Device and Method for Secure Connection

Patent metadata

Field	Value
Publication number	US-2016112386-A1
Application number	US-201514887690-A
Country	US
Kind code	A1
Filing date	Oct 20, 2015
Priority date	Oct 21, 2014
Publication date	Apr 21, 2016
Grant date	—

Abstract

An electronic device is provided. The electronic device includes a first short-range communication module configured to execute short-range communication with a second electronic device, a security module configured to store security information, and a processor configured to receive, from the second electronic device, a pairing key that registers the electronic device as being linked to the second electronic device, transmit session key generation information to the second electronic device when authentication with the second electronic device is completed based on the pairing key, generate a session key based on the session key generation information, encrypt the security information based on the session key, and transmit the encrypted information to the second electronic device.

First claim

What is claimed is:

1 . An electronic device comprising:
a first short-range communication module configured to execute short-range communication with a second electronic device; a security module configured to store security information; and a processor configured to:
receive, from the second electronic device, a pairing key that registers the electronic device as being linked to the second electronic device,
transmit session key generation information to the second electronic device when authentication with the second electronic device is completed based on the pairing key,
generate a session key based on the session key generation information,
encrypt the security information based on the session key, and
transmit the encrypted information to the second electronic device.

2 . The electronic device of claim 1 , wherein the processor is further configured to:
transmit, to the second electronic device, when a first pairing request message is received from the second electronic device, a first pairing response message together with unique information of the electronic device, and store, when the pairing key is received from the second electronic device, the pairing key to be linked to the unique information of the electronic device.

3 . The electronic device of claim 1 , wherein the processor is further configured to:
generate a first random number and transmit the generated first random number to the second electronic device, when a second pairing request message is received from the second electronic device, generate, when a second random number and a first authentication key are received from the second electronic device, a second authentication key based on the first random number, the second random number, and the pairing key, and transmit, to the second electronic device, when the first authentication key and the second authentication key are identical, a second pairing response message together with session key generation information.

4 . The electronic device of claim 3 , wherein the processor is further configured to:
generate, when the first authentication key and the second authentication key are identical, the session key based on the session key generation information.

5 . The electronic device of claim 1 , wherein the session key generation information comprises at least one of time stamp (Timestamp) information or count information.

6 . An electronic device comprising:
a first short-range communication module configured to execute short-range communication with a first electronic device; a second short-range communication module configured to execute short-range communication with a third electronic device; and a processor configured to:
transmit, when a pairing key that registers the first electronic device as being linked to the electronic device is received from a server device, the pairing key to the first electronic device,
transmit, to the server device, session key generation information received from the first electronic device,
decode encrypted security information that is received from the first electronic device based on a session key received from the server device, and
transmit the decoded information to the third electronic device.

7 . The electronic device of claim 6 , wherein the processor is further configured to:
transmit, when a first pairing response message is received together with unique information of the first electronic device, from the first electronic device, in response to a first pairing request message, the unique information of the first electronic device together with user information of the electronic device to the server device, and receive the pairing key from the server device.

8 . The electronic device of claim 6 , wherein the processor is further configured to:
transmit, when a first random number is received from the first electronic device in response to transmission of a second pairing request message, the first random number to the server device, transmit a second random number and a first authentication key received from the server device, to the first electronic device, and receive session key generation information from the first electronic device.

9 . The electronic device of claim 6 , wherein the session key generation information comprises at least one of time stamp (Timestamp) information or count information.

10 . A server device comprising:
a processor configured to:
generate and store a pairing key for registering a first electronic device as being linked to an electronic device based on unique information of the first electronic device received from the electronic device,
transmit the pairing key to the electronic device,
generate a session key identical to a session key of the first electronic device based on session key generation information of the first electronic device received from the electronic device, and
transmit the session key to the electronic device.

11 . The server device of claim 10 , wherein the processor is further configured to:
perform, when user information of the electronic device and unique information of the first electronic device are received from the electronic device, perform authentication with respect to the electronic device based on the user information of the electronic device, and generate and store, when the authentication with respect to the electronic device is completed, the pairing key based on a master key corresponding to the unique information of the first electronic device.

12 . The server device of claim 10 , wherein the processor is further configured to:
generate, when a first random number is received from the electronic device, a second random number, generate a first authentication key based on the first random number, the second random number, and the pairing key, transmit the second random number and the first authentication key to the electronic device, and receive session key generation information of the first electronic device from the electronic device.

13 . The server device of claim 10 , wherein the session key generation information comprises at least one of time stamp (Timestamp) information or count information.

14 . A secure connection method of an electronic device, the method comprising:
receiving a pairing key that registers the electronic device as being linked to a second electronic device, from the second electronic device that is connected over a first short-range communication; transmitting session key generation information to the second electronic device when authentication with respect to the second electronic device is completed based on the pairing key; generating a session key based on the session key generation information, encrypting security information through the session key; and transmitting the encrypted information to the second electronic device.

15 . The method of claim 14 , wherein the receiving of the pairing key comprises:
transmitting, to the second electronic device, when a first pairing request message is received from the second electronic device, a first pairing response message together with unique information of the electronic device; and storing, when the pairing key is received from the second electronic device, the pairing key to be linked to the unique information of the electronic device.

16 . The method of claim 14 , wherein the transmitting of the session key generation information comprises:
generating a first random number and transmitting the first random number to the second electronic device, when a second pairing request

Assignees

• Samsung Electronics Co Ltd

Inventors

• Park Chol-Seo
• Kim Eun-Jik

Classifications

• H04W12/06

  Authentication · CPC title

• H04L63/0853 Primary

  using an additional device, e.g. smartcard, SIM or a different communication terminal (cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234) · CPC title

• H04W12/02

  Protecting privacy or anonymity, e.g. protecting personally identifiable information [PII] · CPC title

• H04L9/0869 Primary

  involving random numbers or seeds · CPC title

• H04W12/04 Primary

  Key management, e.g. using generic bootstrapping architecture [GBA] · CPC title