System and method for automatically and securely registering an internet of things device
A mechanism for automatically registering Internet-of-Things (IoT) devices to an end-user account of an Internet-based resource, using a gateway that the end-user previously registered to the account. Various security alternatives are described that help avoid masquerading and other attacks on the home network of the end-user.
1. A method comprising:
in a terminal device configurable to operate as a soft access point and as a wireless network station:
in response to first application of power to the terminal device or upon initiation by an end user, for a certain period of time, operate the terminal device as a soft access point that wirelessly transmits, using a certain portion of radio frequency spectrum, a beacon having an identifier portion comprising a predefined data value;
during the certain period of time while the terminal device is operating as a soft access point,
permit association of the gateway device operating as a wireless network station, with the terminal device,
following association of the gateway device with the terminal device, enable receipt from the gateway device of one or more parameters that enable the terminal device to wirelessly associate with the gateway device while the gateway device is operating as a wireless access point and the terminal device is operating as a wireless network station, and
upon receipt of the one or more parameters by the terminal device operating as a soft access point, change operation of the terminal device to operate as a wireless network station using the one or more parameters; and
while the terminal device is operating as a wireless network station, communicate, via the gateway device operating as a wireless access point, with an end user account of an Internet based service with which the gateway device, acting as a proxy for the end user, automatically registered the terminal device without additional end user involvement, using the one or more parameters and a set of credentials provided to the gateway device by the end user.
2. The method according to claim 1 , wherein the gateway device is operable to function as the wireless network station and the wireless access point in accordance with the IEEE 802.11 family of standards.
3. The method according to claim 1 , wherein the beacon comprises a service set identifier (SSID) containing an alphanumeric value associated, in memory of the gateway device, with terminal devices that support a soft access point mode of operation.
4. The method according to claim 1 , wherein the beacon transmitted by the terminal device operating as a soft access point comprises a security hash.
5. The method according to claim 4 , wherein the security hash is based, at least in part, on a service set identifier (SSID) information element of the beacon.
6. The method according to claim 1 , wherein the certain portion of radio frequency spectrum comprises a license free band.
7. The method according to claim 1 , further comprising:
transmitting, by the terminal device operating as a wireless network station to the gateway device, identity information for two or more gateway devices operating as wireless access points and corresponding information representative of a strength of a signal received from each of the two or more gateway devices.
8. A non-transitory computer readable medium having stored thereon a plurality of code sections, wherein each code section comprises a plurality of instructions executable by one or more processors to cause the one or more processors to perform steps of a method for operating a terminal device, the steps comprising:
in a terminal device configurable to operate as a soft access point and as a wireless network station:
in response to first application of power to the terminal device or upon initiation by an end user, for a certain period of time, operate the terminal device as a soft access point that wirelessly transmits, using a certain portion of radio frequency spectrum, a beacon having an identifier portion comprising a predefined data value;
during the certain period of time while the terminal device is operating as a soft access point,
permit association of the gateway device operating as a wireless network station, with the terminal device,
following association of the gateway device with the terminal device, enable receipt from the gateway device of one or more parameters that enable the terminal device to wirelessly associate with the gateway device while the gateway device is operating as a wireless access point and the terminal device is operating as a wireless network station, and
upon receipt of the one or more parameters by the terminal device operating as a soft access point, change operation of the terminal device to operate as a wireless network station using the one or more parameters; and
while the terminal device is operating as a wireless network station, communicate, via the gateway device operating as a wireless access point, with an end user account of an Internet based service with which the gateway device, acting as a proxy for the end user, automatically registered the terminal device without additional end user involvement, using the one or more parameters and a set of credentials provided to the gateway device by the end user.
9. The non-transitory computer readable medium according to claim 8 , wherein the gateway device is operable to function as the wireless network station and the wireless access point in accordance with the IEEE 802.11 family of standards.
10. The non-transitory computer readable medium according to claim 8 , wherein the beacon comprises a service set identifier (SSID) containing an alphanumeric value associated, in memory of the gateway device, with terminal devices that support a soft access point mode of operation.
11. The non-transitory computer readable medium according to claim 8 , wherein the beacon transmitted by the terminal device operating as a soft access point comprises a security hash.
12. The non-transitory computer readable medium according to claim 11 , wherein the security hash is based, at least in part, on a service set identifier (SSID) information element of the beacon.
13. The non-transitory computer readable medium according to claim 8 , wherein the certain portion of radio frequency spectrum comprises a license free band.
14. The non-transitory computer readable medium according to claim 8 , wherein the step of the method further comprise:
transmitting, by the terminal device operating as a wireless network station to the gateway device, identity information for two or more gateway devices operating as wireless access points and corresponding information representative of a strength of a signal received from each of the two or more gateway devices.
15. A system comprising:
a terminal device that comprises circuitry configured to operate as a soft access point and as a wireless network station, and that is operable to, at least:
in response to first application of power to the terminal device or upon initiation by an end user, for a certain period of time, operate the terminal device as a soft access point that wirelessly transmits, using a certain portion of radio frequency spectrum, a beacon having an identifier portion comprising a predefined data value;
during the certain period of time while the terminal device is operating as a soft access point,
permit association of the gateway device operating as a wireless network station, with the terminal device,
following association of the gateway device with the terminal device, enable receipt from the gateway device of one or more parameters that enable the terminal device to wirelessly associate with the gateway device while the gateway device is operating as a wireless access point and the terminal device is operating as a wireless network station, and
upon receipt of the one or more parameters by the terminal device operating as a soft access point, change operation of the terminal device to operate as a wireless network station using the one or more parameters; and
while the terminal device is operating as a wireless network station, communicate, via the gateway device operating as a wireless access point, with an end user account of an Internet based service with which the gateway device, acting as a proxy for the end user, automatically registered the terminal device without additional end user involvement, using the one or more parameters and a set of credentials provided to the gateway device by the end user.
16. The system according to claim 15 , wherein the gateway device is operable to function as the wireless network station and the wireless access point in accordance with the IEEE 802.11 family of standards.
17. The system according to claim 15 , wherein the beacon comprises a service set identifier (SSID) containing an alphanumeric value associated, in memory of the gateway device, with terminal devices that support a soft access point mode of operation.
18. The system according to claim 15 , wherein the beacon transmitted by the terminal device operating as a soft access point comprises a security hash.
19. The system according to claim 18 , wherein the security hash is based, at least in part, on a service set identifier (SSID) information element of the beacon.
20. The system according to claim 15 , wherein the certain portion of radio frequency spectrum comprises a license free band.
21. The system according to claim 15 , the steps of the method further comprising:
transmitting, by the terminal device operating as a wireless network station to the gateway device, identity information for two or more gateway devices operating as wireless access points and corresponding information representative of a strength of a signal received from each of the two or more gateway devices.