Home network access

Patent metadata

Field	Value
Publication number	US-11489693-B2
Application number	US-201816620277-A
Country	US
Kind code	B2
Filing date	Jun 8, 2018
Priority date	Jun 12, 2017
Publication date	Nov 1, 2022
Grant date	Nov 1, 2022

Abstract

A computer implemented method of a network access point for secure network access by a mobile computing device, the mobile device being associated with the access point by a digitally signed record in a blockchain wherein the blockchain is accessible via a network and includes a plurality of records validated by miner computing components, the method including receiving a request from another network access point to associate the mobile device with the other access point, the request having associated identification information for the mobile device; responsive to a verification of an entitlement of the mobile device to access the network, generating a new record for storage in the blockchain, the new record associating the mobile device with the other access point and being validated by the miner components such that the other access point provides access to the network for the mobile device based on the validation of the new record, wherein the network access point provides access to a local network inaccessible to the other network access point; and permitting access to the local network by the mobile device via the other network access point.

First claim

The invention claimed is:

1. A computer implemented method of a first network access point for secure network access by a mobile computing device, the mobile computing device being associated with the first network access point by a digitally signed record in a blockchain, wherein the blockchain is accessible via a network and includes a plurality of records validated by miner computing components, the method comprising:
receiving a request from a second network access point to associate the mobile computing device with the second network access point, the request having associated identification information for the mobile computing device;
responsive to a verification of an entitlement of the mobile computing device to access the network, generating a new record for storage in the blockchain, the new record associating the mobile computing device with the second network access point and being validated by the miner computing components such that the second network access point provides access to the network for the mobile computing device based on validation of the new record,
wherein the first network access point provides access to a local network inaccessible to the second network access point, and the method further comprises:
permitting access to the local network by the mobile computing device via the second network access point.

2. The method of claim 1 , wherein the new record for storage in the blockchain includes a reference to an original record for the mobile computing device such that the new record supersedes the original record to associate the mobile computing device with the second network access point.

3. The method of claim 1 , wherein the entitlement of the mobile computing device is verified based on the identification information for the mobile computing device.

4. The method of claim 1 , wherein each of the first network access point and the second network access points is a wired or wireless network router.

5. The method of claim 1 , wherein at least some of the miner computing components are one or more of: network appliances; or network access points.

6. The method of claim 1 , wherein the blockchain is a distributed transactional database.

7. The method of claim 1 , wherein the miner computing components confirm a state of the blockchain by reaching a consensus as to the state of the blockchain based on a proof of work.

8. The method of claim 1 , wherein the identification information is a digital signature provided by the mobile computing device and signed using a private key.

9. The method of claim 1 , wherein, further responsive to the verification, network access by the mobile computing device is provided exclusively by the second network access point.

10. The method of claim 1 , wherein permitting access to the local network by the mobile computing device via the second network access point includes adjusting one or more of: a firewall; network access rules; port rules; or access control rules.

11. A computer system comprising:
a processor and memory storing computer program code for a first network access point for secure network access by a mobile computing device, the mobile computing device being associated with the first network access point by a digitally signed record in a blockchain, wherein the blockchain is accessible via a network and includes a plurality of records validated by miner computing components, by:
receiving a request from a second network access point to associate the mobile computing device with the second network access point, the request having associated identification information for the mobile computing device;
responsive to a verification of an entitlement of the mobile computing device to access the network, generating a new record for storage in the blockchain, the new record associating the mobile computing device with the second network access point and being validated by the miner computing components such that the second network access point provides access to the network for the mobile computing device based on validation of the new record,
wherein the first network access point provides access to a local network inaccessible to the second network access point, and the method further comprises:
permitting access to the local network by the mobile computing device via the second network access point.

12. A non-transitory computer-readable storage medium storing a computer program element comprising computer program code to, when loaded into a computer system and executed thereon, cause the computer system to provide secure network access by a mobile computing device, the mobile computing device being associated with a first network access point by a digitally signed record in a blockchain, wherein the blockchain is accessible via a network and includes a plurality of records validated by miner computing components, by:
receiving a request from a second network access point to associate the mobile computing device with the second network access point, the request having associated identification information for the mobile computing device;
responsive to a verification of an entitlement of the mobile computing device to access the network, generating a new record for storage in the blockchain, the new record associating the mobile computing device with the second network access point and being validated by the miner computing components such that the second network access point provides access to the network for the mobile computing device based on validation of the new record,
wherein the first network access point provides access to a local network inaccessible to the second network access point, and the method further comprises:
permitting access to the local network by the mobile computing device via the second network access point.

Assignees

• British Telecomm

Inventors

• Daniel Joshua
• Kearney Paul

Classifications

• H04L9/50

  using hash chains, e.g. blockchains or hash trees · CPC title

• H04L9/3239

  involving non-keyed hash functions, e.g. modification detection codes [MDCs], MD5, SHA or RIPEMD · CPC title

• H04W12/04

  Key management, e.g. using generic bootstrapping architecture [GBA] · CPC title

• H04L9/3247

  involving digital signatures · CPC title

• H04L63/0263

  Rule management · CPC title