AUTOMATIC DEVICE PAIRING

• US 20120324554A1
• Filed: 06/14/2012
• Published: 12/20/2012
• Est. Priority Date: 06/14/2011
• Status: Active Grant

• Current Assignee: Maxlinear Incorporated
• Original Assignee: Lantiq Deutschland GMBH (Intel Corporation)
• Inventors: Kim, Joon Bae, Gomez Martinez, Feliciano, Bhatt, Maulik R., Amayo, Esosa
• Granted Patent: US 9,202,042 B2
• Time in Patent Office: Days
• US Class Current: 726/6
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/445 by mutual authentication, e.g. between devices or programs
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 9/0841 involving Diffie-Hellman or related key agreement protocols
• CPC Class Codes: H04L 9/3226 using a predetermined code, e.g. password, passphrase or PIN network architectures or network communication protocols for supporting authentication of entities using passwords in a packet data network H04L63/083

Abstract

One embodiment relates to a security apparatus. The apparatus includes a security controller. The security controller is within a secure domain. The controller is configured to receive a trigger event from a first device outside the secure domain and a second trigger event. The controller is configured to automatically generate a secure password from a provisional password using a secure password provisioning protocol in response to the first trigger event and the second trigger event. The controller is also configured to pair the first device with the secure domain by establishing secure communications using the secure password.

Claims

1. A security apparatus comprising:

a security controller within a secure domain, the security controller configured to receive a first trigger event from a first device outside the secure domain and a second trigger event, to automatically generate a secure password from a provisional password using a secure password provisioning protocol in response to the first trigger event and the second trigger event, and to pair the first device with the secure domain by establishing secure communications with the secure password.

2. The apparatus of claim 1, wherein the secure domain is part of a home network.

3. The apparatus of claim 2, wherein the home network complies with the G.hn home networking standard.

4. The apparatus of claim 2, wherein the provisional password is received from the first device.

5. The apparatus of claim 3, wherein the provisional password is a secret number.

6. The apparatus of claim 1, further comprising a domain master within the secure domain, wherein the domain master maintains a secure domain name for the secure domain.

7. The apparatus of claim 6, wherein the domain master is configured to broadcast the secure domain name.

8. The apparatus of claim 6, wherein the domain master pairs devices logically upon completion.

9. The apparatus of claim 1, wherein the first device is configured to select the secure domain from a list of available secure domains according to capabilities.

10. The apparatus of claim 1, wherein the first device is configured to await confirmation prior to utilizing the secure domain password to establish secure communications with the secure domain.

11. The apparatus of claim 1, wherein the security controller includes a button to confirm that the password can be provided to the first device.

12. The apparatus of claim 1, wherein the security controller is configured to provide the secure password to the first device upon receiving confirmation.

13. A device comprising:

a processor; and

a memory including processor executable instructions, the instructions when executed by the processor to;

broadcast a message identifying a secure domain;

receive a message indicating that a device is ready to perform secure password provisioning;

automatically share a provisional password; and

utilize the provisional password to perform the secure password provisioning and generate a secure domain password.

14. The device of claim 13, wherein the processor executable instructions further include communicating the secure domain password.

15. The device of claim 14, wherein the processor executable instructions further include establishing secure communications with the domain using the secure domain password.

16. The device of claim 13, wherein the processor executable instructions further include receiving user confirmation prior to establishing securing communications using the secure domain password.

17. A method of establishing a secure architecture, the method comprising:

identifying a secure domain;

triggering a request to join the secure domain;

sharing a provisional password;

performing a secure password provisioning protocol to generate a secure password;

providing the secure password; and

establishing secure communications using the secure password.

18. The method of claim 17, wherein identifying the secure domain includes broadcasting an identification for the secure domain by a domain controller and selecting the secure domain.

19. The method of claim 17, wherein identifying the secure domain includes selecting the secure domain from a list of available domains.

20. The method of claim 17, wherein triggering a request to join the secure domain comprises pushing a button on a provisional device.

21. The method of claim 17, wherein triggering a request to join the secure domain comprises pushing a button on a provisional device and a button on a second device already within the secure domain.

22. The method of claim 17, wherein sharing a provisional password comprises providing the provisional password for a relatively short time period.

23. The method of claim 17, further comprising providing confirmation prior to establishing secure communications.

24. The method of claim 17, further comprising storing the secure password.

25. The method of claim 17, wherein establishing secure communications comprises pairing a provisional device with a second device within the secure domain.

26. The method of claim 17, wherein establishing secure communications comprises pairing a provisional device with a second device and a third device.