WO2009027770A1 - Method and apparatus for propagating encryption keys between wireless communication devices - Google Patents
Method and apparatus for propagating encryption keys between wireless communication devices Download PDFInfo
- Publication number
- WO2009027770A1 WO2009027770A1 PCT/IB2007/053521 IB2007053521W WO2009027770A1 WO 2009027770 A1 WO2009027770 A1 WO 2009027770A1 IB 2007053521 W IB2007053521 W IB 2007053521W WO 2009027770 A1 WO2009027770 A1 WO 2009027770A1
- Authority
- WO
- WIPO (PCT)
- Prior art keywords
- encryption key
- information
- trusted
- key information
- establishing
- Prior art date
Links
- 230000006854 communication Effects 0.000 title claims abstract description 108
- 238000004891 communication Methods 0.000 title claims abstract description 104
- 238000000034 method Methods 0.000 title claims abstract description 90
- 230000001902 propagating effect Effects 0.000 title claims abstract description 11
- 238000004590 computer program Methods 0.000 claims description 13
- 238000012545 processing Methods 0.000 claims description 9
- 230000008093 supporting effect Effects 0.000 claims description 5
- 230000008569 process Effects 0.000 abstract description 68
- 230000002093 peripheral effect Effects 0.000 description 17
- 230000005540 biological transmission Effects 0.000 description 16
- 230000006870 function Effects 0.000 description 9
- 239000003999 initiator Substances 0.000 description 8
- 230000008901 benefit Effects 0.000 description 5
- 230000001413 cellular effect Effects 0.000 description 5
- 238000005516 engineering process Methods 0.000 description 5
- 230000000977 initiatory effect Effects 0.000 description 5
- 230000003993 interaction Effects 0.000 description 4
- 230000004044 response Effects 0.000 description 4
- 238000013459 approach Methods 0.000 description 3
- 230000009286 beneficial effect Effects 0.000 description 3
- 238000010276 construction Methods 0.000 description 3
- 230000007774 longterm Effects 0.000 description 3
- 230000000644 propagated effect Effects 0.000 description 3
- 230000009977 dual effect Effects 0.000 description 2
- 230000000694 effects Effects 0.000 description 2
- 230000007613 environmental effect Effects 0.000 description 2
- 238000001914 filtration Methods 0.000 description 2
- 238000012795 verification Methods 0.000 description 2
- 241001531266 Carnation Italian ringspot virus Species 0.000 description 1
- 241000699670 Mus sp. Species 0.000 description 1
- 230000003213 activating effect Effects 0.000 description 1
- 230000004913 activation Effects 0.000 description 1
- 230000006978 adaptation Effects 0.000 description 1
- 230000002411 adverse Effects 0.000 description 1
- 230000003321 amplification Effects 0.000 description 1
- 230000003416 augmentation Effects 0.000 description 1
- 230000003190 augmentative effect Effects 0.000 description 1
- 230000006399 behavior Effects 0.000 description 1
- 230000036772 blood pressure Effects 0.000 description 1
- 238000001444 catalytic combustion detection Methods 0.000 description 1
- 108010015046 cell aggregation factors Proteins 0.000 description 1
- 230000008859 change Effects 0.000 description 1
- 230000000295 complement effect Effects 0.000 description 1
- 230000008878 coupling Effects 0.000 description 1
- 238000010168 coupling process Methods 0.000 description 1
- 238000005859 coupling reaction Methods 0.000 description 1
- 238000013480 data collection Methods 0.000 description 1
- 230000007423 decrease Effects 0.000 description 1
- 230000003247 decreasing effect Effects 0.000 description 1
- 230000001627 detrimental effect Effects 0.000 description 1
- 238000011161 development Methods 0.000 description 1
- 230000018109 developmental process Effects 0.000 description 1
- 238000009826 distribution Methods 0.000 description 1
- 238000009434 installation Methods 0.000 description 1
- 230000010354 integration Effects 0.000 description 1
- 239000004973 liquid crystal related substance Substances 0.000 description 1
- 238000004519 manufacturing process Methods 0.000 description 1
- 239000000463 material Substances 0.000 description 1
- 230000007246 mechanism Effects 0.000 description 1
- 238000012544 monitoring process Methods 0.000 description 1
- 238000003199 nucleic acid amplification method Methods 0.000 description 1
- 238000012015 optical character recognition Methods 0.000 description 1
- 230000003287 optical effect Effects 0.000 description 1
- 230000000717 retained effect Effects 0.000 description 1
- 230000011218 segmentation Effects 0.000 description 1
- 230000001360 synchronised effect Effects 0.000 description 1
- 238000012546 transfer Methods 0.000 description 1
- 230000001960 triggered effect Effects 0.000 description 1
- 230000000007 visual effect Effects 0.000 description 1
Classifications
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04W—WIRELESS COMMUNICATION NETWORKS
- H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
- H04W12/04—Key management, e.g. using generic bootstrapping architecture [GBA]
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L63/00—Network architectures or network communication protocols for network security
- H04L63/06—Network architectures or network communication protocols for network security for supporting key management in a packet data network
- H04L63/062—Network architectures or network communication protocols for network security for supporting key management in a packet data network for key distribution, e.g. centrally by trusted party
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
- H04L9/32—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials
- H04L9/3226—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials using a predetermined code, e.g. password, passphrase or PIN
- H04L9/3228—One-time or temporary data, i.e. information which is sent for every authentication or authorization, e.g. one-time-password, one-time-token or one-time-key
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
- H04L9/32—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials
- H04L9/3236—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials using cryptographic hash functions
- H04L9/3242—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials using cryptographic hash functions involving keyed hash functions, e.g. message authentication codes [MACs], CBC-MAC or HMAC
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04W—WIRELESS COMMUNICATION NETWORKS
- H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
- H04W12/50—Secure pairing of devices
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L2209/00—Additional information or applications relating to cryptographic mechanisms or cryptographic arrangements for secret or secure communication H04L9/00
- H04L2209/80—Wireless
- H04L2209/805—Lightweight hardware, e.g. radio-frequency identification [RFID] or sensor
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L63/00—Network architectures or network communication protocols for network security
- H04L63/10—Network architectures or network communication protocols for network security for controlling access to devices or network resources
- H04L63/104—Grouping of entities
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04W—WIRELESS COMMUNICATION NETWORKS
- H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
- H04W12/02—Protecting privacy or anonymity, e.g. protecting personally identifiable information [PII]
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04W—WIRELESS COMMUNICATION NETWORKS
- H04W84/00—Network topologies
- H04W84/18—Self-organising networks, e.g. ad-hoc networks or sensor networks
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04W—WIRELESS COMMUNICATION NETWORKS
- H04W88/00—Devices specially adapted for wireless communication networks, e.g. terminals, base stations or access point devices
- H04W88/02—Terminal devices
- H04W88/06—Terminal devices adapted for operation in multiple networks or having at least two operational modes, e.g. multi-mode terminals
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04W—WIRELESS COMMUNICATION NETWORKS
- H04W92/00—Interfaces specially adapted for wireless communication networks
- H04W92/16—Interfaces between hierarchically similar devices
- H04W92/18—Interfaces between hierarchically similar devices between terminal devices
Definitions
- the present invention relates to secure communication for a wireless protocol, and more specifically, to the propagation of encryption information to devices communicating over a wireless protocol suitable for low complexity and/or power constrained wireless devices.
- a multifunction device empowered with the aforementioned beneficial features may also be limited by small size and power constraints. For example, operator interfaces installed in these devices are often small, and not conducive to high throughput typing. As a result, users may rely on peripheral input devices such as keyboards, mice, headsets, etc. Since many of these peripheral devices are also wirelessly coupled, a WCD must not only support wireless communication with at least one peripheral device, it must also be able to support multiple simultaneous wireless connections to peripheral devices being operated concurrently.
- peripheral devices may now also include "intelligent" mechanisms enabled for wireless communication. For example, it may be desirable to wirelessly link two or more low-power devices in a beneficial relationship, such as linking a wristwatch including health-monitoring intelligence to various wireless sensors placed proximate to a user's body.
- Simpler communication protocols with lower power requirements are now being developed so that even devices that have not historically been able to communication wirelessly may now provide information to, and in some cases receive wireless information from, a WCD. These devices often run on battery power, and as a result, must rely on simple, power efficient communications in order to be functional. Many existing wireless communication protocols are either too simple or too complex to support these devices.
- radio frequency (RF) communication is efficient and may be receive power from a scanning device, however, currently available RF transponder chips are space-limited and usually only provide previously stored information.
- IEEE 802.1 Ix WLAN or "WiFi”
- WiFi Wired Low-Fi
- the substantial power requirements may not make it appropriate for small device installations.
- BluetoothTM a standard that was originally designed to replace wires with a wireless medium for simple peripheral input devices, may not be the best solution for new devices with very limited power, interface and processing abilities.
- the present invention includes at least a method, device, chipset, computer program and system for propagating encryption keys amongst devices.
- the present invention in at least one embodiment, decreases the requirement to establish secure or "trusted" relationships between every device in a group by propagating established key information for one or more devices by direct transfer from one device to another without having to pair each device.
- encryption keys may be used in order to establish a secured link between one or more wireless communication devices.
- the information required to generate encryption keys may be transmitted from one device to another device during a process by which two devices become trusted to each other (e.g., pairing).
- the establishment of a trusted relationship may require the initiation of an unsecured wireless link followed by a plurality of wireless information exchanges. This process may prove detrimental to some devices, such as the constrained resource devices described above.
- the requirement of repeatedly pairing devices requires power and processing resources that may impact operations for these devices, especially if the process must be repeated for every encountered device with which information may be transacted. Also, the pairing process will necessarily create additional wireless traffic, which may impact efficiency.
- the present invention may employ a propagation strategy without the requirement of pairing every device, which conserves resources.
- encryption keys to other devices in the same group of devices may be passed between these devices without the requirement of pairing to every other device. Eliminating the pairing requirement may beneficially reduce both resource consumption and communication traffic between the various active wireless communication devices. Further, in some embodiments of the present invention, determinations may be made as to whether a trusted device should receive some or all of the encryption keys stored in a device. This inquiry may evaluate identification information provided by a trusted device to determine whether the device is in a particular group of devices that are sharing their key information, whether the trusted device is currently operating in a certain mode that requires the keys of other devices, etc.
- FIG. 1 A discloses a modular description of an exemplary wireless communication device usable with at least one embodiment of the present invention.
- FIG. IB discloses an exemplary structural description of the wireless communication device previously described in FIG. IA.
- FIG. 2 discloses an exemplary BluetoothTM protocol stack and an exemplary WibreeTM protocol stack usable with at least one embodiment of the present invention.
- FIG. 3A discloses an example of multiple wireless peripheral devices attempting to communicate concurrently with a dual-mode radio modem in accordance with at least one embodiment of the present invention.
- FIG. 3B discloses further detail pertaining to the example of FIG. 3 A regarding operational enhancements for managing the operation of a dual-mode modem in accordance with at least one embodiment of the present invention.
- FIG. 4 discloses a more detailed example of a WibreeTM protocol stack in accordance with at least one embodiment of the present invention.
- FIG. 5A discloses examples of a pairing process in accordance with at least one embodiment of the present invention.
- FIG. 5B discloses possible impacts of requiring a pairing process between every device in a device group in accordance with at least one embodiment of the present invention.
- FIG. 6 A discloses an exemplary encryption key propagation process in accordance with at least one embodiment of the present invention.
- FIG. 6B discloses an exemplary device communication process in accordance with at least one embodiment of the present invention.
- FIG. 6C discloses another exemplary device communication process in accordance with at least one embodiment of the present invention.
- FIG. 6D discloses an exemplary effect of the key propagation process in accordance with any or all of communication processes disclosed in FIG 6A-6C.
- FIG. 7 discloses a flowchart for an exemplary process of receiving an encryption key in accordance with at least one embodiment of the present invention.
- FIG. 8 discloses a flowchart for an exemplary process of propagating an encryption key in accordance with at least one embodiment of the present invention.
- the present invention may be implemented using a variety of wireless communication equipment. Therefore, it is important to understand the communication tools available to a user before exploring the present invention. For example, in the case of a cellular telephone or other handheld wireless devices, the integrated data handling capabilities of the device play an important role in facilitating transactions between the transmitting and receiving devices.
- FIG. IA discloses an exemplary modular layout for a wireless communication device usable with the present invention.
- WCD 100 is broken down into modules representing the functional aspects of the device. These functions may be performed by the various combinations of software and/or hardware components discussed below.
- Control module 110 regulates the operation of the device. Inputs may be received from various other modules included within WCD 100. For example, interference sensing module 120 may use various techniques known in the art to sense sources of environmental interference within the effective transmission range of the wireless communication device. Control module 110 interprets these data inputs, and in response, may issue control commands to the other modules in WCD 100.
- Communications module 130 incorporates all of the communication aspects of WCD 100.
- communications module 130 may include, for example, long-range communications module 132, short-range communications module 134 and machine-readable data module 136 (e.g., for NFC).
- Communications module 130 utilizes at least these sub-modules to receive a multitude of different types of communication from both local and long distance sources, and to transmit data to recipient devices within the transmission range of WCD 100.
- Communications module 130 may be triggered by control module 110, or by control resources local to the module responding to sensed messages, environmental influences and/or other devices in proximity to WCD 100.
- User interface module 140 includes visual, audible and tactile elements which allow a user to receive data from, and enter data into, the device.
- the data entered by a user may be interpreted by control module 110 to affect the behavior of WCD 100.
- User- inputted data may also be transmitted by communications module 130 to other devices within effective transmission range. Other devices in transmission range may also send information to WCD 100 via communications module 130, and control module 110 may cause this information to be transferred to user interface module 140 for presentment to the user.
- Applications module 180 incorporates all other hardware and/or software applications on WCD 100. These applications may include sensors, interfaces, utilities, interpreters, data applications, etc., and may be invoked by control module 110 to read information provided by the various modules and in turn supply information to requesting modules in WCD 100.
- FIG. IB discloses an exemplary structural layout of WCD 100 according to an embodiment of the present invention that may be used to implement the functionality of the modular system previously described in FIG. IA.
- Processor 150 controls overall device operation. As shown in FIG. IB, processor 150 is coupled to at least communications sections 154, 158 and 166. Processor 150 may be implemented with one or more microprocessors that are each capable of executing software instructions stored in memory 152.
- Memory 152 may include random access memory (RAM), read only memory (ROM), and/or flash memory, and stores information in the form of data and software components (also referred to herein as modules).
