Network access point

Patent metadata

Field	Value
Publication number	US-11539701-B2
Application number	US-201816620355-A
Country	US
Kind code	B2
Filing date	Jun 8, 2018
Priority date	Jun 12, 2017
Publication date	Dec 27, 2022
Grant date	Dec 27, 2022

Abstract

A computer implemented method of a network access point for secure network access by a mobile computing device, the mobile device being associated with the access point by a digitally signed record in a blockchain wherein the blockchain is accessible via a network and includes a plurality of records validated by miner computing components, the method including receiving a request from another network access point to associate the mobile device with the other access point, the request having associated identification information for the mobile device; responsive to a verification of an entitlement of the mobile device to access the network, generating a new record for storage in the blockchain, the new record associating the mobile device with the other access point and being validated by the miner components such that the other access point provides access to the network for the mobile device based on the validation of the new record.

First claim

The invention claimed is:

1. A computer implemented method of a first network access point for secure network access by a mobile computing device, the mobile computing device being associated with the first network access point by a digitally signed record in a blockchain, wherein the blockchain is accessible via a network and includes a plurality of records validated by miner computing components, the method comprising:
receiving, by the first network access point, a request from a second network access point to associate the mobile computing device with the second network access point, the request having associated identification information for the mobile computing device; and
responsive to a verification, by the first network access point, of an entitlement of the mobile computing device to access the network, generating, by the first network access point, a new record for storage in the blockchain, the new record associating the mobile computing device with the second network access point and being validated by the miner computing components such that the second network access point provides access to the network for the mobile computing device based on the validation of the new record.

2. The method of claim 1 , wherein the new record for storage in the blockchain includes a reference to an original record for the mobile computing device such that the new record supersedes the original record to associate the mobile computing device with the second network access point.

3. The method of claim 1 , wherein the entitlement of the mobile computing device is verified based on the identification information for the mobile computing device.

4. The method of claim 1 , wherein each of the first network access point and the second network access point is a wired or wireless network router.

5. The method of claim 1 , wherein at least some of the miner computing components are one or more of: network appliances; or network access points.

6. The method of claim 1 , wherein the blockchain is a distributed transactional database.

7. The method of claim 1 , wherein the miner computing components confirm a state of the blockchain by reaching a consensus as to the state of the blockchain based on a proof of work.

8. The method of claim 1 , wherein the identification information is a digital signature provided by the mobile computing device and signed using a private key.

9. The method of claim 1 , wherein, further responsive to the verification, network access by the mobile computing device is provided exclusively by the second network access point.

10. A computer system comprising:
a processor and memory storing computer program code for a first network access point for secure network access by a mobile computing device, the mobile computing device being associated with the first network access point by a digitally signed record in a blockchain, wherein the blockchain is accessible via a network and includes a plurality of records validated by miner computing components, by:
receiving, by the first network access point, a request from a second network access point to associate the mobile computing device with the second network access point, the request having associated identification information for the mobile computing device; and
responsive to a verification, by the first network access point, of an entitlement of the mobile computing device to access the network, generating, by the first network access point, a new record for storage in the blockchain, the new record associating the mobile computing device with the second network access point and being validated by the miner computing components such that the second network access point provides access to the network for the mobile computing device based on the validation of the new record.

11. A non-transitory computer-readable storage medium storing a computer program element comprising computer program code to, when loaded into a computer system and executed thereon, cause the computer system to provide secure network access by a mobile computing device, the mobile computing device being associated with a first network access point by a digitally signed record in a blockchain, wherein the blockchain is accessible via a network and includes a plurality of records validated by miner computing components, by:
receiving, by the first network access point, a request from a second network access point to associate the mobile computing device with the second network access point, the request having associated identification information for the mobile computing device; and
responsive to a verification, by the first network access point, of an entitlement of the mobile computing device to access the network, generating, by the first network access point, a new record for storage in the blockchain, the new record associating the mobile computing device with the second network access point and being validated by the miner computing components such that the second network access point provides access to the network for the mobile computing device based on the validation of the new record.

Assignees

• British Telecomm

Inventors

• Daniel Joshua

Classifications

• G06F16/27

  Replication, distribution or synchronisation of data between databases or within a distributed database system; Distributed database system architectures therefor · CPC title

• H04L9/50

  using hash chains, e.g. blockchains or hash trees · CPC title

• H04W88/08

  Access point devices · CPC title

• H04W12/08

  Access security · CPC title

• H04L9/3247

  involving digital signatures · CPC title