System and Method for Securely Communicating Across Multiple Networks Using a Single Radio

• US 20120124367A1
• Filed: 11/15/2011
• Published: 05/17/2012
• Est. Priority Date: 11/15/2010
• Status: Active Grant

• Current Assignee: Trilliant Holdings, Inc. (Trilliant Networks Incorporated)
• Original Assignee: Trilliant Holdings, Inc. (Trilliant Networks Incorporated)
• Inventors: Bemmel, Vincent, Enns, Frederick, Ota, Nathan, Conant, Robert, Veillette, Michel
• Granted Patent: US 8,832,428 B2
• Time in Patent Office: Days
• US Class Current: 713/153
• CPC Class Codes: H04L 63/0846 using time-dependent-passwords, e.g. periodically changing passwords
• CPC Class Codes: H04W 12/041 Key generation or derivation
• CPC Class Codes: H04W 12/0431 Key distribution or pre-distribution; Key agreement
• CPC Class Codes: H04W 12/069 using certificates or pre-shared keys
• CPC Class Codes: H04W 84/10 Small scale networks; Flat hierarchical networks
• CPC Class Codes: H04W 88/06 adapted for operation in multiple networks or having at least two operational modes, e.g. multi-mode terminals

Abstract

A communications module for facilitating secure communications on a first network and a second network includes: a single transceiver for receiving and transmitting first network messages from and to the first network and at least transmitting second network messages to the second network; at least a first processor connected to the single transceiver for processing one or more first network messages and second network messages; the at least a first processor including first network logic for processing first network messages and second network logic for processing second network messages; and the second network logic including instructions for securing second network messages such that decryption of the second network messages is limited to a particular receiving device on the second network. The second network messages may include commodity pricing and use information.

Claims

1. A communications module for facilitating secure communications on a first network and a second network comprising:

a single transceiver for receiving and transmitting first network messages from and to the first network and at least transmitting second network messages to the second network;

at least a first processor connected to the single transceiver for processing one or more first network messages and second network messages;

the at least a first processor including first network logic for processing first network messages and second network logic for processing second network messages; and

the second network logic including instructions for securing second network messages such that decryption of the second network messages is limited to a particular receiving device on the second network.

2. The communications module of claim 1, further comprising a second processor connected to the single transceiver, wherein the first network logic is included on the first processor and the second network logic is included on the second processor.

3. The communications module of claim 1, wherein the second network logic includes instructions received by the single transceiver from one or more first network messages indicating a set of communication channels on which the single transceiver is to transmit the second network messages.

4. The communications module of claim 3, wherein the instructions received by the single transceiver from one or more first network messages further include information that is unique to the particular receiving device.

5. The communications module of claim 4, wherein the information that is unique to the particular receiving device is generated based on identification data from the particular receiving device that is transmitted and received by a head end system location outside of both the first network and the second network.

6. The communications module of claim 5, wherein the second network messages include two types of messages, registration messages and application messages.

7. The communications module of claim 6, wherein each registration message transmitted by the single transceiver on the second network is encrypted with a pre-configured key based on the information that is unique to a particular receiving device and is unicast by the single transceiver on the set of communication channels.

8. The communications module of claim 7, wherein when the particular receiving device decrypts a registration message, it reads a shared link key.

9. The communications module of claim 8, wherein each application message transmitted by the single transceiver on the second network is encrypted with the shared link key and is broadcast by the single transceiver to a subset of the set of communication channels.

10. The communications module of claim 1, wherein the first network is a wide area network and the second network is a home area network, the home area network being unique to a consumer.

11. A process for registering a device located on a home area network with a communications module to facilitate receipt at the device of messages from the communications module that originated outside of the home area network comprising:

receiving a device registration key that is unique to the device at a head end system that is not on the home area network;

receiving at the communications module the device registration key from the head end system;

transmitting by the communications module a registration message encrypted with a version of the device registration key on multiple communication channels;

listening by the device for registration messages on a particular communication channel within the multiple communication channels; and

upon receiving on the particular communication channel the registration message encrypted with the device'"'"'s registration key, decrypting the registration message to retrieve a shared link key for decrypting application messages from the communications module.

12. The process of claim 11, wherein the application messages contain at least one of utility consumption information that is specific to one or more consumers associated with the home area network, utility pricing information that is specific to one or more consumers associated with the home area network, and text messages from a utility provider to one or more consumers associated with the home area network.

13. The process of claim 11, wherein the device registration key is an installation code that is physically and/or electronically associated with the device during manufacture thereof.

14. The process of claim 13, wherein the version of the device registration key is an MMO hash of the installation code.

15. The process of claim 11, wherein the communications module also receives MAC address information for the device from the head end system.

16. The process of claim 11, wherein the communications module transmits the registration message encrypted with a version of the device registration key on multiple communication channels at predetermined time intervals.

17. The process of claim 12, wherein the communications module transmits the application messages at predetermined time intervals.

18. A process for registering multiple devices located on a home area network with a communications module to facilitate receipt at the multiple devices of messages from the communications module that originated outside of the home area network comprising:

receiving a unique device registration key for each of the multiple devices at a head end system that is not on the home area network;

receiving at the communications module each of the unique device registration keys from the head end system;

transmitting by the communications module on multiple communication channels individual registration messages each encrypted with a version of one the multiple device registration keys;

listening by each of the multiple devices for registration messages on a particular communication channel within the multiple communication channels;

upon receiving on the particular communication channel the registration message encrypted with an individual of the multiple device'"'"'s registration key, decrypting the registration message to retrieve one of a first or second shared link key for decrypting application messages encrypted with one of the first or second shared link keys from the communications module;

wherein each of the multiple devices on the home area network receives either the first or the second shared link key, but not both.

19. The process of claim 18, wherein the application messages contain at least one of utility consumption infoimation that is specific to one or more consumers associated with the home area network, utility pricing information that is specific to one or more consumers associated with the home area network, and text messages from a utility provider to one or more consumers associated with the home area network.

20. The process of claim 18, wherein the unique device registration keys are installation codes that are physically and/or electronically associated with the devices during manufacture thereof.

21. The process of claim 20, wherein the version of the device registration key is an MMO hash of the installation code.

22. The process of claim 18, wherein the communications module also receives MAC address information for the each of the multiple devices from the head end system.

23. The process of claim 18, wherein the communications module transmits the registration messages encrypted with a version of the unique device registration keys on multiple communication channels at predetermined time intervals.

24. The process of claim 19, wherein the communications module transmits the application messages at predetermined time intervals.