- RAM random access memory
- ROM read only memory
- flash memory stores information in the form of data and software components (also referred to herein as modules).
- the data stored by memory 152 may be associated with particular software components.
- this data may be associated with databases, such as a bookmark database or a business database for scheduling, email, etc.
- the software components stored by memory 152 include instructions that can be executed by processor 150.
- Various types of software components may be stored in memory 152.
- memory 152 may store software components that control the operation of communication sections 154, 158 and 166.
- Memory 152 may also store software components including a firewall, a service guide manager, a bookmark database, user interface manager, and any communication utilities modules required to support WCD 100.
- Long-range communications 154 performs functions related to the exchange of information over large geographic areas (such as cellular networks) via an antenna. These long-range network technologies have commonly been divided by generations, starting in the late 1970s to early 1980s with first generation (IG) analog cellular telephones that provided baseline voice communication, to modern digital cellular telephones.
- IG first generation
- GSM Global System for Mobile communications
- long-range communications 154 may operate to establish data communication sessions, such as General Packet Radio Service (GPRS) sessions and/or Universal Mobile Telecommunications System (UMTS) sessions.
- GPRS General Packet Radio Service
- UMTS Universal Mobile Telecommunications System
- long-range communications 154 may operate to transmit and receive messages, such as short messaging service (SMS) messages and/or multimedia messaging service (MMS) messages.
- SMS Short messaging service
- MMS multimedia messaging service
- transmission receiver 156 allows WCD 100 to receive transmission messages via mediums such as Digital Video Broadcast for Handheld Devices (DVB-H). These transmissions may be encoded so that only certain designated receiving devices may access the transmission content, and may contain text, audio or video information. In at least one example, WCD 100 may receive these transmissions and use information contained within the transmission signal to determine if the device is permitted to view the received content.
- DVD-H Digital Video Broadcast for Handheld Devices
- Short-range communications 158 is responsible for functions involving the exchange of information across short-range wireless networks. As described above and depicted in FIG. IB, examples of such short-range communications 158 are not limited to BluetoothTM, WibreeTM, WLAN, UWB and Wireless USB connections. Accordingly, short-range communications 158 performs functions related to the establishment of short- range connections, as well as processing related to the transmission and reception of information via such connections.
- Short-range input device 166 may provide functionality related to the short-range scanning of machine-readable data (e.g., for NFC).
- processor 150 may control short-range input device 166 to generate RF signals for activating an RFID transponder, and may in turn control the reception of signals from an RFID transponder.
- short-range scanning methods for reading machine-readable data that may be supported by short-range input device 166 are not limited to IR communication, linear and 2-D (e.g., quick response or QR) bar code readers (including processes related to interpreting universal product codes or UPC labels), and optical character recognition devices for reading magnetic, Ultraviolet (UV), conductive or other types of coded data that may be provided in a tag using suitable ink.
- the input device may include optical detectors, magnetic detectors, CCDs or other sensors known in the art for interpreting machine-readable information.
- user interface 160 is also coupled to processor 150.
- User interface 160 facilitates the exchange of information with a user.
- FIG. IB shows that user interface 160 includes a user input 162 and a user output 164.
- User input 162 may include one or more components that allow a user to input information. Examples of such components include keypads, touch screens, and microphones.
- User output 164 allows a user to receive information from the device.
- user output portion 164 may include various components, such as a display, light emitting diodes (LED), tactile emitters and one or more audio speakers.
- Exemplary displays include liquid crystal displays (LCDs), and other video displays.
- WCD 100 may also include one or more transponders 168.
- This is essentially a passive device that may be programmed by processor 150 with information to be delivered in response to a scan from an outside source.
- an RFID reader mounted in an entryway may continuously emit radio frequency waves.
- the transponder is energized and may respond with information identifying the device, the person, etc.
- a reader may be mounted (e.g., as discussed above with regard to examples of short-range input device 166) in WCD 100 so that it can read information from other transponders in the vicinity.
- these portions may include components (e.g., electronics) that perform functions, such as modulation, demodulation, amplification, and filtering. These portions may be locally controlled, or controlled by processor 150 in accordance with software communication components stored in memory 152.
- FIG. IB may be constituted and coupled according to various techniques in order to produce the functionality described in FIG. IA.
- One such technique involves coupling separate hardware components corresponding to processor 150, communications sections 154, 156 and 158, memory 152, short-range input device 166, user interface 160, transponder 168, etc. through one or more bus interfaces (which may be wired or wireless bus interfaces).
- bus interfaces which may be wired or wireless bus interfaces.
- any and/or all of the individual components may be replaced by an integrated circuit in the form of a programmable logic device, gate array, ASIC, multi-chip module, etc. programmed to replicate the functions of the stand-alone devices.
- each of these components is coupled to a power source, such as a removable and/or rechargeable battery (not shown).
- the user interface 160 may interact with a communication utilities software component, also contained in memory 152, which provides for the establishment of service sessions using long-range communications 154 and/or short-range communications 158.
- the communication utilities component may include various routines that allow the reception of services from remote devices according to mediums such as the Wireless Application Medium (WAP), Hypertext Markup Language (HTML) variants like Compact HTML (CHTML), etc.
- WAP Wireless Application Medium
- HTML Hypertext Markup Language
- CHTML Compact HTML
- the present invention may be implemented with, but is not limited to, short-range wireless communication mediums.
- BluetoothTM is an example of a short- range wireless technology quickly gaining acceptance in the marketplace.
- a Bluetooth enabled WCD may transmit and receives data, for example, at a rate of 720 Kbps within a range of 10 meters, and may transmit up to 100 meters with additional power boosting. Current systems may run at a nominal rate of 1 Mbps.
- a user does not actively instigate a BluetoothTM network. Instead, a plurality of devices within operating range of each other will automatically form a network group called a "piconet". Any device may promote itself to the master of the piconet, allowing it to control data exchanges with up to seven "active" slaves and 255 "parked" slaves.
- Active slaves exchange data based on the clock timing of the master. Parked slaves monitor a beacon signal in order to stay synchronized with the master, and wait for an active slot to become available. These devices continually switch between various active communication and power saving modes in order to transmit data to other piconet members.
- BluetoothTM other popular short-range wireless networks include WLAN (of which "Wi-Fi" local access points communicating in accordance with the IEEE 802.11 standard, is an example), WUSB, UWB, ZigBee (802.15.4, 802.15.4a), WibreeTM and UHF RFID. All of these wireless mediums have features and advantages that make them appropriate for various applications.
- Wibree is an open standard industry initiative extending local connectivity to small devices with technology that increases the growth potential in these market segments.
- This emerging low-power communication standard has been recently embraced by the BluetoothTM Special Interest Group, and as a result, the WibreeTM specification will soon become part of the BluetoothTM specification as an ultra low power BluetoothTM technology.
- WibreeTM technology may complement close range communication with BluetoothTM-like performance in the 0-10 m range with a data rate of 1 Mbps.
- WibreeTM is optimized for applications requiring extremely low power consumption, small size and low cost.
- WibreeTM may be implemented either as stand-alone chip or as BluetoothTM -WibreeTM dual-mode chip. More information can be found on the WibreeTM website: www.wibree.com.
- BluetoothTM stack 200 includes elements that may convey information from a system level to a physical layer where it may be transmitted wireless to another device.
- BT Profiles 202 include at least a description of a known peripheral device which may be connected wirelessly to WCD 100, or an application that may utilize BluetoothTM in order to engage in wireless communication with a peripheral device.
- peripheral devices is not intended to limit the present invention, and is used only to represent any device external to WCD 100 also capable of wirelessly communicating with WCD 100.
- L2CAP level 204 includes at least a logical link controller and adaptation protocol. This protocol supports higher level protocol multiplexing packet segmentation and reassembly, and the conveying of quality of service information. The information prepared by L2CAP level 204 may then be passed to an application-optional host controller interface (HCI) 206.
- HCI host controller interface
- This layer may provide a command interface to the lower link manager protocol (LMP) layers, link manager (LM) 208 and link controller (LC) 210.
- LMP link manager protocol
- LM 208 may establish the link setup, authentication, link configuration and other protocols related to establishing a wireless link between two or more devices.
- LC 210 may manage active links between two or more devices by handling low-level baseband protocols. Wireless communication may then be established and conducted using the hardware (modem, antenna, etc.) making up physical layer (PHY) 212.
- PHY physical layer
- the above identified layers of BluetoothTM stack 200 may also be utilized in an order reversed from that disclosed above in order to receive a wireless transmission into WCD 100 from a peripheral device.
- W Profiles 222 similar to the profiles used in BluetoothTM, are used to specify applications that may use WibreeTM for communication and peripheral devices with which a WibreeTM modem may wirelessly communicate.
- the profile adoption layer (PAL) 224 may be used to prepare the information for transmission via wireless communication.
- Host interface (HIF) layer 226 may provide an interface between the upper layers communicating with applications and schedulers in WCD 100, and the lower layers of the WibreeTM stack 220 which establish and maintain the links to peripheral devices.
- Lower layers of the WibreeTM stack 220 may further include at least link layer (LL) 228.
- LL 228 may both establish and maintain wireless communications with other wireless enabled devices through the use of Physical Layer (PHY) 230.
- FIG. 3 A includes an alternative exemplary implementation of at least one embodiment of the present invention.
- the three peripheral devices (1150, 1152 and 1154) are attempting concurrent communication with WCD 100 through dual-mode radio modem 300.
- Radio modem 300 may include local control resources for managing both "radios" (e.g., BluetoothTM and WibreeTM software based radio control stacks) attempting to use the physical layer (PHY) resources of dual-mode radio modem 300.
- dual-mode radio modem 300 includes at least two radio stacks or radio protocols (labeled "Bluetooth” and "Wibree") that may share the PHY layer resources (e.g., hardware resources, antenna, etc.) of dual-mode radio modem 300.
- the local control resources may include an admission controller ("Adm Ctrl”) and a dual- mode controller ("DuMo Manager"). These local control resources may be embodied as a software program and/or in a hardware form (e.g., logic device, gate array, MCM, ASIC, etc.) in a dual-mode radio modem interface, and the radio modem interface may be coupled to, or alternatively, embedded in dual-mode radio modem 300. The interaction of these control resources with the radio protocols utilizing dual -mode radio modem 300 is explained below.
- FIG. 3B an exemplary combination of the two separate radio protocol stacks (previously discussed with respect to FIG. 2) into a single combined entity controlled locally by at least an admission control 304 and a DuMo manager 306 is now disclosed.
- the two previously described standalone stacks are shown to establish the individual elements that may be incorporated into an integrated dual-mode entity 302.
- Admission control 304 and a DuMo manager 306 in terms of managing the operations of dual-mode modem 300, please refer to Application No. 11/538,310, filed October 3, 2006, which is hereby incorporated by reference.
- Admission control 304 may act as a gateway for the dual-mode radio modem 300 by filtering out both BluetoothTM and WibreeTM requests from the operating system of WCD 100 that may result in conflicts.
- Scheduling information may also be provided by Multiradio controller (MRC) 170, wherein certain periods of operation are allocated to dual-mode radio modem 300 in view of the other active radio modems operating in WCD 100.
- MRC Multiradio controller
- This scheduling information may be passed down to both the HCI + Extension level of the combined protocol stacks and also to DuMo manager 306 for further processing.
- scheduling information from MRC 170 is critical (delay-sensitive), it may be sent through MCS 190 via a direct connection to DuMo Manager 306.
- the information received by DuMo manager may 306 then be used to create an interleaved schedule for dual -mode radio modem 300 allowing both the BluetoothTM and WibreeTM protocols to operate concurrently.
- FIG. 4 includes a more detailed description of the upper layers of the
- WibreeTM communication protocol The WibreeTM system includes two parts: the WibreeTM Radio 408 and the WibreeTM Host 402. Connection between radio 408 and host 402 goes through the HIF (Host Interface). Further, PAL 224 includes at least General Access Profile (GAP) 406.
- GAP General Access Profile
- Application layer 400 may include various programs that may be executed on a computing device.
- an application may be a communication utility or productivity program running on a WCD.
- An application may use W Profiles 222 in WibreeTM (e.g. Profile 1, Profile 2, etc.) in order to send information into the WibreeTM protocol stack 220.
- This transaction may be supervised by Host Manager 404.
- the information may then be prepared by PAL 224 and GAP 406 for routing to WibreeTM radio 408, wherein LL 228 may both establish new wireless connections and manage existing connections with peripheral devices through the various resources (modem, antenna, etc.) that make up PHY layer 230.
- WibreeTM is an appropriate wireless communication medium for implementing the present invention for multiple reasons. Initially, Wibree has been designed for use in resource constrained wireless communication devices. Further, WibreeTM, as will be described, uses an encryption key creation process that provides the flexibility to allow for passing established encryption keys from one device to another. Even in view of these advantages, the present invention is not only limited to being implemented using the Wibree M protocol, and may use any similarly configured wireless communication medium.
- WibreeTM may establish secure wireless links using encryption keys.
- these keys may be predetermined, for example during device manufacture. Predetermined encryption keys may, in some instances, be hard-coded into simple and/or low power devices not enabled with higher level processing. Alternatively, encryption keys may also be computed on the fly during initial device interaction.
- FIG. 5 A An example of encryption key establishment through initial device interaction is now disclosed in FIG. 5 A, wherein an example of WibreeTM pairing and secure link establishment is disclosed.
- device A 500 does not have any sort of trusted relationship with device B 502. However, these devices may establish a relationship through a "pairing" process. This pairing process may include both a temporary session key establishment process as shown at 504 and a device pairing process as shown at 506. After the pairing process is complete, an encrypted link may be established to exchange data in a secure manner at 508.
- a temporary session key may be established in accordance with the steps disclosed at 504.
- a device may "advertise" the desire to communicate with another device that responds as an "initiator” by establishing an unsecured link layer connection.
- the advertising device in this example device A 500, may then send a request to start a pairing process, to which the initiator (e.g., device B 502) may respond.
- the advertising device may then transmit information to the initiator that will be employed in creating encryption keys usable for establishing a secured wireless link. This information may include an identity root (IR) and an encryption root, or long term key (LTK).
- IR identity root
- LTK long term key
- the received IR and/or LTK information may then be utilized by the initiator device to compute a temporary session encryption key.
- This computed temporary session encryption key may be transmitted back to the advertising device to confirm accuracy.
- a temporary session encryption key usable in a subsequent device pairing process (process 506) is achieved.
