System and method for securely communicating across multiple networks using a single radio

• US 8,832,428 B2
• Filed: 11/15/2011
• Issued: 09/09/2014
• Est. Priority Date: 11/15/2010
• Status: Expired due to Fees

• Current Assignee: Trilliant Holdings, Inc. (Trilliant Networks Incorporated)
• Original Assignee: Trilliant Holdings, Inc. (Trilliant Networks Incorporated)
• Inventors: Ota, Nathan, Conant, Robert, Veillette, Michel, Bemmel, Vincent, Enns, Frederick
• Primary Examiner(s): Shaw, Peter
• Assistant Examiner(s): Shayanfar, Ali
• Application Number:
  US13/296,552
• Publication Number:
  US 20120124367A1
• Time in Patent Office: 1,029 Days
• Field of Search: 713/153
• US Class Current: 713/153
• CPC Class Codes: H04L 63/0846 using time-dependent-passwords, e.g. periodically changing passwords
• CPC Class Codes: H04W 12/041 Key generation or derivation
• CPC Class Codes: H04W 12/0431 Key distribution or pre-distribution; Key agreement
• CPC Class Codes: H04W 12/069 using certificates or pre-shared keys
• CPC Class Codes: H04W 84/10 Small scale networks; Flat hierarchical networks
• CPC Class Codes: H04W 88/06 adapted for operation in multiple networks or having at least two operational modes, e.g. multi-mode terminals

Abstract

A communications module for facilitating secure communications on a first network and a second network includes: a single transceiver for receiving and transmitting first network messages from and to the first network and at least transmitting second network messages to the second network; at least a first processor connected to the single transceiver for processing one or more first network messages and second network messages; the at least a first processor including first network logic for processing first network messages and second network logic for processing second network messages; and the second network logic including instructions for securing second network messages such that decryption of the second network messages is limited to a particular receiving device on the second network. The second network messages may include commodity pricing and use information.

Claims

1. A communications module for facilitating secure communications on a first network and a second network comprising:

a single transceiver having a two-way communication channel to the first network for receiving and transmitting first network messages from and to the first network and only a one-way communication channel to the second network for only transmitting second network messages to the second network;

at least a first processor connected to the single transceiver for processing one or more first network messages and second network messages;

the at least a first processor including first network logic for processing first network messages and second network logic for processing second network messages; and

the second network logic including instructions for securing second network messages such that decryption of the second network messages is limited to a particular receiving device on the second network,

wherein the second network logic also includes instructions received by the single transceiver from one or more first network messages that indicate a set of one-way communication channels on which the single transceiver is to transmit the second network messages and which include information that is unique to the particular receiving device, and wherein the second network messages include two types of messages, registration messages and application messages.

2. The communications module of claim 1, further comprising a second processor connected to the single transceiver, wherein the first network logic is included on the first processor and the second network logic is included on the second processor.

3. The communications module of claim 1, wherein the information that is unique to the particular receiving device is generated based on identification data from the particular receiving device that is transmitted and received by a head end system location outside of both the first network and the second network.

4. The communications module of claim 1, wherein each registration message transmitted by the single transceiver on the second network is encrypted with a pre-configured key based on the information that is unique to a particular receiving device and is unicast by the single transceiver on the set of one-way communication channels.

5. The communications module of claim 4, wherein when the particular receiving device decrypts a registration message, it reads a shared link key.

6. The communications module of claim 5, wherein each application message transmitted by the single transceiver on the second network is encrypted with the shared link key and is broadcast by the single transceiver to a subset of the set of one-way communication channels.

7. The communications module of claim 1, wherein the first network is a wide area network and the second network is a home area network, the home area network being unique to a consumer.

8. A process for registering a device located on a home area network with a communications module having only a one-way communication channel to the device and a two-way communication channel to a head end system that is not on the home area network, to facilitate receipt at the device of messages from the communications module that originated outside of the home area network comprising:

receiving a device registration key that is unique to the device at the head end system;

receiving at the communications module via the two-way communication channel the device registration key from the head end system;

transmitting by the communications module a registration message encrypted with a version of the device registration key on multiple one-way communication channels;

listening by the device for registration messages on a particular one-way communication channel within the multiple one-way communication channels; and

upon receiving on the particular one-way communication channel the registration message encrypted with the device'"'"'s registration key, decrypting the registration message to retrieve a shared link key for decrypting application messages from the communications module.

9. The process of claim 8, wherein the application messages contain at least one of utility consumption information that is specific to one or more consumers associated with the home area network, utility pricing information that is specific to one or more consumers associated with the home area network, and text messages from a utility provider to one or more consumers associated with the home area network.

10. The process of claim 9, wherein the communications module transmits the application messages at predetermined time intervals.

11. The process of claim 8, wherein the device registration key is an installation code that is physically and/or electronically associated with the device during manufacture thereof.

12. The process of claim 11, wherein the version of the device registration key is an MMO hash of the installation code.

13. The process of claim 8, wherein the communications module also receives MAC address information for the device from the head end system.

14. The process of claim 8, wherein the communications module transmits the registration message encrypted with a version of the device registration key on multiple one-way communication channels at predetermined time intervals.

15. A process for registering multiple devices located on a home area network with a communications module having only a one-way communication channel to the device and a two-way communication channel to a head end system that is not on the home area network, to facilitate receipt at the multiple devices of messages from the communications module that originated outside of the home area network comprising:

receiving a unique device registration key for each of the multiple devices at the head end system;

receiving at the communications module via the two-way communication channel each of the unique device registration keys from the head end system;

transmitting by the communications module on multiple one-way communication channels individual registration messages each encrypted with a version of one the multiple device registration keys;

listening by each of the multiple devices for registration messages on a particular one-way communication channel within the multiple one-way communication channels;

upon receiving on the particular one-way communication channel the registration message encrypted with an individual of the multiple device'"'"'s registration key, decrypting the registration message to retrieve one of a first or second shared link key for decrypting application messages encrypted with one of the first or second shared link keys from the communications module;

wherein each of the multiple devices on the home area network receives either the first or the second shared link key, but not both.

16. The process of claim 15, wherein the application messages contain at least one of utility consumption information that is specific to one or more consumers associated with the home area network, utility pricing information that is specific to one or more consumers associated with the home area network, and text messages from a utility provider to one or more consumers associated with the home area network.

17. The process of claim 16, wherein the communications module transmits the application messages at predetermined time intervals.

18. The process of claim 15, wherein the unique device registration keys are installation codes that are physically and/or electronically associated with the devices during manufacture thereof.

19. The process of claim 18, wherein the version of the device registration key is an MMO hash of the installation code.

20. The process of claim 15, wherein the communications module also receives MAC address information for the each of the multiple devices from the head end system.

21. The process of claim 15, wherein the communications module transmits the registration messages encrypted with a version of the unique device registration keys on multiple one-way communication channels at predetermined time intervals.