IP Library Granted Patent US 11,716,622
Granted Patent B2
US 11,716,622 · App. 17/380,473 · Granted Aug 1, 2023

System for identification of secure wireless network access points using cryptographic pre-shared keys

Inventor: Brandon Sloane (Indian Land, SC)
Assignee: BANK OF AMERICA CORPORATION
H04W12/069G06F21/602H04W12/0431H04W12/122H04W76/11
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 11,716,622
App. No.
17/380,473
Granted
Aug 1, 2023
Kind
B2
Abstract

A system is provided for identification of secure wireless network access points using cryptographic pre-shared keys. In particular, the system may comprise a client-side application that may use a pre-shared key to generate a list of valid access point ID's in a pseudorandom manner. A server-side application may use the same pre-shared key to generate one or more access point ID's. Based on the pre-shared key, a client computing device may readily identify which wireless access points within the network are secure and trusted.

Claims (38)

1. A system for identification of secure wireless network access points using cryptographic pre-shared keys, the system comprising:

a memory device with computer-readable program code stored thereon;

a communication device; and

a processing device operatively coupled to the memory device and the communication device, wherein the processing device is configured to execute the computer-readable program code to:

generate a client-side list of one or more secure wireless identifiers by inputting a pre-shared key into a cryptographic function;

detect that one or more wireless identifiers are being broadcasted, wherein the one or more wireless identifiers comprises one or more decoy wireless identifiers and one or more unsecured wireless identifiers, wherein the decoy wireless identifier causes computing devices to connect to a decoy wireless network, wherein the decoy wireless network comprises one or more decoy resources;

identify a secure wireless identifier using the client-side list of one or more secure wireless identifiers; and

automatically connect to a secure wireless access point through the secure wireless identifier.

2. The system according to claim 1 , wherein the computer-readable program code, when executed, further causes the processing device to execute a secure handshake process for retrieving the pre-shared key, comprising:

connecting to a guest wireless network through a guest wireless identifier;

transmitting authentication data to an authentication server; and

receiving the pre-shared key from the authentication server.

3. The system according to claim 1 , wherein the one or more decoy resources comprises at least one of decoy data or decoy virtual environments.

4. The system according to claim 1 , wherein the decoy wireless network is further configured to generate a log of network interactions of the computing devices within the decoy wireless network.

5. The system according to claim 1 , wherein the one or more wireless identifiers comprises one or more service set identifiers (“SSID”).

6. A computer program product for identification of secure wireless network access points using cryptographic pre-shared keys, the computer program product comprising at least one non-transitory computer readable medium having computer-readable program code portions embodied therein, the computer-readable program code portions comprising executable code portions for:

generating a client-side list of one or more secure wireless identifiers by inputting a pre-shared key into a cryptographic function;

detecting that one or more wireless identifiers are being broadcasted, wherein the one or more wireless identifiers comprises one or more decoy wireless identifiers and one or more unsecured wireless identifiers, wherein the decoy wireless identifier causes computing devices to connect to a decoy wireless network, wherein the decoy wireless network comprises one or more decoy resources;

identifying a secure wireless identifier using the client-side list of one or more secure wireless identifiers; and

automatically connecting to a secure wireless access point through the secure wireless identifier.

7. The computer program product according to claim 6 , wherein the computer-readable program code portions further comprise executable code portions for executing a secure handshake process for retrieving the pre-shared key, comprising:

connecting to a guest wireless network through a guest wireless identifier;

transmitting authentication data to an authentication server; and

receiving the pre-shared key from the authentication server.

8. The computer program product according to claim 6 , wherein the one or more decoy resources comprises at least one of decoy data or decoy virtual environments.

9. The computer program product according to claim 6 , wherein the decoy wireless network is further configured to generate a log of network interactions of the computing devices within the decoy wireless network.

10. A computer-implemented method for identification of secure wireless network access points using cryptographic pre-shared keys, wherein the computer-implemented method comprises:

generating a client-side list of one or more secure wireless identifiers by inputting a pre-shared key into a cryptographic function;

detecting that one or more wireless identifiers are being broadcasted, wherein the one or more wireless identifiers comprises one or more decoy wireless identifiers and one or more unsecured wireless identifiers, wherein the decoy wireless identifier causes computing devices to connect to a decoy wireless network, wherein the decoy wireless network comprises one or more decoy resources;

identifying a secure wireless identifier using the client-side list of one or more secure wireless identifiers; and

automatically connecting to a secure wireless access point through the secure wireless identifier.

11. The computer-implemented method according to claim 10 , wherein the computer-implemented method further comprises executing a secure handshake process for retrieving the pre-shared key, comprising:

connecting to a guest wireless network through a guest wireless identifier;

transmitting authentication data to an authentication server; and

receiving the pre-shared key from the authentication server.

12. The computer-implemented method according to claim 10 , wherein the one or more decoy resources comprises at least one of decoy data or decoy virtual environments.

13. The computer-implemented method according to claim 10 , wherein the decoy wireless network is further configured to generate a log of network interactions of the computing devices within the decoy wireless network.

14. The computer-implemented method according to claim 10 , wherein the one or more wireless identifiers comprises one or more service set identifiers (“SSID”).

Assignments (1)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Jul 20, 2021
From: SLOANE, BRANDON
To: BANK OF AMERICA CORPORATION
Reel/Frame 056915/0458 →
Continuity (1)
Related Publication 20230023649A1 · Jan 26, 2023
Cited By (7)
US 12,261,838 US 12,301,563 US 12,309,262 US 12,368,580 US 12,463,802 US 12,470,372 US 12,476,793