Method and apparatus for device identifier composition engine certificate-based security and out-of-band temporary key generation for bluetooth pairing

Patent metadata

Field	Value
Publication number	US-12549382-B2
Application number	US-202318105386-A
Country	US
Kind code	B2
Filing date	Feb 3, 2023
Priority date	Feb 3, 2023
Publication date	Feb 10, 2026
Grant date	Feb 10, 2026

Abstract

An information handling system includes a hardware processor and a memory device to execute code instructions of an automatic peripheral device pairing management system pairing agent to receive, via a wireless interface adapter, a device identifier composition engine (DICE) certificate from a wireless peripheral device indicating the identity of the wireless peripheral device, the DICE certificate including a public key. The hardware processor executes computer readable program code of an out-of-band (OOB) temporary key generator agent to generate an OOB temporary key. The hardware processor executes the computer readable program code of the automatic peripheral device pairing management system pairing agent to encrypt the OOB temporary key using the public key. The hardware processor to sends the public key-encrypted OOB temporary key to the wireless peripheral device to be decrypted using a private key at the wireless peripheral device. The hardware processor executes a confirm value generation function to confirm that the OOB temporary key matches the decrypted OOB temporary key at the wireless peripheral device to automatically Bluetooth® (BT) pair the information handling system to the wireless peripheral device.

First claim

What is claimed is:

1 . An information handling system comprising:
a hardware processor; a memory device; a power management unit (PMU) to provide power to the hardware processor and memory device; the hardware processor executing computer readable program code of an automatic peripheral device pairing management system pairing agent to receive, via a wireless interface adapter, a device identifier composition engine (DICE) certificate from a wireless peripheral device indicating the identity of the wireless peripheral device, and the DICE certificate including a public key; the hardware processor executing computer readable program code of an out-of-band (OOB) temporary key generator agent to generate an OOB temporary key; the hardware processor executing the computer readable program code of the automatic peripheral device pairing management system pairing agent to encrypt the OOB temporary key using the public key; the hardware processor, via the wireless interface adapter, sending the public key-encrypted OOB temporary key to the wireless peripheral device to be decrypted using a private key at the wireless peripheral device; and the hardware processor executing a confirm value generation function to confirm that the OOB temporary key matches the decrypted OOB temporary key at the wireless peripheral device to automatically Bluetooth® (BT) pair the information handling system to the wireless peripheral device.

2 . The information handling system of claim 1 further comprising:
the hardware processor to execute the OOB temporary key generator agent to generate the OOB temporary key using a random number generator (RNG) algorithm.

3 . The information handling system of claim 1 further comprising:
the hardware processor executing computer readable program code of the automatic peripheral device pairing management system pairing agent to compare the DICE certificate against a root DICE certificate received from a backend management server prior to BT pairing with the wireless peripheral device.

4 . The information handling system of claim 1 further comprising:
the hardware processor, via the wireless interface adapter, sending the public key-encrypted OOB temporary key to the wireless peripheral device using a generic attribute profile (GATT) specification transmission.

5 . The information handling system of claim 1 further comprising:
the hardware processor executing computer readable program code of the automatic peripheral device pairing management system pairing agent to receive, from a backend management server, a correlated wireless peripheral device identification (PD ID) to the DICE certificate indicating the wireless peripheral device has been assigned to the information handling system.

6 . The information handling system of claim 1 further comprising:
the hardware processor executing computer readable program code of the automatic peripheral device pairing management system pairing agent to receive the DICE certificate via a generic attribute profile (GATT) specification transmission.

7 . The information handling system of claim 6 further comprising:
the hardware processor executing the computer readable program code of the automatic peripheral device pairing management system pairing agent to encrypt the OOB temporary key using the public key via an Rivest-Shamir-Adleman (RSA) algorithm.

8 . The information handling system of claim 1 further comprising:
the hardware processor executing computer readable program code of the automatic peripheral device pairing management system pairing agent to delete the OOB temporary key after the information handling system has been BT paired with the wireless peripheral device.

9 . An information handling system comprising:
a hardware processor; a memory device; a power management unit (PMU) to provide power to the hardware processor and memory device; the hardware processor executing computer readable program code of an automatic peripheral device pairing management system pairing agent to receive, via a wireless interface adapter, a device identifier composition engine (DICE) certificate via a generic attribute profile (GATT) specification transmission from a wireless peripheral device, the DICE certificate indicating the identity of the wireless peripheral device and wherein the DICE certificate includes a public key; the hardware processor executing computer readable program code of an out-of-band (OOB) temporary key generator agent to generate an OOB temporary key; the hardware processor executing the computer readable program code of the automatic peripheral device pairing management system pairing agent to encrypt the OOB temporary key using the public key; the hardware processor, via the wireless interface adapter, sending the public key-encrypted OOB temporary key to the wireless peripheral device to be decrypted using a private key at the wireless peripheral device; and the hardware processor executing a confirm value generation function to receive data to confirm that the OOB temporary key matches the sent OOB temporary key at the wireless peripheral device to automatically Bluetooth® (BT) pair the information handling system to the wireless peripheral device.

10 . The information handling system of claim 9 further comprising:
the hardware processor to execute the OOB temporary key generator agent to generate the OOB temporary key using a random number generator (RNG) algorithm.

11 . The information handling system of claim 9 further comprising:
the hardware processor executing the computer readable program code of the automatic peripheral device pairing management system pairing agent to encrypt the OOB temporary key using the public key via an Rivest-Shamir-Adleman (RSA) algorithm.

12 . The information handling system of claim 9 further comprising:
the hardware processor executing computer readable program code of the automatic peripheral device pairing management system pairing agent to determine that a device identification for the peripheral device that is received with the DICE certificate is confirmed via a communication with a backend management server that the peripheral device is assigned to a user identification for the information handling system.

13 . The information handling system of the claim 9 further comprising:
the hardware processor to execute the OOB temporary key generator agent to generate the OOB temporary key using a random number generator (RNG) algorithm.

14 . The information handling system of claim 9 further comprising:
the hardware processor executing computer readable program code of the automatic peripheral device pairing management system pairing agent to compare the DICE certificate against a root DICE certificate received from a backend management server prior to BT pairing with the wireless peripheral device.

15 . The information handling system of claim 9 further comprising:
the hardware processor executing computer readable program code of the automatic peripheral device pairing management system pairing agent to receive, from a backend management server, a correlated wireless peripheral device identification (PD ID) to the DICE certificate indicating the wireless peripheral device has been assigned to the information handling system.

16 . An information handling system comprising:
a hardware processor; a memory device; a power management unit (PMU) to provide power to the hardware processor and memory device; the hardware processor executing computer readable program code of an automatic peripheral device pair

Assignees

• Dell Products Lp

Inventors

• Boyapalle Anantha K
• Wong Kai Leong
• Grobelny Nicholas D

Classifications

• H04W12/037

  of the control plane, e.g. signalling traffic · CPC title

• H04L9/0869 Primary

  involving random numbers or seeds · CPC title

• H04W12/50

  Secure pairing of devices · CPC title

• H04L9/3263 Primary

  involving certificates, e.g. public key certificate [PKC] or attribute certificate [AC]; Public key infrastructure [PKI] arrangements (network architectures or network communication protocols for supporting authentication of entities using certificates in a packet data network H04L63/0823) · CPC title