Secure path discovery in a mesh network

A method for secure path discovery in a mesh network at an originator device, comprising:

• sending a path discovery request to a destination device;
• receiving a path selection from the destination device;
• receiving an authentication code message from the destination device;
• transmitting a verification request message to a provisioner device;
• receiving a verification response message from the provisioner device;
• sending communications to the destination device only if the verification response message from the provisioner device confirms that the destination device has been verified;
• and
• wherein if the verification response message confirms that the destination device has failed to be verified, the originator device blocks the destination device from receiving any communications.

A destination device for secure path discovery in a mesh network, comprising:

• a memory;
• and
• at least one processor coupled to the memory and configured to:
• receiving a path discovery request from an originator device;
• selecting a path selection in response to the path discovery request;
• transmitting the path selection to the originator device;
• receiving a random seed from a provisioner device;
• generating an authentication code based on the random seed;
• transmitting an authentication code message to the originator device;
• receiving communications from the originator device only if the originator device receives a verification response message from the provisioner device which confirms that the destination device has been verified;
• and
• wherein the random seed is incremented on each new secure path discovery by the destination device.

An originator device for secure path discovery in a mesh network, comprising:

• a memory;
• and
• at least one processor coupled to the memory and configured to:
• sending a path discovery request to a destination device;
• receiving a path selection from the destination device;
• receiving an authentication code message from the destination device;
• transmitting a verification request message to a provisioner device;
• receiving a verification response message from the provisioner device;
• sending communications to the destination device only if the verification response message from the provisioner device confirms that the destination device has been verified;
• and
• wherein if the verification response message confirms that the destination device has failed to be verified, the originator device blocks the destination device from receiving any communications.

A destination device for secure path discovery in a mesh network, comprising:

• means for receiving a path discovery request from an originator device;
• means for selecting a path selection in response to the path discovery request;
• means for transmitting the path selection to the originator device;
• means for receiving a random seed from a provisioner device;
• means for generating an authentication code based on the random seed;
• means for transmitting an authentication code message to the originator device;
• means for receiving communications from the originator device only if the originator device receives a verification response message from the provisioner device which confirms that the destination device has been verified;
• and
• wherein the random seed is incremented on each new secure path discovery by the destination device.

An originator device for secure path discovery in a mesh network, comprising:

• means for sending a path discovery request to a destination device;
• means for receiving a path selection from the destination device;
• means for receiving an authentication code message from the destination device;
• means for transmitting a verification request message to a provisioner device;
• means for receiving a verification response message from the provisioner device;
• means for sending communications to the destination device only if the verification response message from the provisioner device confirms that the destination device has been verified;
• and
• wherein if the verification response message confirms that the destination device has failed to be verified, the originator device blocks the destination device from receiving any communications.

A non-transitory computer-readable medium storing code for secure path discovery at a destination device, the code comprising instructions executable by a processor to:

• receiving a path discovery request from an originator device;
• selecting a path selection in response to the path discovery request;
• transmitting the path selection to the originator device;
• receiving a random seed from a provisioner device;
• generating an authentication code based on the random seed;
• transmitting an authentication code message to an originator device;
• receiving communications from the originator device only if the originator device receives a verification response message from the provisioner device which confirms that the destination device has been verified;
• and
• wherein the random seed is incremented on each new secure path discovery by the destination device.

A non-transitory computer-readable medium storing code for secure path discovery at an originator device, the code comprising instructions executable by a processor to:

• sending a path discovery request to a destination device;
• receiving a path selection from the destination device;
• receiving an authentication code message from the destination device;
• transmitting a verification request message to a provisioner device;
• receiving a verification response message from the provisioner device;
• sending communications to the destination device only if the verification response message from the provisioner device confirms that the destination device has been verified;
• and
• wherein if the verification response message confirms that the destination device has failed to be verified, the originator device blocks the destination device from receiving any communications.