Optical out-of-band key distribution

• US 20040161111A1
• Filed: 02/19/2003
• Published: 08/19/2004
• Est. Priority Date: 02/19/2003
• Status: Active Grant

• Current Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Original Assignee: Microsoft Corporation
• Inventors: Sherman, Nathan C.
• Granted Patent: US 7,436,965 B2
• Time in Patent Office: Days
• US Class Current: 380/283
• CPC Class Codes: G06F 21/606 by securing the transmission between two devices or processes
• CPC Class Codes: G06F 21/82 Protecting input, output or interconnection devices
• CPC Class Codes: G06Q 20/3829 involving key management
• CPC Class Codes: H04L 2209/80 Wireless
• CPC Class Codes: H04L 63/06 for supporting key management in a packet data network cryptographic mechanisms or cryptographic arrangements for key management H04L9/08
• CPC Class Codes: H04L 63/18 using different networks or channels, e.g. using out of band channels cryptographic mechanisms or cryptographic arrangements for key distribution involving distinctive intermediate devices or communication paths H04L9/0827; cryptographic mechanisms or cryptographic arrangements for authentication using a plurality of channels H04L9/3215
• CPC Class Codes: H04L 9/0827 involving distinctive intermediate devices or communication paths network architectures or network communication protocols using different networks H04L63/18

Abstract

One aspect of the disclosure relates to an out-of-band communication system and associated process. The out-of-band communication system includes an encrypted data path that is configured to convey encrypted data. The out-of-band communication system includes an optical out-of-band channel that is physically distinct from the encrypted data path. The encrypted data path extends between an optical transmitter and an optical receiver. The optical out-of-band channel is configured to transmit key information from the optical transmitter to the optical receiver.

Claims

1. An out-of-band communication system comprising:

an encrypted data path that is configured to convey encrypted data; and

an optical out-of-band channel that is physically distinct from the encrypted data path, the optical out-of-band channel extends between an optical transmitter and an optical receiver, the optical out-of-band channel is configured to transmit key information from the optical transmitter to the optical receiver.

2. The out-of-band communication system of claim 1, wherein the encrypted data path conveys encrypted data over an optical path.

3. The out-of-band communication system of claim 1, wherein the encrypted data path conveys encrypted data over a non-optical path.

4. The out-of-band communication system of claim 1, wherein the optical transmitter is included in a peripheral device.

5. The out-of-band communication system of claim 1, wherein the optical receiver is included in a peripheral device.

6. The out-of-band communication system of claim 1, wherein the optical transmitter is included in a computer.

7. The out-of-band communication system of claim 1, wherein the optical receiver in included in a computer.

8. The out-of-band communication system of claim 1, further comprising a peripheral device, wherein the peripheral device includes the optical transmitter and the optical receiver.

9. The out-of-band communication system of claim 8, wherein the peripheral device acts to convey key information from one peripheral device or computer to another peripheral device or computer.

10. The out-of-band communication system of claim 1, further comprising a peripheral device including the optical receiver, wherein the peripheral device is configured to maintain the key information.

11. The out-of-band communication system of claim 1, wherein the optical out-of-band channel includes a host device and a peripheral device.

12. The out-of-band communication system of claim 11, wherein the peripheral device acts to convey the key information from the host device to another device.

13. The out-of-band communication system of claim 11, further comprising second out-of-band channel extending from the peripheral device to another device.

14. The out-of-band communication system of claim 1, wherein the encrypted data over the encrypted data path is encrypted based on a key derived from the key information transmitted over the optical out-of-band channel.

15. The out-of-band communication system of claim 1, wherein the optical transmitter includes a light emitting diode (LED).

16. The out-of-band communication system of claim 1, wherein the optical transmitter includes an infrared transmitter.

17. A method of using out-of-band signaling to transmit and receive key information associated with an encryption key over an optical out-of-band channel, wherein the key information is transmitted at least in part in optical form.

18. The method of claim 17, wherein a user does not have to type in the encryption key from the monitor.

19. The method of claim 17, wherein the key information is received at a peripheral device.

20. The method of claim 19, further comprising binding the peripheral to a host.

21. The method of claim 17, wherein the out-of-band channel includes an optical transmitter and an optical receiver, and wherein the key information is transmitted from the optical transmitter to the optical receiver.

22. The method of claim 21, wherein the optical transmitter includes a computer display, wherein the key information is generated as images on the computer display.

23. The method of claim 22, wherein the optical receiver is located in a peripheral device.

24. A computer readable medium that can be accessed by a general purpose computer, the computer readable medium having computer executable instructions for causing the general purpose computer to perform a method comprising:

using out-of-band signaling to transmit and receive key information associated with an encryption key over an out-of-band channel.

25. The method performed by the general purpose computer of claim 24, further comprising receiving the key information using a peripheral device.

26. The method performed by the general purpose computer of claim 24, further comprising transmitting the key information using a peripheral device.

27. The method performed by the general purpose computer of claim 24, further comprising receiving the key information by a peripheral device over a first optical out-of-band channel, and transmitting the key information by the peripheral device over a second out-of-band channel.

30. The out-of-band communication system of claim 27, wherein the first optical transmitter includes a computer display.

31. The out-of-band communication system of claim 27, wherein the peripheral device is used to convey the key information from the first optical transmitter to the second optical receiver.

33. The apparatus of claim 30, wherein the close-coupling device is included in a peripheral device.

34. The apparatus of claim 31, wherein the peripheral device is an optical mouse.

35. The apparatus of claim 31, wherein the peripheral device is an optical keyboard.

36. The apparatus of claim 30, wherein the close-coupling device is included in a computer.

28. A method comprising:

using out-of-band signaling to transmit and receive key information associated with an encryption key over an out-of-band channel;

receiving the key information at a peripheral device over a first optical out-of-band channel; and

transmitting the key information by the peripheral device over a second out-of-band channel.

29. An out-of-band communication system comprising:

an encrypted data path that is configured to convey encrypted data;

a first optical out-of-band channel that is physically distinct from the encrypted data path, the first optical out-of-band channel extends between a first optical transmitter and a first optical receiver, the first optical out-of-band channel is configured to transmit key information from the first optical transmitter to the first optical receiver;

a second optical out-of-band channel that is physically distinct from the encrypted data path, the second optical out-of-band channel extends between a second optical transmitter and a second optical receiver, the second optical out-of-band channel is configured to transmit key information from the second optical transmitter to the second optical receiver; and

a peripheral device including the first optical receiver and the second optical transmitter.

32. An apparatus, comprising

an optical detector configured to receive key information in the form of an light;

and

a close-coupling device that reduces the light intended to be received by the optical detector from traveling to locations wherein the light could be detected by unintended persons or unintended detection media.