System and Method of Using a Signed GUID

• US 20140258727A1
• Filed: 03/08/2013
• Published: 09/11/2014
• Est. Priority Date: 03/08/2013
• Status: Active Grant

• Current Assignee: Ademco Inc. (Resideo Technologies, Inc.)
• Original Assignee: Honeywell International Inc.
• Inventors: SCHMIT, Thomas Paul, Schmidt, Mark H., Probin, John Robert, Markham, Tom Richard, Millien, Jean U., Podolsky, Kerry Warren
• Granted Patent: US 8,972,730 B2
• Time in Patent Office: Days
• US Class Current: 713/182
• CPC Class Codes: G06F 21/445 by mutual authentication, e.g. between devices or programs

Abstract

A method and apparatus wherein the method includes the steps of generating a globally unique identifier (GUID) for a security system appliance, saving a public key and private key of the security system appliance in a memory of the security system appliance, a manufacturer of the security system appliance generating a signed version of the GUID and the public key, saving the signed version of the GUID and public key in the memory of the security system appliance, the security system appliance sending a registration message including the signed version of the GUID and public key to a security system server and the security system server authenticating the security system appliance using the signed version of the GUID and public key of the security system appliance and a public key of the manufacturer.

Claims

1. A method comprising:

generating a globally unique identifier (GUID) for a security system appliance;

saving a public key and private key of the security system appliance in a memory of the security system appliance wherein the private and public keys are mathematically linked via an asymmetric cipher;

a manufacturer of the security system appliance generating a signed version of the GUID and the public key using a private key of a manufacturer where the private key and a public key of the manufacturer are mathematically linked via an asymmetric cipher;

saving the signed version of the GUID and public key in the memory of the security system appliance;

the security system appliance sending a registration message including the signed version of the GUID and public key to a security system server upon activation of the security system appliance; and

the security system server authenticating the security system appliance using the signed version of the GUID and public key of the security system appliance and the public key of the manufacturer.

2. The method as in claim 1 further comprising saving a public key of the security system server in the appliance.

3. The method as in claim 1 further comprising the security system server setting up a secure connection with the appliance.

4. The method as in claim 3 further comprising the server generating a pairwise symmetric key that is used for communicating with the appliance.

5. The method as in claim 4 further comprising the server encrypting the pairwise symmetric key with the public key of the appliance.

6. The method as in claim 5 further comprising the server encrypting the pairwise symmetric key previously encrypted with the public key of the appliance with the private key of the server.

7. The method of claim 6 further comprising the server sending the pairwise symmetric key encrypted with the public key of the appliance and private key of the server to the appliance.

8. An apparatus comprising:

a security system appliance, the security system appliance further comprising a globally unique identifier (GUID), a public key and private key saved in a memory of the security system appliance, wherein the public and private keys are mathematically linked via an asymmetric cipher;

a signed version of the GUID and private key of the security system appliance generated by a manufacturer of the security system appliance using a private key wherein the private key and a public key of the manufacturer are mathematically linked via an asymmetric cipher and wherein the signed GUID and private key are saved in the memory of the security system appliance; and

a processor of the security system appliance that transmits a registration message including the signed version of the GUID and public key upon activation of the security system appliance.

9. The apparatus as in claim 8 further comprising a security system server, the security system server authenticating the security system appliance using the signed version of the GUID and public key of the security system appliance and the public key of the manufacturer.

10. The apparatus as in claim 8 further comprising a public key of the security system server save in a memory of the appliance.

11. The apparatus as in claim 10 further comprising the security system server setting up a secure connection with the appliance.

12. The apparatus as in claim 11 further comprising a processor of the server that generates a pairwise symmetric key that is used for communicating with the appliance.

13. The apparatus as in claim 12 further comprising a processor of the server that encrypts the pairwise symmetric key with the public key of the appliance.

14. The apparatus as in claim 13 further comprising a processor of the server that encrypts the pairwise symmetric key previously encrypted with the public key of the appliance with the private key of the server.

15. The apparatus of claim 14 further comprising a processor of the server that sends the pairwise symmetric key encrypted with the public key of the appliance and private key of the server to the appliance.

16. The apparatus as in claim 15 wherein the appliance further comprises a controller located in a secure area of the security system.

17. The apparatus as in claim 16 further comprising a processor of the controller that receives a registration message from a remote appliance of the controller where the remote appliance further comprises one of a sensor, a camera and a user interface.

18. The apparatus as in claim 17 further comprising a processor of the controller that encrypts the registration message from the remote controller with the pairwise symmetric key and send the encrypted registration message to the server.

19. The apparatus as in claim 18 further comprising a processor of the server that authenticates the remote appliance via the registration message from the remote appliance.

20. An apparatus comprising:

a security system appliance, the security system appliance further comprising a globally unique identifier (GUID), a public key and private key of the security system appliance, a public key of a security system server, all saved in a memory of the security system appliance, wherein corresponding public and private keys are mathematically linked via an asymmetric cipher;

a signed version of the GUID and public key of the security system appliance generated by a manufacturer of the security system appliance using a private key wherein the private key and a public key of the manufacturer are mathematically linked via an asymmetric cipher, the signed version of the GUID and public key are saved in the memory of the security system appliance;

a processor of the security system appliance that transmits a registration message including the signed version of the GUID and public key to the security system server upon activation of the security system appliance; and

a processor of the security system server that authenticates the security system appliance using the signed version of the GUID and public key of the security system appliance and the public key of the manufacturer.