PEERING METHOD

• US 20170295171A1
• Filed: 09/18/2015
• Published: 10/12/2017
• Est. Priority Date: 09/19/2014
• Status: Active Grant

• Current Assignee: Dominique Bolignano
• Original Assignee: Dominique Bolignano
• Inventors: BOLIGNANO, Dominique
• Granted Patent: US 11,153,302 B2
• Time in Patent Office: Days
• CPC Class Codes: G06F 21/575 Secure boot
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04W 12/04 Key management, e.g. using generic bootstrapping architecture [GBA]
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 12/086 using security domains
• CPC Class Codes: H04W 12/50 Secure pairing of devices

Abstract

Some embodiments are directed to a method for peering between first and second modules each installed in a different device, the device of the first module includes a human-machine interface, and the two devices can be linked by an unsecure communication channel. The method can include: receiving via the human-machine interface a command setting the device of the first module in operating mode so the first module takes control of a part of the communication means of the first device in order to set them in a secure operating mode and takes control of the human-machine interface; establishing a temporarily secure communication between first and second modules; displaying on the human-machine interface a status signaling the set-up of the secure communication; receiving via the human-machine interface a peering acceptance command; and exchanging of keys/secrets between the modules through the temporarily secure communication channel to perform the peering.

Claims

1. A method for peering between a first and a second trusted modules, each being installed in a different device, the device on which the first module is installed including a human-machine interface to communicate with a user, and the two devices having communication means allowing linking them together by an unsecure communication channel, the method comprising:

receiving via the human-machine interface a command setting the device of the first trusted module in an operating mode such that the first trusted module takes control of at least one part of the communication means of the first device in order to set them in a secure operating mode and takes control of the human-machine interface;

establishing a temporarily secure communication between the first and the second trusted modules;

displaying on the human-machine interface a status signaling the set-up of the secure communication;

receiving via the human-machine interface a peering acceptance command; and

exchanging keys or secrets between the two modules through the temporarily secure communication channel in order to perform the peering.

2. The method according to claim 1, wherein the peering acceptance command comprises a datum enabling the authentication of the user by one of the trusted modules.

3. The method according to claim 2, wherein the datum is transmitted to the second trusted module by the first trusted module.

4. The method according to claim 1, wherein one of the two trusted areas contains beforehand one or several key(s) used to perform the peering.

5. The method according to claim 1, wherein a third trusted module being installed on a third device comprising no human-machine interface, the peering method having been performed between the first and the second trusted modules, the method is repeated between the first and the third trusted modules by using keys associated to the first peering so that a peering between the second and the third trusted modules is performed by transitivity.

6. A computer program product downloadable from a communication network and/or saved on a medium readable by a computer and/or executable by a processor, wherein the program comprises program code instructions for the implementation of the peering method according to claim 1.