Efficient key establishment for wireless networks

Patent metadata

Field	Value
Publication number	US-9769653-B1
Application number	US-201313958101-A
Country	US
Kind code	B1
Filing date	Aug 2, 2013
Priority date	Aug 20, 2008
Publication date	Sep 19, 2017
Grant date	Sep 19, 2017

Abstract

A method and apparatus for deriving an encryption key for use between two stations in a wireless network using information intrinsic to one of the stations, without exchanging pairwise transient keys.

First claim

What is claimed is:

1. A method comprising:
receiving, at a first network station, a data packet containing intrinsic information corresponding to a second network station joining a wireless network;
deriving an encryption key using the intrinsic information corresponding to the second network station without a four-way handshake between the first and second network stations, the encryption key usable to encrypt data to be communicated between the first and second network stations through secure communication;
encrypting data using the encryption key; and
communicating, through the secure connection, the encrypted data to the second network station.

2. The method of claim 1 , wherein the encrypted data is communicated to the second network station without exchanging pairwise transient keys with the second network station.

3. The method of claim 1 , wherein the data packet comprises a beacon signal.

4. The method of claim 1 , wherein the intrinsic information comprises a media access control (MAC) address of the second network station.

5. The method of claim 1 , wherein the wireless network does not include a central access point.

6. The method of claim 1 , wherein the wireless network comprises a mesh network.

7. The method of claim 1 , wherein the wireless network comprises one of an independent basic service set (IBSS) network, a smesh network, or a distributed link software (DLS) network.

8. A first network station in a wireless network,
the first network station configured to receive a beacon signal when a second network station joins the wireless network, the first network station comprising:
at least a memory and a processor to implement a network adaptor, the network adapter configured to:
extract information intrinsic to the second network station from the beacon signal;
derive an encryption key using the information intrinsic to the second network station without a four-way handshake between the first and second network stations, the encryption key usable to encrypt data to be communicated between the first and second network stations through secure communication; and
encrypt data for communication to the second network station using the encryption key.

9. The first network station of claim 8 , wherein the information intrinsic to the second network station comprises a media access control (MAC) address of the second network station.

10. The first network station of claim 8 , wherein the first network station is further configured to communicate the encrypted data to the second network station without exchanging pairwise transient keys with the second network station.

11. The first network station of claim 8 , wherein the wireless network does not include a central access point.

12. The first network station of claim 8 , wherein the wireless network comprises a mesh network.

13. The first network station of claim 8 , wherein the wireless network comprises one of an independent basic service set (IBSS) network, a smesh network, or a distributed link software (DLS) network.

14. A method comprising:
establishing, at a first network station, a first unique key with a second network station;
receiving information corresponding to a third network station from the second network station;
deriving a second unique key using the information corresponding to the third network station without a four-way handshake, the second unique key usable to encrypt data to be communicated between the first and third network stations through secure communication;
encrypting data using the second unique key; and
communicating, through the secure communication, the encrypted data to the third network station.

15. The method of claim 14 , wherein the information corresponding to the third network station was derived by the second network station based on prior communications between the second network station and the third network station.

16. The method of claim 14 , wherein the information corresponding to the third network station comprises a media access control (MAC) address of the third network station.

17. The method of claim 14 , wherein the first unique key is established using a four-way handshake.

18. The method of claim 14 , wherein the encrypted data is communicated to the third network station without a prior exchange of pairwise transient keys between the first network station and the third network station.

19. The method of claim 14 , wherein the wireless network comprises a mesh network.

20. The method of claim 14 , wherein the wireless network comprises one of an independent basic service set (IBSS) network, a smesh network, or a distributed link software (DLS) network.

Assignees

• Marvell Int Ltd

Inventors

• Lambert Paul A
• Huang Frank

Classifications

• H04W12/04 Primary

  Key management, e.g. using generic bootstrapping architecture [GBA] · CPC title

• H04L63/061

  for key exchange, e.g. in peer-to-peer networks (cryptographic mechanisms or cryptographic arrangements for key agreement H04L9/0838) · CPC title

• H04L9/083 Primary

  involving central third party, e.g. key distribution center [KDC] or trusted third party [TTP] · CPC title

• H04W12/71

  Hardware identity · CPC title

• H04W12/50

  Secure pairing of devices · CPC title