Method for implementing grouping devices and interacting among grouped devices

• US 7,987,360 B2
• Filed: 01/21/2005
• Issued: 07/26/2011
• Est. Priority Date: 04/28/2004
• Status: Active Grant

• Current Assignee: Lenovo (Beijing) Limited (Lenovo Group Ltd.)
• Original Assignee: Lenovo (Beijing) Limited (Lenovo Group Ltd.)
• Inventors: Liu, Yang, Guo, Mingliang, Luo, Yujin
• Primary Examiner(s): Barron, Jr.; Gilberto
• Assistant Examiner(s): Ho; Virginia
• Application Number:
  US11/568,443
• Publication Number:
  US 20070223398A1
• Time in Patent Office: 2,377 Days
• Field of Search: 709/209, 709/208, 710/110, 712/31, 713/155, 713/163, 380/278, 380/271, 380/277
• US Class Current: 713/163
• CPC Class Codes: H04L 2463/062 applying encryption of the keys cryptographic mechanisms or cryptographic arrangements for key distribution using key encryption key H04L9/0822
• CPC Class Codes: H04L 63/0807 using tickets, e.g. Kerberos cryptographic mechanisms or cryptographic arrangements for entity authentication using tickets or tokens H04L9/3213
• CPC Class Codes: H04L 67/1046 Joining mechanisms
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/50 Secure pairing of devices
• CPC Class Codes: H04W 4/08 User group management
• CPC Class Codes: H04W 8/186 Processing of subscriber group data
• CPC Class Codes: H04W 84/18 Self-organising networks, e.g. ad-hoc networks or sensor networks

Abstract

In a method for implementing device grouping and interactions between grouped devices a device creating a device group sends an advertisement message carrying identification information of a device group to which it belongs, to the network. After receiving the advertisement message, a network device joins the device group by the corresponding advertisement message. When two grouped network devices interact with each other, the method further comprises: sending an access request to an accessed device; judging by the accessed device whether the device sending the request is a trusted device and if so, interacting by both parties with each other; otherwise, denying the access request, or determining by the initiating device and the accessed device, a common trusted third party; acquiring by the initiating device, key information of the accessed device from the common trusted third party, and interacting with the accessed device by using the acquired key information.

Claims

1. A method for implementing device grouping and interactions between grouped devices, wherein in a network, a device creating a device group sends an advertisement message carrying identification information of a device group to which it belongs, to the network;

and after receiving the advertisement message, a network device which wants requests to join in the corresponding device group joins in the device group identified by the corresponding advertisement message, when two grouped network devices interact with each other, the method further comprising;

sending by an initiating device, an access request to an accessed device;

judging by the device receiving the access request, whether the device sending the request is a trusted device thereof or not, if so, interacting by both parties with each other;

otherwise, denying the access request, or determining by the initiating device and the accessed device, a common trusted third party;

acquiring by the initiating device, key information of the accessed device from the common trusted third party, and interacting with the accessed device by using the acquired key information,

wherein said accessed device belongs to a master-slave device group, and determining by the initiating device and the accessed device, a common trusted third party comprises;

judging by the initiating device, whether the initiating device belongs to one and the same master-slave device group as the accessed device, if so, using a master device as the common trusted third party;

otherwise, joining by the initiating device, as a slave device, in a master-slave device group to which the accessed device belongs, and then using a master device of the master-slave device group in which the initiating device joins as the common trusted third party.

2. The method according to claim 1, wherein said initiating device belongs to a master-slave device group, and joining in the device group identified by the advertisement message comprises:

sending by the network device requesting to join in the device group, a join-in request to a master device in the device group to be joined in;

determining by the master device, based on preset information, whether the network device requesting to join in the device group is allowed to join in, and returning a response message carrying an authorization result to the network device requesting to join in the device group.

3. The method according to claim 2, wherein if the authorization result in the response message is “

deny to join-in”

, then the message further carries information on deny reasons.

4. The method according to claim 1, wherein prior to joining by the initiating device in the master-slave device group to which the accessed device belongs, the method further comprises:

acquiring by the initiating device, description information of the accessed device from the accessed device.

5. The method according to claim 1, wherein the initiating device acquires both an encryption key encrypted by a key shared between the common trusted third party and the initiating device and an encryption key encrypted by a key shared between the common trusted third party and the accessed device, and then sends the encryption key encrypted by the key shared between the common trusted third party and the accessed device to the accessed device.

