METHODS ESTABLISHING A SYMMETRIC ENCRYPTION KEY AND DEVICES THEREOF

• US 20100313025A1
• Filed: 06/07/2010
• Published: 12/09/2010
• Est. Priority Date: 06/05/2009
• Status: Active Grant

• Current Assignee: Rochester Institute of Technology
• Original Assignee: Rochester Institute of Technology
• Inventors: Tsouri, Gill Rafael
• Granted Patent: US 8,959,348 B2
• Time in Patent Office: Days
• US Class Current: 713/171
• CPC Class Codes: H04L 2209/08 Randomization, e.g. dummy operations or using noise
• CPC Class Codes: H04L 2209/80 Wireless
• CPC Class Codes: H04L 2209/88 Medical equipments
• CPC Class Codes: H04L 9/0838 Key agreement, i.e. key establishment technique in which a shared key is derived by parties as a function of information contributed by, or associated with, each of these network architectures or network communication protocols for key exchange in a packet data network H04L63/061
• CPC Class Codes: H04L 9/0852 Quantum cryptography transmission systems employing electromagnetic waves other than radio waves, e.g. light, infrared H04B10/00; wavelength-division multiplex systems H04J14/02; WDM arrangements H04J14/03
• CPC Class Codes: H04L 9/0891 Revocation or update of secret information, e.g. encryption key update or rekeying
• CPC Class Codes: H04L 9/12 Transmitting and receiving encryption devices synchronised or initially set up in a particular manner

Abstract

A method, computer readable medium, and an apparatus for establishing a symmetric encryption key includes determining at one of a plurality of communication devices a first phase difference based on a first transmission from another one of the plurality of communication devices. A first new encryption key is generated based on the determined first phase difference at the one of the plurality of communication devices. At another one of the plurality of communication devices a second phase difference is generated based on a second transmission from the one of the plurality of communication devices. A second new encryption key is generated based on the determined second phase difference at the another one of the plurality of communication devices. Authenticity of the generated first new encryption key and the generated second new encryption key is determined. Communication between the one of the plurality of communication devices and the another one of the plurality of communication devices is established when the generated first new encryption key and the generated second new encryption key are determined to be authenticated.

Claims

1. A method for establishing a symmetric encryption key, the method comprising:

determining at one of a plurality of communication devices a first phase difference based on a first transmission from another one of the plurality of communication devices;

generating a first new encryption key based on the determined first phase difference at the one of the plurality of communication devices;

determining at the another one of the plurality of communication devices a second phase difference based on a second transmission from the one of the plurality of communication devices;

generating a second new encryption key based on the determined second phase difference at the another one of the plurality of communication devices;

determining authenticity of the generated first new encryption key and the generated second new encryption key; and

establishing communication between the one of the plurality of communication devices and the another one of the plurality of communication devices when the generated first new encryption key and the generated second new encryption key are determined to be authenticate.

2. The method as set forth in claim 1 wherein the determining at one of a plurality of communication devices further comprises determining the first phase difference between a first local carrier signal at the one of the plurality of communication devices and a first received carrier signal of the first transmission from the another one of the plurality of communication devices;

wherein the determining at the another one of the plurality of communication devices further comprises determining the second phase difference between a second local carrier signal at the another one of the plurality of communication devices and a second received carrier signal of the second transmission from the one of the plurality of communication devices.

3. The method as set forth in claim 2 further comprising filtering the first received carrier signal of the first transmission from the another one of the plurality of communication devices and filtering the second received carrier signal of the second transmission from the one of the plurality of communication devices.

4. The method as set forth in claim 1 wherein the determining at the one of a plurality of communication devices further comprises determining the first phase difference based on in-phase and quadrature components associated with at least a portion of one data packet from the another one of the plurality of communication devices;

wherein the determining at the another one of the plurality of communication devices further comprises determining the second phase difference based on in-phase and quadrature components associated with at least a portion of one other data packet from the one of the plurality of communication devices.

5. The method as set forth in claim 4 wherein the at least a portion of one data packet is a preamble of the one data packet and wherein the at least a portion of one other data packet is a preamble of the one other data packet.

6. The method as set forth in claim 4 further comprising determining if the one packet of data is received without error, wherein the at least a portion of one data packet comprises the entire data packet if the one packet of data is determined to be received without error.

7. The method as set forth in claim 1 wherein the generating the first new encryption key further comprises quantizing the first determined phase difference to generate the first new encryption key and the generating the second new encryption key further comprises quantizing the second determined phase difference to generate the second new encryption key.

8. The method as set forth in claim 7 wherein the generating the first new encryption key further comprises determining at the one of the plurality of communication devices additional first phase differences based on additional first transmissions until a first number of bits for the first new encryption key are generated;

wherein the generating the second new encryption key further comprises determining at the another one of the plurality of communication devices additional second phase differences based on additional second transmissions until a second number of bits for the second new encryption key are generated.

