Information security – Access control or authentication – Network
Reexamination Certificate
2006-04-04
2006-04-04
Revak, Christopher (Department: 2131)
Information security
Access control or authentication
Network
C713S176000, C380S270000, C726S014000
Reexamination Certificate
active
07024690
ABSTRACT:
A process for mutual authentication of users and networks over an unsecured wireless communication channel. In one embodiment, sensitive information (e.g., passwords) is not communicated over the unsecured channel. Rather, hashed representations of user identifiers, passwords, etc., and randomly generated numbers are communicated between the client and the network during the log-in process. The representations may be encrypted with a one-way hash function such that it is not computationally feasible for an eavesdropper to decrypt. In one embodiment, the representation may be generated based on the user identifier, password and/or MAC address of a wireless LAN card.
REFERENCES:
patent: 4612413 (1986-09-01), Robert et al.
patent: 4956863 (1990-09-01), Goss
patent: 5721779 (1998-02-01), Funk
patent: 5875394 (1999-02-01), Daly et al.
patent: 5995624 (1999-11-01), Fielder et al.
patent: 6304969 (2001-10-01), Wasserman et al.
patent: 6401204 (2002-06-01), Euchner et al.
patent: 6457058 (2002-09-01), Ullum et al.
patent: 6463534 (2002-10-01), Geiger et al.
patent: 6609199 (2003-08-01), DeTreville
patent: 6615353 (2003-09-01), Hashiguchi
patent: 6697337 (2004-02-01), Cafarelli et al.
patent: 6785823 (2004-08-01), Abrol et al.
patent: 6874089 (2005-03-01), Dick et al.
patent: 2002/0124176 (2002-09-01), Epstein
patent: 2003/0177350 (2003-09-01), Lee
patent: 2005/0021959 (2005-01-01), Tsushima et al.
Bellare et al. “Entity authentication and key distribution.” In Proc. of Crypto '93 (Aug. 1993) D. R. Stinson, Ed. vol. 773 of LNCSSpringer-Verlag, Berlinpp. 232249.
J. Feigenbaum (Ed.): “Advances in Cryptography”—CRYTO '91, LNCS 576, pp. 44-61, 1992.
Davio et al. “Authentication Procedures.” EUROCRYPT 1982: pp. 283-288.
Beker et al. “Message Authentication And Dymanic Passwords.” EUROCRYPT 1987: pp. 171-175.
Russell L. Brand: “Problems with the Normal Use of Cryptography for Providing Security on Unclassified Networks.” CRYPTO 1989: pp. 30-34.
Bird et al. “The KryptoKnight Family of Light-Weight Protocols for Authentication and Key Distribution”, IEEE Transactions on Networking, vol. 3, Num 1, pp. 31-42, Feb. 1995.
Frans, J. “HTTP Authentication: Basic and Digest Access Authentication.” Jun. 1999.
Joos. Richard R. “Mutual Authentication in Wireless Networks.” Jun. 4, 1997.
Ipng 1210. “Re: ND Asst for security Issue DHCPv6?” Jan. 18, 1996.
Freier et al, “The SSL Protocol Version 3.0” Nov. 18, 1996, Transport Layer Security Working Group, p. 1-63.
Zorn, “Microsoft PPP CHAP Extensions, Version 2”, Jan. 2000, Network Working Group RFC 2759, p. 1-20.
Zorn et al, “Microsoft PPP CHAP Extensions”, Oct. 1998, Network Working Group RFC 2433, p. 1-20.
Simpson, “PPP Challenge Handshake Authentication Protocol”, Aug. 1996, Network Working Group RFC 1994, p. 1-12.
Park et al, “Security protocol for IEEE 802.11 wireless local area network”, 1998, Mobile Networks and Applications, p. 237-24.
Schneier et al, “Cryptanalysis of Microsoft's Point-to-Point Tunneling Protocol”, 1998, ACM 5thConference on Computer & Communications Security, p. 132-141.
Paulson, “Inductive Analysis of the Internet Protocol TLS”, Aug. 1999, ACM Transactions of Information and System Security vol. 2, No. 3, p. 332-351.
Bull et al, “A nested mutual authentication protocol”, Oct. 1999, ACM SIGOPS Operating System Review, vol. 33, Issue 4, p. 42-47.
Chen BoFu
Nessett Danny M.
O'Hara Bob
Tsai Joe
Young Albert
3Com Corporation
Revak Christopher
LandOfFree
Protected mutual authentication over an unsecured wireless... does not yet have a rating. At this time, there are no reviews or comments for this patent.
If you have personal experience with Protected mutual authentication over an unsecured wireless..., we encourage you to share that experience with our LandOfFree.com community. Your opinion is very important and Protected mutual authentication over an unsecured wireless... will most certainly appreciate the feedback.
Profile ID: LFUS-PAI-O-3568449