6. The method according to claim 1, further comprising:

after acquiring the key information of the accessed device, sending by the initiating device, the key information to the accessed device.

7. The method according to claim 6, wherein the initiating device acquires both an encryption key encrypted by a key shared between the common trusted third party and the initiating device and an encryption key encrypted by a key shared between the common trusted third party and the accessed device, and then sends the encryption key encrypted by the key shared between the common trusted third party and the accessed device to the accessed device.

8. A method for implementing device grouping and interactions between grouped devices, wherein in a network, a device creating a device group sends an advertisement message carrying identification information of a device group to which it belongs, to the network;

and after receiving the advertisement message, a network device which requests to join in the corresponding device group joins in the device group identified by the corresponding advertisement message, when two grouped network devices interact with each other, the method further comprising;

sending by an initiating device, an access request to an accessed device;

judging by the device receiving the access request, whether the device sending the request is a trusted device thereof or not, if so, interacting by both parties with each other;

otherwise, denying the access request, or determining by the initiating device and the accessed device, a common trusted third party;

acquiring by the initiating device, key information of the accessed device from the common trusted third party, and interacting with the accessed device by using the acquired key information,

wherein said initiating device belongs to a master-slave device group, said accessed device belongs to a peer-to-peer device group, and determining by the initiating device and the accessed device, a common trusted third party comprises;

joining by the accessed device, as a slave device, in a master-slave device group to which the initiating device belongs, and then using a master device of the master-slave device group in which the accessed device joins as the common trusted third party.

9. The method according to claim 8, wherein prior to joining by the accessed device in the master-slave device group to which the initiating device belongs, the method further comprises:

acquiring by the accessed device, description information of the initiating device from the initiating device.

10. The method according to claim 8, wherein the initiating device acquires both an encryption key encrypted by a key shared between the common trusted third party and the initiating device and an encryption key encrypted by a key shared between the common trusted third party and the accessed device, and then sends the encryption key encrypted by the key shared between the common trusted third party and the accessed device to the accessed device.

11. The method according to claim 8, further comprising:

after acquiring the key information of the accessed device, sending by the initiating device, the key information to the accessed device.

12. The method according to claim 11, wherein the initiating device acquires both an encryption key encrypted by a key shared between the common trusted third party and the initiating device and an encryption key encrypted by a key shared between the common trusted third party and the accessed device, and then sends the encryption key encrypted by the key shared between the common trusted third party and the accessed device to the accessed device.

13. A method for implementing device grouping and interactions between grouped devices, wherein in a network, a device creating a device group sends an advertisement message carrying identification information of a device group to which it belongs, to the network;

and after receiving the advertisement message, a network device which requests to join in the corresponding device group joins in the device group identified by the corresponding advertisement message, when two grouped network devices interact with each other, the method further comprising;

sending by an initiating device, an access request to an accessed device;

judging by the device receiving the access request, whether the device sending the request is a trusted device thereof or not, if so, interacting by both parties with each other;

otherwise, denying the access request, or determining by the initiating device and the accessed device, a common trusted third party;

acquiring by the initiating device, key information of the accessed device from the common trusted third party, and interacting with the accessed device by using the acquired key information,

wherein said initiating device and said accessed device both belong to a peer-to-peer device group, and determining by the initiating device and the accessed device, a common trusted third party comprises;

informing by the initiating device, all trusted third parties thereof to the accessed device;

judging by the accessed device, whether there are any same trusted third parties as its own in all the trusted third parties of the initiating device;

if so, selecting one of the same ones as the common trusted third party.

14. The method according to claim 13, wherein joining in the device group identified by the advertisement message comprises:

adding the device group identification carried by the advertisement message into a device group identification list of the network device requesting to join in the device group.

15. The method according to claim 13, wherein the initiating device acquires both an encryption key encrypted by a key shared between the common trusted third party and the initiating device and an encryption key encrypted by a key shared between the common trusted third party and the accessed device, and then sends the encryption key encrypted by the key shared between the common trusted third party and the accessed device to the accessed device.

16. The method according to claim 13, further comprising:

after acquiring the key information of the accessed device, sending by the initiating device, the key information to the accessed device.

17. The method according to claim 16, wherein the initiating device acquires both an encryption key encrypted by a key shared between the common trusted third party and the initiating device and an encryption key encrypted by a key shared between the common trusted third party and the accessed device, and then sends the encryption key encrypted by the key shared between the common trusted third party and the accessed device to the accessed device.