US 11,108,749 B2Granted

Secure device coupling

AssigneeMicron Technology, Inc.

InventorsAntonino Mondello, Alberto Troia

Life of this patent

Estimating the term…

Loading patent…

Abstract

The present disclosure includes secure device coupling. An embodiment includes a processing resource, memory, and a network management device communication component configured to, identifying a network attached device within a first domain. Generating a domain device secret corresponding to the first domain. Each network attached device within the first domain can share the same domain device secret. Coupling iterations may be performed for each device within the first domain can include: generating a network management device private key and public key. Providing, via short-range communication, the network management device public key and the domain device secret to a network attached device communication component included in each network attached device of the first domain. A network attached device public key and data from the network attached device communication component in response to providing the network management device public key to the network attached device communication component is received from each device in the first domain.

Claims22

Dependent claims

An apparatus, comprising:

a processing resource;
memory having instructions executable by the processing resource;
and
a network management device communication component coupled to the processing resource, wherein the network management device communication component is configured to, in response to identification of a network attached device within a first domain:
generate a domain device secret corresponding to the first domain, wherein the network attached device within the first domain shares the domain device secret with another network attached devices included in the first domain;
perform a number of coupling iterations for each network attached device within the first domain, wherein each respective one of the number of coupling iterations includes:
generating a network management device private key and a network management device public key;
providing, via short-range communication, the network management device public key and the domain device secret corresponding to the first domain to a network attached device communication component included in each network attached device of the first domain;
receiving, via short-range communication, a network attached device public key from each network attached device within the first domain and data from the network attached device communication component in response to providing the network management device public key to the network attached device communication component;
identifying multiple network attached devices within a second domain;
and
generating a different domain device secret for the second domain, wherein the different domain device secret is provided to each network attached device within the second domain.

9 more elements

An apparatus, comprising:

a processing resource;
memory having instructions executable by the processing resource;
and
a network attached device communication component coupled to the processing resource, wherein the network attached device communication component is included in a first domain and configured to, in response to being identified by a network management device communication component of a network management device as being part of the first domain:
receive a domain device secret, via short-range communication, from a server communication component, wherein the domain device secret corresponds to the first domain;
perform a number of coupling iterations, wherein each respective one of the number of coupling iterations includes:
generating a network attached device private key and a network attached device public key for each network attached device in the first domain;
providing the network attached device public key and data to the network management device communication component via short-range communication;
and
receiving a conformation from the network management device communication component, via short-range communication, in response to providing the network attached device public key and data to the network management device communication component,
wherein the network attached device communication component is configured to, in response to the apparatus being coupled to the network management device, decrypt the received conformation using the network attached device private key, wherein encrypting and decrypting are performed using a device identification composition engine (DICE)-robust internet of thing (RIOT) protocol.

8 more elements

A system, comprising:

a network attached device associated with a first domain within an environment, the network attached device comprising:
a network attached device processing resource;
and
a network attached device communication component coupled to the network attached device processing resource configured to generate a network attached device public key and a network attached device private key;
and
a network management device associated with the environment, comprising:
a network management device processing resource and memory;
and
a network management device communication component coupled to the network management device processing resource and memory, configured to use near field communication (NFC) to perform a coupling iteration, the coupling iteration includes:
monitoring the environment for network attached devices communicatively connected to the network management device;
generating a network management device private key, a network management device public key, and particular domain device secret corresponding to the first domain in the environment, wherein different domain device secrets are generated for multiple domains in the environment and provided to each network attached device within a respective domain of the multiple domains;
transmitting the particular domain device secret and the network management device public key, via NFC to the network attached device within the first domain;
and
receiving the network attached device public key corresponding to the network attached device via NFC,
wherein the network management device communication component is configured to:
in response to the network attached device being coupled to the network management device encrypt data from the network management device using the network attached device public key and the particular domain device secret;
and
decrypt the data from the network management device using the network attached device private key, wherein encrypting and decrypting are performed using a device identification composition engine (DICE)-robust internet of thing (RIOT) protocol over a wireless LAN network.

15 more elements

Dependencies are inferred from the claim text.

Facts

Application: 16/362,828Filed 25 Mar 2019
Published: US 2020/0314074 A11 Oct 2020
Granted: 31 Aug 2021
Term ends: Not estimatedThe source records don’t support an estimate.

Classification15 codes

H04L 9/0833
Involving central third party, e.g. key distribution center [KDC] or trusted third party [TTP]: involving conference or group key
H04L 63/0478
Wherein the data content is protected, e.g. by encrypting or encapsulating the payload: applying multiple layers of encryption, e.g. nested…
H04L 9/0819
Key establishment, i.e. cryptographic processes or cryptographic protocols whereby a shared secret becomes available to two or more parties, for…:…
H04L 9/0825
Key transport or distribution, i.e. key establishment techniques where one party creates or otherwise obtains a secret value, and securely…: using…