SYSTEM AND METHOD FOR EXCHANGING ENCRYPTION KEYS BETWEEN A MOBILE DEVICE AND A PERIPHERAL DEVICE

• US 20110280401A1
• Filed: 07/28/2011
• Published: 11/17/2011
• Est. Priority Date: 05/12/2006
• Status: Active Grant

• Current Assignee: Malikie Innovations Limited (Key Patent Innovations Limited)
• Original Assignee: Research In Motion Limited (Blackberry Limited)
• Inventors: Brown, Michael S., Brown, Michael K., Kirkup, Michael G.
• Granted Patent: US 8,855,310 B2
• Time in Patent Office: Days
• US Class Current: 380/270
• CPC Class Codes: H04L 2209/80 Wireless
• CPC Class Codes: H04L 63/061 for key exchange, e.g. in peer-to-peer networks cryptographic mechanisms or cryptographic arrangements for key agreement H04L9/0838
• CPC Class Codes: H04L 63/18 using different networks or channels, e.g. using out of band channels cryptographic mechanisms or cryptographic arrangements for key distribution involving distinctive intermediate devices or communication paths H04L9/0827; cryptographic mechanisms or cryptographic arrangements for authentication using a plurality of channels H04L9/3215
• CPC Class Codes: H04L 9/0844 with user authentication or key authentication, e.g. ElGamal, MTI, MQV-Menezes-Qu-Vanstone protocol or Diffie-Hellman protocols using implicitly-certified keys
• CPC Class Codes: H04L 9/0861 Generation of secret information including derivation or calculation of cryptographic keys or passwords
• CPC Class Codes: H04W 12/04 Key management, e.g. using generic bootstrapping architecture [GBA]
• CPC Class Codes: H04W 12/50 Secure pairing of devices
• CPC Class Codes: H04W 76/10 Connection setup
• CPC Class Codes: H04W 84/18 Self-organising networks, e.g. ad-hoc networks or sensor networks

Abstract

Embodiments of a system and method for providing additional security for data being transmitted across a wireless connection that has been established using a known wireless protocol (e.g. Bluetooth) are described. An encryption key is exchanged between a computing device (e.g. a mobile device) and a wireless peripheral device (e.g. a keyboard, a printer). In exemplary embodiments, the encryption key is generated at one of the two devices. Data associated with the encryption key is output at the one device, which can be input by the user at the other device. The encryption key is then recovered at the other device from the input, thereby completing the key exchange. The encryption key can then be used to encrypt and decrypt data transmitted over the established wireless connection, providing additional security.

Claims

1. A method of providing additional security over an established wireless connection between a computing device and a peripheral device, the method comprising:

determining that a pairing process between the computing device and the peripheral device is complete;

automatically, in response to completion of the pairing process, generating an encryption key at the computing device in a binary form;

at the computing device, converting the encryption key in the binary form into a number comprising fewer alphanumeric digits;

at the computing device, displaying the number comprising fewer alphanumeric digits on a display of the computing device, for entry at the peripheral device; and

at the computing device, at least one of encrypting data transmitted to or decrypting data received from the peripheral device over the wireless connection, using the encryption key and in accordance with an encryption algorithm.

2. The method of claim 1, wherein the pairing process is a Bluetooth pairing process.

3. The method of claim 1, wherein the encryption algorithm is a symmetric encryption algorithm.

4. The method of claim 1, wherein the number comprising fewer alphanumeric digits is a hexadecimal number.

5. The method of claim 1, further comprising generating a new encryption key at the computing device and repeating the converting and the displaying in accordance with a pre-defined schedule, without repeating the pairing process.

6. The method of claim 1, further comprising generating a new encryption key at the computing device and repeating the converting and the displaying periodically, in accordance with a pre-defined frequency, without repeating the pairing process.

7. The method of claim 1, further comprising generating a new encryption key at the computing device and repeating the converting and the displaying in response to a user request, without repeating the pairing process.

8. The method of claim 1, wherein the computing device comprises a mobile device.

9. The method of claim 1, wherein the peripheral device comprises a keyboard.

10. A computing device configured to provide additional security over an established wireless connection between the computing device and a peripheral device, the computing device comprising a processor configured to:

determine that a pairing process between the computing device and the peripheral device is complete;

automatically, in response to completion of the pairing process, generate an encryption key at the computing device in a binary form;

convert the encryption key in the binary form into a number comprising fewer alphanumeric digits;

display the number comprising fewer alphanumeric digits on a display of the computing device, for entry at the peripheral device; and

at least one of encrypt data transmitted to or decrypt data received from the peripheral device over the wireless connection, using the encryption key and in accordance with an encryption algorithm.

11. A method of providing additional security over an established wireless connection between a computing device and a peripheral device, the method comprising:

determining that a pairing process between the computing device and the peripheral device is complete;

after determining that the pairing process is complete, receiving input via the peripheral device, wherein the input is a number comprising alphanumeric digits;

at the peripheral device, converting the number into an encryption key in binary form having a greater number of alphanumeric digits; and

at the peripheral device, at least one of encrypting data transmitted to or decrypting data received from the computing device over the wireless connection, using the encryption key and in accordance with an encryption algorithm.

12. The method of claim 11, wherein the pairing process is a Bluetooth pairing process.

13. The method of claim 11, wherein the encryption algorithm is a symmetric encryption algorithm.

14. The method of claim 11, wherein the number comprising alphanumeric digits is a hexadecimal number.

15. The method of claim 11, further comprising receiving new input at the computing device and repeating the converting in accordance with a pre-defined schedule, without repeating the pairing process.

16. The method of claim 11, further comprising receiving new input at the computing device and repeating the converting periodically, in accordance with a pre-defined frequency, without repeating the pairing process.

17. The method of claim 11, further comprising receiving new input at the computing device and repeating the converting in response to a user request, without repeating the pairing process.

18. The method of claim 11, wherein the computing device comprises a mobile device.

19. The method of claim 11, wherein the peripheral device comprises a keyboard.

20. A peripheral device configured to provide additional security over an established wireless connection between a computing device and the peripheral device, the peripheral device comprising a processor configured to:

determine that a pairing process between the computing device and the peripheral device is complete;

after determining that the pairing process is complete, receive input via the peripheral device, wherein the input is a number comprising alphanumeric digits;

convert the number into an encryption key in binary form having a greater number of alphanumeric digits; and

at least one of encrypt data transmitted to or decrypt data received from the computing device over the wireless connection, using the encryption key and in accordance with an encryption algorithm.