Establishing secure peer networking in trust webs on open networks using shared secret device key

• US 20050286722A1
• Filed: 04/11/2005
• Published: 12/29/2005
• Est. Priority Date: 09/06/2001
• Status: Active Grant

• Current Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Original Assignee: Microsoft Corporation
• Inventors: Aboba, Bernard D., Nixon, Toby L.
• Granted Patent: US 7,290,132 B2
• Time in Patent Office: Days
• US Class Current: 380/277
• CPC Class Codes: H04L 63/04 for providing a confidential data exchange among entities communicating through data packet networks

Abstract

A trust web keying process provides secure peer networking of computing devices on an open network. A device is initially keyed at distribution to an end user or installer with a device-specific cryptographic key, and programmed to respond only to peer networking communication secured using the device'"'"'s key. The device-specific key is manually entered into a keying device that transmits a re-keying command secured with the device-specific key to the device for re-keying the device with a group cryptographic key. The device then securely peer networks with other devices also keyed with the group cryptographic key, forming a trust web. Guest devices can be securely peer networked with the trust web devices via a trust web gateway.

Claims

1-11. -11. (canceled)

12. A trust web gateway device for securely peer networking a guest device keyed for secure peer networking using a device cryptographic key together with a group of trust web member devices keyed for secure peer networking using a trust web cryptographic key, the trust web gateway device comprising:

cryptographic key storage storing the trust web cryptographic key and the device cryptographic key;

a secure peer networking layer operating to send and receive communication in a peer networking protocol secured using the device cryptographic key and the trust web cryptographic key; and

a secure peer networking translator operating in response to receiving a first communication secured using the device cryptographic key to re-transmit the first communication secured using the trust web cryptographic key, and operating in response to receiving a second communication secured using the trust web cryptographic key to re-transmit the second communication secured using the device cryptographic key.

13. A method for securely peer networking a guest device keyed for secure peer networking using a device cryptographic key together with a group of trust web member devices each keyed for secure peer networking using a trust web cryptographic key, the method comprising:

providing the device cryptographic key and the trust web cryptographic key to a trust web gateway device;

upon receipt by the trust web gateway device of a communication in a peer networking protocol secured using the device cryptographic key, re-transmitting the communication secured using the trust web cryptographic key; and

upon receipt by the trust web gateway device of a communication in a peer networking protocol secured using the trust web cryptographic key, re-transmitting the communication secured using the device cryptographic key.