Configuration systems and methods for secure operation of networked transducers
Inventors
Assignees
Interested in licensing this patent?
MTEC can help explore whether this patent might be available for licensing for your application.
Publication Number
US-11621832-B2
Publication Date
2023-04-04
Expiration Date
Abstract
A device can include an internal secure processing environment (SE) and communicate with a configuration system. The device may utilize a near field communications (NFC) radio. A mobile handset can connect with the SE in the device using NFC. The mobile handset can communicate with the configuration system and receive configuration data and a software package for the device. The SE can derive a PKI key pair and send the derived public key to the configuration system via the mobile handset. The SE and the configuration system can mutually derive an encryption key using the derived PKI key pair. The configuration data can be transmitted over the NFC radio, and the mobile handset can establish a Wi-Fi access point. The software package can be encrypted using the encryption key and transmitted to the device over the established Wi-Fi access point, thereby completing a configuration step for the device.
Core Innovation
The invention relates to a device securely receiving configuration data from a mobile handset over an encrypted first wireless connection by transitioning a manufactured secure processing environment into a configured state. The device records a QR code comprising an authentication token and establishes a first encrypted wireless connection with the mobile handset, and over this connection receives a server public key, a second set of cryptographic parameters, and a random number for authentication.
The device authenticates the mobile handset and derives a first symmetric ciphering key using elliptic curve Diffie-Hellman (ECDH) key exchange and a first set of cryptographic parameters. The device derives a third device private key and a third device public key using the second set of cryptographic parameters, generates a device digital signature over at least the third device public key using the second device private key, and encrypts at least the derived third device public key together with a list of root certificates into a ciphertext.
The encrypted content and signature are exchanged between the mobile handset and the device, and the device receives a ciphertext comprising a device certificate for the derived third device public key and a certificate authority (CA) certificate for a second server. The device decrypts the ciphertext using the derived symmetric ciphering key, establishes a second wireless connection to the second server, authenticates the second server using the CA certificate, and uses the received device certificate together with the derived third device private key to authenticate and complete secure configuration.
Claims Coverage
The independent claim covered is clm-00001. It contains a sequence of cryptographic setup and authentication steps that enable secure reception of configuration data from a mobile handset and secure authentication to a second server, comprising multiple inventive features spanning key storage, token-based QR code association, encrypted wireless connectivity, PKI and ECDH-derived symmetric keying, and certificate provisioning for server authentication.
Secure configuration data reception over encrypted first wireless connection
A method for a device to securely receive, from a mobile handset, configuration data over a first wireless connection between the device and the mobile handset, wherein the first wireless connection is encrypted and configuration data is received via that encrypted connection.
Token-based QR code for mobile handset association
Recording on the device a QR code for reading by the mobile handset, the QR code comprising the authentication token.
ECDH-based symmetric ciphering key derivation using server public key
Deriving a first symmetric ciphering key using at least the first device private key and the first server public key, the ECDH key exchange algorithm, and the first set of cryptographic parameters.
Derivation of third device keys and device digital signature
Deriving a third device private key and a third device public key using the second set of cryptographic parameters, and generating a device digital signature over at least the third device public key using the second device private key.
Encrypted provisioning of derived public key and root certificates
Encrypting at least the derived third device public key and a list of root certificates for the device into a first ciphertext using the derived first symmetric ciphering key, and sending, via the first wireless connection and to the mobile handset, the first ciphertext and the device digital signature.
Certificate ciphertext reception and decryption for second server authentication
Receiving, via the first wireless connection and from the mobile handset, a second ciphertext comprising a device certificate for the derived third device public key and a certificate authority (CA) certificate for a second server, wherein the device decrypts the second ciphertext using at least the first symmetric ciphering key.
Second wireless connection authentication using CA certificate and derived key pair
Establishing a second wireless connection to the second server, wherein the device authenticates the second server using the CA certificate, and wherein the device uses the received device certificate and the derived third device private key in order to authenticate over the second wireless connection.
Across clm-00001, the claim coverage emphasizes a cryptographic workflow that ties a QR code authentication token to an encrypted first wireless connection, derives symmetric ciphering keys using ECDH, derives and signs a third key pair using second cryptographic parameters, provisions root certificates and the derived public key encrypted under the symmetric key, and then uses received device and CA certificates to authenticate a second server over a second wireless connection.
Stated Advantages
Not explicitly described in patent.
Documented Applications
Not explicitly described in patent.
Interested in licensing this patent?