Message formatting, authentication, and error detection in home control systems

• US 7,071,835 B2
• Filed: 10/15/2003
• Issued: 07/04/2006
• Est. Priority Date: 06/12/1997
• Status: Expired due to Fees

• Current Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Original Assignee: Microsoft Corporation
• Inventors: Odinak, Gilad, Keam, Nigel S.
• Primary Examiner(s): ZIMMERMAN, BRIAN A
• Application Number:
  US10/686,975
• Publication Number:
  US 20040080427A1
• Time in Patent Office: 993 Days
• Field of Search: 340/825.52, 340/825.22, 340/310.01, 340/310.06, 455/402, 375/295, 375/316, 375/377, 380/1, 307/11, 307/38, 307/40
• US Class Current: 340/12.32
• CPC Class Codes: H04L 63/123 received data contents, e.g. message integrity
• CPC Class Codes: H04L 9/085 Secret sharing or secret splitting, e.g. threshold schemes
• CPC Class Codes: H04L 9/3242 involving keyed hash functions, e.g. message authentication codes [MACs], CBC-MAC or HMAC

Abstract

In a system for communicating over electrical wiring in a house or other building, components are grouped and send messages to each other using a unique group identifier code associated with the group. Each message includes the group identifier code, message data, and a message authentication code (MAC) that is calculated for each message. A receiving component disregards any message whose group identifier code is not the same as that of the receiving component. MACs are calculated using a shared key value and a one-way hash function. The shared key value, in turn, is taken from an ordered sequence of key values that is defined for each component group based on a counter value.

Claims

1. A home control system that uses electrical power lines for communications, comprising:

a plurality of components that are connected for communications among themselves through the electrical power lines, wherein the communications among the plurality of components is established through a single communication protocol;

a sending one of the components being configured to send messages over the electrical power lines in accordance with acts comprising;

calculating a first message authentication code based on a predefined one-way function of data from a message and of a key value that is shared between sending and receiving components;

including the message authentication code in the message;

sending the message over the electrical power lines;

a receiving one of the components being configured to receive messages in accordance with acts comprising;

receiving a message over the electrical power lines;

calculating a second message authentication code based on the predefined one-way function of the data from the message and of the current shared key value;

concluding that the message is either not authentic or contains a data error if the first and second message authentication codes do not match.

2. A home control system as recited in claim 1, wherein the shared key value is from a sequence of key values;

the sending component being further configured to change from a current to a subsequent key value in the sequence without notifying the receiving component;

the receiving component being further configured to calculate a third message authentication code based on the predefined one-way function of the data from the message and of the subsequent key value;

the receiving being further configured to change from the current key value to the subsequent key value if the first and second message authentication codes do not match but the first and third message authentication codes do match.

3. A home control system as recited in claim 1, wherein the shared key value is from a sequence of key values;

the sending component being further configured to change from a current to a subsequent key value in the sequence without notifying the receiving component;

the receiving component being further configured to calculate a third message authentication code based on the predefined one-way function of the data from the message and of the subsequent key value;

the receiving being further configured to change from the current key value to the subsequent key value if the first and second message authentication codes do not match but the first and third message authentication codes do match;

wherein the sending and receiving components calculate the sequence of key values using a one-way function of a counter value that advances to generate each sequential key value.

4. A home control system as recited in claim 1, wherein the shared key value is from a sequence of key values, and wherein the sending and receiving components calculate the sequence of key values using a one-way function of counter values that advance to generate each sequential key value.

5. An electrical component that is connected for communications with other electrical components of a particular group using electrical power lines in a building, comprising:

a processor;

a transmitter that is responsive to the processor to send data using the electrical power lines;

the processor being programmed to compose and send messages in conjunction with the transmitter, each message including a message authentication code based on a predefined one-way function of data from the message and of a key value that is shared between a plurality of components;

wherein the communications with other electrical components of the particular group is established though a single communication protocol.

