Back to results
US 7,660,419 B1Granted
System and method for security association between communication devices within a wireless personal and local area network
AssigneeTexas Instruments Incorporated
InventorJin-Meng Ho
Life of this patent
Estimating the term…
Abstract
The present application describes a method and system for discovering and authenticating communication devices within a wireless network. According to an embodiment, communication devices exchange public keys using multiple messages each including at least a portion of the public key of the sending device. The devices authenticate the receipt of the public key and establish a shared master key. The shared master key is used to further derive a session key for securing the application data between the communicating devices for a current session.
Claims17
A method of establishing a secure communication link between devices in a wireless network comprising:
- initiating the secure communication link at a first and second devices;
- exchanging public keys between the first and second devices using a first plurality of messages, wherein each of the first plurality of messages includes at least a portion of a public key of message sending device, wherein exchanging public keys between the first and second devices further comprises:
- sending a first message of the first plurality of messages from the first device to the second device, wherein the first message includes a first portion of the public key of the first device;
- receiving at the first device an acknowledgment of receipt of the first message from the second device;
- sending a second message of the first plurality of messages from the second device to the first device in response to the first message received from the first device, wherein the second message includes a first portion of the public key of the second device;
- receiving at the second device an acknowledgment of receipt of the second message from the first device;
- sending a third message of the first plurality of messages from the first device to the second device only after the corresponding acknowledgment for the first message is received by the first device, wherein the third message includes a second portion of the public key of the first device;
- receiving at the first device an acknowledgment of receipt of the third message from the second device;
- sending a fourth message of the first plurality of messages from the second device to the first device only after the corresponding acknowledgment for the second message is received by the second device in response to the third message received from the first device, wherein the fourth message includes a second portion of the public key of the second device;
- receiving at the second device an acknowledgment of receipt of the fourth message from the first device;
- verifying correct reception of the public keys;
- and
- generating a shared symmetric master key for the secure communication link.
10 more elements
A method of establishing a secure communication link between devices in a wireless network comprising:
- initiating the secure communication link at a first and second devices;
- exchanging public keys between the first and second devices using a first plurality of messages, wherein each of the first plurality of messages includes at least a portion of a public key of message sending device;
- verifying correct reception of the public keys comprising:
- at the first device,
- selecting a first random number and encrypting the first random number using the public key of the second device to generate a first one of a second plurality of messages;
- sending the first one of the second plurality of messages to the second device;
- at the second device,
- decrypting the first one of the second plurality of messages using a private key of the second device to calculate the first random number;
- selecting a second random number;
- encrypting the first random number calculated from the first one of the second plurality of messages and the second random number using the public key of the first device to generate a second one of the second plurality of messages;
- sending the second one of the second plurality of messages to the first device;
- at the first device,
- decrypting the second one of the second plurality of messages using a private key of the first device to recover the first random number and calculate the second random number,
- determining whether the first random number recovered from the second one of the second plurality of messages is the same as the first random number sent in the first one of the second plurality of messages;
- if the first random number recovered from the second one of the second plurality of messages is the same as the first random number sent in the first one of the second plurality of messages,
- then encrypting the first random number and the second random number calculated from the second one of the second plurality of messages using the public key of the second device to generate a third one of the second plurality of messages;
- sending the third one of the second plurality of messages to the second device;
- at the second device,
- decrypting the third one of the second plurality of messages using the private key of the second device to recover the first random number and the second random number from the third one of the second plurality of messages, and
- determining whether the first random number recovered from the third one of the second plurality of messages is the same as the first random number calculated from the first one of the second plurality of messages, and whether the second random number recovered from the third one of the second plurality of messages is the same as the second random number sent in the second one of the second plurality of messages;
- if the first random number recovered from the third one of the second plurality of messages is the same as the first random number calculated from the first one of the second plurality of messages, and if the second random number recovered from the third one of the second plurality of messages is the same as the second random number sent in the second one of the second plurality of messages,
- then indicating a successful establishment of the secure communication link between the first and the second devices;
- and
- generating a shared symmetric master key for the secure communication link.
21 more elements
Dependencies are inferred from the claim text.