- 500 and device B 502 is shown at 506 in FIG. 5A.
- the process simply involves the exchange of key information established, for example, during the previously described key process described at 504.
- device A 500 transmits a link key and identity key computed based on the IR and LTK information
- device B 502 reciprocates by sending the appropriate link and identity keys based on the same information. If the devices see the expected encryption keys from this exchange, then the devices become paired in a trusted relationship. Pairing devices, such as exemplary device A 500 and device B 502, allows these devices to establish a secure wireless link in an expedited manner. This expedited link establishment is shown at 508 in FIG. 5A.
- the two paired device e.g., device A 500 and device B 502 may immediately establish a encrypted link over which data may be exchanged between the two devices in a secure manner.
- wireless communication mediums such as
- WibreeTM may be more conducive to implementing various embodiments of the present invention over, for example, a wireless communication medium like BluetoothTM due to the way in which BluetoothTM encryption keys are formed.
- WibreeTM encryption keys are configured based only on information provided by an advertising device. As a result, the encryption key may be passed from device to device because there is no device dependence when using this key.
- encryption keys computed in BluetoothTM incorporate at least device-specific address information along with other random information from one or both of the paired devices. Therefore, a BluetoothTM encryption key cannot be passed from one device to another because the device address information used to form the encryption key would not agree with the device address information of the offering device. This lack of continuity between encryption key and device may then result in a failure to establish a secure link.
- FIG. 5A The exemplary processes disclosed in FIG. 5A are replicated to multiple devices in FIG. 5B.
- devices A 500 and B 502 are now accompanied by devices C-I (shown at 512-524, respectively).
- Devices A-I are shown in a state wherein these devices are required to first pair with every device in which secured communication will take place.
- a large communication burden may be exerted on each of these devices as a pairing process must be performed between every device in a device group. This requirement may burden all of the wireless devices, especially of they are constrained resource devices.
- devices A-I may all be components within a biometric tracking system (e.g., a device group).
- Device A 500 may be a battery-driven data collection device, and devices B-I (502 and 512-525, respectively) are various sensor devices worn on an individual's body in order to monitor pulse, temperature, pace, blood pressure, etc. of the individual. Since device A 500 may collect information from all of the other devices, under current strategies, a trusted or paired relationship must exist between device A 500 and all other devices. This may put a large strain on device A 500 as the pairing process required with each sensor device B-I may create a lot of wireless traffic, as well as additional power drain to support this messaging. This may shorten the operational life of device A 500.
- the other devices B-I in this example may also be adversely affected by operation under current communication schemes. Presuming at least some of the device B-I are simple sensors, the pairing process may burden their basic control systems, and may further contribute to battery depletion due to the additional communication burden. Sensors small enough to fit in a watch, a shoe or to be worn on the skin will presumably be limited in size and complexity, and therefore, must operate under a system that recognizes, and compensates for, their limited ability.
- FIG. 6A a key propagation strategy in accordance with at least one embodiment of the present invention is now disclosed.
- device A 500 may enter a trusted or paired relationship with device B 502 as shown at 600.
- device A 500 and device B 502 may further engage in a secure link at shown at 602, however, a further engagement in a secure link is not essential to the encryption key propagation process as disclosed in this example.
- the propagation of encryption keys may now be explained.
- Database 604 may include data related to the pairing interaction including, for example, the identification of the device to which an encryption key corresponds (TARGET ID), encryption key information (KEY) and the source of the encryption key info ⁇ nation (SOURCE).
- Database 604 shows an entry for device A 500 including fields identifying device A 500, encryption key information pertaining to device A 500 and the source of the information being a previous pairing between device A 500 and device B 503 (e.g., "pairing").
- Device B 502 may then encounter device C 512, and engage in a pairing process with this device at 606, which may also be reflected in database 604 stored on device B 502 as "TARGET ID: DEV C, KEY: [key info] and SOURCE: pairing."
- the devices may further engage in a secured wireless connection at 608 over which information may be exchanged. Part of this information exchange may involve device B 502 passing one or more encryption keys for other devices in a device group, such as device A 500, to device C 512. This propagation of encryption key information is shown at 610.
- a determination may be made as to whether one or more encryption keys for other devices should be transferred to device C 512 before these encryption keys are conveyed. This determination may include determining which of the stored encryption keys should be forwarded to the receiving device, and may be made, for example, based on identification information provided by the receiving device to the providing device.
- This identification information may include specific device identification information, information that identifies the receiving device as being part of a device group, information that indicates a receiving device operating mode, indicator status information, etc.
- indicator status information may be as simple as a flag in device C 512 that indicates encryption keys should be conveyed, and may be a bit flag set in the receiving device.
- a simple bit flag system may be more suitable for resource constrained devices such as low power sensors. Otherwise, in at least one embodiment of the present invention, all stored encryption keys may always be transferred to all encountered paired devices. This sort of key basic distribution strategy may be utilized in scenarios where all encountered devices are very simple resource constrained devices, all wireless devices expected to be encountered are in the device group, etc.
- device B 502 passes encryption key information related to device A 500 to device C 512
- this information may be stored by device C 512 in database 612.
- the stored information may identify the target device as device A 500, include the passed encryption key information, and may further identify the source of the encryption key information as device B 502.
- a secure link may be established between device C 512 and device A 500 without being required to first engage in a pairing process. More specifically, device C 512 may establish a secure link using the keys passed from device B 502 without having to engage in the key creation and pairing processes previously described in FIG. 5A at 504 and 506.
- device A 500 may request device identity information to verify against information embedded within the encryption key information supplied by a device requesting a secure link. This verification may occur due to the operational parameters of the particular wireless communication medium being utilized, a security enhancement enacted in device A 500, etc.
- device C 512 may be forced to "impersonate" another device (e.g., device B 502) when engaging in a secure link with device A 500. In such a situation, device C 512 may supply the previously stored SOURCE information for DEV B 502 (e.g., from database 612) to DEV A 500 so that the identity information will match the encryption key information.
- a secure link such as previously described at 508 in FIG.
- the security and identity contexts in WibreeTM may be separated from device identity using so-called private addresses "AAx" that may be temporarily utilized by devices. Private addresses have traditionally been used to protect the identity of a device from other devices that could intercept and use device address information for malicious purposes (such as impersonating the device).
- the security context may be transmitted from one device to another without needing to involve advertising device(s).
- an advertising device can only submit to the master device the next (e.g., future) private address that it is going to use.
- This feature was originally designed to make it possible for the master device to quickly re-discover the advertiser in a re-connect procedure, or for efficiency reasons to "white- list" the address in question (e.g., to record a future address as a recognized address) during a longer break in communication.
- AA [CAR V, E m ⁇ (CAR V )]
- IRK is the relevant identity resolving key and CARV may constitute the 24 first bits of the image of the encryption with E ARR .
- the ARRC is incremented.
- the advertiser will send the random value and the current counter value (ARR and ARRC) to the peer. This may be completely acceptable from a security point of view since the peer in question anyway can deduce all current and future addresses of the advertising device in question.
- the random key value (IRV) to be submitted in the connection phase may be determined by the 80 least significant bits of the very same encryption image CAR V that was used for private address construction.
- the operation above may be invoked every time a connection is lost and the advertiser needs to advertise its presence.
- the solution gives advantages and communication savings not only related to hand-offs, but also for the connecting party in re-connects.
- An exemplary operation representing this interaction is disclosed at 620 in FIG. 6B.
- the connecting party may know not only the next address, but also other future private addresses of the advertising device based on a previously advertised random part.
- a search for future values e.g., 30 future values
- the white-list of the connecting device can be augmented not only with the next private address, but a few future private address values.
- the counter value should not also be broadcast, as the value may be enough for an attacking device to track the location of a device.
- the connecting party Knowing its own future addresses, the connecting party may be able to pre-compute the session keys for the next connection. For some devices this may be valuable, as the connecting device may get the random vector of the advertiser a later phase during session establishment. The same approach may be applied by the initiating device for its future connection addresses.
- An advertiser-specific random value can be determined in the initiator (IRR), and the connection addresses may be resolved as
- this device may fill its white-list appropriately also for future connects. This feature may alleviate synchronization problems if a connection establishment fails in a very early phase.
- one master may now submit to another master sufficient key material for a hand-off. This involves sending from the original master a set of tuples:
- the "temporary master” may then select the tuple based on the address of the advertisement, connect with EDIV; and IRAi, as weh 1 as check that the received IRVi matches before deploying a session with the given SKj.
- This operation may not be conditional to the master submitting CIRV to the advertising device, but that might anyway be important for white-listing purposes in the device.
- a master receiving these tuples may neither know the identity parameter of the advertiser nor the long-term secret between the original initiator-advertiser pair.
- the new master can only operate within the count of its tuples, which can be used for benefit in use cases that involve lending/borrowing resources.
- the advertising device to release the identity (and a new diversified long-term key) on request to the new master within the first established encrypted session. This request must come from the master, since to the advertiser the new initiator is indistinguishable from the old one.
- white-listing is defined as a set and/or list of values that are matched in an absolute manner.
- a better optimized white-listing algorithm may be to deploy a set of Bloom filters for each private address sequence that is to be matched. This approach given below is valid both for white-listing advertiser addresses for advertisements, and initiator addresses for connection attempts.
- a Bloom filter is an aggregate of several values into one. The matching is done based on a subset match: if a compared address can be considered a subset of the filter, the filter returns TRUE.
- a Bloom filter carries a potential for false positives that is proportional to the length of the filter and the aggregation factor.
- a Bloom filter targeted for WibreeTM purposes is presented.
- the filter (for one address) is 256 bits (16 bytes) long.
- the match for a 6-byte address is done by taking each individual byte of the address and comparing it against the relevant bit in the filter. If, for all 6 bytes, the corresponding bits in the filter are 1, a match is found.
- the matching functionality may be done on the link layer (a basic white-listing requirement).
- the construction of a Bloom filter on the host layer for, say 30 future values of a private addresses is simply the equivalent setting of the 256-bit Bloom filter array (2): for / ⁇ - 0 to "255 do ⁇ bloom[i] ⁇ - 0 for j f- 0 to 29 f for i ; 4- 0 to 5
- the false positive rate will be 0.0057, i.e. on average every 2000th wrong value triggers the white-list. This may result in the host logic being unnecessarily activated, but the error will not propagate further.
- the above exemplary approach for white-listing saves space (30 future value can be stored in the space of less than 3 absolute addresses), and may have a benefit in that synchronization requirements between initiators and advertisers are relaxed significantly.
- FIG. 6D discloses a situation similar to FIG. 5B, but in this exemplary scenario an impact of at least one embodiment of the present invention on a plurality of interacting wireless devices is shown.
- devices A-I 500, 502 and 512-524, respectively
- the requirement for device A 500 to pair with each and every device B-I (502 and 512-524, respectively) may be removed through encryption key propagation.
- Device A 500 may only establish a trusted relationship through pairing with a few devices in the group due to the continuous propagation of encryption keys within the device group in accordance with at least one embodiment of the present invention. As is evident from FIG.
- the overall amount of messaging at least for device A 500, may be greatly decreased, which in turn may reduce both the amount of wireless message traffic between the devices, and likewise, reduce the power burden on each device required to perform these communication functions. In resource-constrained devices such as previously described, this reduced burden may result in substantially longer battery life.
- FIG. 7 now discloses a process for receiving encryption keys in accordance with at least one embodiment of the present invention.
- the process may begin at step 700, wherein a device enters a reception mode. This step may simply constitute that wireless communication resources supporting a particular wireless communication medium (e.g., WibreeTM) have been enabled on a device. The activation of these resources may make the device available for linking with other devices operating in an advertising mode.
- step 702 another device may be acting in an advertising mode and may request a link to the device.
- a determination may then be made in step 704 as to whether a trusted relationship already exists between the two devices. This determination may be made via wireless messages sent back and forth between the devices.
- a pairing process may begin such as previously explained at 504 in FIG. 5A.
- the pairing process may cause information to be sent back and forth between the devices.
- messages may be sent from the advertising device to the initiating device including information used for formulating encryption keys.
- encryption keys may be formulated by the receiving device, and these encryption keys may be sent back to the advertiser for verification.
- the devices may also decide to establish a secure link at 708. If a secure link is not desired at step 708, then the unsecured link may terminate at step 710 and the process may restart at step 700. However, if establishing a secure link between devices is desired, then the process may move to step 712. It is important to note that this portion of this exemplary process that includes establishing secure link may also be the outcome of step 704 if it is determined that a trusted relationship already exists (e.g., that the device already retained encryption keys pertaining to the advertising device).
- a secure link may be created between devices.
- the secure link may allow information to be exchanged between the two devices at step 714 in a secure manner.
- the information delivered from the advertising device to the initiating (receiving) device may include one or more encryption keys from other devices in the device group. As previously set forth, this information delivery may include all of the encryption keys stored on the advertising device, or may include a portion of the encryption keys based on a determination. If the process of information exchange and encryption key delivery has completed per step 716, then the secure link may terminate at step 718 and the process may continue from step 700.
- FIG. 7 describes an example process for receiving encryption keys.
- FIG. 8 now discloses an example process for propagating encryption keys. While two different exemplary processes are disclosed for encryption key reception and propagation, it is important to note that these processes may be performed by the same physical wireless device at different times. That is, a device acting in a reception mode may receive one or more encryption keys from another device, and then change operation to act in an advertising mode in order to propagate the received encryption keys to other devices. Further, while not pictured, the process of encryption key propagation may further include encryption key exchanges between devices (e.g., a two way process), wherein both trusted devices involved in a secure link exchange stored encryption keys.
- the process may start at step 800 wherein a wireless device enters an advertising mode.
- An advertising mode may consist of a mode where the device actively broadcasts wireless messages announcing a desire to form a wireless link with other encountered wireless devices.
- another device may respond to this request to form a link, and an unsecured wireless link may be established between the devices.
- a determination is made as to whether a trusted relationship already exists between these devices. If no trusted relationship exists (e.g., these devices have not already been paired) then a pairing process may occur starting at step 806.
- encryption keys formed by the receiving device allows the devices to form a secure link? If no secure link is desired at step 808, then the unsecured link may be terminated at step 810 and the process may restart at step 800. Alternatively, the process may continue at 812.
- step 812 it is important to note that the establishment of a secure link in step 812 may also occur directly after step 804 if it is determined that a trusted relationship already exists between the participating devices.
