Reoccuring keying system

Patent metadata

Field	Value
Publication number	US-11218459-B2
Application number	US-202016750974-A
Country	US
Kind code	B2
Filing date	Jan 23, 2020
Priority date	Aug 30, 2011
Publication date	Jan 4, 2022
Grant date	Jan 4, 2022

Abstract

Methods, systems, and apparatuses are described for secure communications. One of a plurality of keys with respective key types may be used to establish a secure communication between computing devices. Verification of an establishment of the secure communication may be sent to a trusted computing device.

First claim

The invention claimed is:

1. A method comprising:
determining, based on a request received from a first computing device and by a second computing device, to establish a secure communication between the first computing device and the second computing device;
sending, to the first computing device, a first message acknowledging the request;
receiving, from the first computing device, a second message indicating a plurality of keys and a type of key usage for each of the plurality of keys, wherein each of the plurality of keys corresponds to a pairing between the first computing device and the second computing device; and
establishing, based on a first key of the plurality of keys and based on a corresponding type of key usage of the first key, the secure communication between the first computing device and the second computing device.

2. The method of claim 1 , wherein the first message further indicates:
a previously installed key; and
a previously installed type of key usage of the previously installed key.

3. The method of claim 1 , wherein:
the first message further indicates a plurality of previously installed keys; and
the plurality of previously installed keys are for establishing the secure communication between the first computing device and the second computing device.

4. The method of claim 1 , wherein the first message further indicates, for each of a plurality of previously installed keys, a different type of key usage.

5. The method of claim 1 , wherein the sending the first message comprises encrypting the first message to be undecipherable to the first computing device and decipherable by a trusted computing device.

6. The method of claim 1 , wherein the plurality of keys are for establishing the secure communication between the first computing device and the second computing device.

7. The method of claim 1 , wherein the second message further indicates, for each of the plurality of keys, a different type of key usage.

8. The method of claim 1 , further comprising:
sending, to a trusted computing device via the first computing device, a third message indicating a previously installed key and a previously installed type of key usage of the previously installed key; and
receiving, from the trusted computing device via the first computing device, a fourth message indicating that the previously installed key and the previously installed type of key usage of the previously installed key are valid and correspond to the pairing between the first computing device and the second computing device.

9. The method of claim 1 , wherein the sending the first message comprises encrypting the first message using a communication encryption key for secure communication between the second computing device and a trusted computing device.

10. The method of claim 1 , further comprising sending, to a trusted computing device via the first computing device, confirmation of successful processing of the first key and the corresponding type of key usage of the first key.

11. The method of claim 1 , wherein the receiving the second message comprises decrypting the second message according to a communication decryption key for secure communication between the second computing device and a trusted computing device.

12. A second computing device comprising:
one or more processors; and
memory storing instructions that, when executed by the one or more processors, cause the second computing device to:
determine, based on a request received from a first computing device, whether to establish a secure communication between the first computing device and the second computing device;
send, to the first computing device, a first message acknowledging the request;
receive, from the first computing device, a second message indicating a plurality of keys and a type of key usage for each of the plurality of keys, wherein each of the plurality of keys corresponds to a pairing between the first computing device and the second computing device; and

establish, based on a first key of the plurality of keys and based on a corresponding type of key usage of the first key, the secure communication between the first computing device and the second computing device.

13. The second computing device of claim 12 , wherein the first message further indicates:
a previously installed key; and
a previously installed type of key usage of the previously installed key.

14. The second computing device of claim 12 , wherein:
the first message further indicates a plurality of previously installed keys; and
the plurality of previously installed keys are for establishing the secure communication between the first computing device and the second computing device.

15. The second computing device of claim 12 , wherein the first message further indicates, for each of a plurality of previously installed keys, a different type of key usage.

16. The second computing device of claim 12 , wherein the instructions, when executed by the one or more processors, cause the second computing device to encrypt the first message to be undecipherable to the first computing device and decipherable by a trusted computing device.

17. The second computing device of claim 12 , wherein the plurality of keys are for establishing the secure communication between the first computing device and the second computing device.

18. The second computing device of claim 12 , wherein the second message further indicates, for each of the plurality of keys, a different type of key usage.

19. The second computing device of claim 12 , wherein the instructions, when executed by the one or more processors, cause the second computing device to:
send, to a trusted computing device via the first computing device, a third message indicating a previously installed key and a previously installed type of key usage of the previously installed key; and
receive, from the trusted computing device via the first computing device, a fourth message indicating that the previously installed key and the previously installed type of key usage of the previously installed key are valid and correspond to the pairing between the first computing device and the second computing device.

20. The second computing device of claim 12 , wherein the instructions, when executed by the one or more processors, cause the second computing device to encrypt the first message using a communication encryption key for secure communication between the second computing device and a trusted computing device.

21. The second computing device of claim 12 , wherein the instructions, when executed by the one or more processors, cause the second computing device to send, to a trusted computing device via the first computing device, confirmation of successful processing of the first key and the corresponding type of key usage of the first key.

22. The second computing device of claim 12 , wherein the instructions, when executed by the one or more processors, cause the second computing device to decrypt the second message according to a communication decryption key for secure communication between the second computing device and a trusted computing device.

23. A system comprising:
a second computing device; and
a trusted computing device;
wherein the second computing device comprises:
one or more second processors; and
second memory storing second instructions that, when executed by the one or more second processors, cause the second computing device to:
determine, b

Assignees

• Comcast Cable Comm Llc

Inventors

• Davoust Nancy
• Fahrny James
• Taylor Kevin

Classifications

• H04L63/20 Primary

  for managing network security; network security policies in general (filtering policies H04L63/0227) · CPC title

• H04L63/12

  Applying verification of the received information (cryptographic mechanisms or cryptographic arrangements for data integrity or data verification H04L9/32) · CPC title

• H04L63/062 Primary

  for key distribution, e.g. centrally by trusted party (cryptographic mechanisms or cryptographic arrangements for key distribution involving a central third party H04L9/0819) · CPC title

• H04L63/06

  for supporting key management in a packet data network (cryptographic mechanisms or cryptographic arrangements for key management H04L9/08) · CPC title

• H04L63/10

  for controlling access to devices or network resources · CPC title