Security mechanism for wireless video area networks

• US 8,831,225 B2
• Filed: 03/25/2008
• Issued: 09/09/2014
• Est. Priority Date: 03/26/2007
• Status: Active Grant

• Current Assignee: Qualcomm, Inc.
• Original Assignee: Silicon Image, Inc. (Lattice Semiconductor Corporation)
• Inventors: Gilb, James P. K.
• Primary Examiner(s): Kyle, Tamara T
• Application Number:
  US12/079,133
• Publication Number:
  US 20090010438A1
• Time in Patent Office: 2,359 Days
• Field of Search: 380/277
• US Class Current: 380/277
• CPC Class Codes: H04L 63/065 for group communications cryptographic mechanisms or cryptographic arrangements for key management involving conference or group key H04L9/0833
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 63/101 Access control lists [ACL]
• CPC Class Codes: H04L 63/104 Grouping of entities
• CPC Class Codes: H04L 9/0833 involving conference or group key network architectures or network communication protocols for key management in group communication in a packet data network H04L63/065
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 12/50 Secure pairing of devices
• CPC Class Codes: H04W 84/12 WLAN [Wireless Local Area Networks]

Abstract

A device is disclosed including a security module to generate and update cryptographic keys to establish a secure relationship between the device and one or more station devices in a wireless video area network (WVAN) and a domain manager to maintain a list of the station devices that are authorized to operate in the WVAN.

Claims

1. A device comprising:

a security module to generate and update cryptographic keys to establish a secure relationship between the device and one or more station devices in a wireless video area network (WVAN);

a domain manager to maintain a security list of the station devices that are authorized to operate in the WVAN, wherein the domain manager is to further sign the security list having therein a strictly increasing sequence number issued by the domain manager to indicate a version of the security list maintained by the domain manager; and

an antenna for wireless transmitting of high-definition video and audio signals to the one or more station devices in the WVAN.

2. The device of claim 1 wherein the domain manager performs an authorization protocol to establish that a public key is a key of a trusted station device.

3. The device of claim 2:

wherein a new station device cannot be authorized to join the WVAN when the domain manager is not participating in the WVAN; and

wherein a previously authorized station device may rejoin the WVAN whether or not the domain manager is participating in the WVAN.

4. The device of claim 1, wherein the device further comprises a control module to:

(a) control the wireless transmitting from the antenna;

(b) implement content protection for the wireless transmitting of high-definition video and audio signals via the antenna; and

(c) control video format selection via one or more of video resolution, video color, and video depth.

5. The device of claim 2 wherein the authorization protocol comprises:

the signed security list specifying a list of authorized station devices; and

a hash of a public key or a signature of the domain manager applied to the public key.

6. The device of claim 5 wherein the signed security list includes a token revocation list of public keys that are no longer trusted.

7. The device of claim 5 wherein the signed security list of authorized station devices includes an access control list of public keys that are trusted.

8. A method comprising:

receiving, at a domain manager, a request from a station device to be authorized to join a wireless video area network (WVAN), wherein the domain manager, upon receipt of the request, verifies that a public key of the station device is a valid key and requests a user to confirm authorization of the station device;

maintaining, at the domain manager, a security list of the station devices that are authorized to operate in the WVAN, wherein the domain manager further signs the security list having therein a strictly increasing sequence number issued by the domain manager to indicate a version of the security list maintained by the domain manager; and

upon verification that the public key of the station device is a valid key, transmitting an authorization command from the domain manager to the station device; and

wirelessly transmitting via an antenna, high-definition video and audio signals to at least the station device in the WVAN.

9. The method of claim 8 further comprising:

verifying, at the domain manager, that a received address of the station device is a valid address.

10. The method of claim 8 further comprising:

transmitting the signed security list of authorized station devices from the domain manager to the station device after the user confirms authorization of the station device, wherein the user confirms authorization of the station device by pushing a button on a domain manager to confirm the authorization.

11. A method comprising:

transmitting a request from a station device to a domain manager, the station device requesting to be authorized to join a wireless video area network (WVAN), wherein the domain manager to maintain a security list of the station devices that are authorized to operate in the WVAN and wherein the domain manager is to further sign the security list having therein a strictly increasing sequence number issued by the domain manager to indicate a version of the security list maintained by the domain manager;

receiving an authorization command at the station device from the domain manager, the authorization command indicating the station device is authorized to join the WVAN;

verifying that a public key of the domain manager is a valid key;

requesting a user to confirm authorization of the domain manager;

verifying an authentication token of the station device with the public key of the domain manager; and

storing the authentication token of the station device and the public key of the domain manager if the verification is successful; and

wirelessly transmitting via an antenna, high-definition video and audio signals to at least the station device in the WVAN.

12. The method of claim 11 further comprising the station device verifying that a received address of the domain manager is a valid address.

13. The method of claim 11 further comprising the station device receiving the signed security list of authorized station devices from the domain manager with the authorization command.

14. The method of claim 13 further comprising:

receiving, at the station device, a second signed security list of authorized station devices from the domain manager;

determining if the version of the second signed security list is higher than the version of the first signed security list of authorized station devices; and

storing the second signed security list of authorized station devices when the version of the second signed security list is greater than the version of the first signed security list.

15. The method of claim 13 further comprising:

receiving, at the station device, a second signed security list of authorized station devices from a second station device operating as a station manager when the domain manager is not participating in the WVAN.

16. The method of claim 13 further comprising:

transmitting a second signed security list of authorized station devices from the station device to a second station device operating as a station manager when the domain manager is not participating in the WVAN.

17. A wireless video area network (WVAN) comprising:

one or more station devices; and

a coordinator device including;

a security module to generate and update cryptographic keys to establish a secure relationship between the coordinator device and the one or more station devices; and

a domain manager to maintain a security list of station devices that are authorized to operate in the WVAN, wherein the domain manager is to further sign the security list having therein a strictly increasing sequence number issued by the domain manager to indicate a version of the security list maintained by the domain manager; and

an antenna for wireless transmitting of high-definition video and audio signals to the one or more station devices in the WVAN.

18. The WVAN of claim 17 wherein a new station device cannot be authorized to join the WVAN when the coordinator device is not participating in the WVAN.

19. The WVAN of claim 18 wherein a previously authorized station device may rejoin the WVAN whether or not the coordinator device is participating in the WVAN.

20. The WVAN of claim 17:

wherein the security list of station devices that are authorized to operate in the WVAN lists each of the one or more station devices that are authorized stations devices; and

wherein each authorized station device includes an authentic copy of the public key of the domain manager, the address of the domain manager and a latest version of the security list of authorized station devices.

21. The WVAN of claim 20 wherein the security list of authorized station devices includes a strictly increasing secure packet counter used to prevent the replay of old messages.

22. The WVAN of claim 20 wherein a first station device may receive the security list of authorized station devices from a second station device when the domain manager is not participating in the WVAN.