Secure pairing of devices

Patent metadata

Field	Value
Publication number	US-11627469-B2
Application number	US-202016935735-A
Country	US
Kind code	B2
Filing date	Jul 22, 2020
Priority date	Jul 22, 2020
Publication date	Apr 11, 2023
Grant date	Apr 11, 2023

Abstract

A process for securely pairing devices. A host device receives an input indicating a user credential for logging into the host device and initiates a scanning process for discovering target devices available for pairing with the host device. During the scanning process, the host device receives wireless pairing information from a target device. The wireless pairing information includes a unique device identifier associated with the target device and an electronic signature generated as a function of a signature key stored at the target device and the unique device identifier. The host device compares the electronic signature with a run-time signature generated at the host device as a function of the user credential received at the host device and the unique device identifier. The host device then initiates a pairing process to establish a short-range communication link with the target device when the electronic signature matches with the run-time signature.

First claim

What is claimed is:

1. A method of securely pairing devices, the method comprising:
receiving, at a host device, an input indicating a user credential for logging into the host device;
initiating, at the host device, a scanning process for discovering target devices available for pairing with the host device;
receiving, at the host device, during the scanning process, wireless pairing information from a target device of the target devices, the wireless pairing information including (i) a unique device identifier associated with the target device and (ii) an electronic signature generated as a function of a signature key stored at the target device and the unique device identifier associated with the target device;
comparing, at the host device, the electronic signature with a run-time signature generated at the host device as a function of the user credential received at the host device and the unique device identifier included in the wireless pairing information; and
initiating, at the host device, a pairing process to establish a short-range communication link with the target device when the electronic signature matches with the run-time signature,
wherein the signature key stored at the target device corresponds to a key generated at the host device as a function of (i) a user credential supplied to the host device during a signing process between the host device and the target device and (ii) the unique device identifier associated with the target device.

2. The method of claim 1 , wherein the signature key stored at the target device corresponds to a key generated at a second host device different from the host device as a function of (i) a user credential supplied to the second host device during a signing process between the second host device and the target device and (ii) the unique device identifier associated with the target device.

3. The method of claim 1 , further comprising:
receiving, at the host device, during a signing process between the host device and the target device, a user input selecting the target device for signing the target device with the user credential;
generating, at the host device, during the signing process, the signature key as a function of (i) the user credential supplied to the host device for signing the target device and (ii) the unique device identifier associated with the target device; and
transmitting, at the host device, during the signing process, the signature key to the target device.

4. The method of claim 1 , further comprising:
receiving, at the host device, a user input selecting the target device for un-signing the target device with the user credential; and
responsively transmitting, at the host device, a command to the target device to clear the signature key stored at the target device.

5. The method of claim 1 , further comprising:
refraining from initiating the pairing process with the target device when the electronic signature does not match the run-time signature.

6. The method of claim 1 , wherein initiating the pairing process comprises:
using a legacy pairing or a Secure Simple Pairing process to pair the host device and target device.

7. The method of claim 1 , further comprising:
transmitting, to the target device, an authentication challenge including a first hash value generated as a function of (i) a run-time signature key generated at the host device as a function of the user credential and the unique device identifier associated with the target device and (ii) a randomly generated key;
receiving, from the target device, an authentication challenge response including a second hash value generated as a function of the first hash value and the signature key stored at the target device;
comparing the second hash value with a third hash value generated as a function of the first hash value and the run-time signature key; and
maintaining the short-range communication link between the host device and the target device when the second hash value matches with the third hash value.

8. The method of claim 1 , further comprising:
receiving, at the host device, during the scanning process, wireless pairing information from at least one other target device of the target devices including (i) a second unique device identifier associated with the at least one other target device and (ii) a second electronic signature generated as a function of a second signature key stored at the at least one other target device, wherein the second signature key corresponds to a key generated at the host device as a function of (i) a user credential supplied to the host device during a second signing process between the host device and the at least one other target device and (ii) the second unique device identifier associated with the at least one other target device;
comparing the second electronic signature with a second run-time signature generated at the host device as a function of the user credential supplied to the host device during the second signing process and the second unique device identifier; and
initiating, at the host device, a pairing process to establish a short-range communication link with the at least one other target device when the second electronic signature matches with the second run-time signature.

9. The method of claim 1 , further comprising:
receiving an input indicating that a user associated with the user credential is logging out from the host device, and responsively clearing, from a storage of the host device, (i) wireless pairing information received from the target device and (ii) the run-time signature.

10. A host device, comprising:
a short-range wireless radio; and
an electronic processor communicatively coupled to the short-range wireless radio, wherein the electronic processor is configured to:
receive an input indicating a user credential for logging into the host device;
initiate, via the short-range wireless radio, a scanning process for discovering target devices available for pairing with the host device;
receive, via the short-range wireless radio, during the scanning process, wireless pairing information from a target device of the target devices, the wireless pairing information including (i) a unique device identifier associated with the target device and (ii) an electronic signature generated as a function of a signature key stored at the target device and the unique device identifier associated with the target device;
compare the electronic signature with a run-time signature generated at the host device as a function of the user credential received at the host device and the unique device identifier included in the wireless pairing information; and
initiating, via the short-range wireless radio, a pairing process to establish a short-range communication link with the target device when the electronic signature matches with the run-time signature,
wherein the signature key stored at the target device corresponds to a key generated at the host device as a function of (i) a user credential supplied to the host device during a signing process between the host device and the target device and (ii) the unique device identifier associated with the target device.

11. The host device of claim 10 , wherein the signature key stored at the target device corresponds to a key generated at a second host device different from the host device as a function of (i) a user credential supplied to the second host device during a signing process between the second host device and the target device and (ii) the unique device identifier associated with the target device.

12. The host device of claim 10 , wherein the electronic processor is configured to:
receive, during a

Assignees

• Motorola Solutions Inc

Inventors

• Wong Jack

Classifications

• H04W12/63

  Location-dependent; Proximity-dependent · CPC title

• H04W12/108

  Source integrity · CPC title

• H04L9/0866

  involving user or device identifiers, e.g. serial number, physical or biometrical information, DNA, hand-signature or measurable physical characteristics · CPC title

• H04L2209/80

  Wireless · CPC title

• H04W12/71

  Hardware identity · CPC title