- information may be exchanged between the devices at step 814. This information may include identification information related to the device, a group, a state, an indicator, etc. as previously explained in the disclosure. This information may be utilized in optional step 816 (shown as a dotted object in FIG. 8) in determining whether to transmit some or all of its stored encryption keys related to other devices to the device participating in the secure link.
- Step 816 is shown as an optional step because, depending on the level of sophistication of a propagating device and the strategy employed in a device group, a determination step such as shown in step 816 may not be utilized in some embodiments of the present invention. However, if step 816 is employed in the process, a determination may be made based on information received from the other device as to whether some or all of the encryption keys stored on the advertising device should be transferred. If it is determined that no encryption keys should be transferred, the process may proceed to step 822 wherein the secure link is terminated. If some or all of the encryption keys should be transferred, then these encryption keys may be propagated to the linked device at step 818. If step 816 is not incorporated in a particular embodiment of the exemplary process disclosed in FIG. 8, then once the link is established and communication occurs, then the keys may be propagated in step 818.
- step 814-818 are executed, a determination of whether the process has fully completed is made in step 820. If the process has not completed, then the process may continue to execute (e.g., communication may continue) under the secure link established at step 812 until all transactions are complete. If the process has now completed (e.g., concluding with some or all of the encryption keys related to other devices having been propagated), then in step 822 the secure link may be terminated and the entire process may resume at step 800.
- this exemplary process does not preclude the initiating device also propagating access keys to the advertising device in a sort of encryption key exchange propagation process. For the sake of explanation in this example, only a one way propagation process has been disclosed.
Landscapes
- Engineering & Computer Science (AREA)
- Computer Security & Cryptography (AREA)
- Computer Networks & Wireless Communication (AREA)
- Signal Processing (AREA)
- Computer Hardware Design (AREA)
- Computing Systems (AREA)
- General Engineering & Computer Science (AREA)
- Power Engineering (AREA)
- Mobile Radio Communication Systems (AREA)
Abstract
A system for propagating encryption key information between wireless communication devices without the requirement of pairing each and every device. A wireless communication device may be paired with at least one device in a group of devices. When a secure link is established between these devices, a determination may be made as to whether encryption key information should be passed from one device to another. The additional encryption key information may allow a wireless communication device to create a secure link with other devices without having to first establish a trusted relationship (e.g., go through a pairing process) with the other devices.
Description
Method and apparatus for propagating encryption keys between wireless communication devices
BACKGROUND OF INVENTION
L Field of Invention:
[0001] The present invention relates to secure communication for a wireless protocol, and more specifically, to the propagation of encryption information to devices communicating over a wireless protocol suitable for low complexity and/or power constrained wireless devices.
2. Background:
[0002] The ability to communicate wirelessly is emerging as a feature included in many devices where communication was previously not contemplated. This expansion may be due to technological development in the area of multifunction wireless communication devices (WCD). Consumers may now replace common standalone productivity devices like computers, laptops, facsimile machines, personal digital assistants, etc. with a single device capable of performing all of these functions. These multifunction devices may help people complete tasks during time that was previously wasted (commutes to and from work, school, back home, etc.)
[0003] A multifunction device empowered with the aforementioned beneficial features may also be limited by small size and power constraints. For example, operator interfaces installed in these devices are often small, and not conducive to high throughput typing. As a result, users may rely on peripheral input devices such as keyboards, mice, headsets, etc. Since many of these peripheral devices are also wirelessly coupled, a WCD must not only support wireless communication with at least one peripheral device, it must also be able to support multiple simultaneous wireless connections to peripheral devices being operated concurrently.
[0004] These peripheral devices may now also include "intelligent" mechanisms enabled for wireless communication. For example, it may be desirable to wirelessly link two or more low-power devices in a beneficial relationship, such as linking a wristwatch including health-monitoring intelligence to various wireless sensors placed proximate to a user's body. Simpler communication protocols with lower power requirements are now being developed so that even devices that have not historically been able to communication wirelessly may now provide information to, and in some cases receive
wireless information from, a WCD. These devices often run on battery power, and as a result, must rely on simple, power efficient communications in order to be functional. Many existing wireless communication protocols are either too simple or too complex to support these devices. For example, radio frequency (RF) communication is efficient and may be receive power from a scanning device, however, currently available RF transponder chips are space-limited and usually only provide previously stored information. In the case of IEEE 802.1 Ix WLAN (or "WiFi"), the substantial power requirements may not make it appropriate for small device installations. Even Bluetooth™, a standard that was originally designed to replace wires with a wireless medium for simple peripheral input devices, may not be the best solution for new devices with very limited power, interface and processing abilities.
[0005] Further, the limitations of these exemplary wireless protocols, when being applied to low complexity and/or power constrained wireless devices, becomes especially evident when trying to establish a link security strategy. Current security theories may often be too complex for simple devices in terms of required processing power and interface availability. These devices, such as remote wireless sensors, often have minimal onboard processing capabilities limited to information collection and transmission, limited overhead available for additional hardware integrated security solutions, and minimal user interface options provided for allowing a user, for example, to turn on a device and recognize it is operating through an LED, etc.
SUMMARY OF INVENTION
[0006] The present invention includes at least a method, device, chipset, computer program and system for propagating encryption keys amongst devices. The present invention, in at least one embodiment, decreases the requirement to establish secure or "trusted" relationships between every device in a group by propagating established key information for one or more devices by direct transfer from one device to another without having to pair each device.
[0007] In at least one embodiment of the present invention, encryption keys may be used in order to establish a secured link between one or more wireless communication devices. The information required to generate encryption keys may be transmitted from one device to another device during a process by which two devices become trusted to each other (e.g., pairing). The establishment of a trusted relationship may require the
initiation of an unsecured wireless link followed by a plurality of wireless information exchanges. This process may prove detrimental to some devices, such as the constrained resource devices described above. The requirement of repeatedly pairing devices requires power and processing resources that may impact operations for these devices, especially if the process must be repeated for every encountered device with which information may be transacted. Also, the pairing process will necessarily create additional wireless traffic, which may impact efficiency. As a result, the present invention may employ a propagation strategy without the requirement of pairing every device, which conserves resources.
[0008] More specifically, once a trusted relationship has been established with at least one device within a group of devices, encryption keys to other devices in the same group of devices may be passed between these devices without the requirement of pairing to every other device. Eliminating the pairing requirement may beneficially reduce both resource consumption and communication traffic between the various active wireless communication devices. Further, in some embodiments of the present invention, determinations may be made as to whether a trusted device should receive some or all of the encryption keys stored in a device. This inquiry may evaluate identification information provided by a trusted device to determine whether the device is in a particular group of devices that are sharing their key information, whether the trusted device is currently operating in a certain mode that requires the keys of other devices, etc.
DESCRIPTION OF DRAWINGS
[0009] The invention will be further understood from the following detailed description of various exemplary embodiments, taken in conjunction with appended drawings, in which:
[0010] FIG. 1 A discloses a modular description of an exemplary wireless communication device usable with at least one embodiment of the present invention.
[0011] FIG. IB discloses an exemplary structural description of the wireless communication device previously described in FIG. IA.
[0012] FIG. 2 discloses an exemplary Bluetooth™ protocol stack and an exemplary Wibree™ protocol stack usable with at least one embodiment of the present invention.
[0013] FIG. 3A discloses an example of multiple wireless peripheral devices attempting to communicate concurrently with a dual-mode radio modem in accordance with at least one embodiment of the present invention.
[0014] FIG. 3B discloses further detail pertaining to the example of FIG. 3 A regarding operational enhancements for managing the operation of a dual-mode modem in accordance with at least one embodiment of the present invention.
[0015] FIG. 4 discloses a more detailed example of a Wibree™ protocol stack in accordance with at least one embodiment of the present invention.
[0016] FIG. 5A discloses examples of a pairing process in accordance with at least one embodiment of the present invention.
[0017] FIG. 5B discloses possible impacts of requiring a pairing process between every device in a device group in accordance with at least one embodiment of the present invention.
[0018] FIG. 6 A discloses an exemplary encryption key propagation process in accordance with at least one embodiment of the present invention.
[0019] FIG. 6B discloses an exemplary device communication process in accordance with at least one embodiment of the present invention.
[0020] FIG. 6C discloses another exemplary device communication process in accordance with at least one embodiment of the present invention.
[0021] FIG. 6D discloses an exemplary effect of the key propagation process in accordance with any or all of communication processes disclosed in FIG 6A-6C.
[0022] FIG. 7 discloses a flowchart for an exemplary process of receiving an encryption key in accordance with at least one embodiment of the present invention.
[0023] FIG. 8 discloses a flowchart for an exemplary process of propagating an encryption key in accordance with at least one embodiment of the present invention.
DESCRIPTION OF EXEMPLARY EMBODIMENTS
[0024] While the invention has been described below in a multitude of exemplary embodiments, various changes can be made therein without departing from the spirit and scope of the invention, as described in the appended claims.
I. Wireless communication device
[0025] As previously described, the present invention may be implemented using a variety of wireless communication equipment. Therefore, it is important to understand the communication tools available to a user before exploring the present invention. For example, in the case of a cellular telephone or other handheld wireless devices, the integrated data handling capabilities of the device play an important role in facilitating transactions between the transmitting and receiving devices.
[0026] FIG. IA discloses an exemplary modular layout for a wireless communication device usable with the present invention. WCD 100 is broken down into modules representing the functional aspects of the device. These functions may be performed by the various combinations of software and/or hardware components discussed below.
[0027] Control module 110 regulates the operation of the device. Inputs may be received from various other modules included within WCD 100. For example, interference sensing module 120 may use various techniques known in the art to sense sources of environmental interference within the effective transmission range of the wireless communication device. Control module 110 interprets these data inputs, and in response, may issue control commands to the other modules in WCD 100.
[0028] Communications module 130 incorporates all of the communication aspects of WCD 100. As shown in FIG. IA, communications module 130 may include, for example, long-range communications module 132, short-range communications module 134 and machine-readable data module 136 (e.g., for NFC). Communications module 130 utilizes at least these sub-modules to receive a multitude of different types of communication from both local and long distance sources, and to transmit data to recipient devices within the transmission range of WCD 100. Communications module 130 may be triggered by control module 110, or by control resources local to the module responding to sensed messages, environmental influences and/or other devices in proximity to WCD 100.
[0029] User interface module 140 includes visual, audible and tactile elements which allow a user to receive data from, and enter data into, the device. The data entered by a user may be interpreted by control module 110 to affect the behavior of WCD 100.
User- inputted data may also be transmitted by communications module 130 to other devices within effective transmission range. Other devices in transmission range may also send information to WCD 100 via communications module 130, and control module 110 may cause this information to be transferred to user interface module 140 for presentment to the user.
[0030] Applications module 180 incorporates all other hardware and/or software applications on WCD 100. These applications may include sensors, interfaces, utilities, interpreters, data applications, etc., and may be invoked by control module 110 to read information provided by the various modules and in turn supply information to requesting modules in WCD 100.
[0031] FIG. IB discloses an exemplary structural layout of WCD 100 according to an embodiment of the present invention that may be used to implement the functionality of the modular system previously described in FIG. IA. Processor 150 controls overall device operation. As shown in FIG. IB, processor 150 is coupled to at least communications sections 154, 158 and 166. Processor 150 may be implemented with one or more microprocessors that are each capable of executing software instructions stored in memory 152.
[0032] Memory 152 may include random access memory (RAM), read only memory (ROM), and/or flash memory, and stores information in the form of data and software components (also referred to herein as modules). The data stored by memory 152 may be associated with particular software components. In addition, this data may be associated with databases, such as a bookmark database or a business database for scheduling, email, etc.
[0033] The software components stored by memory 152 include instructions that can be executed by processor 150. Various types of software components may be stored in memory 152. For instance, memory 152 may store software components that control the operation of communication sections 154, 158 and 166. Memory 152 may also store software components including a firewall, a service guide manager, a bookmark database, user interface manager, and any communication utilities modules required to support WCD 100.
[0034] Long-range communications 154 performs functions related to the exchange of information over large geographic areas (such as cellular networks) via an antenna. These long-range network technologies have commonly been divided by generations, starting in the late 1970s to early 1980s with first generation (IG) analog cellular telephones that provided baseline voice communication, to modern digital cellular telephones. GSM is an example of a widely employed 2G digital cellular network communicating in the 900 MHZ/1.8 GHZ bands in Europe and at 850 MHz and 1.9 GHZ in the United States. In addition to basic voice communication (e.g., via GSM), long-range communications 154 may operate to establish data communication sessions, such as General Packet Radio Service (GPRS) sessions and/or Universal Mobile Telecommunications System (UMTS) sessions. Also, long-range communications 154 may operate to transmit and receive messages, such as short messaging service (SMS) messages and/or multimedia messaging service (MMS) messages.
[0035] As a subset of long-range communications 154, or alternatively operating as an independent module separately connected to processor 150, transmission receiver 156 allows WCD 100 to receive transmission messages via mediums such as Digital Video Broadcast for Handheld Devices (DVB-H). These transmissions may be encoded so that only certain designated receiving devices may access the transmission content, and may contain text, audio or video information. In at least one example, WCD 100 may receive these transmissions and use information contained within the transmission signal to determine if the device is permitted to view the received content.
[0036] Short-range communications 158 is responsible for functions involving the exchange of information across short-range wireless networks. As described above and depicted in FIG. IB, examples of such short-range communications 158 are not limited to Bluetooth™, Wibree™, WLAN, UWB and Wireless USB connections. Accordingly, short-range communications 158 performs functions related to the establishment of short- range connections, as well as processing related to the transmission and reception of information via such connections.
[0037] Short-range input device 166, also depicted in FIG. IB, may provide functionality related to the short-range scanning of machine-readable data (e.g., for NFC). For example, processor 150 may control short-range input device 166 to generate RF signals for activating an RFID transponder, and may in turn control the reception of
signals from an RFID transponder. Other short-range scanning methods for reading machine-readable data that may be supported by short-range input device 166 are not limited to IR communication, linear and 2-D (e.g., quick response or QR) bar code readers (including processes related to interpreting universal product codes or UPC labels), and optical character recognition devices for reading magnetic, Ultraviolet (UV), conductive or other types of coded data that may be provided in a tag using suitable ink. In order for short-range input device 166 to scan the aforementioned types of machine- readable data, the input device may include optical detectors, magnetic detectors, CCDs or other sensors known in the art for interpreting machine-readable information.
