Dynamic authentication in secured wireless networks
View Patent ↗Systems and methods for authentication using paired dynamic secrets in secured wireless networks are provided. Each authenticated user is assigned a random secret generated so as to be unique to the user. The secret is associated with a wireless interface belonging to the user, so that no other wireless interface may use the same secret to access the network. The secret may be updated either periodically or at the request of a network administrator, and reauthentication of the wireless network may be required.
1. A method for enabling access to a secured wireless network, the method comprising:
storing information in memory regarding a plurality of users authorized to access the secured wireless network;
receiving an authentication request from a wireless device; and
executing instructions stored in memory, wherein execution of instructions by a processor:
authenticates a requesting user of the wireless device as one of the users authorized to access the secured wireless network,
generates a security key to be associated with the wireless device-used by the requesting user, wherein the security key is derived from a secret unique to the requesting user; and
processes subsequent access requests from the requesting user of the wireless device, wherein the wireless device is granted access to the secured wireless network following a determination that the security key is valid and has not expired.
2. The method of claim 1 , wherein the unique security key is based on a unique secret associated with the requesting user.
3. The method of claim 2 , further comprising generating a plurality of other unique security keys based on the unique secret and storing the plurality of other unique security keys in memory.
4. The method of claim 3 , further comprising receiving another authentication request from the requesting user using another wireless device and associating the other wireless device with one of the plurality of other unique security keys.
5. The method of claim 2 , wherein the unique secret expires and further comprising re-authentication before associating a new unique secret with the wireless device.
6. The method of claim 5 , wherein the new unique secret is generated periodically.
7. The method of claim 5 , wherein the new unique secret is generated in response to a request by a network administrator.
8. The method of claim 5 , wherein expiration includes terminating a connection to the wireless device.
9. The method of claim 1 , further comprising generating an executable for the wireless device, wherein execution of the executable at the wireless device binds the unique security key with the wireless device.
10. A system for enabling access to a secured wireless network, the system comprising:
an authentication database for storing information regarding a plurality of users authorized to access the secured wireless network;
a network interface for receiving an authentication request from a wireless device; and
a processor for executing instructions and modules stored in memory, wherein the processor executes:
an authentication module to authenticate a requesting user of the wireless device as one of the users authorized to access the secured wireless network,
a secret generation module to generate a security key to be associated with the wireless device used by the requesting user, wherein the security key is derived from a secret unique to the requesting user; and
authentication server instructions to process subsequent access requests from the requesting user of the wireless device, wherein the wireless device is granted access to the secured wireless network following a determination that the security key is valid and has not expired.
11. The system of claim 10 , further comprising a binding module for associating the wireless device with the unique security key.
12. The system of claim 10 , wherein the unique security key is based on a unique secret associated with the requesting user.
13. The system of claim 12 , wherein the processor further executes the secret generation module to generate a plurality of other unique security keys based on the unique secret and storing the plurality of other unique security keys in memory.
14. The system of claim 13 , wherein the network interface receives another authentication request from the requesting user using another wireless device and further comprising a binding associating the other wireless device with one of the plurality of other unique security keys.
15. The system of claim 12 , wherein the unique secret expires and wherein the authentication server requires re-authentication before associating a new unique secret with the wireless device.
16. The system of claim 5 , wherein the secret generation module generates the new unique secret periodically.
17. The system of claim 15 , wherein the secret generation module generates the new unique secret in response to a request by a network administrator.
18. The system of claim 15 , wherein expiration includes termination of a connection to the wireless device.
19. The system of claim 10 , further comprising an executable generation module for generating an executable for the wireless device, wherein execution of the executable at the wireless device binds the unique security key with the wireless device.
20. A non-transitory computer-readable storage medium, having embodied thereon a program executable by a processor to perform a method for enabling access to a secured wireless network, the method comprising:
storing information regarding a plurality of users authorized to access the secured wireless network;
receiving an authentication request from a wireless device;
authenticating a requesting user of the wireless device as one of the users authorized to access the secured wireless network;
generating a security key to be associated with the wireless device-used by the requesting user, wherein the security key is derived from a secret unique to the requesting user; and
processing subsequent access requests from the requesting user of the wireless device, wherein the wireless device is granted access to the secured wireless network following a determination that the security key is valid and has not expired.