Wireless mesh network with secure automatic key loads to wireless devices

Patent metadata

Field	Value
Publication number	US-10153898-B2
Application number	US-201213479869-A
Country	US
Kind code	B2
Filing date	May 24, 2012
Priority date	Nov 13, 2007
Publication date	Dec 11, 2018
Grant date	Dec 11, 2018

Abstract

A wireless mesh network provides secure communication by encrypting data using one or more encryption keys. A configuration device in communication with a security manager of the network provides a temporary secure communication path between the security manager and a new field device to be added to the mesh network. Cryptographic material and other configuration data can then be transferred between the security manager of the network and the new field device securely via the configuration device.

First claim

The invention claimed is:

1. A method of integrating a specific wireless field device into a wireless mesh network by loading a join key into the specific wireless field device, wherein the join key is usable by any wireless field device capable of joining the wireless mesh network, the method comprising:
establishing a wired network connection between a configuration device and a wired network, wherein the wired network includes a security manager and a network gateway and wherein the configuration device is separate and remote from the network gateway;
establishing a wired connection comprising a two wire communication bus between the specific wireless field device and the configuration device;
creating a secure wired communication path between the specific wireless field device and the security manager through the wired connection, the configuration device, and the wired network;
initiating loading the join key from the security manager to the specific wireless field device through the secure wired communication path;
disconnecting the specific wireless field device from the wired connection between the specific wireless field device and the configuration device after loading of the join key from the security manager to the specific wireless field device is completed; and
joining the specific wireless field device to the wireless mesh network by wirelessly communicating a wireless message encrypted with the join key from the specific wireless field device to a neighboring wireless device that is a member of the wireless mesh network and wirelessly communicating the wireless message from the neighboring wireless device to a network manager within the wireless mesh network that manages joining of members of the wireless mesh network.

2. The method of claim 1 , wherein the configuration device communicates with the specific wireless field device over the wired network connection using a control system communication protocol.

3. The method of claim 2 , wherein the configuration device converts messages received from the security manager over the wired network to the control system communication protocol.

4. The method of claim 1 and further comprising:
loading configuration data in addition to the join key through the secure wired communication path.

5. The method of claim 1 and further comprising:
viewing a graphical user interface; and
initiating loading of the join key through the graphical user interface.

6. The method of claim 1 , wherein the wired network comprises a wired digital communication network to which the configuration device is connected.

7. The method of claim 1 , wherein the join key includes a key generated using a one time pad technique.

8. A method of loading cryptographic material into a specific wireless field device to allow the specific wireless field device to operate as part of a wireless mesh network, wherein the cryptographic material is usable by any wireless field device capable of joining the wireless mesh network, the method comprising:
establishing a wired network connection between a configuration device and a security manager of the wireless mesh network, that includes a network gateway and wherein the configuration device is separate and remote from the security manager and the network gateway;
establishing a wired connection between the specific wireless field device and the configuration device, wherein the wired connection ensures messages generated by the configuration device are receivable only by the specific wireless field device;
establishing a secure communication path between the security manager and the specific wireless field device via the wired connection, the configuration device and the wired network;
initiating loading of the cryptographic material from the security manager to the specific wireless field device through the secure communication path so that the cryptographic material is receivable only by the specific wireless field device;
disconnecting the specific wireless field device from the secure communication path after the loading of the cryptographic material from the security manager to the specific wireless field device is completed; and
joining the specific wireless field device to the wireless mesh network by transferring a wireless message including the cryptographic material from the specific field device to any member of the wireless mesh network and wirelessly communicating the wireless message from the any member of the wireless mesh network to a network manager within the wireless mesh network that receives the wireless message and manages joining of members of the wireless mesh network.

9. The method of claim 8 , wherein the cryptographic material includes a join key generated using a one time pad technique.

Assignees

• Karschnia Robert J
• Peluso Marcos
• Carlson Daniel
• Potter Jeffrey D
• Rosemount Inc

Inventors

• Karschnia Robert J
• Peluso Marcos
• Carlson Daniel
• Potter Jeffrey D

Classifications

• H04L9/083 Primary

  involving central third party, e.g. key distribution center [KDC] or trusted third party [TTP] · CPC title

• H04L63/0853

  using an additional device, e.g. smartcard, SIM or a different communication terminal (cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234) · CPC title

• H04W12/04

  Key management, e.g. using generic bootstrapping architecture [GBA] · CPC title

• H04W84/18

  Self-organising networks, e.g. ad-hoc networks or sensor networks · CPC title

• H04L2209/80

  Wireless · CPC title