# US 9,438,573 B2 · Systems and methods to securely install network devices using physical confirmation > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 9,438,573 B2 - Document ID: US9438573B2 - Status: Granted - Kind: B2 - Application number: 14/539,627 - Filed: 2014-11-12 - Published: 2016-05-12 - Granted: 2016-09-06 - Earliest claimed: 2014-11-12 - Assignees: SmartLabs, Inc. - Applicants: SmartLabs, Inc. - Inventors: Daniel Brian Cregg - Web page: https://patentgrep.com/patent/US9438573B2 ## CPC - H04L 63/062: {for key distribution, e.g. centrally by trusted party (cryptographic mechanisms or cryptographic arrangements for key distribution involving a central third party H04L9/0819)} - H04B 3/542: {the information being in digital form} - H04L 12/283: {Processing of data at an internetworking point of a home automation network} - H04L 67/10: in which an application is distributed across nodes in the network (software deployment G06F8/60; multiprogramming arrangements G06F9/46) - H04L 67/1044: {Group management mechanisms (management of multicast group membership H04L12/185; reconfiguring of node membership in a computing system to eliminate errors G06F11/1425)} - H04W 4/08: User group management - H04W 12/04: Key management, e.g. using generic bootstrapping architecture [GBA] - H04W 12/50: Secure pairing of devices - H04W 12/65: Environment-dependent, e.g. using captured environmental data - H04W 12/71: Hardware identity - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) - H04B: TRANSMISSION - H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72) ## Abstract A cloud server communicates with a network controller over communication channels of a communication network to securely install a new device having a unique identifier and a device key onto a home-control network associated with a network key. The network device sends its unique identifier over the home-control network to the network controller and the network controller passes the unique identifier over the communication channels to the cloud server. the cloud server retrieves a device key associated with the network device based on the unique identifier and transmits the device key to the network controller over the communication channels. The network controller sends a message comprising the device key to the network device over the home-control network. The message is formatted to deliver the network key to the network device to permit the network device to send and receive messages comprising the network key over the home-control network. ## Claims ### Claim 1 A system to install a network device onto a home-control network, the system comprising: at least one cloud server configured to store a database comprising a plurality of unique device identifiers, wherein each of the unique device identifiers is associated with a device key; a hub configured to store in memory a network key and to send and receive transmissions over a home-control network; a network device configured to store in memory one of the plurality of unique device identifiers and the device key associated with the one of the plurality of unique identifiers, wherein the device key is different from the network key; and an application comprising software instructions and configured to be installed on an intelligent device, wherein the application, when executed, causes the intelligent device to send a first message to the at least one cloud server over communication channels of a second network to place the at least one cloud server in a learning mode and to display a request to a user to perform a physical action on the network device; the at least one cloud server further configured to transmit a second message to the hub over the communication channels of the second network to place the hub in the learning mode after the at least one cloud server is placed in the learning mode, wherein the second network is different from the home-control network; the network device configured to transmit a third unencrypted message comprising the one of the plurality of unique device identifiers to the hub over the home-control network after the physical action has been performed on the network device by the user to place the network device into a linking mode; the hub further configured to transmit a fourth message comprising the one of the plurality of unique device identifiers to the at least one cloud server over the communication channels of the second network after the hub is placed in the learning mode; the at least one cloud server further configured to retrieve from the database the device key associated with one of the plurality of unique device identifiers and to transmit a fifth message comprising the retrieved device key to the hub over the communication channels of the second network; the hub further configured to encrypt a sixth message using the retrieved device key, wherein the sixth message comprises the network key, the hub further configured to transmit the sixth encrypted message to the network device over the home-control network, the sixth encrypted message formatted to deliver the network key to the network device to permit the network device to encrypt messages using the network key for transmission over the home-control network. ### Claim 2 (depends on 1) The system of claim 1 wherein the one of the plurality of unique device identifiers comprises a random number unique to the network device. ### Claim 3 (depends on 1) The system of claim 1 wherein the network key comprises an encryption code unique to the home-control network. ### Claim 4 (depends on 1) The system of claim 1 wherein the device key associated with the one of the plurality of unique device identifiers comprises an encryption code unique to the network device. ### Claim 5 (depends on 1) The system of claim 1 wherein the home-control network comprises a mesh network configured to propagate the transmissions using powerline signaling and radio frequency (RF) signaling. ### Claim 6 (depends on 5) The system of claim 5 wherein the powerline signaling comprises message data modulated onto a carrier signal and the modulated carrier signal is added to a powerline waveform, and wherein the RF signaling comprises the message data modulated onto an RF waveform. ### Claim 7 (depends on 1) The system of claim 1 wherein the intelligent device comprises a smartphone. ### Claim 8 (depends on 1) The system of claim 1 wherein the physical action comprises at least one of pushing a button, switching a switch, and entering a screen selection. ### Claim 9 A method to install a network device onto a home-control network, the method comprising: storing, in at least one cloud server, a database comprising a plurality of unique device identifiers, wherein each of the unique device identifiers is associated with a device key; storing, in a memory of a hub, a network key, wherein the hub is configured to send and receive transmissions over a home-control network; storing, in a memory of a network device, one of the plurality of unique device identifiers and the device key associated with the one of the plurality of unique identifiers, wherein the device key is different from the network key; sending a first message from an intelligent device to the at least one cloud server over communication channels of a second network to place the at least one cloud server in a learning mode and to display a request to a user to perform a physical action on the network device; transmitting a second message from the at least one cloud server to the hub over the communication channels of the second network to place the hub in the learning mode after the at least one cloud server is placed in the learning mode, wherein the second network is different from the home-control network; transmitting a third unencrypted message comprising the one of the plurality of unique device identifiers from the network device to the hub over the home-control network after a physical action has been performed on the network device by a user to place the network device into a linking mode; transmitting a fourth message comprising the one of the plurality of unique device identifiers from the hub to the at least one cloud server over the communication channels of the second network after the hub is placed in the learning mode; retrieving, from the database, the device key associated with the one of the plurality of unique device identifiers; transmitting a fifth message comprising the retrieved device key from the at least one cloud server to the hub over the communication channels of the second network; and encrypting a sixth message at the hub using the retrieved device key, wherein the sixth message comprises the network key; transmitting the sixth encrypted message comprising the network key from the hub to the network device over the home-control network, the sixth encrypted message formatted to deliver the network key to the network device to permit the network device to encrypt messages using the network key for transmission over the home-control network. ### Claim 10 (depends on 9) The method of claim 9 where the one of the plurality of unique device identifiers comprises a random number unique to the network device. ### Claim 11 (depends on 9) The method of claim 9 wherein the network key comprises an encryption code unique to the home-control network. ### Claim 12 (depends on 9) The method of claim 9 wherein the device key associated with the one of the plurality of unique device identifiers comprises an encryption code unique to the network device. ### Claim 13 (depends on 9) The method of claim 9 wherein the home-control network comprises a mesh network configured to propagate the transmissions using powerline signaling and radio frequency (RF) signaling. ### Claim 14 (depends on 13) The method of claim 13 wherein the powerline signaling comprises message data modulated onto a carrier signal and the modulated carrier signal is added to a powerline waveform, and wherein the RF signaling comprises the message data modulated onto an RF waveform. ### Claim 15 (depends on 9) The method of claim 9 wherein the intelligent device comprises a smartphone. ### Claim 16 (depends on 9) The method of claim 9 wherein the physical action comprises at least one of pushing a button, switching a switch, and entering a screen selection.