and
the transmitter is operative to transmit said notification including said first service via the third network connection point.

### Claim 13 (depends on 7)

A system according to claim 7, wherein said second service includes a security service.

### Claim 14

A method for using a device via an access point, comprising:
receiving a notification from a device, the notification including a first service;
adding a second service to the notification;
broadcasting the notification including the second service to at least a control point;
establishing a secure session with the control point;
receiving a request to utilize the first service and the second service from the control point;
receiving the request for the first service from the control point using the secure session, wherein receiving the request for the first service from the control point using the secure session includes decrypting the request for the first service using the second service;
providing the second service on behalf of the device;
forwarding the request for the first service to the device as if the secure session had not been established.

### Claim 15 (depends on 14)

A method according to claim 14, wherein:
adding a second service includes adding a security service to the notification.

### Claim 16 (depends on 15)

A method according to claim 15, wherein:
broadcasting the notification includes broadcasting the notification including the security service to at least the control point;
receiving a request includes receiving the request to utilize the first service and the security service from the control point; and
providing the second service includes providing the security service on behalf of the device.

### Claim 17 (depends on 16)

A method according to claim 16, wherein providing the security service includes authenticating the control point.

### Claim 18 (depends on 15)

A method according to claim 15, further comprising:
receiving a reply from the device;
encrypting the reply using the security service; and
forwarding the reply to the control point via the secure session.

### Claim 19 (depends on 14)

A method according to claim 14, further comprising broadcasting a request for the notification from the device.

### Claim 20 (depends on 14)

A method according to claim 14, wherein:
receiving a notification includes receiving a wireless notification from the device, the wireless notification including the first service;
broadcasting the notification includes broadcasting the wireless notification including the second service to at least the control point;
receiving a request includes receiving a wireless request to utilize the first service and the second service from the control point; and
forwarding the request includes wirelessly forwarding the wireless request for the first service to the device.