Security system for apparatuses in a network

• US 20060083378A1
• Filed: 07/24/2003
• Published: 04/20/2006
• Est. Priority Date: 07/29/2002
• Status: Abandoned Application

• Current Assignee: Koninklijke Philips Electronics N.V. (Koninklijke Philips N.V.)
• Original Assignee: Koninklijke Philips Electronics N.V. (Koninklijke Philips N.V.)
• Inventors: Schreyer, Oliver, Lelkens, Armand, Budde, Wolfgang Otto
• Application Number:
  US10/522,289
• Publication Number:
  US 20060083378A1
• Time in Patent Office: Days
• US Class Current: 380/277
• CPC Class Codes: H04L 12/2803 Home automation networks
• CPC Class Codes: H04L 63/0492 by using a location-limited connection, e.g. near-field communication or limited proximity of entities
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 67/14 Session management for real-time applications in data packet communications networks H04L65/1066
• CPC Class Codes: H04W 12/043 using a trusted network node as an anchor
• CPC Class Codes: H04W 12/062 Pre-authentication
• CPC Class Codes: H04W 84/18 Self-organising networks, e.g. ad-hoc networks or sensor networks

Abstract

The invention relates to a security system for networks, comprising a first portable unit (1) with a memory (3) for storing a worldwide unambiguous key record (4) provided for short-range information transmission of the key record (4). At least one apparatus (2) of the network is provided with a receiving unit (7) comprising a receiver (9) for receiving the key record (4) and an evaluation component (11) of the apparatus for storing, processing and/or passing on the key record (4) or a part of the key record to a second component. Due to the key record, the apparatuses in the network acquire a secret shared key by means of which the encryption and decryption of the transmitted useful data and/or the authentication is performed.

Claims

1. A security system for networks, comprising

a first portable unit (1) with a memory (3) for storing a worldwide unambiguous key record (4) provided for short-range information transmission of the key record (4), and

at least one receiving unit (7) in at least one apparatus (2) of the network, comprising a receiver (9) for receiving the key record (4) and an evaluation component (11) of the apparatus for storing, processing and/or passing on the key record (4) or a part of the key record to a second component.

2. A security system as claimed in claim 1, characterized in that the first unit (1) comprises a triggering unit (5) for triggering a short-range transmission of the key record.

3. A security system as claimed in claim 1, characterized in that, upon a user'"'"'s approach to the receiving unit (7), a detector unit in the unit (1) is provided for triggering the short-range information transmission of the key record (4).

4. A security system as claimed in claim 1, characterized in that a key generator (14) is provided in the first unit (1) or in a second unit (13) for generating a sequence of guest key records (17).

5. A security system as claimed in claim 2, characterized in that the first unit (1) is provided for transmitting a guest key record (17) upon activation of a second triggering unit (15).

6. A security system as claimed in claim 1, characterized in that the key record (4) and the guest key record (17) each consist of a bit sequence.

7. A security system as claimed in claim 1, characterized in that the first unit (1) is a part of an apparatus, particularly a remote control unit.

8. A security system as claimed in claim 1, characterized in that the key record (4) is supplied during or before a network configuration, particularly an automatic network configuration, of an apparatus (2).

9. A security system as claimed in claim 6, characterized in that the key record (4) and the guest key record (17) comprise characterizing bits which are provided for distinguishing between key records (4, 17) and other bit sequences and characterize bit sequences as key record (4) or as guest key record (17).

10. A security system as claimed in claim 4, characterized in that the apparatus (2) is provided for erasing-the guest key record (17).

11. A security system as claimed in claim 4, characterized in that the apparatus (2) is provided for authentication and encryption of useful data to be transmitted between the apparatuses of the network by means of a key comprised in the key record (4, 17).

12. A security system as claimed in claim 1, characterized in that the apparatus (2) is a powerline communication apparatus.

13. A powerline communication network, characterized by a security system as claimed in claim 1.

14. A portable unit (1) for installing a shared key in at least one apparatus (2) of a wireless network comprising a memory for storing a worldwide unambiguous key record (4) which is provided for short-range information transmission of the key record.

15. An electric apparatus (2) with a receiving unit (7) comprising a receiver (9) for receiving a key record (4) and an evaluation component (11) of the apparatus (2) for storing, processing and/or passing on the key record or a part of the key record to a second component (10).