METHOD AND DEVICES FOR PAIRING WITHIN A GROUP OF WIRELESS DEVICES

• US 20150230280A1
• Filed: 08/29/2013
• Published: 08/13/2015
• Est. Priority Date: 08/30/2012
• Status: Active Grant

• Current Assignee: Koninklijke Philips N.V.
• Original Assignee: Koninklijke Philips N.V.
• Inventors: Dees, Walter, Bernsen, Johannes Arnoldus Cornelis
• Granted Patent: US 9,445,449 B2
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: H04L 63/062 for key distribution, e.g. centrally by trusted party cryptographic mechanisms or cryptographic arrangements for key distribution involving a central third party H04L9/0819
• CPC Class Codes: H04L 63/065 for group communications cryptographic mechanisms or cryptographic arrangements for key management involving conference or group key H04L9/0833
• CPC Class Codes: H04W 12/04 Key management, e.g. using generic bootstrapping architecture [GBA]
• CPC Class Codes: H04W 12/50 Secure pairing of devices
• CPC Class Codes: H04W 76/14 Direct-mode setup
• CPC Class Codes: H04W 84/12 WLAN [Wireless Local Area Networks]

Abstract

System for wireless communication comprises a group of wireless devices (110,120,130,140) that include at least one wireless host device (100) securely connected based on first secret data (240) shared by the group. A second secure connection is set-up between a portable wireless device (200) and a wireless host device based on second secret data (250). At least one of the wireless devices is instructed to apply a third secret data for setting up a direct wireless secure connection with the portable wireless device (200). Also the portable wireless device is instructed via the second secure connection to apply the third secret data for setting up the direct secure connections with the wireless devices based on the third secret data. Finally a respective direct wireless secure connection is set-up between the second device and a respective wireless device based on the third secret data. Advantageously latency is reduced in a secure wireless docking system.

Claims

1. A systen for wireless communication comprising a group of wireless devices and a portable device, each device comprising a radio transceiver for wirelessly exchanging data with the other devices,

a first wireless device of the group accommodating a first host function and a second wireless device of the group accommodating a second host function, the first and second wireless devices being the same wireless device or different wireless devices;

the group of wireless devices sharing first secret data and configured for wireless communication to the first wireless device accommodating the first host function via respective first secure connections based on the first secret data;

the portable device comprising a device communication processor for

setting up a second secure connection with the second wireless device accommodating the second host function using a pairing procedure based on second secret data different from the first secret data,

receiving a second instruction via the second secure connection, and, according to the second instruction,

setting up a respective direct wireless secure connection with at least one wireless device of the group using a respective pairing procedure based on third secret data, the third secret data differing from the first secret data;

the second wireless device accommodating the second host function comprising a host communication processor for

setting up the second secure connection with the portable device using the pairing procedure based on the second secret data,

transferring to the at least one wireless device via the first secure connection a first instruction to apply the third secret data for setting up a direct wireless secure connection with the portable device, and

transferring to the portable device via the second secure connection a second instruction to apply the third secret data, for setting up the direct wireless secure connection with the at least one wireless device based on the third secret data;

at least one wireless device comprising a communication processor for

receiving the first instruction via the first secure connection, and, according to the first instruction,

setting up the respective direct wireless secure connection with the portable device using a respective pairing procedure based on the third secret data.

2. A portable device for wireless communication, the device comprising a radio transceiver for wirelessly exchanging data with other wireless devices,

the portable device comprising a device communication processor for

setting up a second secure connection with the second wireless device accommodating the second host function using a pairing procedure based on second secret data different from the first secret data;

receiving the second instruction via the second secure connection, and, according to the second instruction,

setting up a respective direct wireless secure connection with a least one wireless device of the group using a respective pairing procedure based on third secret data, the third secret data differing from the first secret data.

3. The device as claimed in claim 2, wherein the device communication processor is further arranged

for controlling the communication via said direct wireless connections as a group owner;

and/or

setting up respective different direct wireless secure connections with respective wireless devices of respective different subsets using a respective pairing procedure based on respective different third secret data, and/or

generating the third secret data and transferring the third secret data to the device accommodating the second host function.

