Device and method for securing a negotiation of at least one cryptographic key between units
AssigneeSiemens Aktiengesellschaft
InventorsJürgen Gessner, Bernhard Isler, Frank Liese
Life of this patent
Estimating the term…
Abstract
A private key and a public key are provided during manufacture of a device and are stored in the device. At least one cryptographic key is subsequently negotiated, the negotiation being security-protected as a function of the generated private key and/or the public key. This method can find application in building automation.
Claims21
1-16. (canceled)
A method for protecting negotiation of at least one cryptographic key between devices, comprising:
- storing a private key and a public key on each of the devices, the private key and the public key being provided for each device;
- storing key pairs, each key pair including the private key and the public key for one of the devices, on a device management station;
- and
- negotiating the at least one cryptographic key between at least two of the devices as a function of the stored private key and the stored public key by the device management station.
A system for protecting negotiation of at least one cryptographic key between devices, comprising:
- a device management station storing key pairs, each including a private key and a public key for one of the devices;
- and
- each device having
- a data storage facility;
- a first computing entity storing the private key and the public key of the device in the data storage facility, the private key and the public key being provided for the device;
- and
- a second computing entity negotiating the at least one cryptographic key with another of the devices as a function of the private key and the public key of the device as stored in one of the key pairs by the device management station.
A nontransitory computer readable medium embodying instructions that when executed by at least one processor perform a method of protecting negotiation of at least one cryptographic key between devices, said method comprising:
- storing a private key and a public key on each of the devices, the private key and the public key being provided for each device;
- storing key pairs, each key pair including the private key and the public key for one of the devices, on a device management station;
- and
- negotiating the at least one cryptographic key between at least two of the devices as a function of the stored private key and the stored public key by the device management station.
Dependencies are inferred from the claim text.