Patent US7028186B1 successfully refreshed from Google Patents.
US7028186B1
Expired / Lapsed
US
⏱️ 0.0 years remaining
Key management methods for wireless LANs
Assignee: Conversant Wireless Licensing SARL
•
Filing: 2000-02-11
•
Granted: 2006-04-11
•
Expires: 2020-02-11
Abstract
Abstract The security keys in the mobile terminals and access points of a wireless local area network (WLAN) are created, utilized and managed for a communication session between a mobile terminal and access point. Both the WLAN link level security protection and IP security functions of the network use the same Internet Key Exchange (IKE) key management protocol and use certificates in the same certificate hierarchy. When the mobile terminals associates with the network, it uses the IKE protocol with private keys and certificates to generate WLAN link level keys with the access point and provide mutual authentication.
Inventors
- 👤 Jorma Stenman
- 👤 Harri Hansen
- 👤 Juha Salvela
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-10-29 19:56
CPC Classifications
H; H04; H04L; H04L63/00; H04L63/08; H04L63/0823; H04L41/00; H04L63/0869; H04W; H04W12/00; H04W12/03; H04W12/033; H04W12/04; H04W12/06; H04L63/16; H04L63/162; H04L63/164; H04W84/00; H04W84/02; H04W84/10; H04W84/12; H04W88/00; H04W88/02; H04W88/08; H04W88/14
Claims Analysis
Total Claims: 12
Claim 1
Independent Claim
115 words
A method of managing security keys in a wireless local area network having a mobile terminal, an access point and a server, the method comprising the steps of: obtaining first and second certificates from a certificate authority; associating the mobile terminal with the access point; using a certificate authority certificate, first certificate and private key with Internet Key Exchange (IKE) to generate a WLAN link level key and mutually authenticating the mobile terminal and the access point using the IKE; and using a certificate authority certificate, second certificate and private key with Internet Key Exchange (IKE) to generate IPsec authentication, encryption and decryption keys for data packets transferred between the mobile terminal and the server.
Claim 2
Independent Claim
115 words
A method of managing security keys in a wireless local area network having a mobile terminal, an access point and a server, the method comprising the steps of: obtaining first and second certificates from a certificate authority; associating the mobile terminal with the access point; using a certificate authority certificate, first certificate and private key with Internet Key Exchange (IKE) to generate a WLAN link level key and mutually authenticating the mobile terminal and the access point using the IKE; and using a certificate authority certificate, second certificate and private key with Internet Key Exchange (IKE) to generate IPsec authentication, encryption and decryption keys for data packets transferred between the mobile terminal and the server.
Claim 3
Dependent Claim
26 words
The method recited in claim 1 , wherein the certificate authority certificate, private key, and the first and second certificates are stored in the mobile terminal.
Claim 4
Dependent Claim
35 words
The method recited in claim 2 , wherein the certificate authority certificate, private key, and the first and second certificates are stored in the mobile terminal at the time of manufacture of the mobile terminal.
Claim 5
Dependent Claim
24 words
The method recited in claim 1 , wherein the mobile terminal generates an authentication header for transferred data packets utilizing the IPsec encryption key.
Claim 6
Dependent Claim
27 words
The method recited in claim 1 , wherein the server authenticates and decrypts data packets transferred from the mobile terminal utilizing the IPsec authentication and decryption keys.
Claim 7
Dependent Claim
32 words
The method recited in claim 5 , wherein the data packets are transferred from the mobile terminal to the access point using WLAN link level encryption in addition to the IPsec encryption.
Claim 8
Dependent Claim
19 words
The method recited in claim 6 , wherein the WLAN link level encryption comprises Wired Equivalent Privacy (WEP) encryption.
Claim 9
Dependent Claim
27 words
The method recited in claim 1 , wherein the data packets are transferred from the mobile terminal to the access point without using WLAN link level encryption.
Claim 10
Dependent Claim
20 words
The method recited in claim 8 , wherein the mobile terminal forwards the IPsec authentication key to the access point.
Claim 11
Dependent Claim
28 words
The method recited in claim 9 , wherein the access point authenticates data packets from the mobile terminal using the IPsec authentication key forwarded from the mobile terminal.
Claim 12
Dependent Claim
32 words
The method recited in claim 1 , wherein the mobile terminal sends an IPsec authenticated message to an access point as part of a MAC-level message of the wireless local area network.
References Cited (Backward Citations)
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 2009-04-10 | 2009-10-10 | 2010-04-11 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 2013-04-10 | 2013-10-10 | 2014-04-11 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2017-04-10 | 2017-10-10 | 2018-04-11 | $7700.00 | Window Closed / Lapsed |