Custom fast session transfer security handshake

Patent metadata

Field	Value
Publication number	US-10548008-B2
Application number	US-201615223940-A
Country	US
Kind code	B2
Filing date	Jul 29, 2016
Priority date	Jul 29, 2016
Publication date	Jan 28, 2020
Grant date	Jan 28, 2020

Abstract

A method and device for authenticating wireless communication links between devices. The method may comprise sending a first frame from first device to a second device. The first frame may comprise a header and a payload containing data packets for implementing a first Extensible Authentication Protocol. A first secure link may be established between the first network interface card of the first device and the first network interface card of the second device, then an action management frame may be sent across the first link. The action management frame may comprise the header, a payload comprising a vendor-specific information element containing identifying information about the first device, and an action that instructs the second device to implement a second Extensible Authentication Protocol through a second network interface card of the second device. A second secure link may be established between the second network interface cards of each device.

First claim

What is claimed is:

1. A method for authenticating wireless communication links between devices including a plurality of network interface cards, the method comprising:
sending a first frame from a first network interface card on first device to a first network interface card on a second device, wherein the first network interface card on the first device and the first network interface card of the second device operate on a first frequency band, and wherein the first frame comprises:
a first Media Access Control (MAC) header that identifies a destination address as a MAC destination address of the first network interface card on the second device, and
a payload including data packets for implementing a first Extensible Authentication Protocol;

establishing a first secure link between the first network interface card of the first device and the first network interface card of the second device via the first Extensible Authentication Protocol across the first frequency band;
sending an action management frame to the first network interface card on the second device across the first secure link on the first frequency band, wherein the action management frame comprises;
the first MAC header,
a payload comprising;
a vendor-specific information element including:
identifying information about a second network interface card on the first device; and
data packets for implementing a second Extensible Authentication Protocol;

an action that instructs the second device to implement the second Extensible Authentication Protocol through a second network interface card of the second device, and
performing, at a Fast Session Transfer module level, a security handshake with a key generated at a WiFi Protected Access (WPA) supplicant level for a second secure link;
establishing the second secure link between the second network interface card of the first device and the second network interface card of the second device across a second frequency band.

2. The method of claim 1 , wherein the first secure link is established over either a 2.4 GHz frequency band or a 5 GHz frequency band and the second secure link is established over a 60 GHz frequency band.

3. The method of claim 2 , wherein the first device uses Custom Fast Session Transfer protocol to switch between links between the 2.4 GHz frequency band or the 5 GHz frequency band and the 60 GHz frequency band.

4. The method of claim 1 , wherein either the first device or the second device is a wireless router.

5. The method of claim 1 , wherein the action management frame is generated by local commands at a wireless driver of the first device.

6. The method of claim 1 , wherein the action that instructs the second device to implement the second Extensible Authentication Protocol utilizes a WPA supplicant at the second device to generate a key, and the key is used to perform a security handshake between the second network interface card of the first device and the second network interface card of the second device.

7. A wireless communication device comprising:
a transceiver; and
a first network interface card and a second network interface card, the first network interface card configured to:
send a first frame via the transceiver to a first network interface card of a second wireless communication device, wherein the first network interface card on the first device and the first network interface card of the second device operate on a first frequency band, and, wherein the first frame comprises:
a first Media Access Control (MAC) header that identifies a destination address as a MAC destination address of the first network interface card of the second wireless communication device, and
a payload including data packets for implementing a first Extensible Authentication Protocol;

establish a first secure link between the first network interface card of the wireless communication device and the first network interface card of the second device via the first Extensible Authentication Protocol across the first frequency band, and
send an action management frame to the first network interface card on the second device across the first secure link on the first frequency band, wherein the action management frame comprises:
the first MAC header,
a payload comprising:

a vendor-specific information element including:
identifying information about a second network interface card on the first device; and
data packets for implementing a second Extensible Authentication Protocol;

an action that instructs the second device to implement the second Extensible Authentication Protocol through a second network interface card of the second device, and
performing, at a Fast Session Transfer module level, a security handshake with a key generated at a WiFi Protected Access (WPA) supplicant level for a second secure link;
establishing the second secure link between the second network interface card of the first device and the second network interface card of the second device across a second frequency band.

8. The wireless communication device of claim 7 , wherein the first network interface card transmits over either a 2.4 GHz frequency band or a 5 GHz frequency band and the second network interface card transmits over a 60 GHz frequency band.

9. The wireless communication device of claim 8 , wherein the wireless communication device utilizes Custom Fast Session Transfer protocol to switch between links between the 2.4 GHz frequency band or the 5 GHz frequency band and the 60 GHz frequency band.

10. The wireless communication device of claim 7 , wherein the wireless communication device is a wireless router.

11. The wireless communication device of claim 7 , further comprising a processor, a memory, and a wireless driver, wherein the wireless driver is configured to generate the action management frame.

12. A non-transitory, tangible computer readable storage medium, encoded with processor readable instructions to perform a method for authenticating wireless communication links between devices including a plurality of network interface cards, the method comprising:
sending a first frame from a first network interface card on first device to a first network interface card on a second device, wherein the first network interface card on the first device and the first network interface card of the second device operate on a first frequency band, and wherein the first frame comprises:
a first Media Access Control (MAC) header that identifies a destination address as a MAC destination address of the first network interface card on the second device, and
a payload including data packets for implementing a first Extensible Authentication Protocol;

establishing a first secure link between the first network interface card of the first device and the first network interface card of the second device via the first Extensible Authentication Protocol across the first frequency band;
sending an action management frame to the first network interface card on the second device across the first secure link on the first frequency band, wherein the action management frame comprises;
the first MAC header,
a payload comprising;
a vendor-specific information element including:
identifying information about a second network interface card on the first device; and
data packets for implementing a second Extensible Authentication Protocol;

an action that instructs the second device to implement the second Extensible Authentication Protocol through a second network interface card of the second device, and
performing, at a Fast Session Transfer module level, a security handshake with a key generated at a WiFi Protected Access (WPA) supp

Assignees

• Qualcomm Atheros Inc
• Qualcomm Inc

Inventors

• Shulman Vladimir
• Kondratiev Vladimir
• Sorochkin Boris

Classifications

• H04L63/162

  at the data link layer · CPC title

• H04L67/148

  Migration or transfer of sessions · CPC title

• H04W76/15

  Setup of multiple wireless link connections · CPC title

• H04W12/06 Primary

  Authentication · CPC title

• H04L63/0236

  Filtering by address, protocol, port number or service, e.g. IP-address or URL · CPC title