US6856800B1
Expired / Lapsed
US
⏱️ 0.0 years remaining
Fast authentication and access control system for mobile networking
Assignee: AT&T Inc
•
Filing: 2002-05-14
•
Granted: 2005-02-15
•
Expires: 2022-05-14
Abstract
Abstract A fast authentication and access control method of authenticating a network access device to a communications network having an access point communicating with a remote authentication (home AAA) server for the network access device. The method includes the step of receiving an access request having an authentication credential from the network access device at the access point. The authentication credential includes a security certificate having a public key for the network access device and an expiration time. The security certificate is signed with a private key for the remote authentication server. The access point locally validates the authentication credential by accessing the public key of the remote authentication server from a local database, and checking the signature and expiration time of the security certificate. If the authentication credential is validated at the access point, the access point grants the network access device conditional access to the network by sending an access granted message to the network access device. The access granted message includes a session key encrypted with a public key for the network access device. The session key is stored in a database associated with the access point. The access point contacts the remote authentication server to check a revocation status of the security certificate for the network access device. If the access point receives a message from the remote authentication server that the authentication credential for the network access device has been revoked, it suspends network access for the network access device.
Inventors
- 👤 Paul Shala Henry
- 👤 Zhimei Jiang
- 👤 Hui Luo
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-10-29 23:20
CPC Classifications
H; H04; H04L; H04L63/00; H04L63/08; H04L63/0823; H04L9/00; H04L9/32; H04L9/3263; H04L9/3268; H04W; H04W12/00; H04W12/06; H04W12/068; H04W12/069; H04W12/08; H04W12/082; H04W36/00; H04W36/0005; H04W36/0011; H04W36/0033; H04W36/0038; H04L63/04; H04L63/0428; H04L63/0442; H04L63/06; H04L63/062; H04L63/10; H04L63/108
Claims Analysis
Total Claims: 13
Claim 1
Independent Claim
136 words
An access point having a network interface for communicating with a remote authentication server on a communications network and a network interface for communicating with a network access device, the access point comprising: a processor and a memory medium containing machine readable program instructions which, when executed by the processor, enable the access point to: validate an authentication credential contained in an access request received from the network access device; if the authentication credential is validated, grant the network access device conditional access to the network; contact the remote authentication server to verify a status of the authentication credential for the network access device; and suspend network access for the network access device in response to a message received from the remote authentication server that the authentication credential for the network access device has been revoked.
Claim 2
Dependent Claim
136 words
An access point having a network interface for communicating with a remote authentication server on a communications network and a network interface for communicating with a network access device, the access point comprising: a processor and a memory medium containing machine readable program instructions which, when executed by the processor, enable the access point to: validate an authentication credential contained in an access request received from the network access device; if the authentication credential is validated, grant the network access device conditional access to the network; contact the remote authentication server to verify a status of the authentication credential for the network access device; and suspend network access for the network access device in response to a message received from the remote authentication server that the authentication credential for the network access device has been revoked.
Claim 3
Dependent Claim
21 words
The access point recited in claim 1 , wherein the authentication credential for the network access device includes a security certificate.
Claim 4
Dependent Claim
40 words
The access point recited in claim 2 , wherein the security certificate includes a public key for the network access device and an expiration time, and the security certificate is signed with a private key for the remote authentication server.
Claim 5
Dependent Claim
42 words
The access point recited in claim 3 , wherein the access point locally validates the network access device by: accessing a public key of the remote authentication server from a database, and checking the signature and expiration time of the security certificate.
Claim 6
Dependent Claim
58 words
The access point recited in claim 4 , wherein the access point grants conditional access to the network access device by encrypting a session key with a public key for the network access device, and sending an access granted message to the network access device with the encrypted session key; and storing the session key in a database.
Claim 7
Dependent Claim
34 words
The access point recited in claim 4 , wherein the access point sends a request to the remote authentication server to check the revocation status of the security certificate for the network access device.
