System and method for authenticating/registering network device in power line communication (PLC)

• US 20060038660A1
• Filed: 01/28/2005
• Published: 02/23/2006
• Est. Priority Date: 08/20/2004
• Status: Active Grant

• Current Assignee: Sony Corporation (Sony Group Corp.), Sony Electronics Inc. (Sony Group Corp.)
• Original Assignee: Sony Corporation (Sony Group Corp.), Sony Electronics Inc. (Sony Group Corp.)
• Inventors: Iwamura, Ryuichi, Doumuki, Tohru
• Granted Patent: US 7,616,762 B2
• Time in Patent Office: Days
• US Class Current: 340/310.110
• CPC Class Codes: H04B 2203/5445 Local network
• CPC Class Codes: H04B 2203/545 Audio/video application, e.g. interphone
• CPC Class Codes: H04B 2203/5483 using coupling circuits
• CPC Class Codes: H04B 2203/5491 using filtering and bypassing
• CPC Class Codes: H04B 3/542 the information being in digital form
• CPC Class Codes: H04K 1/00 Secret communication
• CPC Class Codes: H04L 2209/60 Digital content management, e.g. content distribution
• CPC Class Codes: H04L 63/0435 wherein the sending and receiving network entities apply symmetric encryption, i.e. same key used for encryption and decryption cryptographic mechanisms or cryptographic arrangements for symmetric key encryption H04L9/06
• CPC Class Codes: H04L 63/061 for key exchange, e.g. in peer-to-peer networks cryptographic mechanisms or cryptographic arrangements for key agreement H04L9/0838
• CPC Class Codes: H04L 63/18 using different networks or channels, e.g. using out of band channels cryptographic mechanisms or cryptographic arrangements for key distribution involving distinctive intermediate devices or communication paths H04L9/0827; cryptographic mechanisms or cryptographic arrangements for authentication using a plurality of channels H04L9/3215
• CPC Class Codes: H04L 9/0838 Key agreement, i.e. key establishment technique in which a shared key is derived by parties as a function of information contributed by, or associated with, each of these network architectures or network communication protocols for key exchange in a packet data network H04L63/061
• CPC Class Codes: H04L 9/0891 Revocation or update of secret information, e.g. encryption key update or rekeying
• CPC Class Codes: Y04S 40/20 Information technology specific aspects, e.g. CAD, simulation, modelling, system security

Abstract

A method and apparatus for protecting privacy in power line communication (PLC) networks. Data transmitted on a PLC network is encrypted according to a network key and can be properly received only by registered devices that have the proper network ID and network key value so that proper decryption can be performed. According to the invention a streaming media device is provided with a compatible network ID and network key during a registration process facilitated by coupling the device (applicant) to a direct power line connection associated with another device (administrator). The network key, and optionally network ID, are then shared over the direct connection without being distributed over the PLC network at large. By way of example, the data is prevented from being distributed across the PLC network in response to using selectable filtering of PLC data, and preferably a secure data communication mechanism, such as public-private key encoding.

Claims

1. An apparatus for securely communicating streaming media over a power line communications (PLC) network, comprising:

a first streaming media device configured for connecting to a power line for the receipt of operating power;

a power line communications circuit, within said first streaming media device, configured for communicating data over said power line operating as a PLC network, between said first streaming media device and at least a second streaming media device coupled to said power line;

a scrambling circuit within said communications circuit which encrypts or decrypts data in response to a network key value; and

means for securely sharing and storing a common network key value between streaming media devices, in response to establishing a physical connection between said first streaming media device and said second streaming media device, without communicating the network key value over the PLC network.

2. An apparatus as recited in claim 1, wherein said first and second streaming media devices are selected from the group of streaming media devices consisting essentially of source devices, players, recorders, cameras, and servers, which are configured for use with video streams, audio streams or a combination of audio and video streams.

3. An apparatus as recited in claim 1, wherein said first streaming media device operates in either an administrator mode in which it supplies said network key (NK) value to said second streaming media device, or in an applicant mode in which it receives and stores said network key value from a second streaming media device for use during encryption or decryption of streaming media communicated over said PLC network.

