Password and policy based device independent authentication

Abstract

An electronic device is described that selectively grants secure access to a network by a second electronic device. The electronic device receives an access request associated with a computer, where the access request includes password parameters associated with a user, and the password parameters include inputs and outputs of cryptographic calculations. In response, the electronic device computes one or more second outputs that encrypt the computation based at least in part on the input and the one or more stored passwords. Further, when there is a match between one of the one or more second outputs and the output, the electronic device accesses a policy associated with the user. Then, when one or more criteria associated with the policy are satisfied, the electronic device selectively provides an access acceptance message to the computer, the access acceptance message including information for establishing secure access to the second electronic device.

Description

[0001] background technical field [0002] The described embodiments relate to techniques for authenticating one or more devices to a dynamic personal area network (PAN) in a network based on a password and a policy associated with the network, such as a policy for a location associated with the one or more devices . Background technique [0003] Many electronic devices are capable of wirelessly communicating with other electronic devices. Specifically, these electronic devices may include network subsystems that implement network interfaces for cellular networks (UMTS, LTE, etc.), wireless local area networks (eg, as described in the Institute of Electrical and Electronics Engineers (IEEE) 802.11 standard) Wireless network or Bluetooth from the Bluetooth Special Interest Group in Kirkland, Washington), and / or another type of wireless network. For example, many electronic devices communicate with each other via a wireless local area network (WLAN) using an IEEE 802.11 comp...

AI Technical Summary

Problems solved by technology

[0006] However, this approach poses other challenges, such as how to distribute and use encrypted information (such as a password, sometimes called a dynamic pre-shared key or DPSK) to a given electronic device in a given PAN, enabling the establishment of secure connection

For example, in some existing approaches, a given electronic device in a PAN has a separate password associated with the given electronic device, which can make the onboarding of the electronic device cumbersome and time-consuming, or may require Complex registration process for electronic devices in

Also, password management can be complicated in these methods

Images