METHOD OF TRIGGERING A KEY DELIVERY FROM A MESH KEY DISTRIBUTOR

• US 20100329465A1
• Filed: 06/29/2009
• Published: 12/30/2010
• Est. Priority Date: 06/29/2009
• Status: Active Grant

• Current Assignee: Strong Force IoT Portfolio 2016, LLC (Strong Force Intellectual Capital, LLC)
• Original Assignee: Motorola, Inc. (Motorola Solutions, Inc.)
• Inventors: Braskich, Anthony J., Emeott, Stephen P.
• Granted Patent: US 9,451,452 B2
• Time in Patent Office: Days
• US Class Current: 380/281
• CPC Class Codes: H04L 2209/80 Wireless network architectures or network communication protocols for wireless network security H04W12/00
• CPC Class Codes: H04L 2463/061 applying further key derivation, e.g. deriving traffic keys from a pair-wise master key cryptographic mechanisms or cryptographic arrangements for generation of secret information including derivation or calculation of cryptographic keys or passwords H04L9/0861
• CPC Class Codes: H04L 63/062 for key distribution, e.g. centrally by trusted party cryptographic mechanisms or cryptographic arrangements for key distribution involving a central third party H04L9/0819
• CPC Class Codes: H04L 63/065 for group communications cryptographic mechanisms or cryptographic arrangements for key management involving conference or group key H04L9/0833
• CPC Class Codes: H04L 9/0836 using tree structure or hierarchical structure
• CPC Class Codes: H04L 9/321 involving a third party or a trusted authority
• CPC Class Codes: H04W 12/041 Key generation or derivation
• CPC Class Codes: H04W 12/0431 Key distribution or pre-distribution; Key agreement
• CPC Class Codes: H04W 12/0433 Key management protocols
• CPC Class Codes: H04W 84/18 Self-organising networks, e.g. ad-hoc networks or sensor networks

Abstract

A mesh station applying for access to a network includes a list of peer stations in messages of an authenticated key establishment protocol. A mesh key distributor derives a key delivery key and generates a top level key, and then delivers the top level key to the mesh station. Following the key establishment protocol, the mesh key distributor also creates pairwise keys for use between the mesh station and the peer stations listed in its peer list. The list of peers permits the identifier for the peer to be bound into the derived key, which helps ensure that the key used between each pair of peers is unique. Once the mesh key distributor finishes creating a key for one of the stations on the peer list, the mesh key distributor sends a message to the peer to initiate a key push.

Claims

1. A method of triggering a key delivery from a mesh key distributor, the method comprising:

transmitting at least one security message from a mesh station to the mesh key distributor, wherein the at least one security message includes a list of peer station identifiers;

deriving a peer key by the mesh key distributor for use between a peer station identified in the list of peer station identifiers and the mesh station; and

transmitting a key push message from the mesh key distributor to the peer station to initiate a key push for the derived peer key.

2. The method as claimed in claim 1, wherein the at least one security message comprises a security association message.

3. The method as claimed in claim 2, wherein the at least one security association message comprises at least one message of a key agreement protocol.

4. The method as claimed in claim 1, further comprising prior to the transmitting of the security message:

sharing a master key between the mesh station and the mesh key distributor.

5. The method as claimed in claim 1, wherein the derived peer key is a unique key between the peer and the mesh station.

6. The method as claimed in claim 5, further comprising:

deriving a plurality of unique peer keys, each peer key associated with one peer identified in the list of peer station identifiers.

7. The method as claimed in claim 6, further comprising:

transmitting a key push message from the mesh key distributor to each of the peer stations to initiate a key push for each of the derived peer keys.

8. The method as claimed in claim 1, further comprising:

executing a session key establishment protocol between the mesh station and the peer station to secure a peer link.

9. The method as claimed in claim 1, further comprising prior to the transmitting of the at least one security message:

generating a top level key by the mesh key distributor.

10. The method as claimed in claim 9, wherein the top level key is generated based upon one or more contributions of the mesh key distributor and one or more contributions of the mesh station.

11. The method as claimed in claim 9, wherein the top level key comprises a mesh root key.

12. The method as claimed in claim 9, further comprising:

delivering the top level key from the mesh key distributor to the mesh station.

13. The method as claimed in claim 12, wherein the peer key is derived by the mesh key distributor using the top level key, the method further comprising:

deriving the peer key at the mesh station using the top level key.