Establishing shared key data for wireless pairing
AssigneeHewlett-Packard Development Company, L.P.
InventorsJoshua Serratelli Schiffman, Vali Ali, Boris Balacheff
Life of this patent
Estimating the term…
Abstract
In an example, a method includes pairing a first electronic device and a data relay apparatus associated with a second electronic device to establish a secure wireless communication link therebetween. Each of the first electronic device and the data relay apparatus may be associated with an identifier and a verifier, each verifier being to verify the identifier of the other of the first electronic device or data relay apparatus. The pairing may include mutual verification of an identifier using the verifier, establishing shared key data and using the shared key data to establish a shared secret value for use in determining a derived key.
Claims21
A method comprising:
- pairing a first electronic device and a data relay apparatus associated with a second electronic device to establish a secure wireless communication link between the first electronic device and the data relay apparatus, wherein the pairing comprises:
- verifying, by a verifier in the first electronic device, an identifier of the data relay apparatus,
- establishing shared key data, and
- using the shared key data to establish a shared secret value;
- combining the shared secret value and a random number;
- encrypting the combination of the shared secret value and the random number, the encrypting producing an encrypted combination;
- transmitting, by the first electronic device to the data relay apparatus, the random number and the encrypted combination;
- and
- determining a derived key based on the shared key data, the random number, and a previous derived key.
A first pairing electronic device comprising:
- a processor;
- a random number source;
- a non-transitory storage medium storing instructions executable on the processor to:
- verify an identity of a second pairing electronic device;
- establish shared key data with the second pairing electronic device,
- establish a shared secret value with the second pairing electronic device;
- send, to the second pairing electronic device:
- a random number provided by the random number source, and
- an encrypted combination of the shared secret value and the random number;
- and
- encrypt data sent to the second pairing electronic device using a derived key, wherein the derived key is based on the random number provided by the random number source.
A data relay apparatus comprising:
- a first interface for wireless communication with a first electronic device;
- a second interface for communication with a second electronic device;
- a processor;
- and
- a non-transitory storage medium storing instructions executable on the processor to:
- verify an identity of the first electronic device when performing wireless pairing with the first electronic device;
- establish shared key data and a shared secret value with the first electronic device;
- cause sending, to the second electronic device, of:
- a random number, and
- an encrypted combination of the shared secret value and the random number;
- derive a derived key using the shared key data and the random number;
- and
- encrypt data sent to the first electronic device using the derived key,
- wherein the data relay apparatus is to operatively extend a functionality of the second electronic device to include a functionality of the first electronic device and to relay data between the first and second electronic devices.
Dependencies are inferred from the claim text.