Group Key Management and Authentication Schemes for Mesh Networks

An apparatus comprising:

• a memory,
• a communication interface, and
• a processor, wherein the processor:
• stores, in the memory, a pairwise master key for one or more devices in a mesh network upon authentication of the one or more devices;
• initiates over the communication interface, using the pairwise master key, a handshaking procedure with a particular device in the mesh network to mutually derive a pairwise temporal key from the pairwise master key;
• encrypts and signs a group temporal key using the pairwise temporal key for the particular device;
• and
• sends the group temporal key encrypted and signed with the pairwise temporal key over the communication interface to the particular device.

A tangible computer readable storage media encoded with instructions that, when executed by a processor, cause the processor to:

• store, in a memory, a pairwise master key for each of one or more devices in a mesh network upon authentication of the one or more devices;
• initiate a handshaking procedure with a particular device in the mesh network, using the pairwise master key, to mutually derive a pairwise temporal key from the pairwise master key;
• encrypt and sign a group temporal key using the pairwise temporal key for the particular device;
• and
• send the group temporal key encrypted and signed with the pairwise temporal key to the particular device.