公开(公告)号：US20140237247A1

公开(公告)日：2014-08-21

申请号：US14263148

申请日：2014-04-28

Applicant: Cisco Technology, Inc.

Inventor： Nancy C. Winget ,  Hao Zhou ,  Mark Krischer ,  Joseph Salowey ,  Jeremy Stieglitz ,  Saar Gillai ,  Padmanabha Jakkahalli

IPC: H04L29/06 ,  H04L9/08

CPC classification number: H04L63/08 ,  H04L9/0838 ,  H04L63/0435 ,  H04L63/0442 ,  H04L63/0869 ,  H04L63/1458 ,  H04W12/0023 ,  H04W12/02 ,  H04W12/08 ,  H04W12/12

Abstract: System architecture and corresponding method for securing communication via a network (e.g. IEEE 802.11) is provided. In accordance with one embodiment, the present system and method protocol, may be suitably configured to achieve mutual authentication by using a shared secret to establish a tunnel used to protect weaker authentication methods (e.g. user names and passwords). The shared secret, referred to in this embodiment as the protected access credential may be advantageously used to mutually authenticate a server and a peer upon securing a tunnel for communication via a network. The present system and method disclosed and claimed herein, in one aspect thereof, comprises the steps of 1) providing a communication implementation between a first and a second party; 2) provisioning a secure credential between the first and the second party; and 3) establishing a secure tunnel between the first and the second party using the secure credential.

Abstract translation: 提供了用于通过网络（例如IEEE 802.11）保护通信的系统架构和相应的方法。 根据一个实施例，本系统和方法协议可以被适当地配置为通过使用共享秘密来建立用于保护较弱认证方法（例如，用户名和密码）的隧道来实现相互认证。 在本实施例中被称为受保护的访问凭证的共享秘密可以有利地用于在保护用于经由网络进行通信的隧道的相互认证服务器和对等体之间。 在本文中公开和要求保护的本系统和方法在其一个方面包括以下步骤：1）提供第一方和第二方之间的通信实现; 2）在第一方和第二方之间提供安全证书; 以及3）使用安全证书在第一方和第二方之间建立安全隧道。