At&t Intellectual Property I, LP

At+t Corp.

Cypress Semiconductor Corporation

Broadcom Corporation

Sony Corporation

Other

Google Inc.

Hui Luo

Paul Shala Henry

Zhimei Jiang

Jack Winters

Byoung-Jo J Kim

Li Fung Chang

Kin K Leung

Nelson Ray Sollenberger

Hongwei Kong

Nemmara K Shankaranarayanan

Xianmin Wang

Xiaoxin Qiu

Frederick Kenneth Schmidt, Jr

Yang-Seok Choi

Andreas F Molisch

Moe Z Win

Sridhar Prakasam

Kaiping Li

Sungeun Lee

Srirang Ashok Lovlekar

Meng-Ju Lin

Bruce Edwin Mcnair

Kamesh Medapalli

Kiran Uln

Saishankar Nandagopalan

Hans Van Antwerpen

Bruce E McNair

Yun-Ting Lin

Siu-Leong Iu

Guillaume Mercier

Kalyan Dharanipragada

Rakesh Taori

Kobad Bugwadia

Kameswara Medapalli

Malcom Davis

Xiaoxin Qui

Toby Crandall

A method for receiving, by an ambient power (AMP) device that harvests environmental energy, an identification (ID) request frame from a powered wireless device. The ID request frame includes one or more frame-exchange parameters and an authentication and key management (AKM) method. The method includes retrieving, from memory, a secret that is shared with the powered wireless device, determining, using the secret, one or more first AKM parameters, and transmitting, to the powered wireless device, by the AMP device, an ID response frame including an ID of the AMP device, at least one of the one or more frame-exchange parameters and the one or more AKM parameters with which the powered wireless device is to be mutually authenticated with the AMP device and to generate an encryption key to initiate an encrypted wireless communication session.

Mutual authentication and encryption key generation in wireless ambient power (AMP) devices

Implementations disclosed describe techniques to allow wireless devices to initially connect with randomized MAC addresses and send an encrypted permanent MAC for differentiated services. In one method, a first wireless device connects to an access point (AP) using a randomized MAC address. The first wireless device receives a request for a permanent MAC address from the AP. The first wireless device determines whether to send the permanent MAC address. Responsive to determining to send the permanent MAC address, the first wireless device encrypts the permanent MAC address to obtain an encrypted MAC address and sends a response to the request, including the encrypted MAC address, to the AP.

Media access control (MAC) address privacy handling

A method can include, by operation of a wireless device, determining at least one set of wireless channel candidates from available wireless channels of at least one wireless standard; determining a network information value accessible to devices of a wireless network; generating a selection value with an arithmetic-logic operation on the network information value; selecting a plurality of wireless channels from the at least one set of wireless channel candidates with the selection value to determine a discovery wireless channel set; and transmitting or receiving on all channels of the discovery wireless channel set in a wireless network discovery operation for the wireless network. Corresponding devices and systems are also disclosed.

Wireless service discovery methods, devices and systems

A signature graph method is proposed to authenticate shared high-entropy data using a graph that can be easily identified by human eyes (or by computer image recognition algorithms). An example method for authenticating a shared data element comprises receiving a data element to be shared; transforming the data element to be shared into signature graph data, using at least one collision-resistant one-way mapping function; and rendering a human-perceptible representation of the signature graph data, such as an audible and/or visual representation, for perception by a human user. In some embodiments, transforming the data element comprises applying a cryptographic hash function to the data element, to obtain a first hash output, and applying a cryptographic hash function to the first hash output, to obtain the signature graph data.

Signature graph method for enabling human authentication of high-entropy data

A method can include, by operation of a configuring device: storing user network information in the configuring device; receiving wireless communications from a target device; authenticating the target device; indicating a pointing direction for the configuring device; executing a wireless positioning operation with the target device to generate positioning data. In response to the configuring device being determined to be pointing at the target device, automatically configuring the target device for the user network with the stored user network information. Corresponding methods for a configuring device, as well as devices and systems are also disclosed.

