IP Library › Granted Patent US 8,627,416
Granted Patent B2
US 8,627,416 · App. 13/525,873 · Granted Jan 7, 2014

Device-specific authorization at distributed locations

Inventors: James D. Keeler (Austin, TX); John R. Melendez (Buda, TX)
Assignee: Wayport, Inc.
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 8,627,416
App. No.
13/525,873
Granted
Jan 7, 2014
Kind
B2
Abstract

A method includes receiving, at a client device, an authentication seed from a first network. The method also includes receiving a shared secret. The method further includes, in response to receiving the authentication seed, determining a network address of the client device. The method further includes computing a result of a one-way hash function of a combination of the network address, the authentication seed, and the shared secret. The method further includes transmitting the network address and the result of the one-way hash function to a server that provides access control of a second network coupled to the first network. The method further includes receiving permission from the server to access the second network.

Claims (29)

1. A method comprising:

sending a request from a client device via a first network to a second network, wherein the first network is different from the second network;

receiving, at the client device, redirection information in response to the request, wherein the redirection information includes an authentication seed and an address of a server that provides access control of the second network;

in response to receiving the authentication seed:

obtaining a shared secret at the client device;

computing, with the client device, a result of a one-way hash function for a combination of a network address of the client device, the authentication seed, and the shared secret; and

transmitting the network address and the result to the server, wherein the server makes a determination whether the client device is authorized to access the second network based on a comparison of the result to a test case computed by the server using the one-way hash function for a combination of the network address received by the server from the computing device, the authentication seed, and a secret selected by the server; and

receiving a response to the request via the second network, the response indicating a determination by the server that the client device is authorized to access the second network.

2. The method of claim 1 , wherein transmitting the network address and the result of the one-way hash function to the server includes transmitting a remote authentication dial-in user service username that includes the network address and a remote authentication dial-in user service password that includes the result of the one-way hash function to the server.

3. The method of claim 2 , further comprising automatically attaching a realm to the remote authentication dial-in user service username, wherein the realm indicates a network provider associated with the client device.

4. The method of claim 1 , wherein the network address includes a media access control address.

5. The method of claim 1 , wherein obtaining the shared secret comprises retrieving the shared secret from a memory of the client device.

6. The method of claim 1 , wherein the first network is a local area network and wherein the second network includes an internet.

7. The method of claim 1 , wherein obtaining the shared secret comprises receiving the shared secret from a computing device coupled to the first network, the second network, or a combination thereof.

8. A device comprising:

a processor; and

a memory coupled to the processor, wherein the memory includes processor-executable instructions that, when executed by the processor, cause the processor to perform operations including:

receiving redirection information via a first network in response to a request sent by the processor via the first network to a second network, wherein the redirection information includes an authentication seed, an address of a first server that provides a secret, and an address of a second server that provides access to the second network, wherein the first network is different from the second network;

receiving the secret from the first server in response to a query sent from the processor to the first server;

determining a network address of a client device;

computing a result of a one-way hash function of a combination of the network address, the authentication seed, and the secret received from the first server;

transmitting to the second server, wherein the data includes the network address and the result, wherein the second server makes a determination whether the client device is authorized to access the second network based on a comparison of the result to a test case computed by the second server using the one-way hash function for a combination of the network address, the authentication seed, and a secret selected by the second server; and

accessing the second network in response to the determination that the client device is authorized to access the second network.

9. The device of claim 8 , wherein the data comprises a remote authentication dial-in user service username that includes the network address and a remote authentication dial-in user service password that includes the result of the one-way hash function.

10. The device of claim 9 , wherein the operations further include automatically attaching a realm to the remote authentication dial-in user service username, wherein the realm indicates a network provider associated with the client device.

11. The device of claim 8 , wherein the network address includes a media access control address.

12. The device of claim 8 , wherein the operations further include transmitting a request to the second network.

13. The device of claim 8 , wherein the secret selected by the second server is selected from a list of secrets.

14. The device of claim 8 , wherein the first server is coupled to the second network.

Assignments (1)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Jun 18, 2012
From: KEELER, JAMES D.; MELENDEZ, JOHN R.
To: WAYPORT, INC.
Reel/Frame 028396/0145 →
Continuity (3)
Continuation 12172517 · Jul 14, 2008
Provisional Application 60949404 · Jul 12, 2007
Related Publication 20120260320A1 · Oct 11, 2012