Improved security establishment methods and systems
AssigneeKoninklijke Philips N.V.
InventorOscar GARCIA MORCHON
Life of this patent
Estimating the term…
Abstract
The invention relates to methods and devices for setting up a secure communication channel with an improved key exchange for a security establishment protocol or procedure.
Claims18
An apparatus for controlling a security establishment process between a first communication device (A) and a second communication device (B) over a transmission link, wherein the apparatus is adapted to use at least a portion of other-purpose information for implicit signaling of a key derivation parameter for use by a key derivation function provided at the second communication device (B) to obtain a key for the security establishment process.
An apparatus for controlling a security establishment process between a first communication device (A) and a second communication device (B) over a transmission link, wherein the apparatus is adapted to:
- read or receive other-purpose information to derive an implicit key derivation parameter from at least a portion of the other-purpose information;
- and
- use the derived key derivation parameter for a key derivation function to obtain a key for the security establishment process, wherein the other-purpose information was exchanged for a purpose other than key derivation and wherein the apparatus is adapted to perform at least one of the combining the at least portion of the other-purpose information with a fixed number and setting the count input value to a minimum value which depends on the received key derivation parameter.
(canceled)
(canceled)
(canceled)
A method of controlling a security establishment process between a first communication device (A) and a communication device (B) over a transmission link, wherein the method comprises using at least a portion of other-purpose information for implicit signaling of a key derivation parameter for use by a key derivation function provided at the second communication device (B) to obtain a key for the security establishment process, wherein the other-purpose information was exchanged for a purpose other than key derivation and at least one of combining the at least portion of the other-e information with a fixed number and setting the count input value to a minimum value which depends on the received key derivation parameter.
A method of controlling a security establishment process between a first communication device (A) and a second communication device (B) over a transmission link, wherein the method comprises:
- reading or receiving other-purpose information to derive an implicit key derivation parameter from at least a portion of the other-purpose information;
- and
- using the derived key derivation parameter for a key derivation function to obtain a key for the security establishment process, wherein the other-purpose information was exchanged for a purpose other than key derivation and
- at least one of the combining the at least portion of the other-purpose information with a fixed number and setting the count input value to a minimum value which depends on the received key derivation parameter.
(canceled)
Dependencies are inferred from the claim text.