System and method for exchanging encryption keys between a mobile device and a peripheral device

• US 9,768,955 B2
• Filed: 08/20/2014
• Issued: 09/19/2017
• Est. Priority Date: 05/12/2006
• Status: Active Grant

• Current Assignee: Malikie Innovations Limited (Key Patent Innovations Limited)
• Original Assignee: Blackberry Limited
• Inventors: Kirkup, Michael Grant, Brown, Michael Kenneth, Brown, Michael Stephen
• Primary Examiner(s): SHOLEMAN, ABU S
• Application Number:
  US14/464,005
• Publication Number:
  US 20140359274A1
• Time in Patent Office: 1,126 Days
• Field of Search: 380 27, 380277, 726 1, 713171
• CPC Class Codes: H04L 2209/80 Wireless
• CPC Class Codes: H04L 63/061 for key exchange, e.g. in peer-to-peer networks cryptographic mechanisms or cryptographic arrangements for key agreement H04L9/0838
• CPC Class Codes: H04L 63/18 using different networks or channels, e.g. using out of band channels cryptographic mechanisms or cryptographic arrangements for key distribution involving distinctive intermediate devices or communication paths H04L9/0827; cryptographic mechanisms or cryptographic arrangements for authentication using a plurality of channels H04L9/3215
• CPC Class Codes: H04L 9/0844 with user authentication or key authentication, e.g. ElGamal, MTI, MQV-Menezes-Qu-Vanstone protocol or Diffie-Hellman protocols using implicitly-certified keys
• CPC Class Codes: H04L 9/0861 Generation of secret information including derivation or calculation of cryptographic keys or passwords
• CPC Class Codes: H04W 12/04 Key management, e.g. using generic bootstrapping architecture [GBA]
• CPC Class Codes: H04W 12/50 Secure pairing of devices
• CPC Class Codes: H04W 76/10 Connection setup
• CPC Class Codes: H04W 84/18 Self-organising networks, e.g. ad-hoc networks or sensor networks

Abstract

Systems and methods for providing additional security for data being transmitted across a wireless connection that has been established using a known wireless protocol (e.g. Bluetooth) are described. An encryption key is exchanged between a computing device (e.g. a mobile device) and a wireless peripheral device (e.g. a keyboard, a printer). In some embodiments, the encryption key is generated at one of the two devices. Data associated with the encryption key is output at the one device, which can be input by the user at the other device. The encryption key is then recovered at the other device from the input, thereby completing the key exchange. The encryption key can then be used to encrypt and decrypt data transmitted over the established wireless connection, providing additional security.

Claims

1. A method of providing additional security over an established wireless connection between a computing device and a peripheral device, the method comprising:

determining that a pairing process between the computing device and the peripheral device is complete;

automatically, in response to completion of the pairing process, generating an encryption key at the computing device in a binary form;

at the computing device, applying a conversion algorithm to the encryption key in the binary form to generate a number comprising fewer alphanumeric digits than the encryption key in the binary form, the conversion algorithm being associated with a recovery algorithm, wherein applying of the recovery algorithm to the number generates the encryption key in the binary form;

at the computing device, displaying the number comprising fewer alphanumeric digits on a display of the computing device, for entry at the peripheral device; and

at the computing device, encrypting data transmitted to or decrypting data received from the peripheral device over the wireless connection, using the encryption key and in accordance with an encryption algorithm.

2. The method of claim 1, wherein the pairing process is a Bluetooth pairing process.

3. The method of claim 1, wherein the encryption algorithm is a symmetric encryption algorithm.

4. The method of claim 1, wherein the number comprising fewer alphanumeric digits is a hexadecimal number.

5. The method of claim 1, further comprising generating a new encryption key at the computing device and repeating application of the conversion algorithm and the displaying in accordance with a schedule, without repeating the pairing process.

6. The method of claim 1, further comprising generating a new encryption key at the computing device and repeating application of the conversion algorithm and the displaying periodically, in accordance with a frequency, without repeating the pairing process.

7. The method of claim 1, further comprising generating a new encryption key at the computing device and repeating application of the conversion algorithm and the displaying in response to a user request, without repeating the pairing process.

8. The method of claim 1, wherein the computing device comprises a mobile device.

9. The method of claim 1, wherein the peripheral device comprises a keyboard.

10. A computing device configured to provide additional security over an established wireless connection between the computing device and a peripheral device, the computing device comprising:

a processor and a memory, the processor being configured to;

determine that a pairing process between the computing device and the peripheral device is complete;

automatically, in response to completion of the pairing process, generate an encryption key at the computing device in a binary form;

apply a conversion algorithm to the encryption key in the binary form to generate a number comprising fewer alphanumeric digits than the encryption key in the binary form, the conversion algorithm being associated with a recovery algorithm, wherein applying of the recovery algorithm to the number generates the encryption key in the binary form;

display the number comprising fewer alphanumeric digits on a display of the computing device, for entry at the peripheral device; and

encrypt data transmitted to or decrypt data received from the peripheral device over the wireless connection, using the encryption key and in accordance with an encryption algorithm.

11. A method of providing additional security over an established wireless connection between a computing device and a peripheral device, the method comprising:

determining that a pairing process between the computing device and the peripheral device is complete;

after determining that the pairing process is complete, receiving input via the peripheral device, wherein the input is a number comprising alphanumeric digits;

at the peripheral device, applying a recovery algorithm to the number to generate an encryption key in binary form having more digits than the number, the recovery algorithm being associated with a conversion algorithm, wherein applying of the conversion algorithm to the encryption key in binary form generates the number; and

at the peripheral device, encrypting data transmitted to or decrypting data received from the computing device over the wireless connection, using the encryption key and in accordance with an encryption algorithm.

