System and method for protecting network management frames

    公开(公告)号:AU2004307715A1

    公开(公告)日:2005-05-06

    申请号:AU2004307715

    申请日:2004-09-07

    Applicant: CISCO TECH INC

    Abstract: System architecture and corresponding method for securing the transmission of management frame packets on a network (e.g. IEEE 802.11) is provided. Once a trust relationship is created between a transmitter and a receiver on the network such that the transmitter is authorized to communicate over the network, a key and corresponding message integrity check may be generated in order to sign management frame communications via the network. The message integrity check and a replay protection value may be transmitted with the management frame packet. Upon receipt, the message integrity check and replay protection value are authenticated to verify permitted transmission of the management frame packet.

    SYSTEM AND METHOD FOR PROTECTING NETWORK MANAGEMENT FRAMES

    公开(公告)号:CA2541817A1

    公开(公告)日:2005-05-06

    申请号:CA2541817

    申请日:2004-09-07

    Applicant: CISCO TECH INC

    Abstract: System architecture and corresponding method for securing the transmission of management frame packets on a network (e.g. IEEE 802.11) is provided. Once a trust relationship is created between a transmitter and a receiver on the network such that the transmitter is authorized to communicate over the network, a key and corresponding message integrity check may be generated in order to sign management frame communications via the network. The message integrity check and a replay protection value may be transmitted with the management frame packet. Upon receipt, the message integrity check and replay protection value are authenticated to verify permitted transmission of the management frame packet.

    NAMING OF 802.11 GROUP KEYS TO ALLOW SUPPORT OF MULTIPLE BROADCAST AND MULTICAST DOMAINS

    公开(公告)号:CA2542161A1

    公开(公告)日:2005-05-06

    申请号:CA2542161

    申请日:2004-09-16

    Applicant: CISCO TECH INC

    Abstract: A method for transmitting multicast messages where a group key is generated for signing the multicast message transmitted on a network. Next, the system establishes a group key name corresponding to the group key. Once the group key name is established, the data packet is transmitted together with the group key name, the group key and the multicast message. Upon receipt, the recipient validates the group key name in the received data packet by comparing the received group key name to a group key name table in order to determine the intended group recipients.

    Naming of 802.11 group keys to allow support of multiple broadcast and multicast domains

    公开(公告)号:AU2004307420A1

    公开(公告)日:2005-05-06

    申请号:AU2004307420

    申请日:2004-09-16

    Applicant: CISCO TECH INC

    Abstract: A method for transmitting multicast messages where a group key is generated for signing the multicast message transmitted on a network. Next, the system establishes a group key name corresponding to the group key. Once the group key name is established, the data packet is transmitted together with the group key name, the group key and the multicast message. Upon receipt, the recipient validates the group key name in the received data packet by comparing the received group key name to a group key name table in order to determine the intended group recipients.

    SYSTEM AND METHOD FOR WIRELESS NETWORK PROFILE PROVISIONING
    5.
    发明申请
    SYSTEM AND METHOD FOR WIRELESS NETWORK PROFILE PROVISIONING 审中-公开
    用于无线网络配置文件的系统和方法

    公开(公告)号:WO2007103622A3

    公开(公告)日:2008-03-20

    申请号:PCT/US2007062278

    申请日:2007-02-16

    Applicant: CISCO TECH INC

    Abstract: A system and method to enable an access point to dynamically provision a WLAN client with a new wireless profile once an association is established based on the infrastructure policy. A client can be directed to use a new profile without the need for pre-configuration and going through another authentication process. The new wireless profile can be provided to the client either during or after association, with or without the protection of link layer security key.

    Abstract translation: 一种基于基础设施策略建立关联后,使接入点能够动态地向WLAN客户端提供新的无线简档的系统和方法。 可以指导客户端使用新的配置文件,而不需要进行预配置并进行其他身份验证过程。 可以在关联期间或之后向客户端提供新的无线简档,具有或不具有链路层安全密钥的保护。

Patent Agency Ranking