Granted Patent B2

US 12,206,766 · App. 18/099,156 · Granted Jan 21, 2025

Inventors: João Miguel Maia Soares de Resende (Oporto, PT); Rolando da Silva Martins (Oporto, PT); Luís Filipe Coelho Antunes (Oporto, PT); Patrícia Raquel Vieira Sousa (Oporto, PT)

Assignees: INESC TEC—INSTITUTO DE ENGENHARIA DESISTEMAS E COMPUTADORES, TECNOLOGIA E CIÊNCIA; U.PORTO—UNIVERSIDADE DO PORTO

H04L9/0841G16Y30/10H04L63/0435H04L63/061H04L63/0869H04L67/12G06F7/582H04L2209/46H04L2209/84

Abstract

Claims (19)

1. An IoT network for establishing a peer-to-peer communication along a communications channel between a plurality of devices, wherein the plurality of devices comprise:

a transmitter for transmitting messages along the communications channel to one or more of the other ones of the plurality of devices;

a receiver for receiving messages from the communications channel from one or more of the other ones of the plurality of devices; and

an identifier file for storing secret session keys computed using symmetric keys for the communications channel between one or more of the other ones of the plurality of devices;

wherein a first device of the plurality of devices comprises a first processor and a first multi-party computation (MPC) module in said first processor, and a second device of the plurality of devices comprises a second processor and a second multi-party computation (MPC) module in said second processor;

the first device is adapted to calculate from the secret session keys a first authentication string (SAS) being a sequence of letters and numbers, and the second device is adapted to calculate from the secret session keys a second authentication string (SAS) being a sequence of letters and numbers, wherein the first device is adapted to receive the second authentication string (SAS) from the second device and the second device is adapted to receive the first authentication string from the first device;

the first multi-party computation (MPC) module in the first device is adapted to automatically validate the second SAS by comparing the second SAS with another SAS generated in the first device;

the second multi-party computation (MPC) module in the second device is adapted to automatically validate the first SAS by comparing the first SAS with another SAS generated in the first device, wherein the first multi-party computation (MPC) module and the second multi-party computation (MPC) module are configured to confirm the security of the communications channel; and

a communications channel between the first device and the second device is configured to exchange the messages between the first device and the second device.

2. The network of claim 1 , wherein the plurality of devices further comprises a storage for storing a plurality of secret session keys.

3. The network of claim 1 , wherein the plurality of devices further comprises a pseudo random number generator for generating an identifier for identifying the devices.

4. The network of claim 1 further comprising a server for providing one of the plurality of devices with an identifier of another one of the plurality of devices.

5. The network of claim 4 , wherein the server is adapted to carry out a mutual discovery of one of the plurality of devices with another one of the plurality of devices by exchanging the identifiers between the plurality of devices.

6. The network of claim 1 , wherein the multi-party computation (MPC) module is adapted to implement an equality function between the first SAS in one of the plurality of devices and a second SAS in one of the plurality of devices.

7. The network of claim 6 , wherein the equality function is adapted to compare a first input value t 1 from one of the plurality of devices with a second input value t 2 of another one of the plurality of devices.

8. The network of claim 7 , wherein the multi-party computation (MPC) module is adapted to return a value S=1 and thereby confirm the security of the communications channel if the first input value t 1 is equal to the second input value t 2 .

9. The network of claim 7 , wherein the multi-party computation (MPC) module is adapted to return the value S=0 if the first input value t 1 is not equal to the second input value t 2 .

10. The network of claim 5 , wherein the multi-party computation (MPC) module is adapted to implement the equality function after every N connection established between the first SAS in one of the plurality of devices and a second SAS in one of the plurality of devices.

11. The network of claim 1 , wherein the plurality of devices are sensor devices and/or VOIP devices.

Assignments (2)

Priority Claims (2)

Continuity (2)

References Cited (49)