Method for generating a key in a network and user on a network and network

Patent metadata

Field	Value
Publication number	US-9571277-B2
Application number	US-201514711219-A
Country	US
Kind code	B2
Filing date	May 13, 2015
Priority date	May 13, 2014
Publication date	Feb 14, 2017
Grant date	Feb 14, 2017

Abstract

A method for generating a key in a network. The network includes at least one first user and one second user having a secured communication link to one another, and a third user, to which a secured communication link is to be established. The first user and the third user each generate a first partial value sequence from properties of the transmission channel between the first user and the third user. The second user and the third user each generate a second partial value sequence from properties of the transmission channel between the second user and the third user. In a secured part of the network, which includes at least the first and the second user, but not the third user, the key is ascertained from at least the first partial value sequence of the first user and the second partial value sequence of the second user. The key is also generated in the third user from at least the first partial value sequence and the second partial value sequence.

First claim

What is claimed is:

1. A method for generating a key in a network, the network including, in a secured network part, at least one first user and one second user having a secured communication link to one another and including a third user, to which the secured communication link is to be one of established and renewed, the method comprising:
causing the first user and the third user to each generate a first partial value sequence from a property of a transmission channel between the first user and the third user;
causing the second user and the third user to each generate a second partial value sequence from a property of a transmission channel between the second user and the third user;
ascertaining, in the secured network part of the network, the key on the basis of at least the first partial value sequence of the first user and the second partial value sequence of the second user; and
generating the key in the third user from at least the first partial value sequence and the second partial value sequence,
wherein the second user transmits the second partial value sequence to the first user, and wherein the first user generates the key from at least the first partial value sequence and the second partial value sequence,
wherein the first user additionally transmits the first partial value sequence to the second user, and wherein the second user generates the key from at least the first partial value sequence and the second partial value sequence, and
wherein the first and second partial value sequences are bit sequences determined by information calibration.

2. The method as recited in claim 1 , wherein the first user and the second user ascertain the properties of the particular transmission channel to the third user based on the same transmission signal of the third user.

3. The method as recited in claim 1 , wherein the first user and the second user ascertain the properties of the particular transmission channel to the third user from separate individual transmissions of the third user to the first user and to the second user, respectively.

4. The method as recited in claim 1 , wherein the first user conducts the first partial value sequence and the second user conducts the second partial value sequence to a central node of the network, and wherein the central node generates the key from at least the first partial value sequence and the second partial value sequence.

5. The method as recited in claim 4 , wherein the first user and the second user have a secure communication link to the central node.

6. The method as recited in claim 1 , wherein:
the first user conducts the first partial value sequence and the second user conducts the second partial value sequence to a network-external node, and
the network-external node generates the key from at least the first partial value sequence and the second partial value sequence and in turn provides the key to the network.

7. The method as recited in claim 6 , wherein the first user and the second user have a secure communication link to a network-external node.

8. The method as recited in claim 1 , wherein a property of the transmission channel includes one of a phase shift, a damping, and a variable derived from one of the phase shift and the damping.

9. The method as recited in one of claim 1 , wherein the first and second partial value sequences are ascertained channel parameters.

10. The method as recited in claim 1 , wherein the key is generated from the first and second partial value sequences by a logical linkage of the first and second partial value sequences.

11. The method as recited in claim 10 , wherein the logical linkage includes one of an XOR linkage, a concatenation of the first and second partial value sequences, and an application of a hash function.

12. A network, comprising:
at least one first network device;
at least one second network device;
a secured communication link connecting the first network device and the second network device;
a third network device, to which the secured communication link is to be established;
an arrangement for causing the first network device and the third network device to each generate a first partial value sequence from a property of a transmission channel between the first network device and the third network device;
an arrangement for causing the second network device and the third network device to each generate a second partial value sequence from a property of a transmission channel between the second network device user and the third network device;
an arrangement for ascertaining, in a secured part of the network, a key on the basis of at least the first partial value sequence of the first network device and the second partial value sequence of the second network device; and
generating the key in the third network device from at least the first partial value sequence and the second partial value sequence,
wherein the second network device transmits the second partial value sequence to the first network device, and wherein the first network device generates the key from at least the first partial value sequence and the second partial value sequence,
wherein the first network device additionally transmits the first partial value sequence to the second network device, and wherein the second network device generates the key from at least the first partial value sequence and the second partial value sequence, and
wherein the first and second partial value sequences are bit sequences determined by information calibration.

13. The network as recited in claim 12 , wherein the first network device and the second network device are base stations of a wireless network.

14. A non-transitory machine-readable storage medium having a computer program that when executed by a computer is configured to carry out a method for generating a key in a network, the network including, in a secured network part, at least one first user and one second user having a secured communication link to one another and including a third user, to which the secured communication link is to be one of established and renewed, the method comprising:
causing the first user and the third user to each generate a first partial value sequence from a property of a transmission channel between the first user and the third user;
causing the second user and the third user to each generate a second partial value sequence from a property of a transmission channel between the second user and the third user;
ascertaining, in the secured network part of the network, the key on the basis of at least the first partial value sequence of the first user and the second partial value sequence of the second user; and
generating the key in the third user from at least the first partial value sequence and the second partial value sequence,
wherein the second user transmits the second partial value sequence to the first user, and wherein the first user generates the key from at least the first partial value sequence and the second partial value sequence,
wherein the first user additionally transmits the first partial value sequence to the second user, and wherein the second user generates the key from at least the first partial value sequence and the second partial value sequence, and
wherein the first and second partial value sequences are bit sequences determined by information calibration.

15. A method for generating a key in a network, the network including, in a secured network part, at least one first user and one second user having a secured communication link to one another and including a third user, to which the secured communication lin

Assignees

• Bosch Gmbh Robert

Inventors

• Mueller Andreas

Classifications

• H04L9/0875 Primary

  based on channel impulse response [CIR] · CPC title

• H04L63/061

  for key exchange, e.g. in peer-to-peer networks (cryptographic mechanisms or cryptographic arrangements for key agreement H04L9/0838) · CPC title

• H04L63/0428

  wherein the data content is protected, e.g. by encrypting or encapsulating the payload · CPC title