Abstract:
A provisioning device is provided that communicates over a trusted out-of-band communications channel to digital electronic devices in order to exchange security data such as passwords and private or public keys, thereby establishing a secure communications network between the devices.

Description:
CROSS REFERENCE TO RELATED APPLICATION 
       [0001]    This application claims the benefit of U.S. Provisional Application Ser. No. 60/933,473, filed Jun. 5, 2007, assigned to the assignee of this application and incorporated by reference herein. 
     
    
     BACKGROUND OF THE INVENTION 
       [0002]    1. Field of the Invention 
         [0003]    Embodiments of this invention relate generally to groups of devices that work together in a network and use security methods to protect their data and/or their network configuration Embodiments of the present invention relate to the programming of security controls in the network, including passwords and security keys in groups of devices that are linked by local area networks, wide area networks, or combinations of the two. Various embodiments of the present invention can be utilized on a network based on any medium, wired or wireless, but will be described further herein in relation to a broadband power line network and/&#39;or a local area network based on power line communications. 
         [0004]    2. Background 
         [0005]    There exist today many types of consumer electronic and enterprise electronic devices that work together as a group. For example, in a home theater, the iPOD doc, DVD player, surround sound system, and video display may all interact to provide entertainment. In a cell phone, the cell phone may contain a Bluetooth transceiver, which communicates with a Bluetooth earpiece. Typically, these systems are packet-based communications networks, where data is exchanged among a number of devices, based primarily on the actions being performed at any one of the devices. In today&#39;s home entertainment and related networks, the data can primarily be categorized into two main types: Control and request and content information (whether Isochronous or asynchronous). Content includes audio and video data of various formats (MPEG1, MPEG2, MPEG3, AVI, etc.) Control and request refers to data that relates to management and control of the audio and video streams including security aspects. 
         [0006]    In recent years, there has been a great amount of interest in protecting this content data from copyright misuse or illegal distribution. The Digital Rights Management movement has significantly affected the entertainment industry, and the content users. In a related area, the Internet has been attacked by hackers who try to take information from the network or try to disrupt the networks. The general reaction to both of these types of problems is to impose a variety of security schemes that protect both content represented by the data in the network; and access to the network and/or the devices on the network. Security and privacy both require some type of secret, generally a secret password or a Key for encrypting and decryption the data. The art is mature with references to Private and Public keys that are used in encryption algorithms. The secret data has to be passed in a method that is trusted by all of the devices and users of the network. A lot of effort has been put on trying to make this complex process easy for the consumer to set up. One problem, for example, has been how to associate the cell phone with one and only one earpiece. Failure to do so, results in not being able to use one&#39;s personal equipment could result in ease dropping or theft of service. In this case, Bluetooth has a process whereby both devices have “associate buttons” that are activated at the same time thereby creating a short window of opportunity to associate. This short window of time is difficult for a hacker to anticipate so it is generally secure enough to secure the association process. In another method, a list of “willing” devices is displayed and the user is asked to select a device with which to associate. However, when the network is scattered throughout the house and the user is not within arms reach of each network device, this approach is problematic. 
       BRIEF SUMMARY OF THE INVENTION 
       [0007]    In accordance with some embodiments of the present invention, there is provided a provisioning device that communicates over a trusted out-of-band communications channel to networked devices in order to exchange secret data such as passwords and private or public keys. 
         [0008]    Embodiments of the present invention provide a convenient security-programming tool called the “provisioning device”. In one embodiment, the devices on the network are all controllable from Infrared remote control devices. The provisioning device accesses the same IR port on these networked devices to program the security parameters one each device in the network. This not only solves the problem of programming remote distributed devices, but also has the characteristics of using a very directional IR communications link, which is hard to steal or disrupt (e.g.: is “trusted”); an IR link, which does not carry the content it is helping to protect; and an IR link that does not connect to the main network itself. These last two benefits define that this device is “out-of-band”. 
         [0009]    Some embodiments of the present invention provide an apparatus for programming a group of devices or distributed devices in a communications network with security codes and keys using an out-of-band programming device. Some embodiments of the present invention provide an apparatus for programming that is portable and is IR or RF based. Some embodiments of the present invention provide an apparatus that uses the same remote control port used by the network device&#39;s associated functional remote control. 
         [0010]    The foregoing description has been provided by way of introduction, and is not intended to limit the scope of the attached claims. 
     
