Method and apparatus for providing session key for WUSB security and method and apparatus for obtaining the session key

• US 8,924,710 B2
• Filed: 01/03/2007
• Issued: 12/30/2014
• Est. Priority Date: 01/03/2006
• Status: Active Grant

• Current Assignee: Samsung Electronics Co. Ltd. (Samsung Group)
• Original Assignee: Samsung Electronics Co. Ltd. (Samsung Group)
• Inventors: Lee, Sung-min, Oh, Seung-jae
• Primary Examiner(s): Tabor, Amare F
• Application Number:
  US11/648,676
• Publication Number:
  US 20070157020A1
• Time in Patent Office: 2,918 Days
• Field of Search: 713/155, 713/171, 380/258, 380/278, 380/259, 380/270
• US Class Current: 713/155
• CPC Class Codes: H04L 2209/805 Lightweight hardware, e.g. radio-frequency identification [RFID] or sensor
• CPC Class Codes: H04L 63/061 for key exchange, e.g. in peer-to-peer networks cryptographic mechanisms or cryptographic arrangements for key agreement H04L9/0838
• CPC Class Codes: H04L 9/083 involving central third party, e.g. key distribution center [KDC] or trusted third party [TTP]
• CPC Class Codes: H04L 9/0838 Key agreement, i.e. key establishment technique in which a shared key is derived by parties as a function of information contributed by, or associated with, each of these network architectures or network communication protocols for key exchange in a packet data network H04L63/061
• CPC Class Codes: H04L 9/0869 involving random numbers or seeds
• CPC Class Codes: H04W 12/04 Key management, e.g. using generic bootstrapping architecture [GBA]
• CPC Class Codes: H04W 12/50 Secure pairing of devices

Abstract

A wireless universal serial bus (WUSB) security is provided. A method of providing a session key to be used during a session between a host and a device creates the session key based on a seed key stored in a region that is not allowed by the device; and provides the session key to the device. Therefore, a user does not need to distribute information necessary for creating the session key (i.e., a connection context) to a guest device.

Claims

1. A method of providing a session key to be used during a session between a host and a device in a wireless universal serial bus (WUSB) security communication, the method comprising:

(a) receiving a first random number corresponding to the host from the device;

(b) generating a second random number corresponding to the device;

(c) creating the session key based on a seed key, the first and second random numbers; and

(d) providing the session key and the second random number to the device,

wherein the seed key is stored in a region provided in an apparatus other than the host that is inaccessible by the device such that the seed key is not provided to the device.

2. The method of claim 1, further comprising:

providing a host ID of the host to the device; and

receiving information necessary for creating the session key provided by the host having the host ID from the device,

wherein operation (a) creates the session key based on the information and the seed key.

3. The method of claim 1, further comprising:

detecting the device and providing a specific device ID to the device; and

receiving a request for the session key from the device that received the specific device ID,

wherein operation (c) creates the session key after receiving the request.

4. The method of claim 1, wherein the host and the device are based on wireless universal serial bus (WUSB) standards and wherein the device is a temporarily connected peripheral device.

13. The method of claim 1, further comprising:

calculating a message integrity code (MIC) in the host;

transmitting the calculated MIC to the device;

calculating another MIC in the device;

comparing said transmitted MIC with said calculated another MIC in the device; and

installing the session key in the device based on said comparison.

14. The method of claim 1, wherein the region is a secure memory installed in the apparatus and wherein the apparatus is dedicated to providing the session key to the device.

5. An apparatus for providing a session key to be used during a session between a host and a device in a wireless universal serial bus (WUSB) security communication, the apparatus comprising:

an interface unit which receives a first random number corresponding to the host from the device; and

a controller which generates a second random number corresponding to the device, and creates the session key based on a seed key, the first and second random numbers;

wherein the interface unit further provides the second random number and the session key to the device, and

wherein the seed key is stored in a region provided in the apparatus other than the host that is inaccessible by the device such that the seed key is not provided to the device.

6. A non-transitory computer-readable storage medium having embodied thereon a computer program for executing a method of providing a session key to be used during a session between a host and a device in a wireless universal serial bus(WUSB) security communication, the method comprising:

(a) receiving a first random number corresponding to the host from the device;

(b) generating a second random number corresponding to the device;

(c) creating the session key based on a seed key, the first and second random numbers; and

(d) providing the session key and the second random number to the device,

wherein the seed key is stored in a region provided in an apparatus other than the host that is inaccessible by the device such that the seed key is not provided to the device.

7. A method of obtaining a session key corresponding to a session between a host and a device in a wireless universal serial bus(WUSB) security communication, the method comprising:

(a) receiving a device ID for creating a session key from a session key providing device

(b) providing the device ID to the host to request for a connection with the host;

(c) receiving first information required to create the session key from the host, wherein the first information is a random number corresponding to the host

(d) providing the first information to the session key providing device for creating the session key; and

(e) receiving the session key from the session key providing device;

wherein the session key is generated at the session key providing device based on the random number, the seed key, and another random number generated by the device and which corresponds to the device, and

wherein the seed key is stored in the session key providing device that is inaccessible by the device such that the seed key is not provided to the device.

8. The method of claim 7, further comprising:

(f) receiving a host ID of the host from the apparatus for creating the session key,

wherein operation (c) receives the first information required to create the session key from the host having the host ID.

9. The method of claim 7, wherein operation (e) receives the session key and said another random number required to create the session key as a response to the request,

wherein operation (b) provides said another random number to the host.

10. The method of claim 7, wherein the host and the device are based on WUSB standards.

11. An apparatus for obtaining a session key corresponding to a session between a host and a device in a wireless universal serial bus (WUSB) security communication, the apparatus comprising:

an interface unit which receives a device ID for creating a session key from a session key providing device and receives first information required to create the session key from the host, wherein the first information is a random number corresponding to the host; and

a controller which controls to provide the device ID to the host to request for a connection with the host and provide the first information to the session key providing device for creating the session key,

wherein the interface unit further receives the session key from the session key providing device, the session key is generated at the session key providing device based on the random number, the seed key, and another random number generated by the device and which corresponds to the device, and

wherein the seed key is stored in the session key providing device that is inaccessible by the device such that the seed key is not provided to the device.

12. A non-transitory computer-readable storage medium having embodied thereon a computer program for executing a method of obtaining a session key corresponding to a session between a host and a device in a wireless universal serial bus (WUSB) security communication, the method comprising:

(a) receiving a device ID for creating a session key from a session key providing device;

(b) providing the device ID to the host to request for a connection with the host;

(c) receiving first information required to create the session key from the host, wherein the first information is a random number corresponding to the host;

(d) providing the first information to the session key providing device for creating the session key; and

(e) receiving the session key from the session key providing device;

wherein the session key is generated at the session key providing device based on the random number, the seed key, and another random number generated by the device and which corresponds to the device, and

wherein the seed key is stored in the session key providing device that is inaccessible by the device such that the seed key is not provided to the device.