Patent ID: 8001584
Filing Date: 2011-08-16
Classification: H04L

Abstract:
1. A method for obtaining a credential, comprising: transmitting a first message from a client device to a registrar device over a wireless communication channel between the client device and the registrar device to initiate a transaction, the first message to contain a first random number and a public key of the client device; receiving a second message from the registrar device, with the client device, to continue the transaction, the second message to contain a second random number and a public key of the registrar device; receiving, with the client device, a third message containing a device password proof-of-possession and a credential, the credential to be encrypted with a credential key by transmitting a first half of the device password hashed with the first random number and a second half of the device password hashed with the second random number, wherein the hashes are irreversible; decrypting the credential with the client device utilizing the first random number with the first half of the device password and the second random number with the second half of the device password; verifying, with the client device, the proof-of-possession with a device password of the client device; and if the proof-of-possession is verified, altering a configuration of the client device according to the credential, wherein the configuration enables the client device to access a wireless network securely via a wireless access point.