Method of making secure a link between a data terminal and a data processing local area network, and a data terminal for implementing the method
View Patent ↗This method makes secure a link, for example a radio link, between a data terminal (PDA 2 ) and a data processing local area network (WLAN 2 ) that is coupled to a mobile telephone network (PLMN 2 ) that includes an authentication center (AU 2 ). It consists in: linking (L 3 ) the data terminal (PDA 2 ) to a mobile telephone terminal (T 2 ) that includes means (SIM 3 ) for executing a procedure for making secure a radio link between said mobile telephone terminal (T 2 ) and the mobile telephone network (PLMN 2 ), said procedure including in particular exchanging information with the mobile telephone network (PLMN 2 ), said exchange of information usually being supported by a radio link between the mobile telephone terminal (T 2 ) and the mobile telephone network (PLMN 2 ); executing the same procedure in the mobile telephone terminal (T 2 ), but with the exchange of information supported by the link (L 4 ) between the data terminal (PDA 2 ) and the data processing local area network (WLAN 2 ) and by an interworking link (IL 2 ) connecting the data processing wireless local area network (WLAN 2 ) and the mobile telephone network (PLMN 2 ); and transferring the result of this procedure from the mobile telephone terminal (T 2 ) to the data terminal (PDA 2 ).
1. A method of making secure a link between a data terminal and a data processing local area network that is coupled to a mobile telephone network that includes an authentication center, which method is characterized in that it consists in:
linking the data terminal to a mobile telephone terminal that includes secure means for executing a procedure for making secure a radio link between said mobile telephone terminal and the mobile telephone network, said procedure including in particular exchanging security information with the mobile telephone network, said exchange of security information being supported by a radio link between the mobile telephone terminal and the mobile telephone network;
executing the same procedure in the mobile telephone terminal, but with the exchange of security information supported by the link between the data terminal and the data processing local area network and by an interworking link connecting the data processing wireless local area network and the mobile telephone network; and
transferring the result of this procedure from the mobile telephone terminal to the data terminal.
2. A method according to claim 1 , characterized in that the result of the procedure is the production of an encryption key that is transferred from the mobile telephone terminal to the data terminal and from the mobile telephone network to an access point of the local area network and in that said key is used to encrypt and decrypt data exchanged afterwards over said link between the data terminal and the data processing local area network.
3. A method according to claim 1 , characterized in that the data processing local area network is a wireless network conforming to the IEEE 802.11 standard.
4. A method according to claim 1 , characterized in that the data processing local area network is a wireless network conforming to the Bluetooth standard.
5. A method according to claim 1 , characterized in that the data processing local area network is an infrared link wireless network.
6. A method according to claim 1 , characterized in that the data processing local area network is a cable network.
7. A data terminal including means for setting up a link with a data processing local area network and means for setting up a link with a mobile telephone terminal including means having a processor executing software instructions for executing a procedure for making secure a radio link between said mobile telephone terminal and a mobile telephone network that includes an authentication center, this procedure including in particular exchanging security information with the mobile telephone network, said exchange of security information usually being supported by a radio link between the mobile telephone terminal and the mobile telephone network, which terminal is characterized in that, for implementing the method according to claim 1 , it includes:
means including a processor executing software instructions for commanding execution of said procedure in said mobile telephone terminal, with the exchange of security information supported by a link between the data terminal and the data processing local area network and by an interworking link connecting the data processing local area network and the mobile telephone network; and
means including a processor executing software instructions for transferring the result of the above procedure from the mobile telephone terminal to the data terminal and using said result to encrypt and decrypt data exchanged afterwards over said link between the data terminal and the data processing local area network.
8. A data terminal according to claim 7 , characterized in that the link with a data processing local area network is a wireless link conforming to the IEEE802.11 standard.
9. A data terminal according to claim 7 , characterized in that the link with a data processing local area network is a wireless link conforming to the Bluetooth standard.
10. A data terminal according to claim 7 , characterized in that the link with a data processing local area network is an infrared link.
11. A data terminal according to claim 7 , characterized in that the link with a data processing local area network is a cable link.
12. A data terminal capable of establishing a first link with a data processing local area network and a second link with a mobile telephone terminal, said mobile telephone terminal being capable of executing a procedure for making secure a radio link between said mobile telephone terminal and a mobile telephone network that includes an authentication center, said procedure including exchanging security information with the mobile telephone network over a path that includes a radio link between the mobile telephone terminal and the mobile telephone network, wherein said data terminal includes:
a first component commanding execution of said procedure in said mobile telephone terminal, except with the exchange of security information being over a path comprising said first link and a third link between the data processing local area network and the mobile telephone network; and
a component which transfers the result of the procedure commanded by said first component from the mobile telephone terminal to the data terminal and uses said result to encrypt and decrypt data exchanged afterwards over said link between the data terminal and the data processing local area network.