System and method for automatic wireless network authentication

Patent metadata

Field	Value
Publication number	US-9838390-B2
Application number	US-201514675715-A
Country	US
Kind code	B2
Filing date	Mar 31, 2015
Priority date	Mar 31, 2015
Publication date	Dec 5, 2017
Grant date	Dec 5, 2017

Abstract

A system and method are described for connecting an IoT device to a wireless router and/or access point. For example, one embodiment of a system comprises: an Internet of things (IoT) hub to collect network credentials required to connect with a wireless access point or router; the IoT hub to securely store the network credentials in a local or remote credentials database along with identification data identifying a user account and/or the wireless access point or router; a new IoT device to establish a connection with the IoT hub, another IoT device, and/or a user data processing device; the new IoT device to transmit a request for network credentials to establish a connection with the wireless access point or router; the IoT hub, IoT device and/or user data processing device to provide connectivity to the credentials database on behalf of the new IoT device, to receive the network credentials from the credentials database and to provide the network credentials to the new IoT device; and the new IoT device to automatically use the network credentials to establish a connection with the wireless access point or router.

First claim

What is claimed is:

1. A method comprising:
maintaining secure connectivity between an Internet of Things (IoT) cloud service and a plurality of IoT devices and IoT apps installed on mobile devices of end users;
establishing a first secure communication channel between the IoT cloud service and a first IoT device of a first user or an IoT app installed on a mobile device of the first user;
securely transmitting from the first IoT device or the IoT app installed on the mobile device to the IoT cloud service a first WiFi network key associated with the first user's WiFi network;
establishing a second secure communication channel between a second IoT device and the IoT cloud service through the IoT app installed on the mobile device or through the first IoT device, the second secure communication channel including a first communication link between the second IoT device and the first IoT device or the mobile device, the first communication link utilizing a first wireless communication protocol which is different from a second wireless protocol used by the WiFi network, the first IoT device or the mobile device to use the first wireless communication protocol to establish the first communication link with the second IoT device and to concurrently use the second wireless communication protocol to establish a second communication link with the WiFi network, the second IoT device to establish the second secure communication channel with the IoT cloud service using both the first communication link and the second communication link; and
transmitting a request for the first WiFi network key usable on the first user's WiFi network, the IoT cloud service to associate the second IoT device with the first user's account and to transmit the first WiFi network key to the second IoT device through the IoT app installed on the mobile device of the first user or through the first IoT device, the first WiFi network key to be passed across the first communication link and the second communication link; and
using the first WiFi network key to establish a secure connection by the second IoT device on the first user's WiFi network.

2. The method as in claim 1 wherein the credentials database comprises a remote credentials database, the method further comprising:
securely storing WiFi network keys for WiFi networks of different users, including the first WiFi network key, in a secure database maintained on the IoT cloud service receiving the WiFi network keys from the IoT devices, IoT apps installed on users' mobile devices, or IoT hubs, the IoT cloud service securely storing the WiFi network keys in the secure database.

3. The method as in claim 2 wherein the IoT cloud service receives the request for the IoT network keys from an IoT hub, of the first user, the first IoT device, and/or the IoT app installed on the first user's mobile device and responsively performs a lookup in the secure database using the identity of the first user, the identity of the second IoT device, and/or the identity of an access point or router associated with the first WiFi network key, the IoT cloud service providing the first WiFi network key to the IoT hub of the first user, the first IoT device, and/or the IoT app on the first user's mobile device, the IoT hub of the first user, the first IoT device, and/or the IoT app on the first user's mobile device to provide the first WiFi network key to the second IoT device.

4. The method as in claim 2 further comprising:
a credentials management module on the IoT hub of the first user establishing a secure connection to a credentials management module on the IoT cloud service to provide the first WiFi network key to the IoT cloud service.

5. The method as in claim 4 further comprising:
a network registration module on the second IoT device connecting with the credentials management module on the IoT hub of the first user to send the request for the first WiFi network key and to receive the first WiFi network key from the IoT hub of the first user.

6. The method as in claim 4 further comprising:
attempting to connect with the IoT hub of the first user, the first IoT device, and the IoT app installed on the mobile device of the first user in a prioritized order.

7. The method as in claim 6 wherein the prioritized order comprises first attempting to connect with the IoT hub of the first user and, if a reliable connection is unavailable, then attempting to connect with the first IoT device and/or the IoT app installed on the mobile device of the first user.

8. The method as in claim 1 wherein the request for the first WiFi network key comprises identification data uniquely identifying the wireless access point or router.

9. The method as in claim 8 wherein the identification data comprises a MAC address and/or SSID of the wireless access point or router.

10. The method as in claim 1 wherein the local wireless connection comprises a Bluetooth Low Energy (BTLE) connection.

11. A system comprising:
an Internet of Things (IoT) cloud service to maintain secure connectivity with a plurality of IoT devices and IoT apps installed on mobile devices of end users;
a first IoT device of a first user or an IoT app installed on a mobile device of the first user to establish a first secure communication channel with the IoT cloud service and to securely transmit to the IoT cloud service a first WiFi network key associated with the first user's WiFi network;
a second IoT device to establish a second secure communication channel with the IoT cloud service through the IoT app installed on the mobile device or through the first IoT device, the second secure communication channel including a first communication link between the second IoT device and the first IoT device or the mobile device, the first communication link utilizing a first wireless communication protocol which is different from a second wireless protocol used by the WiFi network, the first IoT device or the mobile device to use the first wireless communication protocol to establish the first communication link with the second IoT device and to concurrently use the second wireless communication protocol to establish a second communication link with the WiFi network, the second IoT device to establish the second secure communication channel with the IoT cloud service using both the first communication link and the second communication link; and
the second IoT device to transmit a request for the first WiFi network key usable on the first user's WiFi network, the IoT cloud service to associate the second IoT device with the first user's account and to transmit the first WiFi network key to the second IoT device through the IoT app installed on the mobile device of the first user or through the first IoT device, the first WiFi network key to be passed across the first communication link and the second communication link; and
the second IoT device to automatically use the first WiFi network key to establish a secure connection on the first user's WiFi network.

12. The system as in claim 11 further comprising:
a secure database maintained on the IoT cloud service to securely store WiFi network keys for WiFi networks of different users, including the first WiFi network key, the IoT cloud service to receive the WiFi network keys from the IoT devices, IoT apps installed on users' mobile devices, or IoT hubs, the IoT cloud service to securely store the WiFi network keys in the secure database.

13. The system as in claim 12 wherein the IoT cloud service is configured to receive the request for the first WiFi network key from an IoT hub of the first user, the first IoT device, and/or the IoT app installed on t

Assignees

• Afero Inc

Inventors

• Zakaria Omar

Classifications

• H04L63/0884 Primary

  by delegation of authentication, e.g. a proxy authenticates an entity to be authenticated on behalf of this entity vis-à-vis an authentication entity · CPC title

• H04W4/80

  Services using short range communication, e.g. near-field communication [NFC], radio-frequency identification [RFID] or low energy communication · CPC title

• H04W84/12

  WLAN [Wireless Local Area Networks] · CPC title

• H04L41/0886

  Fully automatic configuration · CPC title

• H04W4/70

  Services for machine-to-machine communication [M2M] or machine type communication [MTC] · CPC title