LOW POWER DEVICE WITH ENCRYPTION

• US 20170019378A1
• Filed: 03/11/2016
• Published: 01/19/2017
• Est. Priority Date: 03/15/2013
• Status: Active Grant

• Current Assignee: August Home, Inc. (Assa Abloy AB)
• Original Assignee: August Home, Inc. (Assa Abloy AB)
• Inventors: Johnson, Jason, Dow, Christopher
• Granted Patent: US 9,647,996 B2
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: E05B 2047/002 Geared transmissions
• CPC Class Codes: E05B 2047/0048 Circuits, feeding, monitoring
• CPC Class Codes: E05B 2047/0058 by batteries
• CPC Class Codes: E05B 2047/0067 Monitoring
• CPC Class Codes: E05B 2047/0068 Door closed
• CPC Class Codes: E05B 2047/0072 Operation
• CPC Class Codes: E05B 2047/0091 Retrofittable electric locks, e.g. an electric module can be attached to an existing manual lock
• CPC Class Codes: E05B 2047/0095 Mechanical aspects of locks controlled by telephone signals, e.g. by mobile phones
• CPC Class Codes: E05B 2047/0097 including means for monitoring voltage, e.g. for indicating low battery state
• CPC Class Codes: E05B 47/0001 with electric actuators; Constructional features thereof for vehicles E05B81/04
• CPC Class Codes: E05B 63/0004 Additional locks added to existing lock arrangements
• CPC Class Codes: G07C 2009/00412 the transmitted data signal being encrypted
• CPC Class Codes: G07C 2009/00769 with data transmission performed by wireless means
• CPC Class Codes: G07C 9/00309 operated with bidirectional data transmission between data carrier and locks
• CPC Class Codes: G07C 9/00571 operated by interacting with a central unit
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/061 for key exchange, e.g. in peer-to-peer networks cryptographic mechanisms or cryptographic arrangements for key agreement H04L9/0838
• CPC Class Codes: H04W 12/0471 Key exchange
• CPC Class Codes: Y02D 30/70 in wireless communication networks

Abstract

A server is in communication with a low power device. The server has a handshake key (Kh) with a key exchange that provides for a communication session between a mobile device and the low power device. The mobile device does not have the (Kh). A user mobile device is in communication with the server and uses a cipher to provide a secured communication between the mobile device and the low power device.

Claims

1. A system for secure communication in a low power device that communicates with small payloads, comprising:

a low power device that communicates with small payloads;

a server in communication with the low power device that communicates with small payloads, the server having a handshake key (Kh) with a key exchange that provides for a communication session between a mobile device and the low power device, wherein the mobile device does not have the (Kh);

a user mobile device configured to be in communication with the server and using a cipher to provide a secured communication between the mobile device and the low power device.

2. The system of claim 1, wherein cipher blocks chaining is utilized to provide the secured communication.

3. The system of claim 1, wherein initialization is done when the low power device is created.

4. The system of claim 1, wherein communication is initialized by generating a session nonce (Ns) on the mobile device.

5. The system of claim 4, wherein the session nonce is encrypted using a handshake key (Kh) that is at the server.

6. The system of claim 5, wherein the (Kh) is a shared secret known to the low power device and to an entity encrypting the nonce that includes the server.

7. The system of claim 6, wherein the low power device modifies the nonce and returns a modified value to the mobile device.

8. The system of claim 7, wherein an entity with the server has the (Kh), decrypts a session key and the mobile device uses that to encrypt subsequent communication, wherein the low power device generates the session (Kh) and provides for secure communication.

9. The system of claim 8, wherein when the low power device is assembled, and at least one random number is provisioned on the mobile device.

10. The system of claim 9, wherein the (Kh) can be common to all low power devices of a given model.

11. The system of claim 10, wherein the (Kh) is a shared secret between the server and all low power devices.

12. The system of claim 10, wherein the (Kh) is exchanged for a unit-specific unit key (Kh).

13. The system of claim 12, wherein the (Kh) is a random number.

14. The system of claim 13, wherein the server associates the (Kh) with a unique identification of the low power device.

15. The system of claim 14, wherein the server responds to the mobile device with a unit key encrypted using an open block cipher.

