Secure systems and methods for resolving audio device identity using remote application

• US 10,637,651 B2
• Filed: 05/17/2018
• Issued: 04/28/2020
• Est. Priority Date: 05/17/2018
• Status: Active Grant

• Current Assignee: Bose Corporation
• Original Assignee: Bose Corporation
• Inventors: Young, Douglas Warren, Rao, Prasanna, Lambert, Jim, Kavanagh, Niall Tone, Jannace, Matthew
• Primary Examiner(s): Smithers, Matthew
• Application Number:
  US15/982,745
• Publication Number:
  US 20190356478A1
• Time in Patent Office: 712 Days
• CPC Class Codes: G06F 3/165 Management of the audio stream, e.g. setting of volume, audio stream path
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 9/0819 Key transport or distribution, i.e. key establishment techniques where one party creates or otherwise obtains a secret value, and securely transfers it to the other(s) network architectures or network communication protocols for key distribution in a packet data network H04L63/062
• CPC Class Codes: H04L 9/0866 involving user or device identifiers, e.g. serial number, physical or biometrical information, DNA, hand-signature or measurable physical characteristics
• CPC Class Codes: H04W 12/50 Secure pairing of devices
• CPC Class Codes: H04W 4/80 Services using short range communication, e.g. near-field communication [NFC], radio-frequency identification [RFID] or low energy communication
• CPC Class Codes: H04W 76/14 Direct-mode setup

Abstract

A system and method for securely resolving an identity of an audio device. The method includes establishing a wireless connection between an audio device and a remote device. An identity resolving key (IRK) is received in an encrypted state from the audio device via the wireless connection. A data connection between the remote device and a server is established. The IRK is transmitted in the encrypted state to the server via the data connection. transmitting user credentials to the server via the data connection. The IRK is received in a decrypted state from the server via the data connection. An advertising packet broadcast from the audio device is received by the remote device. The advertising packet includes a random resolvable address for the audio device. The random resolvable address is attempted to be resolved using the IRK in the decrypted state to identify the audio device with remote device.

Claims

1. A method for securely resolving product identity, comprising:

establishing a wireless connection between an audio device and a remote device;

receiving an identity resolving key (IRK) in an encrypted state from the audio device via the wireless connection;

establishing a data connection between the remote device and a server;

transmitting the IRK in the encrypted state to the server via the data connection;

transmitting user credentials to the server via the data connection;

receiving the IRK in a decrypted state from the server via the data connection;

receiving an advertising packet broadcast from the audio device by the remote device, the advertising packet including a random resolvable address for the audio device; and

attempting to resolve the random resolvable address using the IRK in the decrypted state to identify the audio device with remote device.

2. The method of claim 1, wherein the remote device comprises a first remote device having a first application installed thereon and a second remote device having a second application installed thereon;

wherein establishing the wireless connection, receiving the IRK in the encrypted state, establishing the data connection, and transmitting the IRK in the encrypted state are performed by the first application; and

wherein transmitting user credentials, receiving the IRK in the decrypted state, receiving the advertising packet, and resolving the random resolvable address are performed by the first application or the second application.

3. The method of claim 1, further comprising determining that the audio device is currently paired or has been previously paired to the remote device if the random resolvable address is resolved by the IRK.

4. The method of claim 3, further comprising updating a user interface displayed by the remote device to indicate the identity of the audio device.

5. The method of claim 1, further comprising determining that the audio device has not been paired to the remote device if the random resolvable address cannot be resolved by the IRK.

6. The method of claim 1, wherein the audio device includes a first audio device and a second audio device, and the IRK includes a first IRK associated with the first audio device and a second IRK associated with the second audio device.

7. The method of claim 6, wherein the attempting is performed with respect to each of the first audio device and the second audio device.

8. The method of claim 1, wherein the advertising packet is a Bluetooth Low Energy (BLE) advertising packet.

9. The method of claim 8, wherein the random resolvable address is included in a manufacturer specific data field of the BLE advertising packet.

10. The method of claim 8, wherein a periodically refreshed random number is included in the BLE advertising packet and the random resolvable address is received by the remote device as a first random resolvable address, and wherein the attempting includes retrieving the random number from the BLE advertising packet, generating a second random resolvable addresses with the remote device using the random number, and analyzing whether the first and second random resolvable addresses match.

11. The method of claim 1, further comprising completing an end-to-end authentication process between the audio device and the server, and wherein the encrypted state is achieved using a shared secret negotiated during the end-to-end authentication process.

12. The method of claim 11, wherein completing the end-to-end authentication process comprises using the remote device as a relay between the audio device and the server.

13. The method of claim 11, further comprising generating the IRK by the audio device, generating the random resolvable address by the audio device using the IRK, and inserting the random resolvable address into the advertising packet.

14. A method for securely resolving product identity, comprising:

establishing a wireless connection between an audio device and a remote device having a first application installed thereon;

receiving an identity resolving key (IRK) in an encrypted state from the audio device via the wireless connection;

establishing a first data connection between the first application and a server;

transmitting the IRK in the encrypted state to the server via the first data connection;

transmitting user credentials to the server from the first application or from a second application via the first data connection;

receiving the identity resolving key (IRK) in a decrypted state from the server by the first application or the second application;

receiving an advertising packet from the audio device with the first or second applications, the advertising packet including a random resolvable address for the audio device; and

resolving the random resolvable address using the IRK in the decrypted state to identify the audio device with the first or second applications.

16. The system of claim 14, wherein the audio device comprises a first audio device and a second audio device, and the IRK includes a first IRK associated with the first audio device and a second IRK associated with the second audio device.

17. The system of claim 14, wherein the advertising packet is a Bluetooth Low Energy (BLE) advertising packet.

18. The system of claim 16, wherein the random resolvable address is included in a manufacturer specific data field of the BLE advertising packet.

19. The system of claim 16, wherein a periodically refreshed random number is included in the BLE advertising packet and the random resolvable address is received by the remote device as a first random resolvable address, and wherein the remote device is configured to retrieve the random number from the BLE advertising packet, to generate a second random resolvable addresses with the remote device using the random number, and to analyze whether the first and second random resolvable addresses match.

20. The system of claim 14, wherein the remote device comprises an application and the wireless connection includes a connection between the application and the audio device.

15. A system for securely resolving product identity, comprising:

a remote device having a communication module with at least one wireless transceiver;

wherein the remote device is configured to establish a wireless connection with an audio device and to receive an identity resolving key (IRK) in an encrypted state from the audio device via the wireless connection;

wherein the remote device is configured to establish a data connection with a server, to transmit the IRK in the encrypted state and user credentials to the server via the data connection, and to receive the IRK in a decrypted state from the server; and

wherein the remote device is further configured to receive an advertising packet from the audio device, the advertising packet comprising a random resolvable address for the audio device and to resolve the random resolvable address with the IRK in the decrypted state.