[0038] As further shown in FIG. IB, user interface 160 is also coupled to processor 150. User interface 160 facilitates the exchange of information with a user. FIG. IB shows that user interface 160 includes a user input 162 and a user output 164. User input 162 may include one or more components that allow a user to input information. Examples of such components include keypads, touch screens, and microphones. User output 164 allows a user to receive information from the device. Thus, user output portion 164 may include various components, such as a display, light emitting diodes (LED), tactile emitters and one or more audio speakers. Exemplary displays include liquid crystal displays (LCDs), and other video displays.
[0039] WCD 100 may also include one or more transponders 168. This is essentially a passive device that may be programmed by processor 150 with information to be delivered in response to a scan from an outside source. For example, an RFID reader mounted in an entryway may continuously emit radio frequency waves. When a person with a device containing transponder 168 walks through the door, the transponder is energized and may respond with information identifying the device, the person, etc. In addition, a reader may be mounted (e.g., as discussed above with regard to examples of short-range input device 166) in WCD 100 so that it can read information from other transponders in the vicinity.
[0040] Hardware corresponding to communications sections 154, 156, 158 and
166 provide for the transmission and reception of signals. Accordingly, these portions may include components (e.g., electronics) that perform functions, such as modulation, demodulation, amplification, and filtering. These portions may be locally controlled, or
controlled by processor 150 in accordance with software communication components stored in memory 152.
[0041] The elements shown in FIG. IB may be constituted and coupled according to various techniques in order to produce the functionality described in FIG. IA. One such technique involves coupling separate hardware components corresponding to processor 150, communications sections 154, 156 and 158, memory 152, short-range input device 166, user interface 160, transponder 168, etc. through one or more bus interfaces (which may be wired or wireless bus interfaces). Alternatively, any and/or all of the individual components may be replaced by an integrated circuit in the form of a programmable logic device, gate array, ASIC, multi-chip module, etc. programmed to replicate the functions of the stand-alone devices. In addition, each of these components is coupled to a power source, such as a removable and/or rechargeable battery (not shown).
[0042] The user interface 160 may interact with a communication utilities software component, also contained in memory 152, which provides for the establishment of service sessions using long-range communications 154 and/or short-range communications 158. The communication utilities component may include various routines that allow the reception of services from remote devices according to mediums such as the Wireless Application Medium (WAP), Hypertext Markup Language (HTML) variants like Compact HTML (CHTML), etc.
II. Wireless communication mediums
[0043] The present invention may be implemented with, but is not limited to, short-range wireless communication mediums. Bluetooth™ is an example of a short- range wireless technology quickly gaining acceptance in the marketplace. A Bluetooth enabled WCD may transmit and receives data, for example, at a rate of 720 Kbps within a range of 10 meters, and may transmit up to 100 meters with additional power boosting. Current systems may run at a nominal rate of 1 Mbps. A user does not actively instigate a Bluetooth™ network. Instead, a plurality of devices within operating range of each other will automatically form a network group called a "piconet". Any device may promote itself to the master of the piconet, allowing it to control data exchanges with up to seven "active" slaves and 255 "parked" slaves. Active slaves exchange data based on the clock timing of the master. Parked slaves monitor a beacon signal in order to stay synchronized
with the master, and wait for an active slot to become available. These devices continually switch between various active communication and power saving modes in order to transmit data to other piconet members. In addition to Bluetooth™ other popular short-range wireless networks include WLAN (of which "Wi-Fi" local access points communicating in accordance with the IEEE 802.11 standard, is an example), WUSB, UWB, ZigBee (802.15.4, 802.15.4a), Wibree™ and UHF RFID. All of these wireless mediums have features and advantages that make them appropriate for various applications.
[0044] Wibree is an open standard industry initiative extending local connectivity to small devices with technology that increases the growth potential in these market segments. This emerging low-power communication standard has been recently embraced by the Bluetooth™ Special Interest Group, and as a result, the Wibree™ specification will soon become part of the Bluetooth™ specification as an ultra low power Bluetooth™ technology. With this integration, Wibree™ technology may complement close range communication with Bluetooth™-like performance in the 0-10 m range with a data rate of 1 Mbps. Wibree™ is optimized for applications requiring extremely low power consumption, small size and low cost. Wibree™ may be implemented either as stand-alone chip or as Bluetooth™ -Wibree™ dual-mode chip. More information can be found on the Wibree™ website: www.wibree.com.
[0045] Now referring to FIG. 2, an exemplary Bluetooth™ protocol stack and an exemplary Wibree protocol stack are disclosed. Bluetooth™ stack 200 includes elements that may convey information from a system level to a physical layer where it may be transmitted wireless to another device. At the top level, BT Profiles 202 include at least a description of a known peripheral device which may be connected wirelessly to WCD 100, or an application that may utilize Bluetooth™ in order to engage in wireless communication with a peripheral device. The use of the phrase "peripheral devices" is not intended to limit the present invention, and is used only to represent any device external to WCD 100 also capable of wirelessly communicating with WCD 100. Bluetooth™ profiles of other devices may be established through a pairing procedure wherein identification and connection information for a peripheral device may be received by WCD 100 through a polling process and then saved in order to expedite the connection to the device at a later time. After the application and/or target peripheral
device (or devices) is established, any information to be sent must be prepared for transmission. L2CAP level 204 includes at least a logical link controller and adaptation protocol. This protocol supports higher level protocol multiplexing packet segmentation and reassembly, and the conveying of quality of service information. The information prepared by L2CAP level 204 may then be passed to an application-optional host controller interface (HCI) 206. This layer may provide a command interface to the lower link manager protocol (LMP) layers, link manager (LM) 208 and link controller (LC) 210. LM 208 may establish the link setup, authentication, link configuration and other protocols related to establishing a wireless link between two or more devices. Further, LC 210 may manage active links between two or more devices by handling low-level baseband protocols. Wireless communication may then be established and conducted using the hardware (modem, antenna, etc.) making up physical layer (PHY) 212. Of course, the above identified layers of Bluetooth™ stack 200 may also be utilized in an order reversed from that disclosed above in order to receive a wireless transmission into WCD 100 from a peripheral device.
[0046] The layers in the standalone Wibree™ stack 220 are similar to the elements previously described. However, due to the relative simplicity of Wibree™ when compared to Bluetooth™, there are actually less layers utilized to achieve wireless communication. W Profiles 222, similar to the profiles used in Bluetooth™, are used to specify applications that may use Wibree™ for communication and peripheral devices with which a Wibree™ modem may wirelessly communicate. The profile adoption layer (PAL) 224 may be used to prepare the information for transmission via wireless communication. Host interface (HIF) layer 226 may provide an interface between the upper layers communicating with applications and schedulers in WCD 100, and the lower layers of the Wibree™ stack 220 which establish and maintain the links to peripheral devices. Lower layers of the Wibree™ stack 220 may further include at least link layer (LL) 228. LL 228 may both establish and maintain wireless communications with other wireless enabled devices through the use of Physical Layer (PHY) 230. Wibree™ LL 228, however, differs significantly from LM 208 and LC 210 in Bluetooth™.
III. Dual-mode modem
[0047] FIG. 3 A includes an alternative exemplary implementation of at least one embodiment of the present invention. Again, in this example the three peripheral devices
(1150, 1152 and 1154) are attempting concurrent communication with WCD 100 through dual-mode radio modem 300. Radio modem 300 may include local control resources for managing both "radios" (e.g., Bluetooth™ and Wibree™ software based radio control stacks) attempting to use the physical layer (PHY) resources of dual-mode radio modem 300. In this example, dual-mode radio modem 300 includes at least two radio stacks or radio protocols (labeled "Bluetooth" and "Wibree") that may share the PHY layer resources (e.g., hardware resources, antenna, etc.) of dual-mode radio modem 300. The local control resources may include an admission controller ("Adm Ctrl") and a dual- mode controller ("DuMo Manager"). These local control resources may be embodied as a software program and/or in a hardware form (e.g., logic device, gate array, MCM, ASIC, etc.) in a dual-mode radio modem interface, and the radio modem interface may be coupled to, or alternatively, embedded in dual-mode radio modem 300. The interaction of these control resources with the radio protocols utilizing dual -mode radio modem 300 is explained below.
[0048] With respect to FIG. 3B, an exemplary combination of the two separate radio protocol stacks (previously discussed with respect to FIG. 2) into a single combined entity controlled locally by at least an admission control 304 and a DuMo manager 306 is now disclosed. The two previously described standalone stacks are shown to establish the individual elements that may be incorporated into an integrated dual-mode entity 302. For a more specific discussion of the functioning of admission control 304 and a DuMo manager 306 in terms of managing the operations of dual-mode modem 300, please refer to Application No. 11/538,310, filed October 3, 2006, which is hereby incorporated by reference. Briefly, Admission control 304 may act as a gateway for the dual-mode radio modem 300 by filtering out both Bluetooth™ and Wibree™ requests from the operating system of WCD 100 that may result in conflicts. Scheduling information may also be provided by Multiradio controller (MRC) 170, wherein certain periods of operation are allocated to dual-mode radio modem 300 in view of the other active radio modems operating in WCD 100. This scheduling information may be passed down to both the HCI + Extension level of the combined protocol stacks and also to DuMo manager 306 for further processing. However, if scheduling information from MRC 170 is critical (delay-sensitive), it may be sent through MCS 190 via a direct connection to DuMo Manager 306. The information received by DuMo manager may 306 then be used to
create an interleaved schedule for dual -mode radio modem 300 allowing both the Bluetooth™ and Wibree™ protocols to operate concurrently.
IV. Protocol stacks and packet routing
[0049] FIG. 4 includes a more detailed description of the upper layers of the
Wibree™ communication protocol. The Wibree™ system includes two parts: the Wibree™ Radio 408 and the Wibree™ Host 402. Connection between radio 408 and host 402 goes through the HIF (Host Interface). Further, PAL 224 includes at least General Access Profile (GAP) 406.
[0050] Application layer 400 may include various programs that may be executed on a computing device. For example, an application may be a communication utility or productivity program running on a WCD. An application may use W Profiles 222 in Wibree™ (e.g. Profile 1, Profile 2, etc.) in order to send information into the Wibree™ protocol stack 220. This transaction may be supervised by Host Manager 404. The information may then be prepared by PAL 224 and GAP 406 for routing to Wibree™ radio 408, wherein LL 228 may both establish new wireless connections and manage existing connections with peripheral devices through the various resources (modem, antenna, etc.) that make up PHY layer 230.
V. Device pairing and the effect on communication/device performance
[0051] The disclosure of the present invention will now begin to focus primarily on the use of the Wibree™ protocol for the sake of explanation. Wibree™ is an appropriate wireless communication medium for implementing the present invention for multiple reasons. Initially, Wibree has been designed for use in resource constrained wireless communication devices. Further, Wibree™, as will be described, uses an encryption key creation process that provides the flexibility to allow for passing established encryption keys from one device to another. Even in view of these advantages, the present invention is not only limited to being implemented using the Wibree M protocol, and may use any similarly configured wireless communication medium.
[0052] Devices communicating via wireless communication mediums like
Wibree™ may establish secure wireless links using encryption keys. In one scenario, these keys may be predetermined, for example during device manufacture.
Predetermined encryption keys may, in some instances, be hard-coded into simple and/or low power devices not enabled with higher level processing. Alternatively, encryption keys may also be computed on the fly during initial device interaction. An example of encryption key establishment through initial device interaction is now disclosed in FIG. 5 A, wherein an example of Wibree™ pairing and secure link establishment is disclosed. In this example, device A 500 does not have any sort of trusted relationship with device B 502. However, these devices may establish a relationship through a "pairing" process. This pairing process may include both a temporary session key establishment process as shown at 504 and a device pairing process as shown at 506. After the pairing process is complete, an encrypted link may be established to exchange data in a secure manner at 508.
[0053J As a initial process, a temporary session key may be established in accordance with the steps disclosed at 504. A device may "advertise" the desire to communicate with another device that responds as an "initiator" by establishing an unsecured link layer connection. The advertising device, in this example device A 500, may then send a request to start a pairing process, to which the initiator (e.g., device B 502) may respond. In the case of Wibree™, the advertising device may then transmit information to the initiator that will be employed in creating encryption keys usable for establishing a secured wireless link. This information may include an identity root (IR) and an encryption root, or long term key (LTK). The received IR and/or LTK information may then be utilized by the initiator device to compute a temporary session encryption key. This computed temporary session encryption key may be transmitted back to the advertising device to confirm accuracy. Upon successful completion, a temporary session encryption key usable in a subsequent device pairing process (process 506) is achieved.
[0054] The process of pairing and establishing a secure link between device A
500 and device B 502 is shown at 506 in FIG. 5A. The process simply involves the exchange of key information established, for example, during the previously described key process described at 504. In this example, device A 500 transmits a link key and identity key computed based on the IR and LTK information, and device B 502 reciprocates by sending the appropriate link and identity keys based on the same information. If the devices see the expected encryption keys from this exchange, then the
devices become paired in a trusted relationship. Pairing devices, such as exemplary device A 500 and device B 502, allows these devices to establish a secure wireless link in an expedited manner. This expedited link establishment is shown at 508 in FIG. 5A. The two paired device (e.g., device A 500 and device B 502) may immediately establish a encrypted link over which data may be exchanged between the two devices in a secure manner.
[0055] It is important to note that wireless communication mediums such as
Wibree™ may be more conducive to implementing various embodiments of the present invention over, for example, a wireless communication medium like Bluetooth™ due to the way in which Bluetooth™ encryption keys are formed. As previously described, Wibree™ encryption keys are configured based only on information provided by an advertising device. As a result, the encryption key may be passed from device to device because there is no device dependence when using this key. On the contrary, encryption keys computed in Bluetooth™ incorporate at least device-specific address information along with other random information from one or both of the paired devices. Therefore, a Bluetooth™ encryption key cannot be passed from one device to another because the device address information used to form the encryption key would not agree with the device address information of the offering device. This lack of continuity between encryption key and device may then result in a failure to establish a secure link.
[0056] The exemplary processes disclosed in FIG. 5A are replicated to multiple devices in FIG. 5B. In FIG. 5B, devices A 500 and B 502 are now accompanied by devices C-I (shown at 512-524, respectively). Devices A-I are shown in a state wherein these devices are required to first pair with every device in which secured communication will take place. As is shown in this example, a large communication burden may be exerted on each of these devices as a pairing process must be performed between every device in a device group. This requirement may burden all of the wireless devices, especially of they are constrained resource devices.
