System and method for authenticating and authorizing devices
AssigneeInfiniteKey, Inc.
InventorsEric John Smith, Raymond Michael Stitt, David Stuckless Meyer, Brian Ensink
Life of this patent
Estimating the term…
Abstract
A system and method for a distributed security model that may be used to achieve one or more of the following: authenticate system components; securely transport messages between system components; establish a secure communications channel over a constrained link; authenticate message content; authorize actions; and distribute authorizations and configuration data amongst users' system components in a device-as-a-key system.
Claims20
A system for communicating from a first device to a second device, said system comprising:
- said first device configured to communicate wirelessly in an online mode with a network server, said first device configured to obtain authorization configuration information from the network server, wherein said authorization configuration information pertains to authorization for said first device to communicate with said second device, wherein said authorization configuration information includes data encrypted by a first key associated with said second device;
- said second device coupled to an equipment component, said second device configured to communicate with said equipment component;
- said second device configured to communicate wirelessly with said first device in an offline mode in which neither said first device nor said second device is able to communicate effectively with the network server;
- wherein said first device and said second device are configured to establish a communication link for exchanging communications, wherein prior to establishing said communication link, said second device has received no information indicating said first device has obtained said authorization configuration information pertaining to at least one of authentication of said first device and authorization of said first device with respect to said second device;
- and
- wherein said first device is configured to communicate, via said communication link, said authorization configuration information to said second device, wherein said second device, based on said authorization configuration information, authenticates an identity of said first device and determines if said first device is authorized with respect to said second device.
The system of 5 wherein said first device authenticates an identity of said second device based on decrypting data received from said second device via said communication link.
A control unit for communicating with an equipment component, said device comprising:
- a communication interface operable to communicate wirelessly with a remote device;
- memory configured to store one or more encryption keys pertaining to authentication and authorization of the remote device;
- an equipment interface operable to communicate with the equipment;
- a controller configured to establish a communication link with the remote device via the communication interface, the controller configured to receive authorization configuration information from the remote device, wherein the authorization configuration information includes authorization data that is encrypted, wherein only the controller is capable of decrypting the authorization data from the authorization configuration information;
- and
- wherein, based at least in part on the authorization data, the controller is configured to authenticate an identity of the remote device and determine if the remote device is authorized.
A method of communicating between a first device and a second device, said method comprising:
- obtaining, in the first device, authorization configuration information from a network server, wherein the authorization configuration information includes data encrypted by a first key associated with the second device;
- establishing a communication link for exchanging communications between the first device and the second device, wherein prior to establishing the communication link, the second device has received no information indicating the first device has obtained the authorization configuration information;
- providing the authorization configuration information in the second device;
- decrypting, in the second device, the authorization configuration information to obtain authorization data pertaining to one or more authorizations for the first device to communication with of the second device;
- authenticating an identity of the first device based on the authorization data obtained from the authorization configuration information;
- and
- determining if the first device is authorized with respect to the second device.
Dependencies are inferred from the claim text.