Establishing secure peer networking in trust webs on open networks using shared secret device key

• US 7,290,132 B2
• Filed: 04/11/2005
• Issued: 10/30/2007
• Est. Priority Date: 09/06/2001
• Status: Expired due to Fees

• Current Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Original Assignee: Microsoft Corporation
• Inventors: Aboba, Bernard D., Nixon, Toby L.
• Primary Examiner(s): Zand; Kambiz
• Assistant Examiner(s): Simitoski; Michael J
• Application Number:
  US11/104,694
• Publication Number:
  US 20050286722A1
• Time in Patent Office: 932 Days
• Field of Search: 713/153
• US Class Current: 713/153
• CPC Class Codes: H04L 63/04 for providing a confidential data exchange among entities communicating through data packet networks

Abstract

A trust web keying process provides secure peer networking of computing devices on an open network. A device is initially keyed at distribution to an end user or installer with a device-specific cryptographic key, and programmed to respond only to peer networking communication secured using the device'"'"'s key. The device-specific key is manually entered into a keying device that transmits a re-keying command secured with the device-specific key to the device for re-keying the device with a group cryptographic key. The device then securely peer networks with other devices also keyed with the group cryptographic key, forming a trust web. Guest devices can be securely peer networked with the trust web devices via a trust web gateway.

Claims

1. A trust web gateway device for securely peer networking a guest device keyed for secure peer networking using a device cryptographic key together with a group of trust web member devices keyed for secure peer networking using a trust web cryptographic key, the trust web gateway device comprising:

cryptographic key storage storing the trust web cryptographic key and the device cryptographic key;

a secure peer networking layer operating to send and receive communication in a peer networking protocol secured using the device cryptographic key and the trust web cryptographic key; and

a secure peer networking translator operating in response to receiving a first communication from the guest device secured using the device cryptographic key to re-transmit the first communication secured using the trust web cryptographic key, and operating in response to receiving a second communication for the guest device secured using the trust web cryptographic key to re-transmit the second communication secured using the device cryptographic key, wherein the sending and receiving of the secure peer networking translator is performed through the secure peer networking layer.

2. A method for securely peer networking a guest device keyed for secure peer networking using a device cryptographic key together with a group of trust web member devices each keyed for secure peer networking using a trust web cryptographic key, the method comprising:

providing the device cryptographic key and the trust web cryptographic key to a trust web gateway device;

upon receipt by the trust web gateway device of a communication from the guest device in a peer networking protocol secured using the device cryptographic key, re-transmitting the communication secured using the trust web cryptographic key; and

upon receipt by the trust web gateway device of a communication for the guest device in a peer networking protocol secured using the trust web cryptographic key, re-transmitting the communication secured using the device cryptographic key.