9. The method as set forth in claim 1 wherein the determining authenticity further comprises:

transmitting from the one of the plurality of communication devices an authentication request transmission based on a first current encryption key and the first new encryption key to the another one of the plurality of communication devices;

transmitting from the another one of the plurality of communication devices an authentication response transmission based on a second current encryption key and the second new encryption key to the another one of the plurality of communication devices; and

determining at least one of the one of the plurality of communication devices and the another one of the plurality of communication devices whether the authentication response signal to the authentication request signal from the another one of the plurality of communication devices is valid based on the first current encryption key and the first new encryption key

10. The method as set forth in claim 1 further comprising:

transmitting at the one of a plurality of communication devices an initiation request transmission based on the first current encryption key at the one of a plurality of communication devices to the another one of the plurality of communication devices;

transmitting at the another one of the plurality of communication devices an initiation response transmission based on the initiation request signal and a second current encryption key at the another one of a plurality of communication devices to the one of the plurality of communication devices;

determining at least one of the one of the plurality of communication devices and the another one of the plurality of communication devices whether the initiation response transmission from the another one of the plurality of communication devices is valid based on the first current encryption key to initiate the determination of the first and second phase differences and the generation of the first and second new encryption keys.

11. The method as set forth in claim 1 wherein the authentication response signal is determined valid when the first current encryption key is substantially the same as the second current encryption key and the first new encryption key is substantially the same as the second new encryption key.

12. The method as set forth in claim 1 further comprising:

identifying when the determined first phase difference decorrelates from the determined second phase difference; and

generating an updated first new encryption key and an updated second new encryption key when decorrelation is identified.

13. A computer readable medium having stored thereon instructions for establishing a symmetric encryption key comprising machine executable code which when executed by at least one processor, causes the processor to perform steps comprising:

determining at one of a plurality of communication devices a first phase difference based on a first transmission from another one of the plurality of communication devices;

generating a first new encryption key based on the determined first phase difference at the one of the plurality of communication devices;

determining at the another one of the plurality of communication devices a second phase difference based on a second transmission from the one of the plurality of communication devices;

generating a second new encryption key based on the determined second phase difference at the another one of the plurality of communication devices;

determining authenticity of the generated first new encryption key and the generated second new encryption key; and

establishing communication between the one of the plurality of communication devices and the another one of the plurality of communication devices when the generated first new encryption key and the generated second new encryption key are determined to be authenticate.

14. The medium as set forth in claim 13 wherein the determining at one of a plurality of communication devices further comprises determining the first phase difference between a first local carrier signal at the one of the plurality of communication devices and a first received carrier signal of the first transmission from the another one of the plurality of communication devices;

wherein the determining at the another one of the plurality of communication devices further comprises determining the second phase difference between a second local carrier signal at the another one of the plurality of communication devices and a second received carrier signal of the second transmission from the one of the plurality of communication devices.

15. The medium as set forth in claim 14 further comprising filtering the first received carrier signal of the first transmission from the another one of the plurality of communication devices and filtering the second received carrier signal of the second transmission from the one of the plurality of communication devices.

16. The medium as set forth in claim 13 wherein the determining at the one of a plurality of communication devices further comprises determining the first phase difference based on in-phase and quadrature components associated with at least one data packet from the another one of the plurality of communication devices;

wherein the determining at the another one of the plurality of communication devices further comprises determining the second phase difference based on in-phase and quadrature components associated with at least one other data packet from the one of the plurality of communication devices.

17. The medium as set forth in claim 16 wherein the at least a portion of one data packet is a preamble of the one data packet and wherein the at least a portion of one other data packet is a preamble of the one other data packet.

18. The medium as set forth in claim 16 further comprising determining if the one packet of data is received without error, wherein the at least a portion of one data packet comprises the entire data packet if the one packet of data is determined to be received without error.

19. The medium as set forth in claim 13 wherein the generating the first new encryption key further comprises quantizing the first determined phase difference to generate the first new encryption key and the generating the second new encryption key further comprises quantizing the second determined phase difference to generate the second new encryption key.

20. The medium as set forth in claim 19 wherein the generating the first new encryption key further comprises determining at the one of the plurality of communication devices additional first phase differences based on additional first transmissions until a first number of bits for the first new encryption key are generated;

wherein the generating the second new encryption key further comprises determining at the another one of the plurality of communication devices additional second phase differences based on additional second transmissions until a second number of bits for the second new encryption key are generated.

21. The medium as set forth in claim 13 wherein the determining authenticity further comprises:

transmitting from the one of the plurality of communication devices an authentication request transmission based on a first current encryption key and the first new encryption key to the another one of the plurality of communication devices;

transmitting from the another one of the plurality of communication devices an authentication response transmission based on a second current encryption key and the second new encryption key to the another one of the plurality of communication devices; and

determining at least one of the one of the plurality of communication devices and the another one of the plurality of communication devices whether the authentication response signal to the authentication request signal from the another one of the plurality of communication devices is valid based on the first current encryption key and the first new encryption key

22. The medium as set forth in claim 13 further comprising:

transmitting at the one of a plurality of communication devices an initiation request transmission based on the first current encryption key at the one of a plurality of communication devices to the another one of the plurality of communication devices;

transmitting at the another one of the plurality of communication devices an initiation response transmission based on the initiation request signal and a second current encryption key at the another one of a plurality of communication devices to the one of the plurality of communication devices;

determining at least one of the one of the plurality of communication devices and the another one of the plurality of communication devices whether the initiation response transmission from the another one of the plurality of communication devices is valid based on the first current encryption key to initiate the determination of the first and second phase differences and the generation of the first and second new encryption keys.

