Method of triggering a key delivery from a mesh key distributor

• US 9,451,452 B2
• Filed: 06/29/2009
• Issued: 09/20/2016
• Est. Priority Date: 06/29/2009
• Status: Active Grant

• Current Assignee: Strong Force IoT Portfolio 2016, LLC (Strong Force Intellectual Capital, LLC)
• Original Assignee: Motorola Solutions, Inc.
• Inventors: Emeott, Stephen P., Braskich, Anthony J.
• Primary Examiner(s): Wang, Harris C
• Application Number:
  US12/493,963
• Publication Number:
  US 20100329465A1
• Time in Patent Office: 2,640 Days
• Field of Search: 380/281
• US Class Current: 1/1
• CPC Class Codes: H04L 2209/80 Wireless network architectures or network communication protocols for wireless network security H04W12/00
• CPC Class Codes: H04L 2463/061 applying further key derivation, e.g. deriving traffic keys from a pair-wise master key cryptographic mechanisms or cryptographic arrangements for generation of secret information including derivation or calculation of cryptographic keys or passwords H04L9/0861
• CPC Class Codes: H04L 63/062 for key distribution, e.g. centrally by trusted party cryptographic mechanisms or cryptographic arrangements for key distribution involving a central third party H04L9/0819
• CPC Class Codes: H04L 63/065 for group communications cryptographic mechanisms or cryptographic arrangements for key management involving conference or group key H04L9/0833
• CPC Class Codes: H04L 9/0836 using tree structure or hierarchical structure
• CPC Class Codes: H04L 9/321 involving a third party or a trusted authority
• CPC Class Codes: H04W 12/041 Key generation or derivation
• CPC Class Codes: H04W 12/0431 Key distribution or pre-distribution; Key agreement
• CPC Class Codes: H04W 12/0433 Key management protocols
• CPC Class Codes: H04W 84/18 Self-organising networks, e.g. ad-hoc networks or sensor networks

Abstract

A mesh station applying for access to a network includes a list of peer stations in messages of an authenticated key establishment protocol. A mesh key distributor derives a key delivery key and generates a top level key, and then delivers the top level key to the mesh station. Following the key establishment protocol, the mesh key distributor also creates pairwise keys for use between the mesh station and the peer stations listed in its peer list. The list of peers permits the identifier for the peer to be bound into the derived key, which helps ensure that the key used between each pair of peers is unique. Once the mesh key distributor finishes creating a key for one of the stations on the peer list, the mesh key distributor sends a message to the peer to initiate a key push.

Claims

1. A method of triggering a transmission of a key from a mesh key distributor, the method comprising:

transmitting, by a mesh station, at least one security message to the mesh key distributor, wherein the at least one security message includes a list of peer station identifiers;

deriving, by the mesh key distributor, a peer key for use between a peer station identified in the list of peer station identifiers and the mesh station; and

transmitting, by the mesh key distributor, a key push message to the peer station to initiate a key push to the peer station for the derived peer key.

2. The method as claimed in claim 1, wherein the at least one security message comprises a security association message.

3. The method as claimed in claim 2, wherein the at least one security association message comprises at least one message of a key agreement protocol.

4. The method as claimed in claim 1, further comprising prior to the transmitting of the security message:

sharing a master key between the mesh station and the mesh key distributor.

5. The method as claimed in claim 1, wherein the derived peer key is a unique key between the peer and the mesh station.

6. The method as claimed in claim 5, further comprising:

deriving, by the mesh key distributor, a plurality of unique peer keys, each peer key associated with one peer identified in the list of peer station identifiers.

7. The method as claimed in claim 6, further comprising:

transmitting, by the mesh key distributor, a key push message to each of the peer stations to initiate a key push for each of the derived peer keys.

8. The method as claimed in claim 1, further comprising:

executing a session key establishment protocol between the mesh station and the peer station to secure a peer link.

9. The method as claimed in claim 1, further comprising prior to the transmitting of the at least one security message:

generating, by the mesh key distributor, a top level key.

10. The method as claimed in claim 9, wherein the mesh key distributor generates the top level key based upon one or more contributions of the mesh key distributor and one or more contributions of the mesh station.

11. The method as claimed in claim 9, wherein the top level key comprises a mesh root key.

12. The method as claimed in claim 9, further comprising:

transmitting, by the mesh key distributor, the top level key to the mesh station.

13. The method as claimed in claim 12, wherein the peer key is derived by the mesh key distributor using the top level key, the method further comprising:

deriving, by the mesh station, the peer key using the top level key.

14. A method of triggering a transmission of a key from a mesh key distributor, the method comprising:

generating, by the mesh key distributor, a top level key based upon one or more contributions of the mesh key distributor and one or more contributions of a mesh station;

transmitting, by the mesh station, at least one security message to the mesh key distributor, wherein the at least one security message includes a list of peer station identifiers;

transmitting, by the mesh key distributor, the top level key to the mesh station in response to receiving the at least one security message;

deriving, by each of the mesh key distributor and the mesh station, using the top level key, a peer key for use between a peer station identified in the list of peer station identifiers and the mesh station;

transmitting, by the mesh key distributor, a key push message to the peer station to initiate a key push to the peer station for the derived peer key; and

executing a session key establishment protocol between the mesh station and the peer station using the peer key to secure a peer link.