[0057] In an example scenario based on the situation disclosed by FIG. 5B, devices A-I may all be components within a biometric tracking system (e.g., a device group). Device A 500 may be a battery-driven data collection device, and devices B-I (502 and 512-525, respectively) are various sensor devices worn on an individual's body in order to monitor pulse, temperature, pace, blood pressure, etc. of the individual. Since
device A 500 may collect information from all of the other devices, under current strategies, a trusted or paired relationship must exist between device A 500 and all other devices. This may put a large strain on device A 500 as the pairing process required with each sensor device B-I may create a lot of wireless traffic, as well as additional power drain to support this messaging. This may shorten the operational life of device A 500.
[0058] The other devices B-I in this example may also be adversely affected by operation under current communication schemes. Presuming at least some of the device B-I are simple sensors, the pairing process may burden their basic control systems, and may further contribute to battery depletion due to the additional communication burden. Sensors small enough to fit in a watch, a shoe or to be worn on the skin will presumably be limited in size and complexity, and therefore, must operate under a system that recognizes, and compensates for, their limited ability.
VI. Encryption key propagation
[0059] Now referring to FIG. 6A, a key propagation strategy in accordance with at least one embodiment of the present invention is now disclosed. In this example, an interaction between device A 500, device B 502 and device C 512 is shown. Initially, device A 500 may enter a trusted or paired relationship with device B 502 as shown at 600. As a part of this trusted relationship, device A 500 and device B 502 may further engage in a secure link at shown at 602, however, a further engagement in a secure link is not essential to the encryption key propagation process as disclosed in this example. The propagation of encryption keys may now be explained.
[0060] As a part of the initial pairing process between device A 500 and device B
502, information may be passed to device B 502 for use in computing encryption keys for establishing a secure connection with device A 500. Device B 502 may store these encryption keys along with various encryption keys for other devices to which device B 502 has a trusted relationship. An exemplary database that may be utilized for storing encryption key information is also shown in FIG. 6A at 604. Database 604 may include data related to the pairing interaction including, for example, the identification of the device to which an encryption key corresponds (TARGET ID), encryption key information (KEY) and the source of the encryption key infoπnation (SOURCE). Database 604 shows an entry for device A 500 including fields identifying device A 500,
encryption key information pertaining to device A 500 and the source of the information being a previous pairing between device A 500 and device B 503 (e.g., "pairing").
[0061] Device B 502 may then encounter device C 512, and engage in a pairing process with this device at 606, which may also be reflected in database 604 stored on device B 502 as "TARGET ID: DEV C, KEY: [key info] and SOURCE: pairing." After device B 502 and device C 512 have been paired, the devices may further engage in a secured wireless connection at 608 over which information may be exchanged. Part of this information exchange may involve device B 502 passing one or more encryption keys for other devices in a device group, such as device A 500, to device C 512. This propagation of encryption key information is shown at 610.
[0062] Depending on the sophistication of device B 502, a determination may be made as to whether one or more encryption keys for other devices should be transferred to device C 512 before these encryption keys are conveyed. This determination may include determining which of the stored encryption keys should be forwarded to the receiving device, and may be made, for example, based on identification information provided by the receiving device to the providing device. This identification information may include specific device identification information, information that identifies the receiving device as being part of a device group, information that indicates a receiving device operating mode, indicator status information, etc. For instance, indicator status information may be as simple as a flag in device C 512 that indicates encryption keys should be conveyed, and may be a bit flag set in the receiving device. A simple bit flag system may be more suitable for resource constrained devices such as low power sensors. Otherwise, in at least one embodiment of the present invention, all stored encryption keys may always be transferred to all encountered paired devices. This sort of key basic distribution strategy may be utilized in scenarios where all encountered devices are very simple resource constrained devices, all wireless devices expected to be encountered are in the device group, etc.
[0063] In view of the above, if device B 502 passes encryption key information related to device A 500 to device C 512, this information may be stored by device C 512 in database 612. In the example of FIG. 6A, the stored information may identify the target device as device A 500, include the passed encryption key information, and may further identify the source of the encryption key information as device B 502. Now that
device C 512 has been passed encryption keys for at least device A 500, a secure link may be established between device C 512 and device A 500 without being required to first engage in a pairing process. More specifically, device C 512 may establish a secure link using the keys passed from device B 502 without having to engage in the key creation and pairing processes previously described in FIG. 5A at 504 and 506.
[0064] In at least one scenario, device A 500 may request device identity information to verify against information embedded within the encryption key information supplied by a device requesting a secure link. This verification may occur due to the operational parameters of the particular wireless communication medium being utilized, a security enhancement enacted in device A 500, etc. In response, device C 512 may be forced to "impersonate" another device (e.g., device B 502) when engaging in a secure link with device A 500. In such a situation, device C 512 may supply the previously stored SOURCE information for DEV B 502 (e.g., from database 612) to DEV A 500 so that the identity information will match the encryption key information. A secure link, such as previously described at 508 in FIG. 5A, may then result such as shown at 614 in FIG. 6A. As a result of this secure link, information may be passed between the two devices, such as in the biometric telemetry scenario where data recorded by a sensor placed upon an individual is wirelessly transmitted to a collection device (e.g., device A 500).
[0065] More specifically, in accordance with at least one embodiment of the present invention, the security and identity contexts in Wibree™ may be separated from device identity using so-called private addresses "AAx" that may be temporarily utilized by devices. Private addresses have traditionally been used to protect the identity of a device from other devices that could intercept and use device address information for malicious purposes (such as impersonating the device). However in this exemplary implementation, the security context may be transmitted from one device to another without needing to involve advertising device(s).
[0066] Under current private address practices, an advertising device can only submit to the master device the next (e.g., future) private address that it is going to use. This feature was originally designed to make it possible for the master device to quickly re-discover the advertiser in a re-connect procedure, or for efficiency reasons to "white-
list" the address in question (e.g., to record a future address as a recognized address) during a longer break in communication.
[0067] Next is discussed a meta-definition (an augmentation) for the construction of the random part of the private address, as well as for the random value used the advertising device seed for the keying. The advertiser (e.g. on booting) may select a random value ARR (16 bytes) and initializes a 4-byte address counter ARRC to 0. The random part of the address will always be taken from the first bytes of the image:
[0068] CAR V = EARR(ARRC | magicval)0...23
[0069] i.e., the advertiser's address may now take the form
[0070] AA = [CAR V, Emκ(CAR V )]
[0071] where IRK is the relevant identity resolving key and CARV may constitute the 24 first bits of the image of the encryption with EARR. After the operation is done, the ARRC is incremented. Instead of the next private address to be used (or optionally as an additional PDU) the advertiser will send the random value and the current counter value (ARR and ARRC) to the peer. This may be completely acceptable from a security point of view since the peer in question anyway can deduce all current and future addresses of the advertising device in question. Additionally, the random key value (IRV) to be submitted in the connection phase may be determined by the 80 least significant bits of the very same encryption image CAR V that was used for private address construction.
[0072] The operation above may be invoked every time a connection is lost and the advertiser needs to advertise its presence. The solution gives advantages and communication savings not only related to hand-offs, but also for the connecting party in re-connects. An exemplary operation representing this interaction is disclosed at 620 in FIG. 6B. The connecting party may know not only the next address, but also other future private addresses of the advertising device based on a previously advertised random part. As the connecting device may be more powerful, a search for future values (e.g., 30 future values) may be easily achieved, and the white-list of the connecting device can be augmented not only with the next private address, but a few future private address values. However, the counter value should not also be broadcast, as the value may be enough for an attacking device to track the location of a device.
[0073] Knowing its own future addresses, the connecting party may be able to pre-compute the session keys for the next connection. For some devices this may be valuable, as the connecting device may get the random vector of the advertiser a later phase during session establishment. The same approach may be applied by the initiating device for its future connection addresses. An advertiser-specific random value can be determined in the initiator (IRR), and the connection addresses may be resolved as
[0074] CIR V = EIRR(IRRC \ magicvaU)
[0075] On releasing the random value IRR (and related counter IRRC) to the advertising device, this device may fill its white-list appropriately also for future connects. This feature may alleviate synchronization problems if a connection establishment fails in a very early phase.
[0076] Now referring to process 630 in FIG 6C, in a security hand-off procedure, one master may now submit to another master sufficient key material for a hand-off. This involves sending from the original master a set of tuples:
[0077] (AAi, IRV1, SK1, EDIVi, IRA1)
[0078] wherein the addresses and session key are calculated conditionally to
CARVi and IRAu the latter possibly a part of a CIR V image. Thus the "temporary master" may then select the tuple based on the address of the advertisement, connect with EDIV; and IRAi, as weh1 as check that the received IRVi matches before deploying a session with the given SKj. This operation may not be conditional to the master submitting CIRV to the advertising device, but that might anyway be important for white-listing purposes in the device.
[0079] A master receiving these tuples may neither know the identity parameter of the advertiser nor the long-term secret between the original initiator-advertiser pair. Thus the new master can only operate within the count of its tuples, which can be used for benefit in use cases that involve lending/borrowing resources. However, as the probability of repeated reconnects to maintain the service cannot be a priori defined, in other cases it might be beneficial for the advertising device to release the identity (and a new diversified long-term key) on request to the new master within the first established encrypted session. This request must come from the master, since to the advertiser the new initiator is indistinguishable from the old one.
[0080] Currently in Wibree™, white-listing is defined as a set and/or list of values that are matched in an absolute manner. A better optimized white-listing algorithm may be to deploy a set of Bloom filters for each private address sequence that is to be matched. This approach given below is valid both for white-listing advertiser addresses for advertisements, and initiator addresses for connection attempts.
[0081] A Bloom filter is an aggregate of several values into one. The matching is done based on a subset match: if a compared address can be considered a subset of the filter, the filter returns TRUE. A Bloom filter carries a potential for false positives that is proportional to the length of the filter and the aggregation factor. In the following, a Bloom filter targeted for Wibree™ purposes is presented. The filter (for one address) is 256 bits (16 bytes) long. The match for a 6-byte address is done by taking each individual byte of the address and comparing it against the relevant bit in the filter. If, for all 6 bytes, the corresponding bits in the filter are 1, a match is found. As an algorithm (1): z -k- 1 for i -e- 0 to 5
J if bloorn[addr ,) = 0
\ then z i- 0 return (z)
(1)
[0082] In order to achieve energy savings, the matching functionality may be done on the link layer (a basic white-listing requirement). Correspondingly, the construction of a Bloom filter on the host layer for, say 30 future values of a private addresses is simply the equivalent setting of the 256-bit Bloom filter array (2): for / <- 0 to "255 do {bloom[i] <- 0 for j f- 0 to 29 f for i ; 4- 0 to 5
\ do {bloom[ϋddr[i),] -f- 1 ,~,
[0083] For an m-bit Bloom filter with k checks (hash functions) per value and n entries per filter, the false-positive probability, for example, that the filter returns true even though the value that is compared against never was inserted into the filter is (3):
Bloom filter, the false positive rate will be 0.0057, i.e. on average every 2000th wrong value triggers the white-list. This may result in the host logic being unnecessarily activated, but the error will not propagate further. The above exemplary approach for white-listing saves space (30 future value can be stored in the space of less than 3 absolute addresses), and may have a benefit in that synchronization requirements between initiators and advertisers are relaxed significantly.
[0085] FIG. 6D discloses a situation similar to FIG. 5B, but in this exemplary scenario an impact of at least one embodiment of the present invention on a plurality of interacting wireless devices is shown. In accordance with the disclosed exemplary embodiment, if devices A-I (500, 502 and 512-524, respectively) are members of the same device group, then the requirement for device A 500 to pair with each and every device B-I (502 and 512-524, respectively) may be removed through encryption key propagation. Device A 500 may only establish a trusted relationship through pairing with a few devices in the group due to the continuous propagation of encryption keys within the device group in accordance with at least one embodiment of the present invention. As is evident from FIG. 6D, the overall amount of messaging, at least for device A 500, may be greatly decreased, which in turn may reduce both the amount of wireless message traffic between the devices, and likewise, reduce the power burden on each device required to perform these communication functions. In resource-constrained devices such as previously described, this reduced burden may result in substantially longer battery life.
[0086] FIG. 7 now discloses a process for receiving encryption keys in accordance with at least one embodiment of the present invention. The process may begin at step 700, wherein a device enters a reception mode. This step may simply constitute that wireless communication resources supporting a particular wireless communication medium (e.g., Wibree™) have been enabled on a device. The activation of these resources may make the device available for linking with other devices operating in an advertising mode. In step 702, another device may be acting in an advertising mode and may request a link to the device. A determination may then be made in step 704 as to whether a trusted relationship already exists between the two devices. This determination may be made via wireless messages sent back and forth between the devices. If no
trusted relationship is determined to exist at 704, then in step 706 a pairing process may begin such as previously explained at 504 in FIG. 5A. The pairing process may cause information to be sent back and forth between the devices. In the case of Wibree™, messages may be sent from the advertising device to the initiating device including information used for formulating encryption keys. Once this information is received, encryption keys may be formulated by the receiving device, and these encryption keys may be sent back to the advertiser for verification.
[0087] Once a trusted relationship has been established through pairing, the devices may also decide to establish a secure link at 708. If a secure link is not desired at step 708, then the unsecured link may terminate at step 710 and the process may restart at step 700. However, if establishing a secure link between devices is desired, then the process may move to step 712. It is important to note that this portion of this exemplary process that includes establishing secure link may also be the outcome of step 704 if it is determined that a trusted relationship already exists (e.g., that the device already retained encryption keys pertaining to the advertising device).
[0088] In step 712 a secure link may be created between devices. The secure link may allow information to be exchanged between the two devices at step 714 in a secure manner. In this example, the information delivered from the advertising device to the initiating (receiving) device may include one or more encryption keys from other devices in the device group. As previously set forth, this information delivery may include all of the encryption keys stored on the advertising device, or may include a portion of the encryption keys based on a determination. If the process of information exchange and encryption key delivery has completed per step 716, then the secure link may terminate at step 718 and the process may continue from step 700.
[0089] FIG. 7 describes an example process for receiving encryption keys.
FIG. 8 now discloses an example process for propagating encryption keys. While two different exemplary processes are disclosed for encryption key reception and propagation, it is important to note that these processes may be performed by the same physical wireless device at different times. That is, a device acting in a reception mode may receive one or more encryption keys from another device, and then change operation to act in an advertising mode in order to propagate the received encryption keys to other devices. Further, while not pictured, the process of encryption key propagation may
further include encryption key exchanges between devices (e.g., a two way process), wherein both trusted devices involved in a secure link exchange stored encryption keys.
