Method and system for encrypted communications

Patent metadata

Field	Value
Publication number	US-2016127331-A1
Application number	US-201614992825-A
Country	US
Kind code	A1
Filing date	Jan 11, 2016
Priority date	Mar 11, 2014
Publication date	May 5, 2016
Grant date	—

Abstract

Method and device of encrypting communication between a server and a peripheral device are disclosed. The method includes: a server receiving a session request from a control device, the session request including a predetermined device ID of a peripheral device associated with the control device; generating a first session key for encrypting and decrypting future communication between the peripheral device and the server; identifying a pre-stored encryption key corresponding to the predetermined device ID from a database, wherein the pre-stored encryption key is also pre-stored in the peripheral device; encrypting the first session key using the pre-stored encryption key; sending the encrypted first session key to the peripheral device via the control device; and encrypting communication to the peripheral device in a respective communication session using the first session key.

First claim

What is claimed is:

1 . A method of encrypting communication between a server and a peripheral device, comprising:
at the server having one or more processors and memory storing one or more programs to be executed by the one or more processors:
receiving a session request from a control device, the session request including a predetermined device ID of the peripheral device associated with the control device, and requesting a session key for encrypting communication between the peripheral device and the server;
in response to the session request, generating a first session key for encrypting and decrypting future communication between the peripheral device and the server;
in accordance with the predetermined device ID, identifying a pre-stored encryption key corresponding to the predetermined device ID from a database, wherein the pre-stored encryption key is also pre-stored in the peripheral device;
encrypting the first session key using the pre-stored encryption key;
sending the encrypted first session key to the peripheral device via the control device, wherein the encrypted first session key is configured to be decrypted by the peripheral device using the pre-stored encryption key; and
encrypting communication to the peripheral device in a respective communication session using the first session key.

2 . The method of claim 1 , further comprising:
after sending the encrypted first session key to peripheral device via the control device, receiving first communication that is sent from the peripheral device via the control device and encrypted with the first session key by the peripheral device, the first communication is accompanied by the predetermined device ID of the peripheral device; based on the predetermined device ID accompanying the first communication, identifying the first session key in accordance with a stored association between the predetermined device ID and the first session key; and with the identified first session key, decrypting the first communication that is sent from the peripheral device via the control device.

3 . The method of claim 1 , further comprising:
in response to the session request, generating a second session key different from the first session key; and sending the second session key to the peripheral device via the control device, wherein the control device retains a copy of the second session key, and wherein the peripheral device encrypts at least part of the communication to the server using the second session key and the control device decrypts the respective at least part of the communication using the retained copy of the second session key.

4 . The method of claim 1 , further comprising:
in response to the session request, generating a second session key in addition to the first session key, wherein the first session key is configured to be capable of decrypting information encrypted using the second session key, and the second session key is configured to be incapable of decrypting information encrypted using the first session key; sending the second session key to the control device; and encrypting at least part of the communication to the peripheral device using the second session key, wherein the respective at least part of the communication is configured to be decrypted by the control device using the second session key and by the peripheral device using the first session key.

5 . The method of claim 1 , further comprising:
receiving a key updating request that is encrypted with the first session key and sent from the peripheral device via the control device, the key updating request including an updated encryption key corresponding to the predetermined device ID, and the key updating request is accompanied by the predetermined device ID of the peripheral device; obtaining the updated encryption key corresponding to the predetermined device ID by decrypting the key updating request using the first session key; and replacing the pre-stored encryption key with the update encryption key in the database.

6 . The method of claim 1 , further comprising:
receiving encrypted session communication from the peripheral device via the control device; decrypting the session communication using the first session key; selecting part of the session communication in accordance with predetermined criteria; and sending the respective part of the session communication to the control device.

7 . The method of claim 1 , further comprising:
receiving a device registration request from the control device, the device registration request includes the predetermined device ID and a user identifier associated with the control device; and in response to the device registration request:
associating the predetermined device ID with the user identifier; and
processing the device registration request as the session request.

8 . A server for encrypting communication between the server and a peripheral device, comprising:
one or more processors; and memory storing one or more programs for execution by the one or more processors, the one or more programs including instructions for: receiving a session request from a control device, the session request including a predetermined device ID of the peripheral device associated with the control device, and requesting a session key for encrypting communication between the peripheral device and the server; in response to the session request, generating a first session key for encrypting and decrypting future communication between the peripheral device and the server; in accordance with the predetermined device ID, identifying a pre-stored encryption key corresponding to the predetermined device ID from a database, wherein the pre-stored encryption key is also pre-stored in the peripheral device; encrypting the first session key using the pre-stored encryption key; sending the encrypted first session key to the peripheral device via the control device, wherein the encrypted first session key is configured to be decrypted by the peripheral device using the pre-stored encryption key; and encrypting communication to the peripheral device in a respective communication session using the first session key.

9 . The server of claim 8 , wherein the operations further comprise:
after sending the encrypted first session key to peripheral device via the control device, receiving first communication that is sent from the peripheral device via the control device and encrypted with the first session key by the peripheral device, the first communication is accompanied by the predetermined device ID of the peripheral device; based on the predetermined device ID accompanying the first communication, identifying the first session key in accordance with a stored association between the predetermined device ID and the first session key; and with the identified first session key, decrypting the first communication that is sent from the peripheral device via the control device.

10 . The server of claim 8 , wherein the operations further comprise:
in response to the session request, generating a second session key different from the first session key; and sending the second session key to the peripheral device via the control device, wherein the control device retains a copy of the second session key, and wherein the peripheral device encrypts at least part of the communication to the server using the second session key and the control device decrypts the respective at least part of the communication using the retained copy of the second session key.

11 . The server of claim 8 , wherein the operations further comprise:
in response to the session request, generating a second session k

Assignees

• Tencent Tech Shenzhen Co Ltd

Inventors

• Liu Chenglin
• Liu Jinhai
• Lin Xiangyao
• Fan Liangliang

Classifications

• H04L9/0822 Primary

  using key encryption key · CPC title

• H04L67/142

  Managing session states for stateless protocols; Signalling session states; State transitions; Keeping-state mechanisms · CPC title

• H04L63/0428 Primary

  wherein the data content is protected, e.g. by encrypting or encapsulating the payload · CPC title

• H04L9/14

  using a plurality of keys or algorithms · CPC title

• H04L63/061

  for key exchange, e.g. in peer-to-peer networks (cryptographic mechanisms or cryptographic arrangements for key agreement H04L9/0838) · CPC title