Methods, devices and systems for automatically adding devices to network using wireless positioning techniques

A method can include, in an access point (AP) configured to control data transfers for associated stations (STAs) in time intervals, storing a unique identifier and quality-of-service (QoS) requirement for each STA of a first set in a nonvolatile memory of the AP. In response to a STA associating with the AP, if the associating STA is in the first set, allocating time for the STA in the time intervals to meet the QoS requirement of the STA without receiving transmitted QoS data from the STA, and if the associating STA is not in the first set, establishing a QoS for the STA having a lower priority than any associated STAs of the first set. Corresponding systems and devices are also disclosed.

Methods, systems and devices for providing differentiated quality of service for wireless communication devices

A method can include, by operation of a station wireless device (STA): receiving a plurality of different broadcast transmissions, determining an air time availability of each of a plurality of access point devices (APs) from data included within the broadcasts, for each of the plurality of APs, estimating a data rate for the STA with respect to the AP from traffic data included in at least one broadcast transmission from the AP, selecting one AP from the plurality of APs based on predetermined traffic metrics for the plurality of APs, and associating with the selected AP. Corresponding devices and systems are also disclosed.

Devices, systems and methods for throughput oriented association with access point devices

In general, techniques are described by which to perform secure fine time measurement for wireless communication protocols. An initiating station comprising wireless communication circuitry may be configured to perform the techniques. The wireless communication circuitry may be configured to receive, in accordance with a wireless networking protocol for communicating between the initiating station and a responding station, a first fine time measurement specifying a first time. The wireless communication circuitry may also be configured to receive, in accordance with the wireless networking protocol and for the corresponding first time, a first message integrity code. The wireless communication circuitry may next be configured to authenticate, based on the first message integrity code, the responding station to establish that the fine time measurement is from a trusted responding station.

Secure fine time measurement for wireless communication protocols

A device may generate network profile data indicating a set of network parameters detected by the device. The device may encrypt the network profile data and may transmit the encrypted network profile data to a network device, such as a router, or a server. The router or server may analyze the encrypted network profile data to determine if the device is secure. The router of server may perform one or more security measures if the device is not secure.

Generating and analyzing network profile data

A method includes comparing a first battery life value of a first wireless device with a second battery life value of a second wireless device, and in response to determining, based on the comparing, that the first battery life value is less than the second battery life, adjusting a communication schedule so a duration of awake state operation of the first wireless device is less than a duration of awake state operation of the second wireless device.

Apparatus, systems, and methods for battery life based wireless communication scheduling

A method can include, by operation of a user device, receiving beacon data via a wireless signal. Beacon data can include unencrypted data that includes a key identification (ID) corresponding to a private key/public key pair, a time value, and a location value. Beacon data can also include encrypted data that includes at least a beacon ID, a beacon time value, and a beacon location value. If the unencrypted time value is within a predetermined range of a current time value of the user device, the beacon data can be stored in a user record with a user ID. Periodically, the user record can be uploaded to a tracking system. Corresponding devices and systems are also disclosed.

Devices, systems and methods for close contact tracing with strong privacy protection

A method includes transmitting one or more segments of a security certificate on a wireless advertising channel of a peripheral device, where at least one of the segments of the security certificate identifies an authentication server, participating in a public key exchange between the peripheral device and a host device by transmitting a signed public key of the peripheral device, where the signed public key is signed in the security certificate, and transmitting one or more encrypted messages from the peripheral device to the host device via a first secure connection established based on the public key.

Secure BLE just works pairing method against man-in-the-middle attack

Devices, systems and methods use a first communication interface to connect with a local device via a first protocol and use a second communication interface to connect with a server via a second protocol. Embodiments relay secure communications between the local device and the server for authentication of the at least one local device by the server and responsive to authentication of the local device by the server, transmit information for storage in a secure memory of the authenticated local device.

Devices, systems and methods for connecting and authenticating local devices to common gateway device

Growing community of inventors

Marlboro, NJ, United States of America

Hui Luo