IP Library Granted Patent US 9,674,702
Granted Patent B2
US 9,674,702 · App. 14/728,560 · Granted Jun 6, 2017

Systems and methods for authentication

Inventors: Sheng Sun (Kanata, CA); Kwok Shum Au (Shenzhen, CN); Yunbo Li (Shenzhen, CN); Phillip Barber (McKinney, TX)
Assignee: Huawei Technologies Co., Ltd.
H04W12/06G06F21/44H04L63/08H04W12/08H04L63/061H04L63/162H04W84/12
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 9,674,702
App. No.
14/728,560
Granted
Jun 6, 2017
Kind
B2
Abstract

A method includes transmitting, by a station to an access point (AP), a fast initial link setup (FILS) authentication request and transmitting, by the station to the AP, an authorization request, where the authorization request includes an extensible authentication protocol (EAP) over local area network (LAN) (EAPOL) key. The method also includes receiving, by the station from the AP, an association response, where the association response includes the EAPOL key.

Claims (39)

1. A method comprising:

receiving, by an access point (AP), an authentication request from a station (STA), the authentication request including extensible authentication protocol (EAP) authentication signaling requesting authentication of the STA;

transmitting, by the AP, a fast initial link setup (FILS) authentication request to a server, wherein the FILS authentication request comprises the EAP authentication signaling requesting authentication of the STA, the EAP authentication signaling being used to verify mutual possession of a shared key between the STA and the server;

receiving, by the AP, a FILS authentication response from the server in response to the FILS authentication request, the FILS authentication response including an indication as to whether the EAP authentication of the STA was successful;

transmitting, by the AP, an authentication response to the STA in response to the authentication request received from the STA, the authentication response carrying the indication included in the FILS authentication response received from the server;

receiving, by the AP, an association request from the STA; and

transmitting an association response to the STA in response to the association request.

2. The method of claim 1 , further comprising:

receiving, by the AP, an EAP request identity transmission from the STA; and

receiving, by the AP, an EAP response message from the STA.

3. The method of claim 1 , further comprising receiving, by the AP, an association request from the STA, the association request comprising, an EAPOL key, an S-Nonce value, and a unicast message authorization code (MIC).

4. An access point (AP) comprising:

a processor; and

a non-transitory computer readable storage medium storing programming for execution by the processor, the programming including instructions to:

receive an authentication request from a station (STA), the authentication request including extensible authentication protocol (EAP) authentication signaling requesting authentication of the STA;

transmit a fast initial link setup (FILS) authentication request to a server, wherein the FILS authentication request comprises the EAP authentication signaling requesting authentication of the STA, the EAP authentication signaling being used to verify mutual possession of a shared key between the STA and the server;

receive a FILS authentication response from the server in response to the FILS authentication request, the FILS authentication response including an indication as to whether the EAP authentication of the STA was successful;

transmit an authentication response to the STA in response to the authentication request received from the STA, the authentication response carrying the indication included in the FILS authentication response received from the server;

receive an association request from the STA; and

transmit an association response to the STA in response to the association request.

5. The AP of claim 4 , wherein the programming further includes instructions to:

receiving, by the AP, an EAP request identity transmission from the STA; and

receiving, by the AP, an EAP response message from the STA.

6. The AP of claim 4 , wherein the programming further includes instructions to receive an association request from the STA, the association request comprising an EAPOL key, an S-Nonce value, and a unicast message authorization code (MIC).

7. A computer program product adapted for installation in an access point (AP), the computer program product comprising a non-transitory computer readable storage medium storing programming, the programming including instructions to:

receive an authentication request from a station (STA), the authentication request including extensible authentication protocol (EAP) authentication signaling requesting authentication of the STA;

transmit a fast initial link setup (FILS) authentication request to a server, wherein the FILS authentication request comprises the EAP authentication signaling requesting authentication of the STA, the EAP authentication signaling being used to verify mutual possession of a shared key between the STA and the server;

receive a FILS authentication response from the server in response to the FILS authentication request, the FILS authentication response including an indication as to whether the EAP authentication of the STA was successful;

transmit an authentication response to the STA in response to the authentication request received from the STA, the authentication response carrying the indication included in the FILS authentication response received from the server;

receive an association request from the STA; and

transmit an association response to the STA in response to the association request.

8. The computer program product of claim 7 , wherein the programming further comprises instructions to:

receiving, by the AP, an EAP request identity transmission from the STA; and

receiving, by the AP, an EAP response message from the STA.

9. The computer program product of claim 7 , wherein the programming further includes instructions to receive an association request from the STA, the association request comprising an EAPOL key, an S-Nonce value, and a unicast message authorization code (MIC).

10. A method comprising

receiving, by a server, a fast initial link setup (FILS) authentication request from an access point (AP), wherein the FILS authentication request comprises extensible authentication protocol (EAP) authentication signaling requesting EAP authentication of a station (STA), the EAP authentication signaling having been communicated from the STA to the AP and being used to verify mutual possession of a shared key between the STA and the server;

determining, by the server, whether an EAP authentication of the STA is successful according to the EAP authentication signaling in the FILS authentication request; and

transmitting, by the server, a FILS authentication response to the AP in response to the FILS authentication request, the FILS authentication response including an indication as to whether the EAP authentication of the STA was successful, the FILS authentication response prompting the AP to send an authentication response to the STA in response to the authentication request received from the STA, the authentication response carrying the indication included in the FILS authentication response received from the server, wherein the AP and the STA exchange an association request and an association response, the association response being in response to the association request.

Continuity (3)
Continuation 13734471 · Jan 4, 2013
Provisional Application 61583856 · Jan 6, 2012
Related Publication 20150281962A1 · Oct 1, 2015