SECURE PAIRING OF NETWORKED DEVICES

• US 20080160914A1
• Filed: 12/29/2006
• Published: 07/03/2008
• Est. Priority Date: 12/29/2006
• Status: Active Grant

• Current Assignee: Linksys Holdings Incorporated (Hon Hai Precision Industry Co., Ltd.)
• Original Assignee: Belkin International Incorporated (Hon Hai Precision Industry Co., Ltd.)
• Inventors: Huotari, Allen J., McRae, Matthew B.
• Granted Patent: US 9,060,267 B2
• Time in Patent Office: Days
• US Class Current: 455/41.2
• CPC Class Codes: H04W 12/04 Key management, e.g. using generic bootstrapping architecture [GBA]
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 12/50 Secure pairing of devices
• CPC Class Codes: H04W 4/00 Services specially adapted for wireless communication networks; Facilities therefor
• CPC Class Codes: H04W 76/10 Connection setup
• CPC Class Codes: H04W 76/11 Allocation or use of connection identifiers
• CPC Class Codes: H04W 76/14 Direct-mode setup
• CPC Class Codes: H04W 84/12 WLAN [Wireless Local Area Networks]

Abstract

In one embodiment, a secure communication is initiated between two devices by generating a pairing message from a predetermined static identification on the first device, transmitting the pairing message to the second device, generating a pairing identification from the static identification, and initiating a secure communication between the first and second device if the pairing message corresponds with the pairing identification.

Claims

1. A method comprising:

obtaining a predetermined static identification from a first device;

generating a first pairing identification from the static identification;

transmitting a pairing message containing the pairing identification to a second device;

receiving a second pairing identification generated by the second device from the static identification; and

initiating a secure communication between the first device and a second devices if the pairing message corresponds to the second pairing identification.

2. The method of claim 1, wherein the static identification is located on the first device.

3. The method of claim 2, wherein the static identification comprises a number or letter from a MAC ID.

4. The method of claim 1, wherein generating the first pairing identification is by the first device.

5. The method of claim 1, wherein the pairing identification is the same as the static identification.

6. The method of claim 1, wherein the generating comprises:

pressing a button; and

releasing the button when a displayed identification matches the static identification.

7. The method of claim 1, wherein the generating comprises inputting the static identification on a keypad.

8. The method of claim 1, wherein the generating comprises transferring the static identification over an out-of-band interface.

9. The method of claim 1, wherein the pre-determined static information corresponds to a pre-assigned client identification.

10. The method of claim 1, wherein the pre-determined static information corresponds to a registrar-assigned identification.

11. The method of claim 1, wherein the static identification is used as a seed value.

12. An apparatus comprising:

a first interface configured to receive a pairing message corresponding to a predetermined static identification from an enrollee device;

a memory configured to store the static identification;

a second interface configured to generate a pairing identification from the static information; and

a processor configured to initiate a secure communication with the enrollee device if the pairing message corresponds with the pairing identification.

13. The apparatus of claim 12, wherein the pre-determined static information is located on an outer surface of the enrollee device.

14. The apparatus of claim 13, wherein the pre-determined static information comprises a single digit or letter from a MAC ID.

15. A method comprising:

receiving a pairing message generated from a pre-determined static identification on a first device;

generating a pairing identification from the static identification; and

initiating a secure communication between the first device and a second device if the pairing message corresponds with the pairing identification.

16. The method of claim 15, further comprising providing an indication to the first device if a secure communication is not initiated.

17. The method of claim 15, further comprising providing an indication to the first device if a secure communication is initiated.

18. The method of claim 15, wherein the static identification comprises a single element from a MAC ID.

19. The method of claim 15, further comprising transmitting a pairing request to the first device.

20. An apparatus comprising:

a first interface configured to transmit and receive information;

a pre-determined static information;

a second interface configured to generate a pairing message from the static information; and

a processor configured to initiate a secure communication with a registrar device if the pairing message corresponds with a pairing identification generated by the registrar device from the static information.

21. The apparatus of claim 20, wherein the pre-determined static information is located on an outer surface of the enrollee device.

22. The apparatus of claim 20, wherein the pre-determined static information comprises a single digit or letter from a MAC ID.

23. The apparatus of claim 20, wherein the pre-determined static information corresponds to a pre-assigned enrollee identification.

24. The apparatus of claim 20, wherein the pre-determined static information corresponds to a registrar-assigned identification.

25. The apparatus of claim 20, wherein the static identification is used as a seed value.

26. A system comprising:

means for receiving a pairing message generated from a pre-determined static identification on a first device;

means for generating a pairing identification from the static identification; and

means for initiating a secure communication between the first device and a second device if the pairing message corresponds with the pairing identification.