US 11,153,302 B2Granted

Peering method

OwnerDominique Bolignanoinventor

Life of this patent

Estimating the term…

Loading patent…

Abstract

Some embodiments are directed to a method for peering between first and second modules each installed in a different device, the device of the first module includes a human-machine interface, and the two devices can be linked by an unsecure communication channel. The method can include: receiving via the human-machine interface a command setting the device of the first module in operating mode so the first module takes control of a part of the communication means of the first device in order to set them in a secure operating mode and takes control of the human-machine interface; establishing a temporarily secure communication between first and second modules; displaying on the human-machine interface a status signaling the set-up of the secure communication; receiving via the human-machine interface a peering acceptance command; and exchanging of keys/secrets between the modules through the temporarily secure communication channel to perform the peering.

Claims12

Dependent claims

A method for peering between a first trusted module and a second trusted module by transmission of at least one root key, the first and second trusted modules being installed in a first device and a second device, respectively, and the first device on which the first trusted module is installed including a human-machine interface to communicate with a user, and the first and second devices having respective communication means allowing linking the first and second devices together by an unsecure communication channel, the method comprising:

linking, by the first device, to the second device so as to establish the unsecure communication channel;
receiving, by the first device, via the human-machine interface and during a boot phase, a command;
setting, in response to receiving the command, the first device in a secure operating mode, wherein setting the first device in the secure operating mode includes:
(a) the first trusted module taking control of at least part of the communication means of the first device;
and
(b) the first trusted module taking control of the human-machine interface;
and while the first device is in the secure operating mode and during the boot phase:
establishing, by the first device, a temporary secure communication channel between the first and the second trusted modules;
displaying, by the first device, on the human-machine interface a status signaling the set-up of the temporary secure communication channel;
receiving, by the first device, via the human-machine interface a peering acceptance command;
performing the peering between the first and second devices by exchanging the at least one root key between the first and second trusted modules through the temporary secure communication channel;
once the peering is performed, the first trusted module
ceasing the temporary secure communication;
and
withdrawing control of the communication means and the human-machine interface.

12 more elements

linking, by the first device, to the second device so as to establish the unsecure communication channel;
receiving, by the first device, via the human-machine interface and during a boot phase, a command;
setting, in response to receiving the command, the first device in a secure operating mode, wherein setting the first device in the secure operating mode includes:
(a) the first trusted module taking control of at least part of the communication means of the first device;
and
(b) the first trusted module taking control of the human-machine interface;
and while the first device is in the secure operating mode and during the boot phase:
establishing, by the first device, a temporary secure communication channel between the first and the second trusted modules;
displaying, by the first device, on the human-machine interface a status signaling the set-up of the temporary secure communication channel;
receiving, by the first device, via the human-machine interface a peering acceptance command;
performing the peering between the first and second devices by exchanging the at least one root key between the first and second trusted modules through the temporary secure communication channel and achieving a first peering state between the first and the second trusted modules as the result the exchanging the at least one root key between the first and second trusted modules;
once the peering is performed, the first trusted module
ceasing the temporary secure communication;
and
withdrawing control of the communication means and the human-machine interface.

12 more elements

Dependencies are inferred from the claim text.

Facts

Application: 15/512,767Filed 18 Sep 2015
Priority: FR 145886619 Sep 2014
Published: US 2017/0295171 A112 Oct 2017
Granted: 19 Oct 2021
Term ends: Not estimatedThe source records don’t support an estimate.

Classification10 codes

H04L 63/0853
For authentication of entities: using an additional device, e.g. smartcard, SIM or a different communication terminal
H04W 12/04
Security arrangements; Authentication; Protecting privacy or anonymity: key management, e.g. using generic bootstrapping architecture [GBA]
H04W 12/08
Security arrangements; Authentication; Protecting privacy or anonymity: access security
H04W 12/086
Access security: using security domains