IP Library Granted Patent US 10,206,110
Granted Patent B1
US 10,206,110 · App. 15/211,707 · Granted Feb 12, 2019

Techniques for network security

View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 10,206,110
App. No.
15/211,707
Granted
Feb 12, 2019
Kind
B1
Abstract

Techniques are described for network security. One method includes identifying a network-access boundary associated with a network for a location, generating a credential for the network based at least in part on the identified network-access boundary, receiving a request from a user equipment (UE) to access the network associated with the location, and transmitting the credential associated with the network based at least in part on the network-access boundary.

Claims (58)

1. A method for wireless network security, comprising:

identifying a network-access boundary associated with a network for a location;

generating a set of independently encrypted credentials for the network based at least in part on the identified network-access boundary, wherein each generated credential of the set of credentials comprises a different encrypted characteristic and is generated based at least in part on a location of at least one beacon associated with the network-access boundary;

receiving a request from a user equipment (UE) to access the network associated with the location, the request comprising channel information between the UE and the network; and

transmitting the credential associated with the network based at least in part on the network-access boundary.

2. The method of claim 1 , further comprising:

determining a location of the UE;

detecting that the location of the UE is external to the network-access boundary; and

determining whether the UE is external to the network-access boundary for a predetermined duration based at least in part on the location of the UE.

3. The method of claim 2 , further comprising:

discontinuing the credential associated with the network-access boundary based at least in part on determining that the UE is external to the network-access boundary for a period exceeding the predetermined duration.

4. The method of claim 2 , wherein the location of the UE is determined based at least in part on global positioning system (GPS) coordinates of the UE.

5. The method of claim 1 , further comprising:

generating a plurality of credentials associated with the network for the network-access boundary;

determining a schedule associated with the plurality of credentials; and

filtering the credential for the network based at least in part on the schedule.

6. The method of claim 1 , further comprising:

determining a plurality of network-access boundaries of one or more beacons associated with a location; and

generating a plurality of credentials for each network-access boundary based at least in part on a perimeter of the network-access boundary.

7. The method of claim 6 , wherein one or more of the network-access boundaries overlap.

8. The method of claim 6 , further comprising:

exchanging the plurality of credentials between the network-access boundaries of the one or more beacons based at least in part on a predetermined rule.

9. The method of claim 8 , wherein the predetermined rule comprises: any of a predetermined sequence, or a predetermined duration, or a combination thereof.

10. The method of claim 8 , further comprising:

encrypting each credential prior to the exchanging based at least in part on a security protocol.

11. The method of claim 6 , further comprising:

performing a measurement procedure of one or more beacons;

transmitting a measurement report to an access point, wherein the report is based at least in part on the measurement procedure; and

modifying a perimeter associated with the one or more network-access boundaries based at least in part on the measurement report.

12. The method of claim 1 , wherein the credential is a Wi-Fi Protected Access-2 (WPA2) credential.

13. The method of claim 1 , wherein the network is a wireless local area network (WLAN).

14. An apparatus for wireless network security, in a system comprising:

a processor;

memory in electronic communication with the processor; and

instructions stored in the memory and operable, when executed by the processor, to cause the apparatus to:

identify a network-access boundary associated with a network for a location;

generate a set of independently encrypted credentials for the network based at least in part on the identified network-access boundary, wherein each generated credential of the set of credentials comprises a different encrypted characteristic and is generated based at least in part on a location of at least one beacon associated with the network-access boundary;

receive a request from a user equipment (UE) to access the network associated with the location, the request comprising channel information between the UE and the network; and

transmit the credential associated with the network based at least in part on the network-access boundary.

15. The apparatus of claim 14 , wherein the instructions are further executable by the processor to:

determine a location of the UE;

detect that the location of the UE is external to the network-access boundary; and

determine whether the UE is external to the network-access boundary for a predetermined duration based at least in part on the location of the UE.

16. The apparatus of claim 15 , wherein the instructions are further executable by the processor to:

discontinue the credential associated with the network-access boundary based at least in part on determining that the UE is external to the network-access boundary for a period exceeding the predetermined duration.

17. The apparatus of claim 15 , wherein the location of the UE is determined based at least in part on global positioning system (GPS) coordinates of the UE.

18. The apparatus of claim 14 , wherein the instructions are further executable by the processor to:

generate a plurality of credentials associated with the network for the network-access boundary;

determine a schedule associated with the plurality of credentials; and

filter the credential for the network based at least in part on the schedule.

19. The apparatus of claim 14 , wherein the instructions are further executable by the processor to:

determine a plurality of network-access boundaries of one or more beacons associated with a location; and

generate a plurality of credentials for each network-access boundary based at least in part on a perimeter of the network-access boundary.

20. A non-transitory computer readable medium storing code for wireless network security, the code comprising instructions executable by a processor to:

identify a network-access boundary associated with a network for a location;

generate a set of independently encrypted credentials for the network based at least in part on the identified network-access boundary, wherein each generated credential of the set of credentials comprises a different encrypted characteristic and is generated based at least in part on a location of at least one beacon associated with the network-access boundary;

receive a request from a user equipment (UE) to access the network associated with the location, the request comprising channel information between the UE and the network; and

transmit the credential associated with the network based at least in part on the network-access boundary.

Assignments (5)
NOTICE OF SUCCESSION OF AGENCY (REEL 050926 / FRAME 0560) Recorded Sep 13, 2022
From: JPMORGAN CHASE BANK, N.A.
To: BANK OF AMERICA, N.A., AS COLLATERAL AGENT
Reel/Frame 061422/0371 →
SECURITY AGREEMENT Recorded Sep 13, 2022
From: NORTONLIFELOCK INC.
To: BANK OF AMERICA, N.A., AS COLLATERAL AGENT
Reel/Frame 062220/0001 →
CHANGE OF NAME Recorded Jan 30, 2020
From: SYMANTEC CORPORATION
To: NORTONLIFELOCK INC.
Reel/Frame 051759/0845 →
SECURITY AGREEMENT Recorded Nov 4, 2019
From: SYMANTEC CORPORATION; BLUE COAT LLC; LIFELOCK, INC,; SYMANTEC OPERATING CORPORATION
To: JPMORGAN, N.A.
Reel/Frame 050926/0560 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Jul 15, 2016
From: SHAVELL, MICHAEL; GU, LEI; SOKOLOV, ILYA; JIANG, KEVIN
To: SYMANTEC CORPORATION
Reel/Frame 039169/0111 →