# US 2018/0324589 A1 · Secure device pairing > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 2018/0324589 A1 - Document ID: US20180324589A1 - Status: Published application - Kind: A1 - Application number: 16/040,355 - Filed: 2018-07-19 - Published: 2018-11-08 - Earliest claimed: 2015-10-14 - Assignees: Sony Interactive Entertainment America LLC - Applicants: Sony Interactive Entertainment America LLC - Inventors: Bryan Cotta - Web page: https://patentgrep.com/patent/US20180324589A1 ## CPC - H04W 12/06: Authentication - H04L 9/0631: {Substitution permutation network [SPN], i.e. cipher composed of a number of stages or rounds each involving linear and nonlinear transformations, e.g. AES algorithms} - H04L 9/0637: {Modes of operation, e.g. cipher block chaining [CBC], electronic codebook [ECB] or Galois/counter mode [GCM]} - H04L 9/0822: {using key encryption key} - H04L 9/0894: {Escrow, recovery or storing of secret information, e.g. secret key escrow or cryptographic key storage} - H04L 9/3271: {using challenge-response} - H04L 63/0428: {wherein the data content is protected, e.g. by encrypting or encapsulating the payload} - H04L 63/061: {for key exchange, e.g. in peer-to-peer networks (cryptographic mechanisms or cryptographic arrangements for key agreement H04L9/0838)} - H04L 63/08: {for authentication of entities (cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32)} - H04W 12/02: Protecting privacy or anonymity, e.g. protecting personally identifiable information [PII] - H04W 12/04: Key management, e.g. using generic bootstrapping architecture [GBA] - H04L 2209/80: Wireless - H04L 2463/062: applying encryption of the keys - H04W 12/77: Graphical identity - H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72) - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) ## Abstract A machine readable quick response (QR) code or, if this fails, a human-readable passcode is presented on a display of a server device for scanning (or reading and human input) into a mobile device. The mobile device computes a response and returns it to the server. If the response is correct, WiFi setup information, which can include PII, is exchanged in an encrypted form between the two devices to support subsequent WiFi communication. ## Claims ### Claim 1 A device comprising: at least one computer memory that is not a transitory signal and that comprises instructions executable by at least one processor to: responsive to a determination that a hello message from a mobile communication device (MCD) comprises a ciphersuite, establish communication with the MCD); present on a display a passcode P; send to the MCD a challenge C; responsive to determining that a response from the MCD based on P and C and matches a test value, and responsive to a determination that P was displayed less than a threshold period of time prior to receiving the response, return an encryption key to the MCD; responsive to not receiving a response from the MCD matching the test value, or responsive to a determination that P was displayed greater than the threshold period of time prior to receiving the response, generate a new P and C; wherein the encryption key is obtained at least in by: accessing a first key of the device; using the first key to establish a second key; using the second key to establish the encryption key, the encryption key being sent to the MCD to enable the MCD to encrypt information with the encryption key. ### Claim 2 (depends on 1) The device of claim 1, comprising the at least one processor coupled to the at least one computer memory. ### Claim 3 (depends on 1) The device of claim 1, wherein the instructions are executable to: access a root key of the device; use the root key of the computing device to establish a master key; use the master key to establish the communication key; and send the communication key to the MCD to enable the MCD to encrypt WiFi information with the communication key. ### Claim 4 (depends on 3) The device of claim 3, wherein the instructions are executable to: store the communication key in a secure area of storage encrypted with a random encryption code. ### Claim 5 (depends on 4) The device of claim 4, wherein the random encryption code includes advanced encryption standard (AES) XEX encryption mode. ### Claim 6 (depends on 5) The device of claim 5, wherein the AES XEX encryption mode has tweak and ciphertext stealing (XTS) having a first tweak value equal to a key number of the derived key and a second tweak value equal to an AES block number. ### Claim 7 (depends on 4) The device of claim 4, wherein the random encryption code includes Liskov, Rivest, Wagner (LRW) encryption. ### Claim 8 (depends on 4) The device of claim 4, wherein the random encryption code includes cipher block chaining-mask-cipher block chaining (CMC) encryption. ### Claim 9 (depends on 4) The device of claim 4, wherein the random encryption code includes electronic codebook-mask-electronic codebook (EME) encryption. ### Claim 10 (depends on 3) The device of claim 3, wherein the instructions are executable to: access the WiFi information received from the MCD; encrypt the WiFi information using a WiFi key derived from the master key. ### Claim 11 A device comprising: at least one computer memory that is not a transitory signal and that comprises instructions executable by at least one processor to: responsive to a determination that a hello message from a mobile communication device (MCD) comprises a ciphersuite, establish communication with the MCD; generate a value Q; embed Q in a machine-readable quick response (QR) code; present the QR code to the MCD; send to the MCD a challenge C; responsive to determining that a response from the MCD is based on a combination of Q and C and matches a test value, return an encryption key to the MCD; responsive to not receiving a response from the MCD matching the test value, not return an encryption key to the MCD, wherein the encryption key is obtained at least in by: accessing a first key of the device; using the first key to establish a second key; using the second key to establish the encryption key, the encryption key being sent to the MCD to enable the MCD to encrypt information with the encryption key. ### Claim 12 (depends on 11) The device of claim 11, comprising the at least one processor coupled to the at least one computer memory. ### Claim 13 (depends on 11) The device of claim 11, wherein the instructions are executable to: access a root key of the device; use the root key of the computing device to establish a master key; use the master key to establish the communication key; and send the communication key to the MCD to enable the MCD to encrypt WiFi information with the communication key. ### Claim 14 (depends on 13) The device of claim 13, wherein the instructions are executable to: access the WiFi information received from the MCD; and encrypt the WiFi information using a WiFi key derived from the master key. ### Claim 15 A mobile communication device (MCD) comprising: at least one computer memory that is not a transitory signal and that comprises instructions executable by at least one processor to: receive a visible code generated by a server; combine the code with a challenge received from the server to render a response; send the response to the server; responsive to the code being correct as determined by the server, access a communication key received from the server; and send to the server wireless communication configuration information. ### Claim 16 (depends on 15) The MCD of claim 15, wherein the code is a machine-readable code received from an imaging device of the MCD. ### Claim 17 (depends on 15) The MCD of claim 15, wherein the code is a human-readable code received form an input device of the MCD. ### Claim 18 (depends on 15) The MCD of claim 15, wherein the instructions are executable to encrypt the wireless communication configuration information using the communication key prior to sending the wireless configuration information to the server. ### Claim 19 (depends on 15) The MCD of claim 15, wherein the instructions are executable to: present on a display of the MCD a user interface (UI) including at least one selector selectable to enter a mode in which the code is a human-readable passcode.