4. An apparatus as recited in claim 3, wherein said first streaming media device operating in administrator mode retrieves a default value for said network key and supplies this value to said second streaming media device.

5. An apparatus as recited in claim 1, further comprising means for detecting that said first streaming media device and said second media device do not share a common network key value in preparation for sharing and storing said network key value.

6. An apparatus as recited in claim 5, wherein said detecting means comprises a comparison circuit for determining if a received network key value is valid and matches a network key value stored in memory.

7. An apparatus as recited in claim 1, wherein said means for securely sharing a network key is also configured for sharing a network identification between said streaming media devices.

8. An apparatus as recited in claim 1, wherein said means for securely sharing a network key comprises:

a key-sharing circuit configured for establishing a direct power line connection;

a memory for storing a network key value shared over said direct power line connection;

a selective PLC data filter configured for filtering out PLC data so that it is not communicated beyond said direct power line connection over the PLC network;

wherein the network key is shared over the direct power line connection without being distributed over the PLC network; and

wherein the direct power line connection can be disconnected after the network key has been shared.

9. An apparatus as recited in claim 8, wherein said selective PLC data filter comprises a low pass filter which can switched in or out of the path between the direct power line connection and the connection to the PLC network.

10. An apparatus as recited in claim 8, wherein said direct power line connection comprises:

a power receptacle on either said first streaming media device to which at least one of said second streaming media devices are coupled, or on one of said second streaming media devices to which said first streaming media device is coupled;

wherein said power receptacle is coupled to a power plug connection configured for receiving operating power from said power line; and

wherein said selective power line communication (PLC) filtering can be selectively coupled between said receptacle and said power plug connection.

11. An apparatus as recited in claim 1, further comprising means for indicating that the network key value has been shared between said first streaming media device and said second streaming media device.

12. An apparatus as recited in claim 11, wherein said means for indicating comprises an optical indicator.

13. An apparatus for communicating securely over a power line communications (PLC) network, comprising:

a first streaming media device configured for communicating data over a power line communications (PLC) network with at least a second streaming media device;

a microprocessor and memory on said first streaming media device;

programming executable on said microprocessor for,

determining when said first streaming media device and said second streaming media device are coupled to one another through a separate power socket within said first streaming media device or said second streaming media device,

activating a PLC data filter associated with said separate power socket during a registration process to prevent data communicated over said separate power socket from being distributed beyond the separate power socket connection over the PLC network,

communicating and storing a network key for controlling encryption and decryption of data over the PLC network so that said first streaming media device and said second streaming media device are configured with a compatible network key,

deactivating said PLC data filter after the network key has been received,

replacing said separate power socket coupling, at any desired subsequent time, with a PLC network connection.

14. A method of securely sharing a network key utilized in the encryption and decryption of streaming media communicated between streaming media devices on a power line communications (PLC) network, comprising:

establishing a direct power connection between a first streaming media device and a second streaming media device;

detecting that said second streaming media device is coupled to said direct power connection;

determining that said second streaming media device is not already using a network key which is compatible with said first streaming media device;

blocking PLC data from being communicated beyond said direct power line connection to the PLC network;

passing a network key from said first streaming media device to said second streaming media device to update the previous values for use by said second streaming media device in communicating over the PLC network; and

wherein said direct power line connection can be severed and said second streaming media device connected within the PLC network to which said first streaming media device is connected.

15. A method as recited in claim 14, wherein said first streaming media device is configured with a default network key value for use when a network key has not been previously shared with said first streaming device.

16. A method as recited in claim 14, wherein said direct power connection comprises a power receptacle on said first streaming media device to which the power cord from at least one other streaming media device may be connected.

17. A method as recited in claim 14, wherein said detecting of said second streaming media device is performed in response to detecting that power is being supplied through said direct power line connection or that PLC data is being received over said direct power line connection.

18. A method as recited in claim 14, wherein said blocking of PLC data is performed by filtering out the PLC data content.

19. A method as recited in claim 14, wherein said process of establishing a new network key is a secure process configured for utilizing a public-private key mechanism for communicating data.

20. A method as recited in claim 14, further comprising unblocking said PLC data from being communicated beyond the direct power line connection to the PLC network.