16. The system of claim 15, wherein the server sends the (Kh) to the low power device and stores it in a non-volatile memory, with the (Kh) used as a handshake key.

17. The system of claim 16, wherein the mobile device generates two random numbers that are communicated with the server to create one/half of the (Kh), and in response the server generates one or more random numbers to create a second half of the (Kh), wherein for each of a session the server creates a different set of one or more numbers for the second half of the (Kh).

18. The system of claim 17, wherein in response to the server creating the second half of the (Kh) the mobile device functions without having the (Kh).

19. The system of claim 18, wherein the mobile device generates a checksum.

20. The system of claim 18, wherein the mobile device creates a request for a private communication and in response the server creates a second half of the (Kh) without the mobile device having the (Kh).

21. The system of claim 20, wherein in response to transmission of the (Kh) a session is initiated.

22. The system of claim 18, wherein a production of half of the (Kh) by the mobile device is an initiation of a request for packet for a private communication and thereafter a validation of a source is conducted.

23. The system of claim 18, wherein a third party mobile device never has on its mobile device an encryption for the low power device.

25. The method of claim 1, further comprising:

utilizing cipher block chaining to provide the secured communication.

26. The method of claim 1, further comprising:

completing an initialization when the low power device is created.

27. The method of claim 1, further comprising:

initialized communication by generating a session nonce (Ns) on the mobile device.

28. The method of claim 4, further comprising:

encrypting the session nonce using a handshake key (Kh) that is at the server.

29. The method of claim 5, wherein the (Kh) is a shared secret known to low power device and to an entity encrypting the nonce that includes the server.

30. The method of claim 6, further comprising:

modifying the nonce and returning a modified value to the mobile device.

31. The method of claim 7, wherein an entity with the server has the (Kh) decrypt a session key and the mobile device uses that to encrypt subsequent communication, wherein the low power device generates the session key.

32. The method of claim 8, wherein when the low power device is assembled, and a random number are provisioned on the mobile device.

33. The method of claim 9, wherein the (Kh) can be common to all low power devices of a given low power model.

34. The method of claim 10, wherein the (Kh) is a shared secret between the server and all low power devices of a model class.

35. The method of claim 10, wherein the (Kh) is exchanged for a unit-specific unit key (Kh).

36. The method of claim 12, wherein the (Kh) is a random number.

37. The method of claim 13, wherein the server associates the (Kh) with a unique identification of the low power device

38. The method of claim 14, wherein the server responds to the mobile device with a unit key encrypted using an open block cipher.

39. The method of claim 15, wherein the server sends the (Kh) to the lock and the lock stores it in a non-volatile memory, with the (Kh) used as a handshake key.

40. The method of claim 16, wherein the mobile device generates two random numbers that are communicated with the server to create one/half of the (Kh), and in response the server generates one or more random numbers to create a second half of the (Kh), wherein for each of a session the server creates a different set of one or more numbers for the second half of the (Kh).

41. The method of claim 17, wherein in response to the server creating the second half of the (Kh) the mobile device functions without having the (Kh).

42. The method of claim 18, wherein the mobile device generates a checksum.

43. The method of claim 18, wherein the mobile device creates a request for a private communication and in response the server creates a second half of the (Kh) without the mobile device having the (Kh).

44. The method of claim 20, wherein in response to transmission of the (Kh) a session is initiated.

45. The method of claim 18, wherein a production of half of the (Kh) by the mobile device is an initiation of a request for packet for a private communication and thereafter a validation of a source is conducted.

46. The method of claim 18, wherein a third party mobile device never has on its mobile device an encryption for the low power device.

24. A method for secure communication in a low power device that communicates with small payloads, comprising:

providing a low power device;

using a server to communicate with the low power device, the server having a handshake key (Kh) with a key exchange that provides for a communication session between a mobile device and the low power device, wherein the mobile device does not have the (Kh);

using a cipher to provide a secured communication between the mobile device and the low power device.