IP Library Granted Patent US 9,485,093
Granted Patent B2
US 9,485,093 · App. 14/611,674 · Granted Nov 1, 2016

Push button configuration pairing

View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 9,485,093
App. No.
14/611,674
Granted
Nov 1, 2016
Kind
B2
Abstract

Systems, methods, and devices for pairing devices in a wired network are provided. One method includes receiving configuration request signals at multiple devices. The method further includes exchanging public keys between two devices, generating a shared key using the public keys, determining a protected channel key using the shared key, and establishing a protected channel between the devices using the protected channel key. The method further includes transferring privacy credentials from one device to the other using the protected channel and using the privacy credentials to pair another device to the network.

Claims (92)

1. A method comprising:

receiving configuration request input signals at a first device and a second device of a plurality of networked devices connected via a wired network;

transmitting a first public key of the first device from the first device to the second device;

transmitting a second public key of the second device from the second device to the first device;

generating a shared key at the first device and the second device using the first public key and the second public key;

determining, at each of the first device and the second device, a protected channel key using the shared key, wherein determining a protect channel key comprises extracting the protect channel key from the shared key;

establishing a protected channel between the first device and the second device using the protected channel key;

transferring privacy credentials from one of the first device or the second device to the other of the first device or the second device using the protected channel; and

using the privacy credentials to perform an admission process to pair the other of the first device or the second device to one or more other devices of the plurality of networked devices.

2. The method of claim 1 , wherein the wired network is a coaxial cable network.

3. A method comprising:

receiving configuration request input signals at a first device and a second device of a plurality of networked devices connected via a wired network, wherein the wired network is a Multimedia over Coax Alliance (MoCA) network, wherein the first device is a first MoCA device, and wherein the second device is a second MoCA device;

transmitting a first public key of the first device from the first device to the second device;

transmitting a second public key of the second device from the second device to the first device;

generating a shared key at the first device and the second device using the first public key and the second public key;

determining, at each of the first device and the second device, a protected channel key using the shared key;

establishing a protected channel between the first device and the second device using the protected channel key;

transferring privacy credentials from one of the first device or the second device to the other of the first device or the second device using the protected channel; and

using the privacy credentials to perform an admission process to pair the other of the first device or the second device to one or more other devices of the plurality of networked devices.

4. The method of claim 3 , further comprising:

exchanging configuration data between the first MoCA device and the second MoCA device; and

using the configuration data, selecting one of the first MoCA device or the second MoCA device to provide the privacy credentials to the other of the first MoCA device or the second MoCA device.

5. The method of claim 3 , wherein the step of receiving the configuration request input signals comprises detecting activation of a button at the two MoCA devices.

6. The method of claim 3 , wherein the first public key and the second public key comprise Elliptic Curve Diffie-Hellman keys.

7. The method of claim 3 , wherein the shared key comprises a 256-bit shared key, and wherein the protected channel key comprises a 128-bit key extracted from either the least significant bits or the most significant bits of the shared key.

8. The method of claim 3 , further comprising:

detecting whether a first threshold amount of time passes after receiving the configuration request input signal at the first MoCA device before receiving the second public key from the second MoCA device; and

activating a first error in response to the detecting the first threshold amount of time has passed.

9. The method of claim 8 , further comprising:

detecting whether a second threshold amount of time passes after receiving the second public key at the first MoCA device before exchange of one or more configuration parameters through the protected channel; and

activating a second error in response to the detecting the second threshold amount of time has passed.

10. The method of claim 9 , wherein receiving the configuration request input signal at the second MoCA device comprises receiving a configuration request input signal at a third MoCA device and transmitting the configuration request input signal to the second MoCA device from the third MoCA device.

11. A method comprising:

receiving a first configuration request input signal at a first device of a plurality of networked devices connected via a wired network;

receiving, at the first device, an indication that a second configuration request input signal has been received at a second device of the plurality of networked devices;

transmitting a first public key of the first device from the first device to the second device;

receiving a second public key of the second device from the second device at the first device;

generating, by the first device, a shared key using the first public key and the second public key;

determining, by the first device, a protected channel key using the shared key, wherein determining a protect channel key comprises extracting the protect channel key from the shared key;

establishing, using the first device, a protected channel between the first device and the second device using the protected channel key; and

performing, by the first device, one of:

transferring privacy credentials from the first device to the second device using the protected channel, wherein the second device is configured to use the privacy credentials to perform an admission process to pair one or more other devices of the plurality of networked devices to the second device; or

receiving, by the first device, the privacy credentials from the second device using the protected channel and performing the admission process using the privacy credentials to pair the first device to the one or more other devices.

