Provision of access to a network

Patent metadata

Field	Value
Publication number	US-10601824-B2
Application number	US-201715806592-A
Country	US
Kind code	B2
Filing date	Nov 8, 2017
Priority date	Nov 8, 2016
Publication date	Mar 24, 2020
Grant date	Mar 24, 2020

Abstract

Disclosed is a method for granting access for a device to a private local network with a gateway device. The method includes: establishing a connection over the gateway device, wherein a request for accessing the private local network is transmitted; transmitting information on the device; receiving a request for preparing a setup of an authentication procedure; generating a pair of authentication keys; providing one of the generated authentication keys to the device requesting the access to the private local network; initiating the authentication procedure; granting access to the private local network for the device in response to a successful authentication procedure. The invention also relates to a gateway device, a computer program product and a system.

First claim

What is claimed is:

1. A method for granting access for an accessing device to a private local network with a gateway device, the method comprising:
establishing, between the accessing device and a server, a connection over the gateway device, a request for accessing the private local network being transmitted from the accessing device to the server by the gateway device;
transmitting information on the accessing device from the server to a master device by the gateway device;
receiving, from the master device, a request for preparing a setup of an authentication procedure;
generating a pair of authentication keys by the gateway device;
providing, by the gateway device, one of the generated authentication keys to the accessing device;
initiating, by the gateway device, the authentication procedure, the one of the generated authentication keys being received from the accessing device; and
granting access, by the gateway device, to the private local network for the accessing device in response to a successful authentication procedure performed with the authentication keys.

2. The method of claim 1 , wherein the request for accessing the private local network comprises a network address of the server stored in a memory of the accessing device.

3. The method of claim 1 , wherein the request for accessing the private local network comprises an identifier of the accessing device.

4. The method of claim 1 , wherein an indicator to set up an authentication framework between the accessing device and the server is detected from the request for establishing the connection.

5. The method of claim 4 , wherein the setting up of the authentication framework is performed in response to a detection of the indicator to set up the authentication framework.

6. The method of claim 5 , wherein the authentication framework is an extensible authentication protocol (EAP).

7. The method of claim 1 , wherein the initiation of the authentication procedure by the gateway device is performed in response to a receipt of an instruction message from the master device to initiate the authentication procedure.

8. The method of claim 1 , wherein the initiation of the authentication procedure by the gateway device is performed according to a timing scheme received from the server through the master device.

9. The method of claim 1 , wherein, during the authentication procedure, the provided key is received by the gateway device from the accessing device.

10. A gateway device for granting access for an accessing device to a private local network, the gateway device comprising:
at least one processor; and
at least one memory including computer program code;
wherein the at least one memory and the computer program code are configured to, with the at least one processor, cause the gateway device to:
establish, between the accessing device and a server, a connection, a request for accessing the private local network being transmitted from the accessing device to the server,
transmit information on the accessing device from the server to a master device,
receive, from the master device, a request for preparing a setup of an authentication procedure,
generate a pair of authentication keys,
provide one of the generated authentication keys to the accessing device,
initiate the authentication procedure, the one of the generated authentication keys being received from the accessing device, and
grant access to the private local network for the accessing device in response to a successful authentication procedure performed with the authentication keys.

11. The gateway device of claim 10 , wherein the gateway device is configured to determine a network address of the server from the request for accessing the private local network.

12. The gateway device of claim 10 , wherein the request for accessing the private local network comprises an identifier of the accessing device.

13. The gateway device of claim 10 , wherein the gateway device is configured to detect an indicator to set up an authentication framework between the accessing device and the server from the request for establishing the connection.

14. The gateway device of claim 13 , wherein the gateway device is configured to set up the authentication framework in response to a detection of the indicator to set up the authentication framework.

15. The gateway device of claim 14 , wherein the gateway device is configured to set up an extensible authentication protocol (EAP) as the authentication framework.

16. The gateway device of claim 10 , wherein the gateway device is configured to perform the initiation of the authentication procedure in response to a receipt of an instruction message from the master device to initiate the authentication procedure.

17. The gateway device of claim 10 , wherein the gateway device is configured to perform the initiation of the authentication procedure according to a timing scheme received from the server through the master device.

18. The gateway device of claim 10 , wherein the gateway device is configured to receive the provided key from the accessing device during the authentication procedure.

19. A computer program product comprising at least one non-transitory computer-readable storage medium having computer-executable program code instructions stored therein for performing the method of claim 1 when the computer program product is executed on a computer.

20. A system for granting access for an accessing device to a private local network, the system comprising:
a gateway device;
a server configured to connect with the accessing device over the gateway device, a request for accessing the private local network being transmitted from the accessing device and received at the server by the gateway device; and
a master device configured to receive information on the accessing device transmitted from the server to the master device by the gateway device, the master device being configured to transmit a request for preparing a setup of an authentication procedure,
wherein the gateway device is configured to generate a pair of authentication keys, one of the generated authentication keys being provided to the accessing device by the gateway device, the authentication procedure being initiated by the gateway device, the one of the generated authentication keys being received from the accessing device, and
the accessing device is configured to be granted access to the private local network in response to a successful authentication procedure performed with the authentication keys.

Assignees

• Telia Co Ab

Inventors

• Huber Michael
• Magnusson Nils-Goran
• Wester Per-Ola J

Classifications

• H04L63/0272

  Virtual private networks · CPC title

• H04L63/101

  Access control lists [ACL] · CPC title

• H04L63/0281

  Proxies · CPC title

• H04L63/0876 Primary

  based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint · CPC title

• H04L9/08

  Key distribution {or management, e.g. generation, sharing or updating, of cryptographic keys or passwords (network architectures or network communication protocols for supporting key management in a packet data network H04L63/06)} · CPC title