Improved security establishment methods and systems
AssigneeKoninklijke Philips N.V.
InventorOSCAR GARCIA MORCHON
Life of this patent
Estimating the term…
Abstract
The invention relates to methods and devices for setting up a secure communication channel with an improved key exchange for a security establishment protocol or procedure.
Claims16
An apparatus for controlling a security establishment process between a first communication device (A) and a second communication device (B) over a transmission link, wherein the apparatus is adapted to:
- transmit to the second communication device (B) a first preamble message (Pre_AB) including a first security establishment identifier (ID_A), the first security establishment identifier being of the first communication device (A), and a first random value (R_A);
- and
- receive from the second communication device (B) a second preamble message (Pre_BA) including a second security establishment identifier (ID_B) of the second communication device (B) and a previous random value (R_A′) previously received at the second communication device (B);
- and
- set the second security establishment identifier (ID_B) of the second communication device (B) as peer session identifier (401) for subsequent messages if the first random value (R_A) is equal to the previous random value (R_A′).
An apparatus for controlling a security establishment process between a first communication device (A) and a second communication device (B) over a transmission link, wherein the apparatus is adapted to:
- transmit to the first communication device (A) a preamble message (PR_BA) including a second security establishment identifier (ID_B) of the second communication device (B);
- receive from the first communication device (A) a first security establishment message (PAKE1) including a previous random value (R_B′) previously received at the first communication device (A);
- and
- set a first security establishment identifier (ID_A) of the first communication device (A) as peer session identifier (401) for subsequent messages if a random value (R_B) of the second communication device (B) is equal to the previous random value (R_B′).
A method of controlling a security establishment process between a first communication device (A) and a second communication device (B) over a transmission link, wherein the method comprises:
- transmitting to the second communication device (B) a first preamble message (Pre_AB) including a first security establishment identifier (ID_A), the first security establishment identifier (ID_A) being of the first communication device (A), and a first random value (R_A);
- and
- receiving from the second communication device (B) a second preamble message (Pre_BA) including a second security establishment identifier (ID_B) of the second communication device (B) and a previous random value (R_A′) previously received at the second communication device (B);
- and
- setting the second security establishment identifier (ID_B) of the second communication device (40) as peer session identifier (401) for subsequent messages if the first random value (R_A) is equal to the previous random value (R_A′).
A method of controlling a security establishment process between a first communication device (A) and a second communication device (B) over a transmission link, wherein the method comprises:
- transmitting to the first communication device (A) a preamble message (PR_BA) including a security establishment identifier (ID_B) of the second communication device (B);
- receiving from the first communication device (A) a first security establishment message (PAKE1) including a previous random value (R_B′) previously received at the first communication device (A);
- and
- setting a security establishment identifier (ID_A) of the first communication device (A) as peer session identifier for subsequent messages if a random value (R_B) of the second communication device (B) is equal to the previous random value (R_B′).
Dependencies are inferred from the claim text.