Security System for Devices of a Wireless Network

• US 20080267404A1
• Filed: 07/25/2003
• Published: 10/30/2008
• Est. Priority Date: 07/29/2002
• Status: Abandoned Application

• Current Assignee: Koninklijke Philips Electronics N.V. (Koninklijke Philips N.V.)
• Original Assignee: Koninklijke Philips Electronics N.V. (Koninklijke Philips N.V.)
• Inventors: Erdmann, Bozena, Schreyer, Oliver, Budde, Wolfgang Otto, Lelkens, Armand
• Application Number:
  US10/522,299
• Publication Number:
  US 20080267404A1
• Time in Patent Office: Days
• US Class Current: 380/270
• CPC Class Codes: H04L 63/062 for key distribution, e.g. centrally by trusted party cryptographic mechanisms or cryptographic arrangements for key distribution involving a central third party H04L9/0819
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 63/0861 using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231
• CPC Class Codes: H04L 63/18 using different networks or channels, e.g. using out of band channels cryptographic mechanisms or cryptographic arrangements for key distribution involving distinctive intermediate devices or communication paths H04L9/0827; cryptographic mechanisms or cryptographic arrangements for authentication using a plurality of channels H04L9/3215
• CPC Class Codes: H04W 12/50 Secure pairing of devices
• CPC Class Codes: H04W 84/12 WLAN [Wireless Local Area Networks]

Abstract

The invention relates to a security system for wireless networks, comprising a first portable unit (1) with a memory (3) for storing a worldwide unambiguous key record (4) provided for short-range information transmission of the key record (4). At least one wireless apparatus (2) of the network is provided with a receiving unit (7) comprising a receiver (9) for receiving the key record (4) and an evaluation component (11) of the apparatus for storing, processing and/or passing on the key record (4) or a part of the key record to a second component. Due to the key record, the apparatuses in the wireless network acquire a secret shared key by means of which the encryption and decryption of the transmitted useful data and/or the authentication is performed. In accordance with an optional embodiment of the invention, the key record in the portable unit can be derived from biometric characteristics of a user.

Claims

1. A security system for wireless networks, comprising:

a first portable unit (1) with a memory (3) for storing a worldwide unambiguous key record (4) provided for short-range information transmission of the key record (4), and

at least one receiving unit (7) in at least one wireless apparatus (2) of the network, comprising a receiver (9) for receiving the key record (4) and an evaluation component (11) of the apparatus for storing, processing and/or passing on the key record (4) or a part of the key record to a second component.

2. A security system as claimed in claim 1, characterized in that the worldwide unambiguous key record (4) in the memory (3) of the portable unit (1) is predetermined by the manufacturer.

3. A security system as claimed in claim 1, characterized in that the portable unit (1) comprises an input device (50) for providing a key record to the memory (3).

4. A security system as claimed in claim 3, characterized in that the input device (50) is adapted to detect biometric characteristics of a user and derive a key record from and/or authenticate the user by means of said biometric characteristics.

5. A security system as claimed in claim 3, characterized in that the portable unit (1) is adapted to erase a key record provided by means of the input device (50) from the memory (3) after a predetermined period of time and/or after a processing procedure.

6. A security system as claimed in claim 1, characterized in that the first unit (1) comprises a triggering unit (5) for triggering a short-range transmission of the key record.

7. A security system as claimed in claim 1, characterized in that, upon a user'"'"'s approach to the receiving unit (7), a detector unit in the unit (1) triggers the short-range information transmission of the key record (4).

8. A security system as claimed in claim 1, characterized in that a key generator (14) is provided in the first unit (1) or in a second unit (13) for generating a sequence of guest key records (17).

9. A security system as claimed in claim 6, characterized in that the first unit (1) is provided for transmitting a guest key record (17) upon activation of a second triggering unit (15).

10. A security system as claimed in claim 1, characterized in that the key record (4) and the guest key record (17) each consist of a bit sequence.

11. A security system as claimed in claim 1, characterized in that the first unit (1) is a part of an apparatus, particularly a remote control unit.

12. A security system as claimed in claim 1, characterized in that the key record (4) is supplied during or before a network configuration, particularly an automatic network configuration, of an apparatus (2).

13. A security system as claimed in claim 10, characterized in that the key record (4) and the guest key record (17) comprise characterizing bits which are provided for distinguishing between key records (4, 17) and other bit sequences and characterize bit sequences as key record (4) or as guest key record (17).

14. A security system as claimed in claim 8, characterized in that the apparatus (2) is provided for erasing the guest key record (17).

15. A security system as claimed in claim 1, characterized in that the apparatus (2) is provided for authentication and encryption of useful data to be transmitted between the apparatuses of the network by means of a key comprised in the key record (4, 17).

16. A security system as claimed in claim 1, characterized in that the apparatus (2) identifies its association with a wireless network by means of a key comprised in the key record (4, 17).

17. A portable unit (1) for installing a shared key in at least one apparatus (2) of a wireless network comprising a memory for storing a worldwide unambiguous key record (4) which is provided for short-range information transmission of the key record.

18. An electric apparatus (2) with a receiving unit (7) comprising a receiver (9) for receiving a key record (4) and an evaluation component (11) of the apparatus (2) for storing, processing and/or passing on the key record or a part of the key record to a second component (10).