Method and apparatus for device identifier composition engine certificate-based security and out-of-band temporary key generation for bluetooth pairing

An information handling system comprising:

• a hardware processor;
• a memory device;
• a power management unit (PMU) to provide power to the hardware processor and memory device;
• the hardware processor executing computer readable program code of an automatic peripheral device pairing management system pairing agent to receive, via a wireless interface adapter, a device identifier composition engine (DICE) certificate via a generic attribute profile (GATT) specification transmission from a wireless peripheral device, the DICE certificate indicating the identity of the wireless peripheral device and wherein the DICE certificate includes a public key;
• the hardware processor executing computer readable program code of an out-of-band (OOB) temporary key generator agent to generate an OOB temporary key;
• the hardware processor executing the computer readable program code of the automatic peripheral device pairing management system pairing agent to encrypt the OOB temporary key using the public key;
• the hardware processor to, via the wireless interface adapter, send the public key-encrypted OOB temporary key to the wireless peripheral device to be decrypted using a private key at the wireless peripheral device;
• and
• the hardware processor executing a confirm value generation function to confirm that the OOB temporary key matches the sent OOB temporary key at the wireless peripheral device to automatically Bluetooth® (BT) pair the information handling system to the wireless peripheral device.

An information handling system comprising:

• a hardware processor;
• a memory device;
• a power management unit (PMU) to provide power to the hardware processor and memory device;
• the hardware processor executing computer readable program code of an automatic peripheral device pairing management system pairing agent to receive, via a wireless interface adapter, a device identifier composition engine (DICE) certificate and a peripheral device identification (PD ID) from a backend management server, the PD ID indicating the assignment of the wireless peripheral device to the information handling system;
• the hardware processor executing computer readable program code of the automatic peripheral device pairing management system pairing agent to, via the wireless interface adapter, establish a generic attribute profile (GATT) specification transmission using security protocol data model (SPDM) to securely receive a DICE certificate from the wireless peripheral device;
• the hardware processor executing the computer readable program code of the automatic peripheral device pairing management system pairing agent to compare the DICE certificate received from the backend management server to the DICE certificate received from the wireless peripheral device to determine a match between the DICE certificates;
• the hardware processor executing computer readable program code of an out-of-band (OOB) temporary key generator agent to generate an OOB temporary key and store the OOB temporary key in memory;
• the hardware processor to, via the wireless interface adapter, send a copy of the OOB temporary key via a secure tunnel communication channel created by the GATT specification transmission to the wireless peripheral device;
• and
• the hardware processor executing a confirm value generation function to confirm that the OOB temporary key matches the securely sent OOB temporary key at the wireless peripheral device to automatically Bluetooth® (BT) pair the information handling system to the wireless peripheral device.