    
     DESCRIPTION OF THE PREFERRED EMBODIMENTS 
       [0011]    There is an unmet need to make it easier to program the security parameters of consumer electronic and enterprise electronic devices that work together as a cluster or group, which need is met by the various embodiments of the present invention described herein. In some embodiments of the present invention, security is programmed from a portable provisioning device that is small and physically similar to a USB Thumb Drive, key chain flashlight or automobile wireless key fob. In a preferred embodiment, the trusted communications channel is infrared (IR). In other preferred embodiments, different trusted communications channels can be used. Some embodiments of the present invention relate to controlling the security of the provisioning device by rendering it inactive under certain conditions. 
         [0012]    In some embodiments, the provisioning device may contain the memory and sufficient digital logic to receive and store secret data and to be able to transmit it on command. In this embodiment, the provisioning device may be a small device, the size, of example, of a USB thumb drive. This device may be provided with the purchase of the consumer electronic equipment, or may be provided by the manufacturer, installer or distributor. It can come with new equipment or be supplied with repaired or warranted equipment. For service technicians, it can be built into their service tools which may include a laptop. 
         [0013]    To initialize the provisioning device, it may be connected via an electrical interface, USB in this example, to a PC or other tool, and loaded with the appropriate information using a “upload” software application. The provisioning device may be loaded with information including, but not necessarily limited to, the security information. It can also be loaded with default or custom system parameters such as the Network ID, Device ID, HomePlug power line communications network password and other data that defines or controls the network, network access or the devices themselves. 
         [0014]    The provisioning device may also have an out-of-band communications port in it. In this embodiment, it may be an Infrared (IR) port that communicates with the IR ports already on the network devices that are also used for IR remote control (such as for volume control or content source selection). For security purposes, the protocol between the provisioning device and the network devices may be known only to the manufacturer and optionally one or more parties (e.g., other manufacturers) approved by the manufacturer. The data may be sent over a channel that is local (not part of the network) and not likely to be accessible to a hacker or other alien network device and, thus, the channel and provisioning device may be considered a trusted channel and a trusted device, respectively. 
         [0015]    When activated by the press of a button on the provisioning device, the device may provision (set up) the security parameters of the network, for example, one device at a time. New devices can be added in this way. No special network trusted radius server or internet connection to a third trusted party is necessary and the provisioning can be done by a typical user. Alternatively to the button press, any network device that is not already set up, and consequently cannot communicate with a secured network, could instead monitor the IR port for the provisioning device. If found, the device to be networked can initiate the provisioning if it thinks the conditions are trust worthy. This makes it even easier for the user to program the device. 
         [0016]    Once the provisioning is complete, a signal such as an audio or optical signal may be emitted by the networked or provisioning device so that the user knows the provisioning was successful. The provisioning device will no longer work on the networked device. To keep the system safe, the provisioning device may be deactivated after a fixed amount of time from the first use, for a fixed number of networked devices, or any other suitable limit or combination thereof. If a network device detects a threat that it is being hacked by a provisioning device, it can terminate the session, and may try to disable the provisioning device. The device may or may not be designed to be reset by a trusted party such as an installer. In some embodiments, it may be useful to allow a main device in the network, preferably one that contains all of the network setup and back up data, to program the provisioning device. For example, a special code may be entered into this network device and it can program the provisioning device over the bi-directional IR link. The provisioning tool can then be used to program other devices on the network. As before, the manufacturer has the option of causing this data to be time or use restricted, or alternatively, may offer it to the customer as a system data backup tool. 
         [0017]    When a networked device is replaced by new or repaired equipment, allowing the tool be programmed by the main network device allows it to be easily added to the network that is already secured. 
         [0018]    The various embodiments of the present invention described herein exemplify operation over a trusted IR link. It should be understood, however, that the present invention is applicable to a network based on any medium such as RF or even a special programming cable. Both wired and wireless networks, and derivatives, combinations and sub-combinations thereof, may be used in the various embodiments of the present invention as further described herein. 
         [0019]    It is, therefore, apparent that there has been provided, in accordance with the various objects and advantages of the present invention, an apparatus for (for example) connecting audio speakers to a digital network. While the various objects of this invention have been described in conjunction with preferred embodiments thereof, many alternatives, modifications, and variations will be apparent to those skilled in the art. Accordingly, it is intended to embrace all such alternatives, modifications and variations that fall within the spirit and broad scope of this specification and the appended claims. The claims presented are representative of the inventions disclosed herein. Other, unclaimed inventions are also contemplated. The inventor reserves the right to pursue such inventions in later claims.