6. An electrical component as recited in claim 5, wherein the shared key value is from a sequence of key values, the processor being further programmed to change from a current to a subsequent key value in the sequence without notifying a receiving component.

7. An electrical component as recited in claim 5, wherein the shared key value is from a sequence of key values, wherein the processor calculates the sequence of key values using a one-way function of a counter values that advance to generate each sequential key value.

8. An electrical component that is connected for communications with other electrical components of a particular group using electrical power lines in a building, comprising:

a processor;

a receiver that functions in conjunction with the processor to receive messages from other electrical components using the electrical power lines, such messages including first message authentication codes;

the processor being programmed to calculate a second message authentication code for each message based on a predefined one-way function of data from the message and of a key value that is shared between a plurality of components;

the processor being further programmed to compare the first and second message authentication codes to authenticate each message;

wherein the communications with other electrical components of the particular group is established through a single communication protocol.

9. An electrical component as recited in claim 8, wherein the shared key value is from a sequence of key values, the processor programmed to perform the following operations:

calculating a third message authentication code based on the predefined one-way function of the data from the message and of a subsequent key value in the sequence of key values;

further comparing the first and third message authentication codes to authenticate each message.

changing from the current key value to the subsequent key value if the first and second message authentication codes do not match but the first and third message authentication codes do match.

10. An electrical component as recited in claim 8, wherein the shared key value is from a sequence of key values, the processor programmed to perform the following:

calculating the sequence of key values using a one-way function of a counter value that advances to generate each sequential key value;

calculating a third message authentication code based on the predefined one-way function of the data from the message and of a subsequent key value in the sequence of key values;

further comparing the first and third message authentication codes to authenticate each message;

changing from the current key value to the subsequent key value if the first and second message authentication codes do not match but the first and third message authentication codes do match.

11. An electrical component as recited in claim 8, wherein the shared key value is from a sequence of key values, wherein the processor calculates the sequence of key values using a one-way function of a counter value that advances to generate each sequential key value.

12. A method of communicating electronically between a plurality of electrical components using electrical power lines in a building, the method comprising:

designating groups of the electrical components that communicate among themselves;

sharing a key value between components of a particular group;

calculating a first message authentication code based on a predefined one-way function of data from a message and of the key value that is shared by components of the particular group;

including the message authentication code in the message;

sending the message over the electrical power lines;

receiving the message;

calculating a second message authentication code based on the predefined one-way function of the data from the message and of the shared key value; and

comparing the first and second message authentication codes to authenticate each message;

wherein the electronic communication between the electrical components is established through a single communication protocol.

13. A method as recited in claim 12, wherein the shared key value is from a sequence of key values, the method further comprising an additional act of changing from a current to a subsequent key value in the sequence without notifying receiving components.

14. A method as recited in claim 12, wherein the shared key value is from a sequence of key values, the method further comprising:

calculating a third message authentication code based on the predefined one-way function of the data from the message and of a subsequent key value in the sequence of key values;

further comparing the first and third message authentication codes to authenticate each message;

changing from the current key value to the subsequent key value if the first and second message authentication codes do not match but the first and third message authentication codes do match.

15. A method as recited in claim 12, wherein the shared key value is from a sequence of key values, the method further comprising:

calculating the sequence of key values using a one-way function of a counter value that advances to generate each sequential key value;

calculating a third message authentication code based on the predefined one-way function of the data from the message and of a subsequent key value in the sequence of key values;

further comparing the first and third message authentication codes to authenticate each message;

changing from the current key value to the subsequent key value if the first and second message authentication codes do not match but the first and third message authentication codes do match.

16. A method component as recited in claim 12, wherein the shared key value is from a sequence of key values, further comprising calculating the sequence of key values using a one-way function of a counter value that advances to generate each sequential key value.

17. A method as recited in claim 12, further comprising:

assigning different group identifier codes to different groups of components;

specifying the group identifier code of an individual group in messages sent to components of said individual group;

determining whether a particular message is intended for a particular component by checking whether the group identifier code of the particular message matches the group identifier code of the particular component'"'"'s group.