23. The medium as set forth in claim 13 wherein the authentication response signal is determined valid when the first current encryption key is substantially the same as the second current encryption key and the first new encryption key is substantially the same as the second new encryption key.

24. The medium as set forth in claim 13 further comprising:

identifying when the determined first phase difference decorrelates from the determined second phase difference; and

generating an updated first new encryption key and an updated second new encryption key when decorrelation is identified.

25. A secure communication system comprising:

a first phase determination device that determines at one of a plurality of communication devices a first phase difference based on a first transmission from another one of the plurality of communication devices;

a second phase determination device that determines at the another one of the plurality of communication devices a second phase difference based on a second transmission from the one of the plurality of communication devices;

a first key generation device that generates a first new encryption key based on the determined first phase difference at the one of the plurality of communication devices;

a second key generation device that generates a second new encryption key based on the determined second phase difference at the another one of the plurality of communication devices;

an authentication processing system that determines authenticity of the generated first new encryption key and the generated second new encryption key; and

a communication system that establishes communication between the one of the plurality of communication devices and the another one of the plurality of communication devices when the generated first new encryption key and the generated second new encryption key are determined to be authenticate.

26. The system as set forth in claim 25 wherein the first phase determination device determines the first phase difference between a first local carrier signal at the one of the plurality of communication devices and a first received carrier signal of the first transmission from the another one of the plurality of communication devices;

wherein the second phase determination device determines the second phase difference between a second local carrier signal at the another one of the plurality of communication devices and a second received carrier signal of the second transmission from the one of the plurality of communication devices.

27. The system as set forth in claim 26 further comprising a filtering device that filters the first received carrier signal of the first transmission from the another one of the plurality of communication devices and another filtering devices that filters the second received carrier signal of the second transmission from the one of the plurality of communication devices.

28. The system as set forth in claim 25 wherein the first phase determination device determines the first phase difference based on in-phase and quadrature components associated with at least one data packet from the another one of the plurality of communication devices;

wherein the first phase determination device determines the second phase difference based on in-phase and quadrature components associated with at least one other data packet from the one of the plurality of communication devices.

29. The system as set forth in claim 28 wherein the at least a portion of one data packet is a preamble of the one data packet and wherein the at least a portion of one other data packet is a preamble of the one other data packet.

30. The system as set forth in claim 28 further comprising an error detection system that determines if the one packet of data is received without error, wherein the at least a portion of one data packet comprises the entire data packet if the one packet of data is determined to be received without error.

31. The system as set forth in claim 25 wherein the first key generation device quantizes the first determined phase difference to generate the first new encryption key and the second key generation device quantizes the second determined phase difference to generate the second new encryption key.

32. The system as set forth in claim 31 wherein the first key generation device determines at the one of the plurality of communication devices additional first phase differences based on additional first transmissions until a first number of bits for the first new encryption key are generated;

wherein the generating the second new encryption key further comprises determining at the another one of the plurality of communication devices additional second phase differences based on additional second transmissions until a second number of bits for the second new encryption key are generated.

33. The system as set forth in claim 25 wherein the authentication processing system transmits from the one of the plurality of communication devices an authentication request transmission based on a first current encryption key and the first new encryption key to the another one of the plurality of communication devices, transmits from the another one of the plurality of communication devices an authentication response transmission based on a second current encryption key and the second new encryption key to the another one of the plurality of communication devices, and determines at least one of the one of the plurality of communication devices and the another one of the plurality of communication devices whether the authentication response signal to the authentication request signal from the another one of the plurality of communication devices is valid based on the first current encryption key and the first new encryption key

34. The system as set forth in claim 25 wherein the communication system transmits at the one of a plurality of communication devices an initiation request transmission based on the first current encryption key at the one of a plurality of communication devices to the another one of the plurality of communication devices, transmits at the another one of the plurality of communication devices an initiation response transmission based on the initiation request signal and a second current encryption key at the another one of a plurality of communication devices to the one of the plurality of communication devices, and determines at least one of the one of the plurality of communication devices and the another one of the plurality of communication devices whether the initiation response transmission from the another one of the plurality of communication devices is valid based on the first current encryption key to initiate the determination of the first and second phase differences and the generation of the first and second new encryption keys.

35. The system as set forth in claim 25 wherein the authentication processing system determines the authentication response signal is valid when the first current encryption key is substantially the same as the second current encryption key and the first new encryption key is substantially the same as the second new encryption key.

36. The system as set forth in claim 25 further comprising a monitoring device that identifies when the determined first phase difference decorrelates from the determined second phase difference and generates an updated first new encryption key and an updated second new encryption key when decorrelation is identified.