Systems, methods, and devices for device credential protection
AssigneePCMS Holdings, Inc.
InventorChristian M. GEHRMANN
Life of this patent
Estimating the term…
Abstract
Systems, methods, and/or techniques may be disclosed to prevent credentials from being compromised during an attack or theft of Internet of Things (IoT) devices. Secure communications between IoT devices and a device management server may be managed. A group master key may be received at a local key generation unit or a particular IoT attached to a local area network. A first session group key may be generated at the local key generation unit or the particular IoT device using the received group master key and a sequence number. The first session group key may be sent from the local key generation unit to each of a plurality of IoT devices via the local area network.
Claims21
1-22. (canceled)
An Internet of Things (IoT) device comprising:
- a memory;
- and
- a processor, wherein the processor is configured to:
- receive a pre-shared key unique to the IoT device;
- receive a first session group key from a device associated with a same local network as the IoT device that was generated based on a group master key and a first sequence number, the first session group key being valid for a time interval;
- and
- send an encrypted message to a device management server (DMS) to establish a secure channel with the DMS, the encrypted message comprising an identifier comprising an indication of the first sequence number, the encrypted message being encrypted based on the first session group key and the pre-shared key.
A device comprising:
- a memory;
- and
- a processor configured to:
- receive a group master key;
- generate a first session group key based on the group master key and a sequence number, the first session group key being valid for a first time period;
- send the first session group key to an Internet of Things (IoT) device via a local network;
- update the sequence number;
- generate a second session group key based on the group master key and the updated sequence number, the second session group key being valid for a second time period;
- and
- send the second session group key to the IoT device via the local network.
A method of using an Internet of Things (IoT) device, comprising:
- receiving a pre-shared key unique to the IoT device;
- receiving a first session group key from a device associated with a same local network as the IoT device that was generated based on a group master key and a first sequence number, the first session group key being valid for a time interval;
- and
- sending an encrypted message to a device management server (DMS) to establish a secure channel with the DMS, the encrypted message comprising an identifier comprising an indication of the first sequence number, the encrypted message being encrypted based on the first session group key and the pre-shared key.
Dependencies are inferred from the claim text.