System and method for automatic setup of a network device with secure network transmission of setup parameters

• US 20070061575A1
• Filed: 09/01/2005
• Published: 03/15/2007
• Est. Priority Date: 09/01/2005
• Status: Active Grant

• Current Assignee: Sharp Kabushiki Kaisha (Hon Hai Precision Industry Co., Ltd.)
• Original Assignee: Sharp Kabushiki Kaisha (Hon Hai Precision Industry Co., Ltd.)
• Inventors: Bennett, Richard
• Granted Patent: US 7,609,837 B2
• Time in Patent Office: Days
• US Class Current: 713/171
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/068 using time-dependent keys, e.g. periodically changing keys cryptographic mechanisms or cryptographic arrangements for controlling usage of secret information H04L9/088
• CPC Class Codes: H04L 9/0891 Revocation or update of secret information, e.g. encryption key update or rekeying

Abstract

A system and method for use with local area networks (LANs) automatically configures a new device on a LAN by secure encrypted transmission of setup parameters. A remote control (RC) with an infrared (IR) transmitter contains a stored setup command and a security number that is used only once (a “nonce”). Setup of a new device is initiated by pressing a “setup” button on the RC which generates the security number and transmits it and the setup command to the new device via IR. The new device receives the setup command and security number and queries the network for the setup parameters. The RC also transmits the security number via IR to a network member device that contains the setup parameters. The network member uses the security number as an encryption key to encrypt the setup parameters and transmit them over the network. The new device uses the security number as the decryption key to decrypt the transmitted setup parameters.

Claims

1. A local area network (LAN) comprising:

a remote control comprising an infrared (IR) transmitter, a processor, memory coupled to the processor, a security number stored in the memory, and a setup button for causing the stored security number to be transmitted by the IR transmitter;

a network member device comprising a processor, memory coupled to the processor, and a computer program responsive to the security number transmitted by the remote control for encrypting a network configuration message transmitted on the network; and

a nonmember device for connection to the network comprising a processor, memory coupled to the processor, and a computer program responsive to the security number transmitted by the remote control for decrypting the encrypted network configuration message transmitted by the member device.

2. The LAN of claim 1 wherein the security number is stored in the memory of the remote control only for a time-out period.

3. The LAN of claim 1 wherein the security number is generated by the remote control.

4. The LAN of claim 3 wherein the security number generated by the remote control is a random number.

5. The LAN of claim 4 wherein the remote control includes a computer program for generating the random number.

6. The LAN of claim 1 wherein the network member computer program includes instructions for deleting the security number from memory after the network configuration message has been encrypted.

7. The LAN of claim 1 wherein the nonmember device computer program includes instructions for deleting the security number from memory after the network configuration message has been decrypted.

8. The LAN of claim 1 wherein the remote-control setup button also causes a start-setup code to be transmitted to the nonmember device to ready the nonmember device for receipt of the network configuration message transmitted by the member device.

9. The LAN of claim 1 wherein the network member encryption program and the nonmember device decryption program include the advanced encryption standard (AES) algorithm and the security number comprises the AES algorithm key.

10. The LAN of claim 1 wherein the LAN is a powerline communications (PLC) network.

11. The LAN of claim 1 wherein the LAN is a wireless local area network (WLAN), wherein the member device and the nonmember device each includes a wireless transceiver, and wherein the network configuration message is broadcast on the WLAN by the member device.

12. The WLAN of claim 11 wherein the WLAN is a IEEE 802.11 type WLAN, and wherein the network configuration message includes a security key.

13. A system for configuring a device on a local area network (LAN) comprising:

a remote control comprising an infrared (IR) transmitter, a processor, memory coupled to the processor, a security number stored in the memory, and a setup button for causing the stored security number to be transmitted by the IR transmitter; and

a device for configuration on the network comprising an IR receiver, a processor, memory coupled to the processor, and a computer program responsive to the security number transmitted by the remote control via IR for decrypting a network configuration message transmitted on the network.

14. The system of claim 13 wherein the security number stored in the memory of the remote control is stored in the memory only for a time-out period.

15. The system of claim 13 wherein the remote control includes a computer program stored in the remote control'"'"'s memory for generating the security number.

16. The system of claim 15 wherein the remote-control computer program comprises a random-number generation algorithm and the security number is the random number.

17. The system of claim 13 wherein the LAN is a powerline communications (PLC) network.

18. The system of claim 13 wherein the LAN is a wireless local area network (WLAN) and the nonmember device includes a wireless transceiver for receiving the network configuration message.

19. The system of claim 18 wherein the WLAN is a IEEE 802.11 type WLAN, and wherein the network configuration message for decryption includes a security key.

20. A method for setting up an electronic device on a local area network (LAN) comprising:

generating a security number in a remote control;

storing the security number in the remote control for a time-out period;

before expiration of the time-out period, transmitting the security number from the remote control to the electronic device via infrared (IR) transmission;

storing the IR-transmitted security number in the electronic device;

readying the electronic device for receipt of encrypted network setup parameters transmitted on the network;

decrypting the encrypted network setup parameters in the electronic device using the stored security number as the decryption key; and

storing the decrypted network setup parameters in the electronic device.

21. The method of claim 20 wherein generating a security number comprises generating a random number.

22. The method of claim 20 wherein storing the security number in the remote control for a time-out period comprises storing the security number for a time-out period corresponding substantially to the time between a first transmission of the security number and a second transmission of the security number.

23. The method of claim 20 wherein the LAN is an IEEE 802.11 type wireless local area network (WLAN), and wherein the encrypted network setup parameters include a security key.

24. The method of claim 20 wherein the LAN includes a network member device containing the network setup parameters and, before expiration of the time-out period:

transmitting from the remote control to the member device via infrared (IR) transmission the security number;

storing the IR-transmitted security number in the member device;

encrypting the network setup parameters in the member device using the stored security number as the encryption key; and

transmitting on the network the encrypted network setup parameters.

25. The method of claim 24 wherein transmitting the security number to the member device comprises transmitting the security number to the member device and the electronic device simultaneously.

26. The method of claim 20 wherein the LAN includes a network member device containing the network setup parameters and, if the time-out period has expired:

generating a new security number in the remote control;

storing the new security number in the remote control for said time-out period;

transmitting from the remote control to the member device via infrared (IR) transmission the new security number;

storing the IR-transmitted new security number in the member device;

encrypting the network setup parameters in the member device using the stored new security number as the encryption key; and

transmitting on the network the encrypted network setup parameters.