Secure provisioning for wireless local area network technologies
Cellular connections can be used to provision non-cellular devices such as internet-of-things (IoT) devices. For example, IoT devices can comprise Bluetooth, Wi-Fi, and cellular capabilities. However, the cellular capability can be used to provision the IoT devices using non-internet protocol data delivery to prevent security vulnerabilities. Data can be transmitted to the IoT device using core elements without using an IP stack. Thus, IoT device configurations and the keys can be provisioned over-the-air without the use of internet protocol data.
1. A method, comprising:
receiving, by a cellular network module of a user equipment, from network equipment via a cellular network, cryptographic data, wherein the user equipment comprises a wireless local area network (WLAN) module for communications over a non-cellular network;
based on a request from the WLAN module, generating, by the cellular network module, a session key using the cryptographic data received via the cellular network;
communicating, by the cellular network module, the session key directly to the WLAN module to enable the WLAN module to use the session key for communications over the non-cellular network; and
establishing, by the WLAN module, via the non-cellular network, an internet connection using the session key.
2. The method of claim 1 , wherein the cryptographic data comprises a cryptographic key.
3. The method of claim 1 , wherein the internet connection is a secured internet connection.
4. The method of claim 1 , wherein the cryptographic data comprises a service set identifier associated with the non-cellular network.
5. The method of claim 1 , wherein receiving of the cryptographic data comprises receiving the cryptographic data using non-internet protocol data delivery.
6. The method of claim 1 , wherein the non-cellular network employs internet protocol data delivery.
7. The method of claim 1 , wherein key the WLAN module comprises a Wi-Fi module.
8. A user equipment, comprising:
a first network component configured to communicate via a cellular network;
a second network component configured to communicate via a non-cellular network;
a processor; and
a memory that stores executable instructions that, when executed by the processor, facilitate performance of operations, comprising:
receiving, by the first network component, from network equipment via the cellular network, key data;
based on a request from the second network component, generating, by the first network component, an internet protocol session key using the key data received via the cellular network;
delivering, by the first network component, the internet protocol session key directly to the second network component to enable the second network component to use the internet protocol session key for communications over the non-cellular network; and
establishing, by the second network component, via the non-cellular network, an internet connection using the internet protocol session key.
9. The user equipment of claim 8 , wherein the key data comprises a pre-shared key.
10. The user equipment of claim 8 , wherein the internet connection is a secured internet connection.
11. The user equipment of claim 8 , wherein the key data comprises a service set identifier associated with the non-cellular network.
12. The user equipment of claim 8 , wherein receiving the key data comprises receiving the key data using non-internet protocol data delivery.
13. The user equipment of claim 8 , wherein the non-cellular network employs internet protocol data delivery.
14. The user equipment of claim 8 , wherein the second network component comprises a Wi-Fi component.
15. A non-transitory machine-readable medium, comprising executable instructions that, when executed by a processor of an internet-of-things device, facilitate performance of operations, comprising:
receiving, by a first module component of the internet-of-things device, from network equipment via a cellular network, key data, wherein the internet-of-things device comprises a second module component for communications over a non-cellular network;
based on a request from the second module component, generating, by the first module component, a session key using the key data received via the cellular network;
supplying, by the first module component, the session key directly to the second module component to enable the second module component to use the session key for communications over the non-cellular network; and
establishing, by the second module component, via the non-cellular network, a secure connection to a server using the session key.
16. The non-transitory machine-readable medium of claim 15 , wherein the key data comprises an encrypted key.
17. The non-transitory machine-readable medium of claim 15 , wherein the secure connection is a secure internet connection.
18. The non-transitory machine-readable medium of claim 15 , wherein the key data comprises a service set identifier associated with the non-cellular network.
19. The non-transitory machine-readable medium of claim 15 , wherein receiving the key data comprises receiving the key data using non-internet protocol data delivery.
20. The non-transitory machine-readable medium of claim 15 , wherein the non-cellular network employs internet protocol data delivery.