4. The device as claimed in claim 2, wherein the device communication processor is arranged for

disconnecting the second secure connection before initiating setting up the respective direct wireless secure connection with the at least one wireless device;

and/or

providing a persistent grouping, and accordingly for, after disconnecting the respective direct wireless secure connection based on said third secret data, setting up a further respective direct wireless secure connection based again on said third secret data, and/or

using the second secret data or the third secret data acquired during earlier pairing when, after disconnecting the respective direct wireless secure connection based on said third secret data, reconnecting with the at least one wireless device for setting up a respective direct wireless secure connection.

5. The devicce as claimed in claim 2, wherein

the second secure connection comprises a Wi-Fi Direct P2P connection, and/or

the respective direct wireless secure connection comprises a Wi-Fi Direct Peer to Peer connection, and/or

the respective direct wireless secure connection comprises a Tunneled Direct Link Setup connection, and/or

the pairing procedure comprises a Wi-Fi Protected Access procedure or a Wi-Fi Simple Configuration procedure.

6. A host device for wireless communication the device comprising

a radio transceiver for wirelessly exchanging data with other wireless devices, and

a host communication processor for accommodating the second host function by

setting up the second secure connection with the portable device using the pairing procedure based on the second secret data,

transferring to at least one wireless device via the first secure connection a first instruction to apply the third secret data for setting up a direct wireless secure connection with the portable device, and

transferring to the portable device via the second secure connection a second instruction to apply the third secret data for setting up the direct wireless secure connection with the at least one wireless device based on the third secret data.

7. The host device as claimed in claim 6, wherein the host communication processor is arranged for

generating the third secret data, and/or

generating a respective, different set of the third secret data for respective, different instances of the portable device, and/or

generating a respective, different set of the third secret data when the portable device, after having disconnected the second secure connection, is setting up the second secure connection a respective, further time, and/or

generating a respective, different set of the third secret data for a respective, different subset of the wireless devices, and/or

generating the third secret data based on, or equal to, the second secret data.

8. The host device as claimed in claim 6, wherein the host communication processor is arranged for

assigning a limited lifetime to the third secret data, and/or

assigning a lifetime to the third secret data depending on an authorization level of the device.

9. The host device as claimed in claim 6, wherein the host communication processor is arranged for

transferring a third instruction to the at least one wireless device for disconnecting the first secure connection before setting up the respective direct wireless secure connection to the portable device.

10. The host device as claimed in claim 6, wherein the host device is a wireless docking host or a wireless docking station.

11. A wireless device for wireless communication, the wireless device comprising

a radio transceiver for wirelessly exchanging data with other wireless devices, and

a communication processor for

receiving the first instruction via the first secure connection, and, according to the first instruction,

setting up the respective direct wireless secure connection with the portable device using the respective pairing procedure based on the third secret data.

12. The wireless device as claimed in claim 11, wherein the communication processor is arranged for

initiating the setting up of the respective direct wireless secure connection to the portable device.

13. The wireless device as claimed in claim 11, wherein the communication processor is arranged for

disconnecting the respective first secure connection before setting up the respective direct wireless secure connection to the portable device, and/or

restoring the respective first secure connection after disconnecting the respective direct wireless secure connection to the portable device.

14. A method of wireless communication, the method comprising

setting up a second secure connection between the portable device and the second wireless device accommodating the second host function using a pairing procedure based on second secret data different from the first secret data;

transferring to at least one wireless device of the group via the first secure connection a first instruction to apply a third secret data for setting up a direct wireless secure connection with the portable device, the third secret data differing from the first secret data, and

transferring to the portable device via the second secure connection a second instruction to apply the third secret data for setting up the direct wireless secure connection with the at least one wireless device based on the third secret data;

setting up a respective direct wireless secure connection between the portable device and the at least one wireless device using a respective pairing procedure based on the third secret data.

15. Computer program product for wireless communication between wireless devices, which program is operative to cause a processor to perform the method as claimed in claim 14.