Claim 8
Dependent Claim
25 words
The access point recited in claim 4 , wherein the access point suspends network access for the network access device by destroying the session key.
Claim 9
Dependent Claim
230 words
An access point having a network interface for communicating with a remote authentication server on a communications network and a network interface for communicating with a network access device, the access point comprising: a processor and a memory medium containing machine readable program instructions which, when executed by the processor, enable the access point to: validate an authentication credential received from the network access device, the authentication credential comprising a security certificate including a public key for the network access device and an expiration time, the security certificate being signed with a private key for the remote authentication server; by accessing the public key of the remote authentication server from a database, and checking the signature and expiration time of the security certificate; grant the network access device conditional access to the network by sending an access granted message to the network access device, the access granted message including a session key encrypted with a public key for the network access device; store the session key in a database; contact the remote authentication server to check a revocation status of the security certificate for the network access device; and suspend network access for the network access device in response to a message received from the remote authentication server that the authentication credential for the network access device has been revoked, by destroying the session key for the network access device.
Claim 10
Dependent Claim
230 words
An access point having a network interface for communicating with a remote authentication server on a communications network and a network interface for communicating with a network access device, the access point comprising: a processor and a memory medium containing machine readable program instructions which, when executed by the processor, enable the access point to: validate an authentication credential received from the network access device, the authentication credential comprising a security certificate including a public key for the network access device and an expiration time, the security certificate being signed with a private key for the remote authentication server; by accessing the public key of the remote authentication server from a database, and checking the signature and expiration time of the security certificate; grant the network access device conditional access to the network by sending an access granted message to the network access device, the access granted message including a session key encrypted with a public key for the network access device; store the session key in a database; contact the remote authentication server to check a revocation status of the security certificate for the network access device; and suspend network access for the network access device in response to a message received from the remote authentication server that the authentication credential for the network access device has been revoked, by destroying the session key for the network access device.
Claim 11
Dependent Claim
152 words
A remote authentication server having a network interface for communicating over a network with an access point that enables a network access device to communicate with the network, where the access point is capable of receiving an access request including an authentication credential from the network access device at the access point and locally validating the authentication credential at the access point to grant the network access device conditional access to the network, the remote authentication server comprising: a processor and a memory medium containing machine readable program instructions which, when executed by the processor, enable the remote authentication server to determine the status of the authentication credential received in a query from the access point, to either confirm access to the network for the network access device or, if the authentication credential is revoked, send the access point a message to suspend access to the network for the network access device.
Claim 12
Dependent Claim
152 words
A remote authentication server having a network interface for communicating over a network with an access point that enables a network access device to communicate with the network, where the access point is capable of receiving an access request including an authentication credential from the network access device at the access point and locally validating the authentication credential at the access point to grant the network access device conditional access to the network, the remote authentication server comprising: a processor and a memory medium containing machine readable program instructions which, when executed by the processor, enable the remote authentication server to determine the status of the authentication credential received in a query from the access point, to either confirm access to the network for the network access device or, if the authentication credential is revoked, send the access point a message to suspend access to the network for the network access device.
Claim 13
Dependent Claim
42 words
The remote authentication server recited in claim 9 , wherein the machine readable program instructions which, when executed by the processor, enable the remote authentication server to check a subscriber database containing the security certificate to determine whether the certificate is valid.
References Cited (Backward Citations)
US6490445B1
Cited
US6075860A
Cited
EP0939571A1
Cited
US6198823B1
Cited
US6236852B1
Cited
US20020042820A1
Cited
US20020147820A1
Cited
US20030166397A1
Cited
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 2008-02-15 | 2008-08-16 | 2009-02-15 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 2012-02-15 | 2012-08-16 | 2013-02-15 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2016-02-15 | 2016-08-16 | 2017-02-15 | $7700.00 | Window Closed / Lapsed |