Instant secure wireless network setup
The present disclosure relates to securely setting up mesh networks in a manner that does not require a physical network cable being attached to a wireless mesh device and that does not require transmitting unencrypted information wirelessly when a mesh network is setup. Methods and apparatus consistent with the present disclosure may allow a user to choose which mesh nodes can join a network and that user may specificity a custom profile that may include rules that may identify how mesh network identifiers are used, that identify passcodes/passphrases assigned to a particular network, may identify types of traffic that may be passed through particular 802.11 radio channels, or other parameters that may control how traffic is switched between devices in a particular wireless mesh network. This combined with dual factor verification and the use of different types of communication channels make wireless mesh networks easy to deploy and expand.
1. A method for configuring wireless mesh devices, the method comprising:
receiving a communication from a user device via a first type of communication channel at a wireless mesh device, wherein the communication includes a first set of information;
generating an initial pairwise key from the first set of information and from a second set of information at the wireless mesh device;
sending a message to the user device that includes the second set of information from the wireless mesh device so that the user device can generate a corresponding pairwise key after extracting the second set of information from the message, validate the initial pairwise key, and send a login message to the wireless mesh device;
verifying the login message received from the user device, the login message generated after validation of the corresponding pairwise key with respect to the initial pairwise key; and
sending an access granted message to the user device based on verifying the login message, wherein the wireless mesh device is deemed a registered wireless mesh device and is configured following the sending of the access granted message and a subsequent dual factor communication with a registration computer.
2. The method of claim 1 , further comprising generating the second set of information at the wireless mesh device that includes a second random number, wherein the first set of information includes a first random number generated at the user device.
3. The method of claim 2 , further comprising:
identifying that the first set of information includes the first random number;
identifying that the initial pairwise key should be generated based on receipt of the first set of information, wherein the initial pairwise key is generated at the wireless mesh device from the first random number and the second random number; and
generating the second set of information inclusive of a first code, wherein the user device identifies that a second code generated at the user device matches the first code and sends a login message based on the first code matching the second code.
4. The method of claim 1 , further comprising:
receiving registration information via the first type of communication channel; and
sending the registration information to the registration computer via a second type of communication channel.
5. The method of claim 4 , further comprising:
receiving a registration complete message from the registration computer via the second type of communication channel; and
sending the registration complete message to the user device via the first type of communication channel.
6. The method of claim 1 , further comprising preparing communications to send to the user device via the first type of communication channel by a first processor executing instructions at the wireless mesh device, wherein the login message is validated by a second processor executing instructions at the wireless mesh device.
7. The method of claim 1 , wherein the user device sends registration information to the registration computer via the second type of communication channel.
8. A system for configuring a wireless mesh device, the system comprising:
an application program that includes instructions executable by a processor of a user device, wherein the user device sends a communication that includes a first set of information via a first type of communication channel;
a wireless mesh device that receives the communication from the user device via the first type of communication channel, the wireless mesh device performing functions of:
generating an initial pairwise key from the first set of information and from a second set of information at the wireless mesh device,
sending a message to the user device that includes the second set of information so that the user device can generate a corresponding pairwise key after extracting the second set of information from the message, validate the initial pairwise key, and send a login message to the wireless mesh device,
verifying the login message received from the user device, the login message generated after validation of the corresponding pairwise key with respect to the initial pairwise key, and
sending an access granted message to the user device based on verifying the login message; and
a registration computer that receives registration information sent from the user device, wherein the registration computer receives the registration information via a second type of communication interface, and the wireless mesh device is deemed a registered wireless mesh device and is configured following the sending of the access granted message and a subsequent dual factor communication with the registration computer.
9. The system of claim 8 , wherein the first type of communication channel is capable of sending and receiving signals consistent with a Bluetooth communication interface.
10. The system of claim 9 , wherein the second type of communication channel is capable of sending and receiving signals consistent with a cellular phone interface.
11. The system of claim 8 , wherein the wireless mesh device:
receives the registration information from the user device via the first type of communication channel, and
sends the registration information to the registration computer via a second type of communication channel.
12. The system of claim 11 , wherein the wireless mesh device sends the registration information to the registration computer via a firewall that forwards the registration information to the registration computer.
13. The system of claim 8 , wherein the wireless mesh device includes:
a first memory;
a first processor that executes instructions out of the first memory to perform a first set of functions at the wireless mesh device;
a second memory; and
a second processor that executes instruction out of the second memory to perform a second set of functions at the wireless mesh device.
14. The system of claim 13 , further comprising a second type of communications channel that performs the second set of functions inclusive of preparing communications to send via the second type of communication channel to the registration computer, wherein the first set of functions includes preparing messages to send via the first type of communication channel.
15. A non-transitory computer-readable storage medium having embodied thereon one or more sets of instructions executable by a processor for implementing a method for configuring wireless mesh devices, the method comprising:
receiving a communication from a user device via a first type of communication channel at a wireless mesh device, wherein the communication includes a first set of information;
generating an initial pairwise key from the first set of information and from a second set of information at the wireless mesh device;
sending a message to the user device that includes the second set of information from the wireless mesh device so that the user device can generate a corresponding pairwise key after extracting the second set of information from the message, validate the initial pairwise key, and send a login message to the wireless mesh device;
verifying the login message received from the user device, the login message generated after validation of the corresponding pairwise key with respect to the initial pairwise key; and
sending an access granted message to the user device based on verifying the login message, wherein the wireless mesh device is deemed a registered wireless mesh device and is configured following the sending of the access granted message and a subsequent dual factor communication with a registration computer.
16. The non-transitory computer-readable storage medium of claim 15 , the one or more sets of instructions further executable to:
generate the second set of information at the wireless mesh device that includes a second random number, wherein the first set of information includes a first random number generated at the user device.
17. The non-transitory computer-readable storage medium of claim 16 , the one or more sets of instructions further executable to:
identify that the first set of information includes the first random number;
identify that the initial pairwise key should be generated based on receipt of the first set of information, wherein the initial pairwise key is generated at the wireless mesh device from the first random number and the second random number; and
generate the second set of information inclusive of a first code, wherein the user device identifies that a second code generated at the user device matches the first code and sends a login message based on the first code matching the second code.
18. The non-transitory computer-readable storage medium of claim 15 , the one or more sets of instructions further executable to:
receive registration information via the first type of communication channel; and
send the registration information to the registration computer via the second type of communication channel.
19. The non-transitory computer-readable storage medium of claim 18 , the one or more sets of instructions further executable to:
receive a registration complete message from the registration computer via the second type of communication channel; and
send the registration complete message to the user device via the first type of communication channel.
20. The non-transitory computer-readable storage medium of claim 15 , wherein the one or more sets of instructions includes:
a first set of instructions executed by a first processor to prepare communications to send to the user device via the first type of communication channel, and
a second set of instructions executed by a second processor executing instructions to validate the login message.