# US 2019/0246268 A1 · Method and system of secured direct link set-up (dls) for wireless networks > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 2019/0246268 A1 - Document ID: US20190246268A1 - Status: Published application - Kind: A1 - Application number: 16/188,848 - Filed: 2018-11-13 - Published: 2019-08-08 - Earliest claimed: 2005-11-03 - Assignees: Intel Corporation - Applicants: Intel Corporation - Inventors: Jesse Walker; Shlomo Ovadia; Suman Sharma - Web page: https://patentgrep.com/patent/US20190246268A1 ## CPC - H04L 9/083: {involving central third party, e.g. key distribution center [KDC] or trusted third party [TTP]} - H04L 63/0428: {wherein the data content is protected, e.g. by encrypting or encapsulating the payload} - H04L 63/062: {for key distribution, e.g. centrally by trusted party (cryptographic mechanisms or cryptographic arrangements for key distribution involving a central third party H04L9/0819)} - H04W 12/03: Protecting confidentiality, e.g. by encryption - H04W 76/14: Direct-mode setup - H04L 2209/80: Wireless - H04L 2463/061: applying further key derivation, e.g. deriving traffic keys from a pair-wise master key - H04L 2463/062: applying encryption of the keys - H04W 84/12: WLAN [Wireless Local Area Networks] - H04W 84/18: Self-organising networks, e.g. ad-hoc networks or sensor networks - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) - H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72) ## Abstract Method and system of secured direct link set-up (DLS) for wireless networks. In accordance with aspects of the method, techniques are disclosed for setting up computationally secure direct links between stations in a wireless network in a manner that is computationally secure. A direct link comprising a new communication session is set up between first and second stations in a wireless local area network (WLAN) hosted by an access point (AP), the direct link comprising a new communication session. The AP generates a unique session key for the new communication session and transfers secured copies of the session key to each of the first and second stations in a manner under which only the first and second stations can obtain the session key. A security mechanism is then implemented on the unsecured direct link to secure the direct link between the first and second stations using a secure session key derived from the session key. ## Claims ### Claim at position 1 -26. (canceled) ### Claim 27 An apparatus, comprising: a memory; and a processor element coupled with the memory to: set up a direct link between first and second stations in a wireless local area network (WLAN) hosted by the apparatus, the direct link comprising a new communication session; receive, from the second station, a message comprising: a random number generated by the first station; a medium access control (MAC) address of the first station; and a random number generated by the second station; generate a first string comprising: a key value generated for the new communication session; the random numbers generated by the first and second stations; and a MAC address of the second station; generate a second string comprising: the key value generated for the new communication session; the random numbers generated by the first and second stations; and the MAC address of the first station; and transfer the first and second strings to the first and second stations, respectively, to secure the direct link between the first and second stations. ### Claim 28 (depends on 27) The apparatus of claim 27, wherein the direct link is set up using the Direct Link Setup (DLS) protocol. ### Claim 29 (depends on 27) The apparatus of claim 27, the processor element coupled with the memory to: set up a first Robust Security Network Association (RSNA) link between the first station and the apparatus; and set up a second RSNA link between the second station and the apparatus. ### Claim 30 (depends on 27) The apparatus of claim 27, the processor element coupled with the memory to: generate the key value for the new communication session. ### Claim 31 (depends on 30) The apparatus of claim 30, wherein the key value for the new communication session comprises a random number. ### Claim 32 (depends on 27) The apparatus of claim 27, wherein a wrap encryption algorithm is to encrypt the first and second strings. ### Claim 33 (depends on 27) The apparatus of claim 27, the processor element coupled with the memory to: receive the first random number generated at the first station; transfer the first random number in a message to the second station; transfer the first random number from the second station to the apparatus; and embed the first random number in a message sent from the apparatus to the first station. ### Claim 34 A non-transitory computer-readable medium storing instructions which when executed by a processor element cause the processor element to: set up a direct link between first and second stations in a wireless local area network (WLAN) apparatus, the direct link comprising a new communication session; receive, from the second station, a message comprising: a random number generated by the first station; a medium access control (MAC) address of the first station; and a random number generated by the second station; generate a first string comprising: a key value generated for the new communication session; the random numbers generated by the first and second stations; and a MAC address of the second station; generate a second string comprising: the key value generated for the new communication session; the random numbers generated by the first and second stations; and the MAC address of the first station; and transfer the first and second strings to the first and second stations, respectively, to secure the direct link between the first and second stations. ### Claim 35 (depends on 34) The computer-readable medium of claim 34, wherein the direct link is set up using the Direct Link Setup (DLS) protocol. ### Claim 36 (depends on 34) The computer-readable medium of claim 34, storing instructions which when executed by a processor element cause the processor element to: set up a first Robust Security Network Association (RSNA) link between the first station and the apparatus; and set up a second RSNA link between the second station and the apparatus. ### Claim 37 (depends on 34) The computer-readable medium of claim 34, storing instructions which when executed by a processor element cause the processor element to: generate the key value for the new communication session. ### Claim 38 (depends on 37) The computer-readable medium of claim 37, wherein the key value for the new communication session comprises a random number. ### Claim 39 (depends on 34) The computer-readable medium of claim 34, wherein a wrap encryption algorithm is to encrypt the first and second strings. ### Claim 40 (depends on 34) The computer-readable medium of claim 34, storing instructions which when executed by a processor element cause the processor element to: receive the first random number generated at the first station; transfer the first random number in a message to the second station; transfer the first random number from the second station to the apparatus; and embed the first random number in a message sent from the apparatus to the first station. ### Claim 41 An apparatus, comprising: means for a memory; means for a processor element; means for setting up a direct link between first and second stations in a wireless local area network (WLAN) hosted by the apparatus, the direct link comprising a new communication session; means for receiving, from the second station, a message comprising: a random number generated by the first station; a medium access control (MAC) address of the first station; and a random number generated by the second station; means for generating a first string comprising: a key value generated for the new communication session; the random numbers generated by the first and second stations; and a MAC address of the second station; means for generating a second string comprising: the key value generated for the new communication session; the random numbers generated by the first and second stations; and the MAC address of the first station; and means for transferring the first and second strings to the first and second stations, respectively, to secure the direct link between the first and second stations. ### Claim 42 (depends on 41) The apparatus of claim 41, wherein the direct link is set up using the Direct Link Setup (DLS) protocol. ### Claim 43 (depends on 41) The apparatus of claim 41, further comprising: means for setting up a first Robust Security Network Association (RSNA) link between the first station and the apparatus; and means for setting up a second RSNA link between the second station and the apparatus. ### Claim 44 (depends on 41) The apparatus of claim 41, further comprising: means for generating the key value for the new communication session. ### Claim 45 (depends on 44) The apparatus of claim 44, wherein the key value for the new communication session comprises a random number. ### Claim 46 (depends on 41) The apparatus of claim 41, wherein a wrap encryption algorithm is to encrypt the first and second strings.