Encryption Key Distribution and Network Registration System, Apparatus and Method

Abstract

A control method, apparatus, and system capable of securely distributing a shared secret network encryption key from a host to a wireless peripheral device. The sharing of the secret network encryption key is accomplished without the intervention of a man-machine interface at the peripheral. Embodiments enable a wireless device to receive and store multiple encryption keys, to select the appropriate encryption key depending on the network in range of the device, and thus to freely associate with multiple networks.

1 . An apparatus comprising: 
 a first encryption key storage unit configured to store a first encryption key;    a second encryption key storage unit configured to contain a second encryption key;    an encryption unit configured to encrypt a message containing the first encryption key, the message encrypted with the second encryption key;    a radio configured to transmit the message over a wireless network and configured to receive a subsequent message over the wireless network, the subsequent message encrypted with the first encryption key.    
   
   
       2 . The apparatus of  claim 1 , further comprising: 
 a decryption unit configured to decrypt the subsequent message received from the radio.    
   
   
       3 . The apparatus of  claim 2 , further comprising: 
 a protocol management unit configured to convey the subsequent message to a host device.    
   
   
       4 . The apparatus of  claim 1 , wherein the first encryption key is specific to a host device coupled to the radio.  
   
   
       5 . The apparatus of  claim 1 , wherein the second encryption key is symmetric and the first encryption key is symmetric.  
   
   
       6 . The apparatus of  claim 1 , wherein the second encryption key is a peripheral device encryption key and the first encryption key is a host device encryption key.  
   
   
       7 . The apparatus of  claim 6 , wherein the peripheral device encryption key is received by a host device via input by a user.  
   
   
       8 . The apparatus of  claim 7 , wherein the protocol management unit is configured to convey the subsequent message to the host device via the Universal Serial Bus protocol.  
   
   
       9 . A method comprising: 
 receiving, at a module, a second encryption key;    transmitting, from the module, a message containing a first encryption key over a wireless network, the message encrypted with the second encryption key; and    receiving, at a module, a subsequent message encrypted with the first encryption key.    
   
   
       10 . The method of  claim 9 , wherein the first encryption key is specific to a host device coupled to the module.  
   
   
       11 . The method of  claim 9 , further comprising: 
 decrypting the subsequent message with the first encryption key.    
   
   
       12 . The method of  claim 9 , wherein the second encryption key is symmetric and the first encryption key is symmetric.  
   
   
       13 . The method of  claim 9 , wherein the second encryption key is a peripheral device encryption key and the first encryption key is a host device encryption key.  
   
   
       14 . The method of  claim 13 , wherein the peripheral device encryption key is received by a host device via input by a user.  
   
   
       15 . The method of  claim 13 , wherein the host device encryption key is stored within an encryption key storage unit.  
   
   
       16 . The method of  claim 15 , wherein the encryption key storage unit that stores the host device encryption key is a read only memory.  
   
   
       17 . The method of  claim 16 , further comprising: 
 sending the decoded subsequent message to a host using a Universal Serial Bus interface.    
   
   
       18 . An apparatus comprising: 
 a first encryption key storage unit configured to contain a first encryption key;    a radio configured to receive a message over a wireless network from a host and to transmit a subsequent message over the wireless network, the received message encoded with the first encryption key and containing a second encryption key, the subsequent message encrypted with the second encryption key;    a decryption unit configured to decrypt the received message with the first encryption key;    at least one temporary key storage unit configured to store the second encryption key.    
   
   
       19 . The apparatus of  claim 18 , wherein the second encryption key is specific to the host.  
   
   
       20 . The apparatus of  claim 18 , further comprising: 
 an encryption unit configured to encrypt the subsequent message with the second encryption key.    
   
   
       21 . The apparatus of  claim 20 , wherein the radio is further configured to receive data messages over the wireless network from the host, the data message encoded with the second encryption key.  
   
   
       22 . The apparatus of  claim 20 , further comprising: 
 a protocol management unit configured to convey the data message to a peripheral device.    
   
   
       23 . The apparatus of  claim 22 , wherein the protocol management unit is configured to convey the data message to a peripheral device via the Universal Serial Bus protocol.  
   
   
       24 . The apparatus of  claim 18 , wherein the first encryption key is symmetric and the second encryption key is symmetric.  
   
   
       25 . The apparatus of  claim 18 , wherein the first encryption key is a peripheral device encryption key and the second encryption key is a host device encryption key.  
   
   
       26 . A method comprising: 
 receiving a message over a wireless network from a host, the message encoded with a first encryption key and containing a second encryption key;    decrypting the received message using the first encryption key, extracting the second encryption key;    encrypting messages with the second encryption key; and    sending the encrypted messages to the host.    
   
   
       27 . The method of  claim 26 , wherein the second encryption key is specific to the host.  
   
   
       28 . The method of  claim 26 , further comprising: 
 storing the second encryption key in an encryption key storage unit.    
   
   
       29 . The method of  claim 26 , wherein the first encryption key is symmetric and the second encryption key is symmetric.  
   
   
       30 . The method of  claim 26 , wherein the first encryption key is a peripheral device encryption key and the second encryption key is a host device encryption key.  
   
   
       31 . The method of  claim 30 , wherein the encryption key storage unit is a register.  
   
   
       32 . The method of  claim 31 , wherein the encrypted messages sent to the host are received through a Universal Serial Bus interface.