Systems and methods for “machine-to-machine” (M2M) communications between modules, servers, and an application using public key infrastructure (PKI)
Inventors
Assignees
Interested in licensing this patent?
MTEC can help explore whether this patent might be available for licensing for your application.
Publication Number
US-11973864-B2
Publication Date
2024-04-30
Expiration Date
Abstract
Methods and systems are provided for supporting efficient and secure “Machine-to-Machine” (M2M) communications using a module, a server, and an application. A module can communicate with the server by accessing the Internet, and the module can include a sensor and/or an actuator. The module, server, and application can utilize public key infrastructure (PKI) such as public keys and private keys. The module can internally derive pairs of private/public keys using cryptographic algorithms and a first set of parameters. A server can authenticate the submission of derived public keys and an associated module identity. The server can use a first server private key and a second set of parameters to (i) send module data to the application and (ii) receive module instructions from the application. The server can use a second server private key and the first set of parameters to communicate with the module.
Core Innovation
A method for secure machine-to-machine communications between a wireless module and one or more monitoring server(s) uses public key infrastructure with a module identity and a pre-shared secret key. The method stores a server public key, a module identity comprising a permanent identifier for a mobile device, cryptographic algorithms including a symmetric ciphering algorithm, and the pre-shared secret key. The method derives a module private key and a corresponding module public key associated with the mobile device.
A symmetric ciphering key is derived using an elliptic curve integrated encryption scheme with the server public key and the module private key, together with an American National Standards Institute standard X-9.63 key derivation function. Module encrypted data is generated using the symmetric ciphering key and the symmetric ciphering algorithm, and the module encrypted data includes the module identity. A message is sent to a server for a wireless network that includes the module encrypted data and the corresponding module public key.
On the server side, the server mutually derives the symmetric ciphering key using at least the module public key. The wireless network selects the pre-shared secret key for the mobile device using the module identity, and the mobile device is authenticated with the wireless network using a message digest with the pre-shared secret key.
Claims Coverage
One independent claim is identified. It contains six inventive features related to key material storage, device key derivation, symmetric ciphering key derivation, encrypted message generation, wireless message sending with server mutual derivation, and authentication using a message digest with the pre-shared secret key.
Server and module key material storage with symmetric ciphering algorithm
Store a server public key, a module identity comprising a permanent identifier for a mobile device, cryptographic algorithms including a symmetric ciphering algorithm, and the pre-shared secret key.
Mobile device module private/public key derivation
Derive a module private key and a corresponding module public key associated with the mobile device using the cryptographic algorithms.
Symmetric ciphering key derivation using ECC integrated encryption and X-9.63
Derive a symmetric ciphering key using an elliptic curve integrated encryption scheme with the server public key and the module private key and an X-9.63 key derivation function.
Module encrypted data generation including module identity
Generate module encrypted data using the symmetric ciphering key and the symmetric ciphering algorithm, wherein the module encrypted data includes the module identity.
Wireless message sending with module encrypted data and module public key
Send a message to a server for a wireless network, the message comprising the module encrypted data and the corresponding module public key, wherein the server mutually derives the symmetric ciphering key using at least the module public key, and wherein the wireless network selects the pre-shared secret key for the mobile device using the module identity.
Mutual authentication using message digest with pre-shared secret key
Authenticate the mobile device with the wireless network using a message digest with the pre-shared secret key.
The claim covers storing server and module identity and keying material, deriving a device keypair, deriving a symmetric ciphering key via an elliptic curve integrated encryption scheme and an X-9.63 key derivation function, encrypting module data including the module identity, transmitting the encrypted data with the module public key over a wireless network while enabling the server’s mutual derivation, and authenticating the mobile device using a message digest with the pre-shared secret key.
Stated Advantages
Not explicitly described in patent.
Documented Applications
Not explicitly described in patent.
Interested in licensing this patent?