Broadcom Corporation

Ed Frank

Mark Leonard Buer

Richard Martin

Nambi Seshadri

Jeyhan Karaoguz

Nambirajan Seshadri

Nambi Seshardi

Techniques are provided for users to authenticate themselves to components in a system. The users may securely and efficiently enter credentials into the components. These credentials may be provided to a server in the system with strong authentication that the credentials originate from secure components. The server may then automatically build a network by securely distributing keys to each secure component to which a user presented credentials.

User authentication system

An input device with an integrated security module communicates with a processing component over an insecure medium. The insecure medium may be a wireless network, software stack, or the like. According to one embodiment, the security module is integrated into an existing chip of the input device. Data generated by the input device is encoded and/or authenticated by the security module prior its transmission to the processing device. The processing device receives the input data and processes it within its own security boundary for providing selected services or information to a user or application associated with the input device.

System and method for securing data from a remote input device

Techniques are provided to authenticate components in a system. Users may enter credentials into an input device and the credentials may be authenticated and/or securely transmitted to the components. The components may then provide the credentials to a server in the system. Strong authentication may thus be provided to the effect that credentials associated with specific users have been received from specific components in the system. The server may then enable the components to access selected services.

System and method for authentication via a proximate device

Multiple encryption in a multi-band multi-protocol hybrid wired/wireless network may include receiving on a first PHY channel of an access point, a request for initiation of a communication session from an originating access device. The received request may be acknowledged on the first PHY channel and the originating access device may be authenticated on a second PHY channel. One or more encryption/decryption keys may be provided for use during the communication session. A third PHY channel or the first or second PHY channels may host the communication session. The authentication information may be requested and delivered to the originating access device via a second PHY channel. The encryption key may be delivered to the originating access device via the first PHY channel or the second PHY channel. Additionally, information may be tunneled over a virtual channel established between the originating and a terminating access device.

Method and system for providing multiple encryption in a multi-band multi-protocol hybrid wired/wireless network

An authorized user may be provided access to a service only when a wireless token assigned to the user is in the proximity of a computing device. A user's credential may be stored on an RFID token and an RFID reader may be implemented within a security boundary on the computing device. Thus, the credential may be passed to the security boundary without passing through the computing device via software messages or applications. The security boundary may be provided, in part, by incorporating the RFID reader onto the same chip as a cryptographic processing component. Once the information is received by the RFID reader it may be encrypted within the chip. As a result, the information may never be presented in the clear outside of the chip. The cryptographic processing component may cryptographically encrypt/sign the credential received from the token.

System, method, and apparatus for allowing a service provider system to authenticate that a credential is from a proximate device

Aspects of the invention provide a system and method for bandwidth management in a hybrid wired/wireless local area network. A method for bandwidth management in a hybrid wired/wireless local area network may include receiving from a first access point and/or a first switch, a first messaging protocol message for establishing a communication session. Responsive to the first messaging protocol message, an available communication bandwidth is determined for at least a portion of the hybrid wired/wireless local area network and bandwidth is allocated to accommodate the communication session. The first access point may be notified of the allocation of bandwidth using a second messaging protocol message. The first messaging protocol message may be received by a second switch and/or a second access point. Bandwidth usage information may be requested from the first access point and/or the first switch using the first messaging protocol message.

Method and system for providing an intelligent switch for bandwidth management in a hybrid wired/wireless local area network

A method for managing resources in a hybrid wired/wireless local area network (LAN) includes reserving bandwidth for a network device. The reserving of the bandwidth is based, at least in part, on a device hierarchy established within the hybrid LAN. The hierarchy is utilized for one or more of bandwidth reservation, bandwidth sharing, and/or bandwidth allocation within the hybrid LAN. In response to a communication session associated with the network device, at least a portion of the reserved bandwidth may be allocated for use by the network device. The at least a portion of the reserved bandwidth may be used during the communication session. A request for bandwidth may be received by one or both of the network device and/or a second network device.

Method and system for providing bandwidth allocation and sharing in a hybrid wired/wireless network

Access to secured services may be controlled based on the proximity of a wireless token to a computing device through which access to the secured services is obtained. An authorized user may be provided access to a service only when a wireless token assigned to the user is in the proximity of the computing device. A user's credential may be stored on an RFID token and an RFID reader may be implemented within a security boundary on the computing device. Thus, the credential may be passed to the security boundary without passing through the computing device via software messages or applications. The security boundary may be provided, in part, by incorporating the RFID reader onto the same chip as a cryptographic processing component. Once the information is received by the RFID reader it may be encrypted within the chip. As a result, the information may never be presented in the clear outside of the chip. The cryptographic processing component may cryptographically encrypt/sign the credential received from the token so that assurance may be provided to a service provider that the credentials came from a token that was proximate to the computing device. An RFID reader, cryptographic processing components and a wireless network controller may be implemented on a single chip in a mobile device.

System and method for authenticating the proximity of a wireless token to a computing device

Aspects of the invention provide a method and system for location based configuration of a wireless access point and an access device in a hybrid wired/wireless network. A method for providing location based configuration in a hybrid wired/wireless network may include identifying a location of a network device within the hybrid wired/wireless network. Configuration information corresponding to the determined location of the network device may be determined. The determined configuration information may be communicated to the networking device in order to facilitate location based configuration of the network device. The network device may include, but is not limited to, an access device, an access point and a switching device.

Method and system for location based configuration of a wireless  access point (WAP) and an access device in a hybrid wired/wireless network

The method may include determining a protocol associated with a communication signal for an access point. A compatible processor may be allocated and selected from a pool of available processors and subsequently utilized to process the communication signal. In one aspect of the invention, a processor may be made compatible by updating it with compatible protocol code that may be used for processing the communication signal. The compatible protocol code may be downloaded to the processor from a memory. The processor may associate a particular protocol code with a particular portion of the memory. Accordingly, the protocol code may be retrieved from the memory based on the association. The processor may be a digital signal processor (DSP), which may be adapted to process 802.11a, 802.11b, 802.11g and Bluetooth protocols, for example.

System and method for providing a wireless access point (WAP) having multiple integrated transceivers for use in a hybrid wired/wireless network

Aspects of the invention provide a method and system for bandwidth allocation and sharing in a hybrid wired/wireless network. Bandwidth allocation and sharing may include reserving bandwidth for a first access device, a first access point and/or a first switch. In response to a communication session associated with one or more of the first access device, first access point and first switch, at least a portion of the reserved bandwidth may be allocated for use by the first access device, first access point and/or first switch. At least a portion of the reserved bandwidth may be utilized during the communication session. At least an unused remaining portion of the reserved bandwidth may be utilized for communication by one or more of a second access device, a second access point and a second switch.

Aspects of the invention provide a system and method for communicating in a hybrid wired/wireless local area network. A method for communicating in a hybrid wired/wireless local area network may include sending a first messaging protocol message between a first switch and a first access point, and/or the first switch and a second switch. In response to the first messaging protocol message, receiving at least a second messaging protocol message from the first access point, the first switch, and/or the second switch. The first, second, and a third messaging protocol message may be used to control the first switch, the second switch, a first access point, a second access point, and one or more access devices.

Growing community of inventors

Atherton, CA, United States of America

Ed Frank