Method and system for establishing a secure access connection with electronic devices

Patent metadata

Field	Value
Publication number	US-10686783-B2
Application number	US-201715433665-A
Country	US
Kind code	B2
Filing date	Feb 15, 2017
Priority date	Dec 30, 2016
Publication date	Jun 16, 2020
Grant date	Jun 16, 2020

Abstract

A technique is provided for establishing a secure access connection with electronic devices. The technique includes receiving a request for establishing the secure access connection, from an electronic device, via an access point associated with the electronic device. The technique further includes dynamically determining at least a local reputation score associated the access point, based on at least a plurality of parameters and pre-defined weights assigned to each of the plurality of parameters. The technique further includes establishing the secure access connection between the host device and the electronic device, via the access point, based on a comparison of an updated global reputation score with a pre-defined threshold. The global reputation score is updated based on the dynamically determined local reputation score.

First claim

What is claimed is:

1. A method of establishing a secure access connection with electronic devices, the method comprising:
receiving, by a connection manager of a host device, a request for establishing the secure access connection, from an electronic device, via an access point associated with the electronic device through which communication messages to and from the host device are routed;
dynamically determining, by the connection manager, at least a local reputation score associated the access point, based on at least a plurality of parameters and pre-defined weights assigned to each of the plurality of parameters, wherein the plurality of parameters comprises a combination of encryption modes used for communication via the access point, a data transfer speed associated with the access point, a delay in data transfer associated with the access point, a jitter associated with the access point, an uptime of the access point, an availability status of the access point for communication, and a number of network nodes connected to the access point;
dynamically updating, by the connection manager, the local reputation score based on at least one of a change in the plurality of parameters and a user defined time interval;
determining, by the connection manager, a global reputation score based on a weighted analysis of a user defined reputation score and previously determined local reputation scores, wherein the global reputation score is updated based on the dynamically determined local reputation score; and
establishing, by the connection manager, the secure access connection between the host device and the electronic device, via the access point, based on a comparison of the updated global reputation score with a pre-defined threshold.

2. The method of claim 1 , wherein the request for establishing the secure access connection is obtained based on a scanning of a vicinity of the host device.

3. The method of claim 1 , further comprising generating a unique identifier corresponding to the access point.

4. The method of claim 3 , further comprising storing the determined local reputation score in a local database corresponding to the generated unique identifier.

5. The method of claim 1 , further comprising retrieving a global reputation score associated with the access point, from a global database, for establishing the secure access connection.

6. The method of claim 5 , wherein the weighted analysis is based on user configurable weights.

7. A system for establishing a secure access connection with electronic devices, the system comprising:
a processor; and
a memory communicatively coupled to the processor, wherein the memory stores the processor-executable instructions, which, on execution, causes the processor to:
receive a request for establishing the secure access connection, from an electronic device, via an access point associated with the electronic device through which communication messages to and from the host device are routed;
dynamically determine at least a local reputation score associated with the access point, based on at least a plurality of parameters and pre-defined weights assigned to each of the plurality of parameters, wherein the plurality of parameters comprises a combination of encryption modes used for communication via the access point, a data transfer speed associated with the access point, a delay in data transfer associated with the access point, a jitter associated with the access point, an uptime of the access point, an availability status of the access point for communication, and a number of network nodes connected to the access point;
dynamically update the local reputation score based on at least one of a change in the plurality of parameters and a user defined time interval;
determine a global reputation score based on a weighted analysis of a user defined reputation score and previously determined local reputation scores, wherein the global reputation score is updated based on the dynamically determined local reputation score; and
establish the secure access connection between the host device and the electronic device, via the access point, based on a comparison of the updated global reputation score with a pre-defined threshold.

8. The system of claim 7 , wherein the processor is further configured to receive the request for establishing the secure access connection based on a scanning of a vicinity of the host device.

9. The system of claim 7 , the processor is further configured to generate a unique identifier corresponding to the access point.

10. The system of claim 9 , the processor is further configured to store the determined local reputation score in a local database corresponding to the generated unique identifier.

11. The system of claim 7 , the processor is further configured to retrieve a global reputation score associated with the access point, from a global database, for establishing the secure access connection.

12. The system of claim 11 , wherein the weighted analysis is based on user configurable weights.

13. The system of claim 7 , wherein the connection between host device and the electronic device is established, via an Internet of Things (IoT) gateway.

14. A non-transitory computer-readable medium storing instructions for establishing a secure access connection with electronic devices, wherein upon execution of the instructions by one or more processors, the processors perform operations comprising:
receiving a request for establishing the secure access connection, from an electronic device, via an access point associated with the electronic device through which communication messages to and from the host device are routed;
dynamically determining at least, a local reputation score associated the access point, based on at least a plurality of parameters and pre-defined weights assigned to each of the plurality of parameters, wherein the plurality of parameters comprises a combination of encryption modes used for communication via the access point, a data transfer speed associated with the access point, a delay in data transfer associated with the access point, a jitter associated with the access point, an uptime of the access point, an availability status of the access point for communication, and a number of network nodes connected to the access point;
dynamically updating the local reputation score based on at least one of a change in the plurality of parameters and a user defined time interval;
determining a global reputation score based on a weighted analysis of a user defined reputation score and previously determined local reputation scores, wherein the global reputation score is updated based on the dynamically determined local reputation score; and
establishing the secure access connection between the host device and the electronic device, via the access point, based on a comparison of the updated global reputation score with a pre-defined threshold.

Assignees

• Wipro Ltd

Inventors

• Rajagopal Harish Nair
• Sreenivasan Sujeet

Classifications

• H04L43/091

  Measuring contribution of individual network components to actual service level · CPC title

• H04W12/66

  Trust-dependent, e.g. using trust scores or trust relationships · CPC title

• H04W12/45

  using multiple identity modules · CPC title

• H04W84/12

  WLAN [Wireless Local Area Networks] · CPC title

• H04W12/08

  Access security · CPC title