Method of sharing key between devices using physical access restriction

Patent metadata

Field	Value
Publication number	US-2016330182-A1
Application number	US-201615146962-A
Country	US
Kind code	A1
Filing date	May 5, 2016
Priority date	May 9, 2015
Publication date	Nov 10, 2016
Grant date	—

Abstract

A method of operating a hub used in an internet of things (IoT) network system which includes a first controller and an IoT device is provided. The method includes: performing secure pairing with the first controller using a first communication, receiving first information related to the IoT device from the first controller paired with the hub, authenticating the first controller using the first information, and performing secure pairing with the IoT device using a second communication.

First claim

1 . A method of operating a hub used in an internet of things (IoT) network system which includes a first controller and an IoT device, the method comprising:
performing secure pairing with the first controller using a first communication; receiving first information related to the IoT device from the first controller paired with the hub; authenticating the first controller using the first information; and performing secure pairing with the IoT device using a second communication.

2 . The method of claim 1 , wherein the first communication comprises at least one type of communication among near field communication (NFC) and Wi-Fi communication; and
the second communication comprises one of a wireless local area network (WLAN), a wireless personal area network (WPAN), a wireless universal serial bus (USB), ZigBee, NFC, radio-frequency identification (RFID), and a mobile cellular network.

3 . The method of claim 1 , wherein the performing the secure pairing with the first controller comprises:
transmitting a first secret value of the hub to the first controller; receiving second information from the first controller; generating and transmitting third information to the first controller; generating a first encryption key using the first secret value, the second information, and the third information; and encrypting a domain key using the first encryption key and transmitting an encrypted domain key to the first controller.

4 . The method of claim 3 , further comprising:
receiving encrypted device information from the first controller; and decrypting the encrypted device information using the first encryption key.

5 . The method of claim 3 , wherein the hub comprises an NFC tag configured to store the first secret value.

6 . The method of claim 3 , wherein in response to determining that the first information has been encrypted using the domain key decrypted by the first controller, the authenticating the first controller comprises decrypting the first information using the domain key to generate decrypted information.

7 . The method of claim 6 , wherein the performing the secure pairing with the IoT device comprises:
receiving fourth information from the IoT device; generating and transmitting fifth information to the IoT device; generating a second encryption key using the decrypted information, the fourth information, and the fifth information; and encrypting the domain key using the second encryption key and transmitting an encrypted domain key to the IoT device.

8 . The method of claim 7 , further comprising:
receiving encrypted IoT device information from the IoT device; and decrypting the encrypted IoT device information using the second encryption key.

9 . The method of claim 3 , further comprising:
receiving an encrypted first secret value generated using a domain key decrypted by the first controller; and changing the first secret value into the encrypted first secret value.

10 . The method of claim 9 , further comprising:
transmitting the encrypted first secret value to a second controller; transmitting a second decryption request to the first controller in response to a first decryption request output from the second controller; decrypting the encrypted first secret value using the domain key in response to an approval signal output from the first controller; and transmitting a decrypted first secret value to the second controller.

11 . The method of claim 10 , wherein the encrypted first secret value is transmitted to the second controller using the first communication.

12 . A method of operating a controller used in an internet of things (IoT) network system which includes a hub and an IoT device, the method comprising:
performing secure pairing with the hub; decrypting an encrypted domain key transmitted from the hub to generate a decrypted domain key during the secure pairing; receiving IoT information regarding the IoT device from the IoT device; and encrypting the IoT information using the decrypted domain key and transmitting encrypted IoT information to the hub.

13 . The method of claim 12 , wherein the performing the secure pairing with the hub and the receiving the IoT information from the IoT device are carried out a communication comprising at least one type of communication among near field communication (NFC) and Wi-Fi communication.

14 . The method of claim 12 , wherein the performing the secure pairing with the hub comprises:
receiving a secret value from the hub; generating a key using the secret value; generating and transmitting first information to the hub; receiving second information from the hub; generating an encryption key using the secret value, the first information, and the second information; and decrypting the encrypted domain key transmitted from the hub using the encryption key to generate the decrypted domain key.

15 . The method of claim 14 , further comprising:
encrypting device information regarding the controller using the decrypted domain key; and transmitting encrypted device information to the hub.

16 . The method of claim 14 , further comprising:
encrypting the secret value using the decrypted domain key; and transmitting an encrypted secret value to the hub.

17 . The method of claim 16 , further comprising:
receiving a second decryption request generated by the hub in response to a first decryption request output from a second controller; and transmitting an approval signal for instructing to decrypt the encrypted secret value to the hub in response to the second decryption request.

18 . A method of operating an internet of things (IoT) device used in an IoT network system which includes a hub and a controller, the method comprising:
transmitting a secret value of the IoT device to the controller secure-paired with the hub; generating a key using the secret value; generating and transmitting first information to the hub; receiving second information from the hub; generating an encryption key using the secret value, the first information, and the second information; and receiving an encrypted domain key from the hub and decrypting the encrypted domain key using the encryption key.

19 . The method of claim 18 , wherein the IoT device comprises a near field communication (NFC) tag configured to store the secret value.

20 . The method of claim 18 , wherein the transmitting the secret value of the IoT device comprises transmitting access information indicating a communication method between the hub and the IoT device to the controller together with the secret value.

21 . (canceled)

22 . (canceled)

Assignees

• Samsung Electronics Co Ltd
• Univ Sungkyunkwan Res & Bus

Inventors

• Jeon Sang Hoon
• Kim Hyoung Shick
• Kim Min Soo
• Park Kyung Won
• Cho Jun Sung
• Yu Jae Gwan

Classifications

• H04L63/18

  using different networks or channels, e.g. using out of band channels (cryptographic mechanisms or cryptographic arrangements for key distribution involving distinctive intermediate devices or communication paths H04L9/0827; cryptographic mechanisms or cryptographic arrangements for authentication using a plurality of channels H04L9/3215) · CPC title

• H04L63/08

  for authentication of entities (cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32) · CPC title

• H04L9/0822

  using key encryption key · CPC title

• H04W12/06

  Authentication · CPC title

• H04L63/062 Primary

  for key distribution, e.g. centrally by trusted party (cryptographic mechanisms or cryptographic arrangements for key distribution involving a central third party H04L9/0819) · CPC title