Automated Secure Pairing for Wireless Devices

• US 20080102793A1
• Filed: 10/31/2006
• Published: 05/01/2008
• Est. Priority Date: 10/31/2006
• Status: Active Grant

• Current Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Original Assignee: Microsoft Corporation
• Inventors: Venkatesan, Ramarathnam, Blagsvedt, Sean, Ananthanarayanan, Ganesh
• Granted Patent: US 8,103,247 B2
• Time in Patent Office: Days
• US Class Current: 455/411
• CPC Class Codes: H04L 63/18 using different networks or channels, e.g. using out of band channels cryptographic mechanisms or cryptographic arrangements for key distribution involving distinctive intermediate devices or communication paths H04L9/0827; cryptographic mechanisms or cryptographic arrangements for authentication using a plurality of channels H04L9/3215
• CPC Class Codes: H04W 12/04 Key management, e.g. using generic bootstrapping architecture [GBA]
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/50 Secure pairing of devices
• CPC Class Codes: H04W 84/18 Self-organising networks, e.g. ad-hoc networks or sensor networks

Abstract

Systems, methods, and/or techniques (“tools”) are described herein that relate to automated secure pairing for devices, and that relate to parallel downloads of content using devices. The tools for pairing the devices may perform authentication protocols that are based on addresses and on keys. The address-based authentication protocol may operate on address book entries maintained by the devices. The key-based authentication protocol may operate using a key exchange between the devices.

Claims

1. A machine-readable storage medium comprising machine-readable instructions that, when executed by the machine, cause the machine to perform a method for pairing at least two devices, the method comprising:

performing a first authentication protocol that is based on address book entries maintained by at least one of the devices; and

performing a second authentication protocol that is based on a key exchange between the devices.

2. The machine-readable storage medium of claim 1, wherein the instructions for performing the first authentication protocol include instructions for performing the first authentication protocol over a direct Bluetooth or WiFi communication link established between the devices.

3. The machine-readable storage medium of claim 1, wherein the instructions for performing the second authentication protocol include instructions for performing the second authentication protocol over an indirect communication link between the devices, wherein the indirect communication uses a third-party communication service.

4. The machine-readable storage medium of claim 1, wherein the instructions for performing the second authentication protocol include instructions for performing the second authentication protocol over an SMS link established between the devices.

5. The machine-readable storage medium of claim 1, wherein the instructions for performing the first authentication protocol include instructions for causing a first one of the devices to send a pairing request to at least a second one of the devices.

6. The machine-readable storage medium of claim 1, wherein the instructions for performing the first authentication protocol include instructions for causing a first one of the devices to send a challenge to at least a second one of the devices in response to receiving a pairing request from the second device.

7. The machine-readable storage medium of claim 6, wherein the instructions for performing the first authentication protocol include instructions for causing the first device and the second device to agree upon a secret key via an indirect communication link, and instructions for causing the second device to use the secret key to respond to the challenge.

8. The machine-readable storage medium of claim 1, wherein the instructions for performing the first authentication protocol include instructions for causing a first one of the devices to hash an identifier associated with the first device, and to send the hashed identifier to at least a second one of the devices.

9. The machine-readable storage medium of claim 1, wherein the instructions for performing the first authentication protocol include instructions for causing a first one of the devices to receive a pairing request from a second one of the devices, wherein the pairing request includes a hashed identifier associated with the second device.

10. The machine-readable storage medium of claim 9, further comprising instructions for causing the first device to search an address book, associated with the first device, for a match for the hashed identifier.

11. A machine-readable storage medium comprising machine-readable instructions that, when executed by the machine, cause the machine to perform a method for pairing at least two devices, the method comprising:

sending at least one pairing request to a target device over a direct communication link with the target device; and

sending at least one authentication request to the target device over an indirect communication link with the target device.

12. The machine-readable storage medium of claim 11, further comprising instructions for receiving a challenge from the target device over the direct communication link.

13. The machine-readable storage medium of claim 12, further comprising instructions for sending a response to the challenge over the direct communication link.

14. The machine-readable storage medium of claim 11, wherein the instructions for sending at least one pairing request include instructions for sending the pairing request via a Bluetooth communication link.

15. The machine-readable storage medium of claim 11, wherein the instructions for sending at least one authentication request include instructions for sending the authentication request via a Short Message Service (SMS) link.

16. A machine-readable storage medium comprising machine-readable instructions that, when executed by the machine, cause the machine to perform a method for pairing at least two devices, the method comprising:

receiving at least one pairing request from an initiating device over a direct communication link with the initiating device; and

receiving at least one authentication request from the initiating device over an indirect communication link with the initiating device.

17. The machine-readable storage medium of claim 16, further comprising instructions for sending a challenge to the initiating device over the direct communication link.

18. The machine-readable storage medium of claim 17, further comprising instructions for receiving a response to the challenge over the direct communication link.

19. The machine-readable storage medium of claim 16, wherein the instructions for receiving at least one pairing request include instructions for receiving the pairing request via a Bluetooth communication link.

20. The machine-readable storage medium of claim 16, wherein the instructions for receiving at least one authentication request include instructions for receiving the authentication request via a Short Message Service (SMS) link.