12. A method comprising:

receiving a first configuration request input signal at a first device of a plurality of networked devices connected via a wired network;

receiving, at the first device, an indication that a second configuration request input signal has been received at a second device of the plurality of networked devices, wherein the wired network is a Multimedia over Coax Alliance (MoCA) network, wherein the first device is a first MoCA device, and wherein the second device is a second MoCA device;

transmitting a first public key of the first device from the first device to the second device;

receiving a second public key of the second device from the second device at the first device;

generating, by the first device, a shared key using the first public key and the second public key;

determining, by the first device, a protected channel key using the shared key;

establishing, using the first device, a protected channel between the first device and the second device using the protected channel key; and

performing, by the first device, one of:

transferring privacy credentials from the first device to the second device using the protected channel, wherein the second device is configured to use the privacy credentials to perform an admission process to pair one or more other devices of the plurality of networked devices to the second device; or

receiving, by the first device, the privacy credentials from the second device using the protected channel and performing the admission process using the privacy credentials to pair the first device to the one or more other devices.

13. The method of claim 12 , further comprising:

exchanging configuration data between the first MoCA device and the second MoCA device; and

using the configuration data, selecting one of the first MoCA device or the second MoCA device to provide the privacy credentials to the other of the first MoCA device or the second MoCA device.

14. The method of claim 12 , wherein the step of receiving the first configuration request input signal comprises detecting activation of a button at the first MoCA device.

15. The method of claim 12 , wherein the first public key and the second public key comprise Elliptic Curve Diffie-Hellman keys.

16. The method of claim 12 , further comprising:

detecting whether a first threshold amount of time passes after receiving the configuration request input signal at the first MoCA device before receiving the second public key from the second MoCA device; and

activating a first error in response to the detecting the first threshold amount of time has passed.

17. The method of claim 16 , further comprising:

detecting whether a second threshold amount of time passes after receiving the second public key at the first MoCA device before exchange of one or more configuration parameters through the protected channel; and

activating a second error in response to the detecting the second threshold amount of time has passed.

18. A device comprising:

a circuit configured to:

receive a first configuration request input signal;

receive an indication that a second configuration request input signal has been received at a second device connected via a wired network;

transmit a first public key to the second device;

receive a second public key from the second device;

generate a shared key using the first public key and the second public key;

determine a protected channel key using the shared key by extracting the protect channel key from the shared key;

establish a protected channel between the device and the second device using the protected channel key; and

perform one of:

transferring privacy credentials to the second device using the protected channel, wherein the second device is configured to use the privacy credentials to perform an admission process to pair one or more other devices to the second device; or

receiving the privacy credentials from the second device using the protected channel and performing the admission process using the privacy credentials to pair the device to the one or more other devices.

19. A device comprising:

a circuit configured to:

receive a first configuration request input signal;

receive an indication that a second configuration request input signal has been received at a second device connected via a wired network, wherein the wired network is a Multimedia over Coax Alliance (MoCA) network, wherein the device is a first MoCA device, and wherein the second device is a second MoCA device;

transmit a first public key to the second device;

receive a second public key from the second device;

generate a shared key using the first public key and the second public key;

determine a protected channel key using the shared key;

establish a protected channel between the device and the second device using the protected channel key; and

perform one of:

transferring privacy credentials to the second device using the protected channel, wherein the second device is configured to use the privacy credentials to perform an admission process to pair one or more other devices to the second device; or

receiving the privacy credentials from the second device using the protected channel and performing the admission process using the privacy credentials to pair the device to the one or more other devices.

20. The device of claim 18 , wherein the circuit is further configured to:

exchange configuration data between the device and the second device; and

using the configuration data, select one of the device or the second device to provide the privacy credentials to the other of the device or the second device.

Assignments (6)
CORRECTIVE ASSIGNMENT TO CORRECT THE EXECUTION DATE PREVIOUSLY RECORDED AT REEL: 047422 FRAME: 0464. ASSIGNOR(S) HEREBY CONFIRMS THE MERGER. Recorded Mar 6, 2019
From: AVAGO TECHNOLOGIES GENERAL IP (SINGAPORE) PTE. LTD.
To: AVAGO TECHNOLOGIES INTERNATIONAL SALES PTE. LIMITED
Reel/Frame 048883/0702 →
MERGER Recorded Oct 5, 2018
From: AVAGO TECHNOLOGIES GENERAL IP (SINGAPORE) PTE. LTD.
To: AVAGO TECHNOLOGIES INTERNATIONAL SALES PTE. LIMITED
Reel/Frame 047422/0464 →
TERMINATION AND RELEASE OF SECURITY INTEREST IN PATENTS Recorded Feb 3, 2017
From: BANK OF AMERICA, N.A., AS COLLATERAL AGENT
To: BROADCOM CORPORATION
Reel/Frame 041712/0001 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Feb 1, 2017
From: BROADCOM CORPORATION
To: AVAGO TECHNOLOGIES GENERAL IP (SINGAPORE) PTE. LTD.
Reel/Frame 041706/0001 →
PATENT SECURITY AGREEMENT Recorded Feb 11, 2016
From: BROADCOM CORPORATION
To: BANK OF AMERICA, N.A., AS COLLATERAL AGENT
Reel/Frame 037806/0001 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Jun 1, 2015
From: KLEIN, PHILIPPE; OHANA, YITSHAK
To: BROADCOM CORPORATION
Reel/Frame 035758/0329 →