Low power device with encryption
A server is in communication with a low power device. The server has a handshake key (Kh) with a key exchange that provides for a communication session between a mobile device and the low power device. The mobile device does not have the (Kh). A user mobile device is in communication with the server and uses a cipher to provide a secured communication between the mobile device and the low power device.
1. A system for secure communication in a low power device that communicates with small payloads, comprising:
the low power device that communicates with small payloads;
a server in communication with the low power device that communicates with small payloads, the server having a handshake key (Kh) with a key exchange that provides for a communication session between a mobile device and the low power device, wherein the mobile device does not have the (Kh); and
the mobile device configured to communicate with the server and using a cipher to provide a secured communication between the mobile device and the low power device, wherein a communication is initialized by generating a session nonce (Ns) on the mobile device, the (Kh) is a shared secret known to the low power device and to an entity encrypting the nonce that includes the server, the low power device modifies the nonce and returns a modified value to the mobile device, an entity with the server has the (Kh), decrypts a session key and the mobile device uses that to encrypt subsequent communication, wherein the low power device generates the session (Kh) and provides for secure communication and when the low power device is assembled, and at least one random number is provisioned on the mobile device.
2. The system of claim 1 , wherein cipher blocks chaining is utilized for encryption to provide the secured communication.
3. The system of claim 1 , wherein the (Kh) can be common to all low power devices of a given model.
4. The system of claim 3 , wherein the (Kh) is a shared secret between the server and all low power devices.
5. The system of claim 3 , wherein the (Kh) is exchanged for a unit-specific unit key (Kh).
6. The system of claim 5 , wherein the (Kh) is a random number.
7. The system of claim 6 , wherein the server associates the (Kh) with a unique identification of the low power device.
8. The system of claim 7 , wherein the server responds to the mobile device with a unit key encrypted using an open block cipher.
9. The system of claim 8 , wherein the server sends the (Kh) to the low power device and stores it in a non-volatile memory, with the (Kh) used as a handshake key.
10. The system of claim 9 , wherein the mobile device generates two random numbers that are communicated with the server to create one/half of the (Kh), and in response the server generates one or more random numbers to create a second half of the (Kh), wherein for each of a session the server creates a different set of one or more numbers for the second half of the (Kh).
11. The system of claim 10 , wherein in response to the server creating the second half of the (Kh) the mobile device functions without having the (Kh).
12. The system of claim 11 , wherein the mobile device generates a checksum.
13. The system of claim 11 , wherein the mobile device creates a request for a private communication and in response the server creates a second half of the (Kh) without the mobile device having the (Kh).
14. The system of claim 13 , wherein in response to transmission of the (Kh) a session is initiated.
15. The system of claim 11 , wherein a production of half of the (Kh) by the mobile device is an initiation of a request for packet for a private communication and thereafter a validation of a source is conducted.
16. The system of claim 11 , wherein a third party mobile device never has on its mobile device an encryption for the low power device.
17. A method for secure communication in a low power device that communicates with small payloads, comprising:
providing a low power device;
using a server to communicate with the low power device, the server having a handshake key (Kh) with a key exchange that provides for a communication session between a mobile device and the low power device, wherein the mobile device does not have the (Kh);
using a cipher to provide a secured communication between the mobile device and the low power device; and
wherein a communication is initialized by generating a session nonce (Ns) on the mobile device, the (Kh) is a shared secret known to the low power device and to an entity encrypting the nonce that includes the server, the low power device modifies the nonce and returns a modified value to the mobile device, an entity with the server has the (Kh), decrypts a session key and the mobile device uses that to encrypt subsequent communication, wherein the low power device generates the session (Kh) and provides for secure communication and when the low power device is assembled, and at least one random number is provisioned on the mobile device.
18. The method of claim 17 , wherein the (Kh) can be common to all low power devices of a given low power model.
19. The method of claim 17 , wherein the (Kh) is a shared secret between the server and all low power devices of a model class.
20. The method of claim 17 , wherein the (Kh) is exchanged for a unit-specific unit key (Kh).
21. The method of claim 17 , wherein the (Kh) is a random number.
22. The method of claim 17 , wherein the server associates the (Kh) with a unique identification of the low power device.
23. The method of claim 17 , wherein the server responds to the mobile device with a unit key encrypted using an open block cipher.
24. The method of claim 17 , wherein the server sends the (Kh) to the lock and the lock stores it in a non-volatile memory, with the (Kh) used as a handshake key.
25. The method of claim 24 , wherein the mobile device generates two random numbers that are communicated with the server to create one/half of the (Kh), and in response the server generates one or more random numbers to create a second half of the (Kh), wherein for each of a session the server creates a different set of one or more numbers for the second half of the (Kh).
26. The method of claim 25 , wherein in response to the server creating the second half of the (Kh) the mobile device functions without having the (Kh).
27. The method of claim 25 , wherein a production of half of the (Kh) by the mobile device is an initiation of a request for packet for a private communication and thereafter a validation of a source is conducted.
28. The method of claim 25 , wherein a third party mobile device never has on its mobile device an encryption for the low power device.
29. The method of claim 17 , wherein the mobile device generates a checksum.
30. The method of claim 17 , wherein the mobile device creates a request for a private communication and in response the server creates a second half of the (Kh) without the mobile device having the (Kh).
31. The method of claim 17 , wherein in response to transmission of the (Kh) a session is initiated.