User transparent registration process for secure communication

• US 20060003737A1
• Filed: 06/30/2004
• Published: 01/05/2006
• Est. Priority Date: 06/30/2004
• Status: Active Grant

• Current Assignee: GM Global Technology Operations LLC (General Motors Company)
• Original Assignee: GM Global Technology Operations Incorporated (General Motors Company)
• Inventors: Alrabady, Ansaf I.
• Granted Patent: US 7,649,997 B2
• Time in Patent Office: Days
• US Class Current: 455/410
• CPC Class Codes: H04L 2209/80 Wireless
• CPC Class Codes: H04L 2209/84 Vehicles
• CPC Class Codes: H04L 51/58 Message adaptation for wireless communication
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 9/0844 with user authentication or key authentication, e.g. ElGamal, MTI, MQV-Menezes-Qu-Vanstone protocol or Diffie-Hellman protocols using implicitly-certified keys
• CPC Class Codes: H04M 1/6075 adapted for handsfree use in a vehicle H04M1/6058 takes precedence; arrangements for holding telephones in a vehicle B60R11/0241
• CPC Class Codes: H04M 2250/02 including a Bluetooth interface
• CPC Class Codes: H04W 12/033 of the user plane, e.g. user's traffic
• CPC Class Codes: H04W 12/04 Key management, e.g. using generic bootstrapping architecture [GBA]
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 84/18 Self-organising networks, e.g. ad-hoc networks or sensor networks

Abstract

A method for secure communication. The method includes receiving a request at a first device to communicate with a second device. The method also includes determining if an encryption key exists between the first device and the second device. Creation of the encryption key is initiated in response to a determination that that encryption key does not exist. The initiation of the creation of the encryption key occurs without user input. The method further includes communicating with the second device using the encryption key and performing user authentication of the communication.

Claims

1. A method for secure communication, the method comprising:

receiving a request at a first device to communicate with a second device;

determining existence of an encryption key between the first device and the second device;

initiating creation of the encryption key in response to a determination that the encryption key does not exist, the initiating occurring without user input;

communicating with the second device using the encryption key; and

performing user authentication of the communication.

2. The method of claim 1 wherein the initiating includes:

transmitting a command to the second device, the command including instructions to create the encryption key on the second device; and

executing a command on the first device, the command including instructions to create the encryption key on the first device.

3. The method of claim 1 wherein the creation includes:

transmitting a request for a second device public key to the second device;

receiving the second device public key from the second device; and

creating the encryption key in response to a first device private key and the second device public key.

4. The method of claim 3 wherein the creation further includes:

creating a first device public key responsive to the first device private key; and

transmitting the first device public key to the second device.

5. The method of claim 1 wherein the first device and the second device utilize mathematically related algorithms.

6. The method of claim 1 wherein the first device is a vehicle.

7. The method of claim 1 wherein the first device is a cellular telephone.

8. The method of claim 1 wherein the first device is a vehicle and the second device is a cellular telephone.

9. The method of claim 1 wherein the first device is a cordless telephone base station and the second device is a cordless telephone handset or headset.

10. The method of claim 1 wherein the first device is an intercom base station and the second device is an intercom remote station.

11. The method of claim 1 wherein the first device is a first walkie talkie and the second device is a second walkie talkie.

12. The method of claim 1 wherein the encryption key is created using a key exchange protocol.

13. The method of claim 1 wherein the request is received from a driver of a vehicle.

14. The method of claim 1 wherein the request is received from the first device or the second device.

15. The method of claim 1 wherein the user authentication is voice authentication.

16. The method of claim 1 wherein the user authentication is visual authentication.

17. The method of claim 1 wherein the communicating includes using the encryption key to encrypt a message being sent to the second device.

18. The method of claim 1 wherein the communicating includes using the encryption key to decrypt a message being received from the second device.

19. A system for secure communication, the system comprising:

a first device connected via a network to a second device, the first device including instructions to implement a method comprising;

receiving a request at the first device to communicate with the second device;

determining if an encryption key exists between the first device and the second device;

initiating creation of the encryption key in response to a determination that the encryption key does not exist, the initiating occurring without user input;

communicating with the second device via the network using the encryption key; and

performing user authentication of the communication.

20. The system of claim 19 wherein the network is a bluetooth network.

21. The system of claim 19 wherein the network is a local area network.

22. The system of claim 19 wherein the network is a short range communication network.

23. The system of claim 19 wherein the network is a wireless network.

24. A computer program product for secure communication, the computer program product comprising:

a storage medium readable by a processing circuit and storing instructions for execution by the processing circuit for performing a method comprising;

receiving a request at a first device to communicate with a second device;

determining if an encryption key exists between the first device and the second device;

initiating creation of the encryption key in response to a determination that the encryption key does not exist, the initiating occurring without user input;

communicating with the second device using the encryption key; and

performing user authentication of the communication.