Systems and methods for automatic secret generation and distribution for secure systems

• US 20070143838A1
• Filed: 12/21/2005
• Published: 06/21/2007
• Est. Priority Date: 12/21/2005
• Status: Active Grant

• Current Assignee: Panasonic Corporation (Panasonic Holdings Corporation)
• Original Assignee: Panasonic Corporation (Panasonic Holdings Corporation)
• Inventors: Eastham, Bryant, Milligan, Thomas
• Granted Patent: US 8,281,386 B2
• Time in Patent Office: Days
• US Class Current: 726/15
• CPC Class Codes: H04L 63/062 for key distribution, e.g. centrally by trusted party cryptographic mechanisms or cryptographic arrangements for key distribution involving a central third party H04L9/0819
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32

Abstract

An authentication program on a network authenticator establishes a secure communication channel with an embedded device. The authentication program receives security credentials from an embedded device. The authentication program receives from the embedded device via the secure communication channel either a secret for the embedded device or a request to generate the secret for the embedded device. The authentication program registers the secret for the embedded device.

Claims

1. A method for automatic secret generation and distribution for secure systems, the method being implemented by an authentication program on a network authenticator, the method comprising:

establishing a secure communication channel with an embedded device;

receiving security credentials from the embedded device;

receiving from the embedded device via the secure communication channel either a secret for the embedded device or a request to generate the secret for the embedded device; and

registering the secret for the embedded device.

2. The method of claim 1, wherein the network authenticator receives the request to generate the secret for the embedded device, and further comprising generating the secret for the embedded device in response to the request.

3. The method of claim 2, further comprising transmitting the secret to the embedded device via the secure communication channel.

4. The method of claim 1, wherein the network authenticator receives the secret for the embedded device, and wherein the secret was generated by the embedded device.

5. The method of claim 1, further comprising:

receiving security credentials from the embedded device; and

determining whether the security credentials are valid.

6. The method of claim 5, further comprising, if the security credentials are not valid, discontinuing communication with the embedded device.

7. The method of claim 5, further comprising determining whether the security credentials have previously been provided to the network authenticator.

8. The method of claim 7, further comprising, if the security credentials have previously been provided to the network authenticator, discontinuing communication with the embedded device.

9. The method of claim 1, further comprising receiving device identification for the embedded device.

10. The method of claim 9, wherein registering the secret comprises associating the secret with the device identification.

11. A network authenticator that is configured to implement a method for automatic secret generation and distribution for secure systems, the network authenticator comprising:

a processor;

memory in electronic communication with the processor;

instructions stored in the memory, the instructions being executable to implement a method comprising;

establishing a secure communication channel with an embedded device;

receiving security credentials from the embedded device;

receiving from the embedded device via the secure communication channel either a secret for the embedded device or a request to generate the secret for the embedded device; and

registering the secret for the embedded device.

12. The network authenticator of claim 11, wherein the network authenticator receives the request to generate the secret for the embedded device, and wherein the method further comprises generating the secret for the embedded device in response to the request.

13. The network authenticator of claim 12, wherein the method further comprises transmitting the secret to the embedded device via the secure communication channel.

14. The network authenticator of claim 11, wherein the network authenticator receives the secret for the embedded device, and wherein the secret was generated by the embedded device.

15. The network authenticator of claim 11, wherein the method further comprises:

receiving security credentials from the embedded device; and

determining whether the security credentials are valid.

16. A computer-readable medium comprising executable instructions for implementing a method for automatic secret generation and distribution for secure systems, the method being implemented by an authentication program on a network authenticator, the method comprising:

establishing a secure communication channel with an embedded device;

receiving security credentials from the embedded device;

receiving from the embedded device via the secure communication channel either a secret for the embedded device or a request to generate the secret for the embedded device; and

registering the secret for the embedded device.

17. The computer-readable medium of claim 16, wherein the network authenticator receives the request to generate the secret for the embedded device, and wherein the method further comprises generating the secret for the embedded device in response to the request.

18. The computer-readable medium of claim 17, wherein the method further comprises transmitting the secret to the embedded device via the secure communication channel.

19. The computer-readable medium of claim 16, wherein the network authenticator receives the secret for the embedded device, and wherein the secret was generated by the embedded device.

20. The computer-readable medium of claim 16, wherein the method further comprises:

receiving security credentials from the embedded device; and

determining whether the security credentials are valid.

21. The computer-readable medium of claim 20, wherein the method further comprises determining whether the security credentials have previously been provided to the network authenticator.

22. The computer-readable medium of claim 21, wherein the method further comprises, if the security credentials have previously been provided to the network authenticator, discontinuing communication with the embedded device.