System and method for establishing bearer-independent and secure connections
View Patent ↗A system and method for efficiently enabling local security connectivity between electronic devices over multiple bearers. Electronic devices are configured to advertise, over each bearer, their respective configuration parameters for each bearer. After a connection has been established between the electronic devices over a first bearer, the two electronic devices use the first bearer to establish connections over the other bearers using the configuration parameters contained in the advertisements and advertised over the first bearer. Shared keys are established for the other bearers either using keys derived from the first shared key or by using the first secure connection as an out-of-band channel. The present invention also provides for the creation of an ad hoc WLAN connection once a Bluetooth connection has been established.
1. A method comprising:
establishing, by a first electronic device, a connection with a second electronic device over a first radio technology;
receiving, at the first electronic device, a first advertisement from the second electronic device over the first radio technology, the first advertisement including configuration parameters for a second radio technology, which is supported by the second electronic device; and
using the configuration parameters received in the first advertisement to establish a secure connection over the second radio technology between the first and second electronic devices, wherein the first radio technology and the second radio technology are different radio technologies.
2. The method of claim 1 , further comprising transmitting, from the first electronic device, a second advertisement to the second electronic device over the first radio technology, wherein the second advertisement includes configuration parameters for one or more third radio technologies, which are supported by the first electronic device, and wherein the configuration parameters transmitted in the second advertisement enable the second electronic device to establish a connection over at least one of the third radio technologies between the first and second electronic devices.
3. The method of claim 1 , wherein the first radio technology and the second radio technology are each selected from a group consisting of WLAN, Bluetooth, Wireless USB, and WiNet, and wherein the first and second radio technologies are each different ones of the group.
4. The method of claim 1 , further comprising:
before establishing the secure connection over the second radio technology, establishing a first shared key to enable secure transmissions over the first radio technology; and
using the first shared key to derive one or more additional shared keys for enabling secure transmissions over the second radio technology.
5. The method of claim 1 , further comprising:
before establishing the secure connection over the second radio technology, establishing a first shared key to enable secure transmissions over the first radio technology; and
using the connection over the first radio technology as an out-of-band channel to establish one or more additional shared keys for enabling secure transmissions over the second radio technology.
6. The method of claim 1 , wherein the configuration parameters include information regarding one of supported bearers, supported association models, device identifiers, channels, and host friendly names.
7. The method of claim 1 , wherein the configuration parameters include information required to enable the establishment of a WLAN connection.
8. The method of claim 1 , wherein the configuration parameters include information required to enable the establishment of a WUSB connection.
9. The method of claim 1 , wherein the configuration parameters include information required to enable the establishment of a WiNet connection.
10. The method of claim 1 , wherein the configuration parameters include information required to enable the establishment of a Bluetooth connection.
11. A non-transitory memory having stored thereon computer program code, the non-transitory memory and computer program code configured to, with a processor, cause an apparatus to:
establish a connection with an electronic device over a first radio technology;
receive a first advertisement from the electronic device over the first radio technology, the first advertisement including configuration parameters for a second radio technology, which is supported by the electronic device; and
use the configuration parameters received in the first advertisement to establish a secure connection over the second radio technology between the apparatus and the electronic device, wherein the first radio technology and the second radio technology are different radio technologies.
12. The non-transitory memory of claim 11 , wherein the non-transitory memory and computer program code are further configured to, with the processor, cause the apparatus to:
transmit a second advertisement to the electronic device over the first radio technology, wherein the second advertisement includes configuration parameters for one or more third radio technologies, which are supported by the apparatus, and wherein the configuration parameters transmitted in the second advertisement enable the electronic device to establish a connection over at least one of the third radio technologies between the apparatus and the electronic device.
13. The non-transitory memory of claim 11 , wherein the non-transitory memory and computer program code are further configured to, with the processor, cause the apparatus to:
before establishing the secure connection over the second radio technology, establish a first shared key to enable secure transmissions over the first radio technology; and
use the first shared key to derive additional shared keys for enabling secure transmissions over the second radio technology.
14. The non-transitory memory of claim 11 , wherein the non-transitory memory and computer program code are further configured to, with the processor, cause the apparatus to:
before establishing the secure connection over the second radio technology, establish a first shared key to enable secure transmissions over the first radio technology; and
use the connection over the first radio technology as an out-of-band channel to establish one or more additional shared keys for enabling secure transmissions over the radio technology.
15. The non-transitory memory of claim 11 , wherein the configuration parameters include information regarding one of supported bearers, supported association models, device identifiers, channels, and host friendly names.
16. The non-transitory memory of claim 11 , wherein the configuration parameters include information required to enable the establishment of a WLAN connection.
17. The non-transitory memory of claim 11 , wherein the configuration parameters include information required to enable the establishment of a WUSB connection.
18. The non-transitory memory of claim 11 , wherein the configuration parameters include information required to enable the establishment of a WiNet connection.
19. The non-transitory memory of claim 11 , wherein the configuration parameters include information required to enable the establishment of a Bluetooth connection.
20. An apparatus, comprising:
a processor; and
a memory including computer program code, the memory and the computer program code configured to, with the processor, cause the apparatus to:
establish a connection with an electronic device over a first radio technology;
receive a first advertisement from the electronic device over the first radio technology, the first advertisement including configuration parameters for a second radio technology, which is supported by the electronic device; and
use the configuration parameters received in the first advertisement to establish a secure connection over the second radio technology between the apparatus and the electronic device, wherein the first radio technology and the second radio technology are different radio technologies.
21. The apparatus of claim 20 , wherein the memory and computer program code are further configured to, with the processor, cause the apparatus to transmit a second advertisement to the electronic device over the first radio technology, wherein the second advertisement includes configuration parameters for one or more third radio technologies, which are supported by the apparatus, and wherein the configuration parameters transmitted in the second advertisement enable the electronic device to establish a connection over at least one of the third radio technologies between the apparatus and the electronic device.
22. The apparatus of claim 20 , wherein the memory and computer program code are further configured to, with the processor, cause the apparatus to:
before establishing the secure connection over the second radio technology, establish a first shared key to enable secure transmissions over the first radio technology; and
use the first shared key to derive one or more additional shared keys for enabling secure transmissions over the second radio technology.
23. The apparatus of claim 20 , wherein the memory and computer program code are further configured to, with the processor, cause the apparatus to:
before establishing the secure connection over the second radio technology, establish a first shared key to enable secure transmissions over the first radio technology; and
use the connection over the first radio technology as an out-of-band channel to establish one or more additional shared keys for enabling secure transmissions over the second radio technology.
24. The apparatus of claim 20 , wherein the configuration parameters include information regarding one of supported bearers, supported association models, device identifiers, channels, and host friendly names.
25. The apparatus of claim 20 , wherein the configuration parameters include information required to enable the establishment of a WLAN connection.
26. The apparatus of claim 20 , wherein the configuration parameters include information required to enable the establishment of a WUSB connection.
27. The apparatus of claim 20 , wherein the configuration parameters include information required to enable the establishment of a WiNet connection.
28. The apparatus of claim 20 , wherein the configuration parameters include information required to enable the establishment of a Bluetooth connection.