12. The method of claim 11, wherein the pairing process is a Bluetooth pairing process.

13. The method of claim 11, wherein the encryption algorithm is a symmetric encryption algorithm.

14. The method of claim 11, wherein the number comprising alphanumeric digits is a hexadecimal number.

15. The method of claim 11, further comprising receiving new input at the peripheral device and repeating application of the recovery algorithm in accordance with a schedule, without repeating the pairing process.

16. The method of claim 11, further comprising receiving new input at the peripheral device and repeating application of the recovery algorithm periodically, in accordance with a frequency, without repeating the pairing process.

17. The method of claim 11, further comprising receiving new input at the peripheral device and repeating application of the recovery algorithm in response to a user request, without repeating the pairing process.

18. The method of claim 11, wherein the computing device comprises a mobile device.

19. The method of claim 11, wherein the peripheral device comprises a keyboard.

20. A peripheral device configured to provide additional security over an established wireless connection between a computing device and the peripheral device, the peripheral device comprising:

a processor and a memory, the processor being configured to;

determine that a pairing process between the computing device and the peripheral device is complete;

after determining that the pairing process is complete, receive input via the peripheral device, wherein the input is a number comprising alphanumeric digits;

apply a recovery algorithm to the number to generate an encryption key in binary form having more digits than the number, the recovery algorithm being associated with a conversion algorithm, wherein applying the conversion algorithm to the encryption key in binary form generates the number; and

encrypt data transmitted to or decrypt data received from the computing device over the wireless connection, using the encryption key and in accordance with an encryption algorithm.

21. A non-transitory computer-readable medium comprising computer-executable instructions which, when executed by a processor of a computing device to provide additional security over an established wireless connection between the computer device and a peripheral device, cause the computing device to:

determine that a pairing process between the computing device and the peripheral device is complete;

automatically, in response to completion of the pairing process, generate an encryption key at the computing device in a binary form;

apply a conversion algorithm to the encryption key in the binary form to generate a number comprising fewer alphanumeric digits than the encryption key in the binary form, the conversion algorithm being associated with a recovery algorithm, wherein applying the recovery algorithm to the number generates the encryption key in the binary form;

display the number comprising fewer alphanumeric digits on a display of the computing device, for entry at the peripheral device; and

encrypt data transmitted to or decrypt data received from the peripheral device over the wireless connection, using the encryption key and in accordance with an encryption algorithm.

22. The non-transitory computer-readable medium of claim 21, wherein the pairing process is a Bluetooth pairing process.

23. The non-transitory computer-readable medium of claim 21, wherein the encryption algorithm is a symmetric encryption algorithm.

24. The non-transitory computer-readable medium of claim 21, wherein the number comprising fewer alphanumeric digits is a hexadecimal number.

25. The non-transitory computer-readable medium of claim 21, wherein the computer-executable instructions, when executed by the processor, further cause the computing device to generate a new encryption key and to repeat application of the conversion algorithm and displaying of the number in accordance with a schedule, without repeating the pairing process.

26. The non-transitory computer-readable medium of claim 21, wherein the computer-executable instructions, when executed by the processor, further cause the computing device to generate a new encryption key and to repeat application of the conversion algorithm and displaying of the number periodically, in accordance with a frequency, without repeating the pairing process.

27. The non-transitory computer-readable medium of claim 21, wherein the computer-executable instructions, when executed by the processor, further cause the computing device to generate a new encryption key and to repeating application of the conversion algorithm and displaying of the number in response to a user request, without repeating the pairing process.

28. The non-transitory computer-readable medium of claim 21, wherein the computing device comprises a mobile device.

29. The non-transitory computer-readable medium of claim 21, wherein the peripheral device comprises a keyboard.

30. A non-transitory computer-readable medium comprising computer-executable instructions which, when executed by a processor of a peripheral device to provide additional security over an established wireless connection between a computing device and the peripheral device, cause the peripheral device to:

determine that a pairing process between the computing device and the peripheral device is complete;

after determining that the pairing process is complete, receive input via the peripheral device, wherein the input is a number comprising alphanumeric digits;

apply a recovery algorithm to the number to generate an encryption key in binary form having more digits than the number, the recovery algorithm being associated with a conversion algorithm, wherein applying the conversion algorithm to the encryption key in binary form generates the number; and

encrypt data transmitted to or decrypt data received from the computing device over the wireless connection, using the encryption key and in accordance with an encryption algorithm.

31. The non-transitory computer-readable medium of claim 30, wherein the pairing process is a Bluetooth pairing process.

32. The non-transitory computer-readable medium of claim 30, wherein the encryption algorithm is a symmetric encryption algorithm.

33. The non-transitory computer-readable medium of claim 30, wherein the number comprising alphanumeric digits is a hexadecimal number.

34. The non-transitory computer-readable medium of claim 30, wherein the computer-executable instructions, when executed by the processor, further cause the peripheral device to receive new input at the peripheral device and to repeat application of the recovery algorithm in accordance with a schedule, without repeating the pairing process.

35. The non-transitory computer-readable medium of claim 30, wherein the computer-executable instructions, when executed by the processor, further cause the peripheral device to receive new input and to repeat application of the recovery algorithm periodically, in accordance with a frequency, without repeating the pairing process.

36. The non-transitory computer-readable medium of claim 30, wherein the computer-executable instructions, when executed by the processor, further cause the peripheral device to receive new input and to repeat application of the recovery algorithm in response to a user request, without repeating the pairing process.

37. The non-transitory computer-readable medium of claim 30, wherein the computing device comprises a mobile device.

38. The non-transitory computer-readable medium of claim 30, wherein the peripheral device comprises a keyboard.