IP Library Granted Patent US 10,104,546
Granted Patent B2
US 10,104,546 · App. 15/492,911 · Granted Oct 16, 2018

Systems and methods for authentication

Inventors: Sheng Sun (Kanata, CA); Kwok Shum Au (Shenzhen, CN); Yunbo Li (Shenzhen, CN); Phillip Barber (McKinney, TX)
Assignee: Huawei Technologies Co., Ltd.
H04W12/06H04L63/06H04L63/083H04L63/0876H04W12/04H04W84/12
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 10,104,546
App. No.
15/492,911
Granted
Oct 16, 2018
Kind
B2
Abstract

A method includes transmitting, by a station to an access point (AP), a fast initial link setup (FILS) authentication request and transmitting, by the station to the AP, an authorization request, where the authorization request includes an extensible authentication protocol (EAP) over local area network (LAN) (EAPOL) key. The method also includes receiving, by the station from the AP, an association response, where the association response includes the EAPOL key.

Claims (44)

1. A method comprising:

receiving, by an access point (AP), an authentication request from a station (STA), the authentication request requesting authentication of the STA;

transmitting, by the AP, a fast initial link setup (FILS) authentication request to a server, wherein extensible authentication protocol (EAP) authentication signaling is included in the FILS authentication request, the EAP authentication signaling being used to verify mutual possession of a shared key between the STA and the server;

receiving, by the AP, a FILS authentication response from the server in response to the FILS authentication request, the FILS authentication response including an indication as to whether authentication of the STA was successful; and

receiving, by the AP, an association request including a message integrity code (MIC) and an S-Nonce value from the STA.

2. The method of claim 1 , further comprising:

transmitting, by the AP, an authentication response to the STA in response to the authentication request received from the STA, the authentication response carrying the indication included in the FILS authentication response received from the server.

3. The method of claim 1 , further comprising:

receiving, by the AP, an EAP request identity transmission from the STA; and

receiving, by the AP, an EAP response message from the STA.

4. The method of claim 1 , wherein the association request further includes an EAP over local area network (LAN) (EAPOL) key.

5. An access point (AP) comprising:

a processor; and

a non-transitory computer readable storage medium storing programming for execution by the processor, the programming including instructions to:

receive an authentication request from a station (STA), the authentication request requesting authentication of the STA;

transmit a fast initial link setup (FILS) authentication request to a server, wherein extensible authentication protocol (EAP) authentication signaling is included in the FILS authentication request, the EAP authentication signaling being used to verify mutual possession of a shared key between the STA and the server;

receive a FILS authentication response from the server in response to the FILS authentication request, the FILS authentication response including an indication as to whether authentication of the STA was successful; and

receive an association request including a message integrity code (MIC) and an S-Nonce value from the STA.

6. The AP of claim 5 , wherein the programming further includes instructions to:

transmit an authentication response to the STA in response to the authentication request received from the STA, the authentication response carrying the indication included in the FILS authentication response received from the server.

7. The AP of claim 5 , wherein the programming further includes instructions to:

receive an EAP request identity transmission from the STA; and

receive an EAP response message from the STA.

8. The AP of claim 5 , wherein the association request further includes an EAP over local area network (LAN) (EAPOL) key.

9. A computer program product adapted for installation in an access point (AP), the computer program product comprising a non-transitory computer readable storage medium storing programming, the programming including instructions to:

receive an authentication request from a station (STA), the authentication request requesting authentication of the STA;

transmit a fast initial link setup (FILS) authentication request to a server, wherein extensible authentication protocol (EAP) authentication signaling is included in the FILS authentication request, the EAP authentication signaling being used to verify mutual possession of a shared key between the STA and the server;

receive a FILS authentication response from the server in response to the FILS authentication request, the FILS authentication response including an indication as to whether authentication of the STA was successful; and

receive an association request including a message integrity code (MIC) and an S-Nonce value from the STA.

10. The computer program product of claim 9 , wherein the programming further includes instructions to:

transmit an authentication response to the STA in response to the authentication request received from the STA, the authentication response carrying the indication included in the FILS authentication response received from the server.

11. The computer program product of claim 9 , wherein the programming further includes instructions to:

receive an EAP request identity transmission from the STA; and

receive an EAP response message from the STA.

12. The computer program product of claim 9 , wherein the association request further includes an EAP over local area network (LAN) (EAPOL) key.

13. A method comprising:

receiving, by an access point (AP), an authentication request from a station (STA), the authentication request requesting authentication of the STA;

transmitting, by the AP, a fast initial link setup (FILS) authentication request to a server, wherein extensible authentication protocol (EAP) authentication signaling is included in the FILS authentication request, the EAP authentication signaling being used to verify mutual possession of a shared key between the STA and the server; and

receiving, by the AP, a FILS authentication response from the server in response to the FILS authentication request, the FILS authentication response including an indication as to whether authentication of the STA was successful; and

transmitting, by the AP, an association response including a message integrity code (MIC) and an S-Nonce value to the STA.

14. The method of claim 13 , further comprising:

transmitting, by the AP, an authentication response to the STA in response to the authentication request received from the STA, the authentication response carrying the indication included in the FILS authentication response received from the server.

15. The method of claim 13 , further comprising:

receiving, by the AP, an association request from the STA, the association request comprising an EAP over local area network (LAN) (EAPOL) key.

Continuity (4)
Continuation 14728560 · Jun 2, 2015
Continuation 13734471 · Jan 4, 2013
Provisional Application 61583856 · Jan 6, 2012
Related Publication 20170223534A1 · Aug 3, 2017