[0090] Now referring to FIG. 8, a process for propagating encryption keys in accordance with at least one embodiment of the present invention is now disclosed. The process may start at step 800 wherein a wireless device enters an advertising mode. An advertising mode may consist of a mode where the device actively broadcasts wireless messages announcing a desire to form a wireless link with other encountered wireless devices. In step 802, another device may respond to this request to form a link, and an unsecured wireless link may be established between the devices. In step 804 a determination is made as to whether a trusted relationship already exists between these devices. If no trusted relationship exists (e.g., these devices have not already been paired) then a pairing process may occur starting at step 806. After the pairing process is complete, encryption keys formed by the receiving device allows the devices to form a secure link? If no secure link is desired at step 808, then the unsecured link may be terminated at step 810 and the process may restart at step 800. Alternatively, the process may continue at 812.
[0091] It is important to note that the establishment of a secure link in step 812 may also occur directly after step 804 if it is determined that a trusted relationship already exists between the participating devices. After a secure link is established (step 812), information may be exchanged between the devices at step 814. This information may include identification information related to the device, a group, a state, an indicator, etc. as previously explained in the disclosure. This information may be utilized in optional step 816 (shown as a dotted object in FIG. 8) in determining whether to transmit some or all of its stored encryption keys related to other devices to the device participating in the secure link. Step 816 is shown as an optional step because, depending on the level of sophistication of a propagating device and the strategy employed in a device group, a determination step such as shown in step 816 may not be utilized in some embodiments of the present invention. However, if step 816 is employed in the process, a determination may be made based on information received from the other device as to whether some or all of the encryption keys stored on the advertising device should be transferred. If it is determined that no encryption keys should be transferred, the process may proceed to step 822 wherein the secure link is terminated. If some or all of the
encryption keys should be transferred, then these encryption keys may be propagated to the linked device at step 818. If step 816 is not incorporated in a particular embodiment of the exemplary process disclosed in FIG. 8, then once the link is established and communication occurs, then the keys may be propagated in step 818.
[0092] After step 814-818 are executed, a determination of whether the process has fully completed is made in step 820. If the process has not completed, then the process may continue to execute (e.g., communication may continue) under the secure link established at step 812 until all transactions are complete. If the process has now completed (e.g., concluding with some or all of the encryption keys related to other devices having been propagated), then in step 822 the secure link may be terminated and the entire process may resume at step 800. Again, while not shown, this exemplary process does not preclude the initiating device also propagating access keys to the advertising device in a sort of encryption key exchange propagation process. For the sake of explanation in this example, only a one way propagation process has been disclosed.
[0093] Accordingly, it will be apparent to persons skilled in the relevant art that various changes in forma and detail can be made therein without departing from the spirit and scope of the invention. The breadth and scope of the present invention should not be limited by any of the above-described exemplary embodiments, but should be defined only in accordance with the following claims and their equivalents.
Claims
1. A method, comprising: establishing a wireless link with an encountered device; determining whether a trusted relationship exists with the device; if the device is determined to be a trusted device, establishing a secure link with the device; and receiving encryption key information from the trusted device for establishing a secure link with at least one other device.
2. The method of claim 1 , further comprising providing information to the trusted device before receiving the encryption key information for establishing a secure link with at least one other device from the trusted device.
3. The method of claim 1 , wherein the encryption key information includes at least one encryption key and related information.
4. The method of claim 3, wherein the related information includes target device information identifying at least one device associated with the encryption key information.
5. The method of claim 3, wherein the related information further includes source device information.
6. The method of claim 1 , further comprising establishing a secure link with at least one of the other devices using the encryption key information.
7. A method, comprising: establishing a wireless link with an encountered device; determining whether a trusted relationship exists with the device; if the device is determined to be a trusted device, establishing a secure link with the device; determining if encryption key information for establishing a secure link with at least one other device should be transmitted to the trusted device; and if it is determined that the encryption key information for establishing a secure link with at least one other device should be transmitted, transmitting the encryption key information to the trusted device.
8. The method of claim 7, wherein the encryption key information for establishing a secure link with at least one other device was received through a trusted relationship with another device.
9. The method of claim 7, wherein determining if encryption key information for establishing a secure link with at least one other device should be passed to the device is based on information provided by the trusted device.
10. The method of claim 7, wherein the encryption key information includes at least one encryption key and related information.
11. The method of claim 10, wherein the related information includes target device information identifying at least one device associated with the encryption key information.
12. The method of claim 10, wherein the related information further includes source device information.
13. A computer program product comprising a computer usable medium having computer readable program code embodied in said medium for receiving encryption key information, comprising: a computer-readable program code configured to establish a wireless link with an encountered device; a computer-readable program code configured to determine whether a trusted relationship exists with the device; a computer-readable program code configured to, if the device is determined to be a trusted device, establish a secure link with the device; and a computer-readable program code configured to receive encryption key information from the trusted device for establishing a secure link with at least one other device.
14. The computer program product of claim 13, further comprising providing information to the trusted device before receiving the encryption key information for establishing a secure link with at least one other device from the trusted device.
15. The computer program product of claim 13, wherein the encryption key information includes at least one encryption key and related information.
16. The computer program product of claim 15, wherein the related information includes target device information identifying at least one device associated with the encryption key information.
17. The computer program product of claim 15, wherein the related information further includes source device information.
18. The computer program product of claim 13, further comprising establishing a secure link with at least one of the other devices using the encryption key information.
19. A computer program product comprising a computer usable medium having computer readable program code embodied in said medium for propagating encryption key information, comprising: a computer-readable program code configured to establish a wireless link with an encountered device; a computer-readable program code configured to determine whether a trusted relationship exists with the device; a computer-readable program code configured to, if the device is determined to be a trusted device, establish a secure link with the device; a computer-readable program code configured to determine if encryption key information for establishing a secure link with at least one other device should be transmitted to the trusted device; and a computer-readable program code configured to, if it is determined that the encryption key information for establishing a secure link with at least one other device should be transmitted, transmitting the encryption key information to the trusted device.
20. The computer program product of claim 19, wherein the encryption key information for establishing a secure link with at least one other device was received through a trusted relationship with another device.
21. The computer program product of claim 19, wherein determining if encryption key information for establishing a secure link with at least one other device should be passed to the device is based on information provided by the trusted device.
22. The computer program product of claim 19, wherein the encryption key information includes at least one encryption key and related information.
23. The computer program product of claim 22, wherein the related information includes target device information identifying at least one device associated with the encryption key information.
24. The computer program product of claim 22, wherein the related information further includes source device information.
25. An apparatus, comprising: one or more communication modules for supporting communication in at least one wireless communication medium; and at least one processor coupled to the one or more communication modules, the processor being configured to: establish a wireless link with an encountered device; determine whether a trusted relationship exists with the device; if the device is determined to be a trusted device, establish a secure link with the device; and receive encryption key information from the trusted device for establishing a secure link with at least one other device.
26. The apparatus of claim 25, wherein the encryption key information includes at least one encryption key and related information.
27. The apparatus of claim 26, wherein the related information includes target device information identifying at least one device associated with the encryption key information.
28. The apparatus of claim 26, wherein the related information further includes source device information.
29. The apparatus of claim 25, wherein the processor is further configured to establish a secure link with at least one of the other devices using the encryption key information.
30. An apparatus, comprising: means for establishing a wireless link with an encountered device; means for determining whether a trusted relationship exists with the device; means for, if the device is determined to be a trusted device, establishing a secure link with the device; and means for receiving encryption key information from the trusted device for establishing a secure link with at least one other device.
31. A chipset, comprising: one or more communication modules for supporting communication in at least one wireless communication medium; and at least one processing module coupled to the one or more communication modules, the processor being configured to: establish a wireless link with an encountered device; determine whether a trusted relationship exists with the device; if the device is determined to be a trusted device, establish a secure link with the device; and receive encryption key information for establishing a secure link with at least one other device from the trusted device.
32. An apparatus, comprising: one or more communication modules for supporting communication in at least one wireless communication medium; and at least one processor coupled to the one or more communication modules, the processor being configured to: establish a wireless link with an encountered device; determine whether a trusted relationship exists with the device; if the device is determined to be a trusted device, establish a secure link with the device; determine if encryption key information for establishing a secure link with at least one other device should be transmitted to the trusted device; and if it is determined that the encryption key information for establishing a secure link with at least one other device should be transmitted, transmitting the encryption key information to the trusted device.
33. The apparatus of claim 32, wherein the encryption key information includes at least one encryption key and related information.
34. The apparatus of claim 33, wherein the related information includes target device information identifying at least one device associated with the encryption key information.
35. The apparatus of claim 33, wherein the related information further includes source device information.
36. An apparatus, comprising: means for establishing a wireless link with an encountered device; means for determining whether a trusted relationship exists with the device; means for, if the device is determined to be a trusted device, establishing a secure link with the device; means for determining if encryption key information for establishing a secure link with at least one other device should be transmitted to the trusted device; and means for, if it is determined that the encryption key information for establishing a secure link with at least one other device should be transmitted, transmitting the encryption key information to the trusted device.
37. A chipset, comprising: one or more communication modules for supporting communication in at least one wireless communication medium; and at least one processing module coupled to the one or more communication modules, the processor being configured to: establish a wireless link with an encountered device; determine whether a trusted relationship exists with the device; if the device is determined to be a trusted device, establish a secure link with the device; determine if encryption key information for establishing a secure link with at least one other device should be transmitted to the trusted device; and if it is determined that the encryption key information for establishing a secure link with at least one other device should be transmitted, transmitting the encryption key information to the trusted device.
Priority Applications (3)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
EP07826225.0A EP2183903B1 (en) | 2007-08-31 | 2007-08-31 | Method and apparatus for propagating encryption keys between wireless communication devices |
US12/675,784 US8787575B2 (en) | 2007-08-31 | 2007-08-31 | Method and apparatus for propagating encryption keys between wireless communication devices |
PCT/IB2007/053521 WO2009027770A1 (en) | 2007-08-31 | 2007-08-31 | Method and apparatus for propagating encryption keys between wireless communication devices |
Applications Claiming Priority (1)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
PCT/IB2007/053521 WO2009027770A1 (en) | 2007-08-31 | 2007-08-31 | Method and apparatus for propagating encryption keys between wireless communication devices |
Publications (1)
Publication Number | Publication Date |
---|---|
WO2009027770A1 true WO2009027770A1 (en) | 2009-03-05 |
Family
ID=40386738
Family Applications (1)
Application Number | Title | Priority Date | Filing Date |
---|---|---|---|
PCT/IB2007/053521 WO2009027770A1 (en) | 2007-08-31 | 2007-08-31 | Method and apparatus for propagating encryption keys between wireless communication devices |
Country Status (3)
Country | Link |
---|---|
US (1) | US8787575B2 (en) |
EP (1) | EP2183903B1 (en) |
WO (1) | WO2009027770A1 (en) |
