Patent ID: 7941663

Claim:
A method of authenticating a wireless device, comprising: configuring an authentication server and the wireless device with a pre-shared key (PSK); sending by the authentication server a first extensible authentication protocol (EAP) request message encapsulated in a wireless personal area network standard packet, the first EAP request message comprising an EAP header and a data portion comprising an identity of the authentication server and a server random nonce; determining by the wireless device a plurality of keys based on the PSK, the identity of the authentication server, and the server random nonce; determining by the wireless device a first message integrity code (MIC) based on the identity of the authentication server, the server random nonce, and one of the plurality of keys determined based on the PSK; sending by the wireless device a first EAP response message encapsulated in the wireless personal area network standard packet, the first EAP response message comprising an EAP header and a data portion comprising a client random nonce, a selected cipher suite identity, and the first message integrity code (MIC); determining by the authentication server a second MIC based on the identity of the authentication server, the server random nonce, and one of the plurality of keys determined based on the PSK; and determining by the authentication server that the wireless device passes authentication based in part on comparing the second MIC with the first MIC contained in the first EAP response message.