Device authentication

Abstract

A method for authenticating a first device capable of operating according to a wireless communications protocol, the method comprising: at a second device, receiving a first message comprising an identifier for the first device and an authorisation code associated with the first device, the first message not being received from the first device in accordance with the wireless communications protocol; at the second device, receiving a second message comprising a value, the second message being sent from the first device in accordance with the wireless communications protocol; and authenticating the first device if the authorisation code received via the first message relates, according to a predetermined algorithm, to the received value.

Description

TECHNICAL FIELD[0001]This invention relates to a method for securely authenticating a device.BACKGROUND OF THE INVENTION[0002]There is an increasing need for a variety of objects to be equipped with the ability to send and receive messages. In the case of a home, for example, it may be desirable that the objects in a room be capable of communicating with each other, and also potentially to be able to communicate with the internet or cloud. For example, the room may have a light, light switch, window and door. It may be desired that each of these objects be able to communicate with the others so that the home can be automated.[0003]To enable objects to communicate, they may be equipped with a communication device that can communicate with similar communication devices attached to other objects. For this architecture to be of greatest use, a large number of objects need to be able to communicate with each other. The result can be a network of many communication devices, each associate...

AI Technical Summary

Benefits of technology

The patent describes a method and device for authenticating a first device in a wireless communications network. The method involves receiving a first message containing an identifier for the first device and an authorisation code, and a second message containing a value. The first message is not sent from the first device in accordance with the wireless communications protocol. The method involves calculating an encryption key based on the authorisation code and a public key stored at the device, and using this key to access the network. The method can be implemented using Bluetooth Low Energy protocol. The technical effect of this patent is to provide a secure way to authenticate devices in a wireless network, ensuring that only authorised devices can access the network.

Problems solved by technology

Such complex routing requires processing power which tends to increase power consumption of the devices.

This may be undesirable because it increases the cost of devices that might be installed in a multitude locations and / or attached to a multitude of different devices.

The mesh network may be especially vulnerable to attacks when new devices added to the network.

However, the key exchange mechanism may not prevent a man-in-the middle attack.

Device M can then calculate two sets of secret keys SMC=SCM and SMB=SBM that would be used for communication between devices C and B through device M. Thus the security of the network may still be compromised using known key exchange mechanisms.

Images