Cited By (7)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US20110018754A1 (en) * | 2008-03-28 | 2011-01-27 | Akira Tojima | Remote operation apparatus, operation target apparatus, method for controlling remote operation apparatus, method for controlling operation target apparatus, and remote operation system |
WO2012044395A1 (en) * | 2010-09-30 | 2012-04-05 | Apple Inc. | Wireless accessory device pairing transfer between multiple host devices |
WO2012123868A1 (en) | 2011-03-16 | 2012-09-20 | Koninklijke Philips Electronics N.V. | Pairing between wireless devices |
US8750799B2 (en) | 2010-09-30 | 2014-06-10 | Apple Inc. | Wireless accessory device pairing determination for multiple host devices |
WO2014094877A1 (en) * | 2012-12-21 | 2014-06-26 | Phonak Ag | Pairing method for establishing a wireless audio network |
JP2015534313A (en) * | 2012-08-30 | 2015-11-26 | コーニンクレッカ フィリップス エヌ ヴェKoninklijke Philips N.V. | Pairing within a group of wireless devices |
CN112075046A (en) * | 2018-05-04 | 2020-12-11 | 联想(新加坡)私人有限公司 | PUSCH transmission using aggregation factor |
Families Citing this family (32)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
EP2289053A1 (en) * | 2008-06-19 | 2011-03-02 | Datalogic Mobile S.R.L. | Portable terminal for acquiring product data |
JP4894826B2 (en) * | 2008-07-14 | 2012-03-14 | ソニー株式会社 | COMMUNICATION DEVICE, COMMUNICATION SYSTEM, NOTIFICATION METHOD, AND PROGRAM |
US8090359B2 (en) | 2008-09-08 | 2012-01-03 | Proctor Jr James Arthur | Exchanging identifiers between wireless communication to determine further information to be exchanged or further services to be provided |
US9179305B2 (en) * | 2009-06-11 | 2015-11-03 | Qualcomm Incorporated | Bloom filter based device discovery |
US8336084B2 (en) * | 2009-09-11 | 2012-12-18 | Nokia Corporation | Communication using multiple apparatus identities |
US9008589B2 (en) | 2010-01-27 | 2015-04-14 | Broadcom Corporation | Wireless bus for intra-chip and inter-chip communication, including wireless-enabled component (WEC) embodiments |
US20120083208A1 (en) * | 2010-09-30 | 2012-04-05 | Apple Inc. | Wireless accessory device pairing transfer between multiple host devices |
US9654981B2 (en) * | 2011-07-11 | 2017-05-16 | Blackberry Limited | Data integrity for proximity-based communication |
EP2732651B1 (en) | 2011-07-11 | 2018-09-05 | BlackBerry Limited | Data integrity for proximity-based communication |
US9197407B2 (en) * | 2011-07-19 | 2015-11-24 | Cyberlink Corp. | Method and system for providing secret-less application framework |
US10389692B2 (en) * | 2011-11-05 | 2019-08-20 | Jianping He | Peer-to-peer device management, monitor and control |
US10284422B2 (en) * | 2012-03-19 | 2019-05-07 | Emmoco Inc. | Resource-limited device interactivity with cloud-based systems |
US9609000B2 (en) * | 2012-06-06 | 2017-03-28 | Nec Corporation | Method and system for executing a secure application on an untrusted user equipment |
WO2014026384A1 (en) * | 2012-08-17 | 2014-02-20 | 华为技术有限公司 | User equipment pairing processing method, network side device, and user equipment |
EP2720404A1 (en) * | 2012-10-11 | 2014-04-16 | Nordic Semiconductor ASA | Addressable radio device |
US9107069B2 (en) | 2012-10-11 | 2015-08-11 | Nordic Semiconductor Asa | Addressable radio device |
JP6328123B2 (en) * | 2012-10-11 | 2018-05-23 | ノルディック セミコンダクタ アーエスアーNordic Semiconductor ASA | Addressable wireless device |
GB2494550B (en) * | 2012-10-11 | 2016-06-01 | Nordic Semiconductor Asa | Addressable radio device |
KR101538424B1 (en) * | 2012-10-30 | 2015-07-22 | 주식회사 케이티 | Terminal for payment and local network monitoring |
WO2015030784A1 (en) * | 2013-08-29 | 2015-03-05 | Bodhi Technology Ventures Llc | Porting wifi settings |
US10069811B2 (en) * | 2013-10-17 | 2018-09-04 | Arm Ip Limited | Registry apparatus, agent device, application providing apparatus and corresponding methods |
US9307405B2 (en) | 2013-10-17 | 2016-04-05 | Arm Ip Limited | Method for assigning an agent device from a first device registry to a second device registry |
GB2530028B8 (en) | 2014-09-08 | 2021-08-04 | Advanced Risc Mach Ltd | Registry apparatus, agent device, application providing apparatus and corresponding methods |
KR101658630B1 (en) | 2014-10-31 | 2016-09-22 | 삼성전자주식회사 | User terminal apparatus, electronic apparatus, system and controlling method thereof |
CN104954050A (en) * | 2015-05-08 | 2015-09-30 | 深圳君正时代集成电路有限公司 | Method and system for establishing connection between Bluetooth devices and device |
CN108353070B (en) * | 2015-10-30 | 2021-05-28 | 瑞典爱立信有限公司 | Method and device for establishing a secret shared between devices |
US11424931B2 (en) * | 2016-01-27 | 2022-08-23 | Blackberry Limited | Trusted execution environment |
US10599409B2 (en) | 2016-02-02 | 2020-03-24 | Blackberry Limited | Application lifecycle operation queueing |
CN108040355B (en) * | 2017-12-08 | 2020-09-25 | 恒大智慧科技有限公司 | Network access method and system |
US11102259B2 (en) * | 2019-01-22 | 2021-08-24 | Apple Inc. | Network system for content playback on multiple devices |
US20220417743A1 (en) * | 2019-11-07 | 2022-12-29 | Intellectual Discovery Co., Ltd. | Method, apparatus, and computer program for setting encryption key in wireless communication system, and recording medium for same |
GB202018926D0 (en) | 2020-12-01 | 2021-01-13 | Nordic Semiconductor Asa | Digital radio communications |
Citations (6)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
WO2002047348A2 (en) | 2000-12-08 | 2002-06-13 | Telefonaktiebolaget Lm Ericsson (Publ) | Method and system for authentication of units in a communications networks |
WO2003056746A1 (en) | 2002-01-03 | 2003-07-10 | Telefonaktiebolaget Lm Ericsson (Publ) | Method for establishing connections between rf devices and system comprising such rf devices |
US20040054899A1 (en) * | 2002-08-30 | 2004-03-18 | Xerox Corporation | Apparatus and methods for providing secured communication |
EP1496660A2 (en) | 2003-07-09 | 2005-01-12 | Kabushiki Kaisha Toshiba | Information communication device, information communication system and computer program product for transmission control |
US20050100166A1 (en) * | 2003-11-10 | 2005-05-12 | Parc Inc. | Systems and methods for authenticating communications in a network medium |
US7181614B1 (en) * | 1999-10-27 | 2007-02-20 | Telefonaktiebolaget Lm Ericsson (Publ) | Method and arrangement in a communication network |
Family Cites Families (23)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
EP1473899A1 (en) * | 2003-04-28 | 2004-11-03 | Telefonaktiebolaget LM Ericsson (publ) | Security in a communications network |
US20050266798A1 (en) * | 2004-05-31 | 2005-12-01 | Seamus Moloney | Linking security association to entries in a contact directory of a wireless device |
US7747862B2 (en) * | 2004-06-28 | 2010-06-29 | Intel Corporation | Method and apparatus to authenticate base and subscriber stations and secure sessions for broadband wireless networks |
BRPI0419000A (en) * | 2004-08-13 | 2007-12-11 | Telecom Italia Spa | method and system for secure administration of data records stored on an electronic tag, and electronic tag |
JP4165477B2 (en) * | 2004-09-07 | 2008-10-15 | 株式会社デンソー | Hands-free system |
US7548152B2 (en) * | 2004-10-08 | 2009-06-16 | Entrust Limited | RFID transponder information security methods systems and devices |
US7436300B2 (en) * | 2004-11-12 | 2008-10-14 | Microsoft Corporation | Wireless device support for electronic devices |
KR100745999B1 (en) * | 2004-12-17 | 2007-08-06 | 삼성전자주식회사 | Bluetooth device and method for offering service determined by Bluetooth PIN |
US20060153384A1 (en) * | 2004-12-30 | 2006-07-13 | Microsoft Corporation | Extensible architecture for untrusted medium device configuration via trusted medium |
US20060230279A1 (en) * | 2005-03-30 | 2006-10-12 | Morris Robert P | Methods, systems, and computer program products for establishing trusted access to a communication network |
US20070050622A1 (en) * | 2005-09-01 | 2007-03-01 | Rager Kent D | Method, system and apparatus for prevention of flash IC replacement hacking attack |
KR100738329B1 (en) * | 2005-09-23 | 2007-07-12 | 한국전자통신연구원 | The Method of Security between RFID Reader and Tag, and RFID Reader therefor, and RFID Tag therefor |
KR100699467B1 (en) * | 2005-09-28 | 2007-03-26 | 삼성전자주식회사 | RF-ID tag, RF-ID privacy protection system and method thereof |
KR100721520B1 (en) * | 2005-11-03 | 2007-05-23 | 한국전자통신연구원 | Apparatus and Method for Information Protection of RFID System |
JP4684090B2 (en) * | 2005-11-29 | 2011-05-18 | 株式会社日立製作所 | Electronic tag system and data processing method performed by electronic tag system |
US9137012B2 (en) * | 2006-02-03 | 2015-09-15 | Emc Corporation | Wireless authentication methods and apparatus |
US20090063851A1 (en) * | 2006-03-20 | 2009-03-05 | Nijdam Mark J | Establishing communications |
US8689102B2 (en) * | 2006-03-31 | 2014-04-01 | Ricoh Company, Ltd. | User interface for creating and using media keys |
KR101389100B1 (en) * | 2006-06-09 | 2014-04-25 | 베리사인, 인코포레이티드 | A method and apparatus to provide authentication and privacy with low complexity devices |
US20080125107A1 (en) * | 2006-11-29 | 2008-05-29 | Nokia Corporation | Transparent enforcement of bluetooth encryption |
US7801098B2 (en) * | 2007-01-23 | 2010-09-21 | Broadcom Corporation | Parallel MAC/PHY for enhanced transmission rate in a wireless network |
US7706750B2 (en) * | 2007-05-07 | 2010-04-27 | Dell Products L.P. | Enabling bluetooth support within a secondary and/or across multiple operating system partitions |
US7957528B2 (en) * | 2007-08-21 | 2011-06-07 | Sony Corporation | Near field registration of home system audio-video device |
-
2007
- 2007-08-31 WO PCT/IB2007/053521 patent/WO2009027770A1/en active Application Filing
- 2007-08-31 EP EP07826225.0A patent/EP2183903B1/en not_active Not-in-force
- 2007-08-31 US US12/675,784 patent/US8787575B2/en active Active
Patent Citations (6)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US7181614B1 (en) * | 1999-10-27 | 2007-02-20 | Telefonaktiebolaget Lm Ericsson (Publ) | Method and arrangement in a communication network |
WO2002047348A2 (en) | 2000-12-08 | 2002-06-13 | Telefonaktiebolaget Lm Ericsson (Publ) | Method and system for authentication of units in a communications networks |
WO2003056746A1 (en) | 2002-01-03 | 2003-07-10 | Telefonaktiebolaget Lm Ericsson (Publ) | Method for establishing connections between rf devices and system comprising such rf devices |
US20040054899A1 (en) * | 2002-08-30 | 2004-03-18 | Xerox Corporation | Apparatus and methods for providing secured communication |
EP1496660A2 (en) | 2003-07-09 | 2005-01-12 | Kabushiki Kaisha Toshiba | Information communication device, information communication system and computer program product for transmission control |
US20050100166A1 (en) * | 2003-11-10 | 2005-05-12 | Parc Inc. | Systems and methods for authenticating communications in a network medium |
Cited By (19)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US20110018754A1 (en) * | 2008-03-28 | 2011-01-27 | Akira Tojima | Remote operation apparatus, operation target apparatus, method for controlling remote operation apparatus, method for controlling operation target apparatus, and remote operation system |
WO2012044395A1 (en) * | 2010-09-30 | 2012-04-05 | Apple Inc. | Wireless accessory device pairing transfer between multiple host devices |
CN103210383A (en) * | 2010-09-30 | 2013-07-17 | 苹果公司 | Wireless accessory device pairing transfer between multiple host devices |
JP2013542510A (en) * | 2010-09-30 | 2013-11-21 | アップル インコーポレイテッド | Pairing wireless accessory devices between multiple host devices |
US8750799B2 (en) | 2010-09-30 | 2014-06-10 | Apple Inc. | Wireless accessory device pairing determination for multiple host devices |
TWI454929B (en) * | 2010-09-30 | 2014-10-01 | Apple Inc | Wireless communications system, method of transferring pairing between wireless devices and non-transitory computer readable medium for storing computer code executable by processor at host device for transferring pairing between wireless devices |
KR101454564B1 (en) * | 2010-09-30 | 2014-10-23 | 애플 인크. | Wireless accessory device pairing transfer between multiple host devices |
WO2012123868A1 (en) | 2011-03-16 | 2012-09-20 | Koninklijke Philips Electronics N.V. | Pairing between wireless devices |
CN103430509A (en) * | 2011-03-16 | 2013-12-04 | 皇家飞利浦有限公司 | Pairing between wireless devices |
JP2014512744A (en) * | 2011-03-16 | 2014-05-22 | コーニンクレッカ フィリップス エヌ ヴェ | Pairing between wireless devices |
US9867221B2 (en) | 2011-03-16 | 2018-01-09 | Koninklijke Philips N.V. | Pairing between wireless devices |
CN103430509B (en) * | 2011-03-16 | 2017-06-13 | 皇家飞利浦有限公司 | The method for enabling the radio communication between at least one peripheral cell and device |
JP2015534313A (en) * | 2012-08-30 | 2015-11-26 | コーニンクレッカ フィリップス エヌ ヴェKoninklijke Philips N.V. | Pairing within a group of wireless devices |
US9504076B2 (en) | 2012-12-21 | 2016-11-22 | Sonova Ag | Pairing method for establishing a wireless audio network |
CN104982052A (en) * | 2012-12-21 | 2015-10-14 | 索诺瓦公司 | Pairing method for establishing wireless audio network |
WO2014094877A1 (en) * | 2012-12-21 | 2014-06-26 | Phonak Ag | Pairing method for establishing a wireless audio network |
CN104982052B (en) * | 2012-12-21 | 2019-03-15 | 索诺瓦公司 | For establishing the matching method of wireless audio network |
CN112075046A (en) * | 2018-05-04 | 2020-12-11 | 联想(新加坡)私人有限公司 | PUSCH transmission using aggregation factor |
CN112075046B (en) * | 2018-05-04 | 2024-01-23 | 联想(新加坡)私人有限公司 | PUSCH transmission using aggregation factors |
Also Published As
Publication number | Publication date |
---|---|
US8787575B2 (en) | 2014-07-22 |
EP2183903B1 (en) | 2018-12-26 |
EP2183903A4 (en) | 2012-01-25 |
EP2183903A1 (en) | 2010-05-12 |
US20100303236A1 (en) | 2010-12-02 |
Similar Documents
Publication | Publication Date | Title |
---|---|---|
US8787575B2 (en) | Method and apparatus for propagating encryption keys between wireless communication devices | |
EP2080350B1 (en) | Connectionless information transfer from advertising device | |
US20090234728A1 (en) | Advertising introductory information including multiple profiles | |
US20080089519A1 (en) | Secure key exchange algorithm for wireless protocols | |
US7996571B2 (en) | Wireless coordination of apparatus interaction | |
CN113039823B (en) | System, method and apparatus for access control | |
EP3223489B1 (en) | Method for secure authentication of mobile devices | |
US7809361B2 (en) | Address privacy in short-range wireless communication | |
US7974606B2 (en) | System and method for configuring devices for wireless communication | |
US20120100803A1 (en) | Delayed and conditional transport switch | |
US7920495B2 (en) | Channel management via link parameter adjustment | |
US20080220746A1 (en) | Key establishment utilizing link privacy | |
TW201330566A (en) | System and method for facilitating wireless communication | |
US20170339128A1 (en) | Method and apparatus for authenticating a device using bluetooth technology | |
US11012227B2 (en) | Authentication method and system for device using Bluetooth technology | |
US20230379705A1 (en) | Electronic device and method for setting up a data path | |
US20080125107A1 (en) | Transparent enforcement of bluetooth encryption | |
US11367449B2 (en) | Method and apparatus for calling voice recognition service by using Bluetooth low energy technology | |
WO2009063272A1 (en) | Hid adaptation to attribute protocol | |
WO2010046732A1 (en) | Feature selection in wireless communication | |
US20080205309A1 (en) | Virtual adaptation layer for wireless communication | |
KR101870645B1 (en) | Short-range Wireless Communication Device | |
KR20170009690A (en) | Beacon apparatus and method for advertising of beacon frame using the same |
Legal Events
Date | Code | Title | Description |
---|---|---|---|
DPE2 | Request for preliminary examination filed before expiration of 19th month from priority date (pct application filed from 20040101) | ||
121 | Ep: the epo has been informed by wipo that ep was designated in this application |
Ref document number: 07826225 Country of ref document: EP Kind code of ref document: A1 |
|
WWE | Wipo information: entry into national phase |
Ref document number: 2007826225 Country of ref document: EP |
|
NENP | Non-entry into the national phase |
Ref country code: DE |
|
WWE | Wipo information: entry into national phase |
Ref document number: 1682/CHENP/2010 Country of ref document: IN |
|
WWE | Wipo information: entry into national phase |
Ref document number: 12675784 Country of ref document: US |