Source: http://patents.com/us-8855310.html
Timestamp: 2019-09-17 13:04:58
Document Index: 537553535

Matched Legal Cases: ['Application No. 2', 'Application No. 06113903', 'Application No. 06113903', 'Application No. 2', 'Application No. 06113903', 'Application No. 2', 'Application No. 2', 'Application No. 2']

US Patent # 8,855,310. System and method for exchanging encryption keys between a mobile device and a peripheral device - Patents.com
United States Patent 8,855,310
Kirkup , et al. October 7, 2014
Kirkup; Michael Grant (Waterloo, CA), Brown; Michael Kenneth (Fergus, CA), Brown; Michael Stephen (Kitchener, CA)
Kirkup; Michael Grant
Brown; Michael Stephen
Family ID: 1000000714989
13/192,898
US 20110280401 A1 Nov 17, 2011
11432418 May 12, 2006 8005223
Current U.S. Class: 380/270 ; 713/171
Current CPC Class: H04L 9/0844 (20130101); H04W 12/04 (20130101); H04W 84/18 (20130101); H04L 2209/80 (20130101); H04W 76/02 (20130101)
Current International Class: H04K 1/00 (20060101); H04L 9/32 (20060101)
Field of Search: ;713/150,168,171,18 ;380/270,204,244,274
5363447 November 1994 Rager et al.
6122736 September 2000 Vanstone et al.
6799517 October 2004 Cahill
6957342 October 2005 Vatanen
7379551 May 2008 Chan et al.
7496347 February 2009 Puranik
7643633 January 2010 Orr et al.
8005223 August 2011 Kirkup et al.
8185870 May 2012 Burdick et al.
8269612 September 2012 Horky et al.
8316416 November 2012 Brown et al.
2002/0122591 September 2002 Miller et al.
2002/0133704 September 2002 Nendell et al.
2003/0004881 January 2003 Shinzaki et al.
2003/0051139 March 2003 Kubota
2003/0099353 May 2003 Goh et al.
2003/0103607 June 2003 Feakes
2003/0183691 October 2003 Lahteenmaki et al.
2003/0185398 October 2003 Hypponnen
2004/0123160 June 2004 Mizrah
2004/0161111 August 2004 Sherman
2004/0228484 November 2004 Yanagisawa
2005/0050322 March 2005 Mizrah
2005/0069137 March 2005 Landrock
2005/0125673 June 2005 Cheng et al.
2005/0160479 July 2005 Kubota
2005/0251451 November 2005 Tan et al.
2006/0090073 April 2006 Steinberg et al.
2006/0093138 May 2006 Durand et al.
2006/0109505 May 2006 Ha et al.
2006/0168264 July 2006 Baba et al.
2006/0176281 August 2006 Bennett et al.
2006/0178131 August 2006 Huotari et al.
2006/0190730 August 2006 Iwamura
2006/0225126 October 2006 Brown et al.
2006/0236117 October 2006 Lazaridis et al.
2006/0291663 December 2006 Aissi et al.
2007/0266247 November 2007 Kirkup et al.
2008/0252603 October 2008 Dietz et al.
2011/0199295 August 2011 Chen et al.
2013/0016833 January 2013 Brown et al.
2546388 Nov 2007 CA
2587576 Nov 2007 CA
1253500 Oct 2002 EP
1855177 Nov 2009 EP
0072506 Nov 2000 WO
Selectsoft Publishing: "typing tutor7", 1996, XP002266910, p. 8, paragraph 1. cited by applicant .
Canadian First Office Action. Application No. 2,587,576. Dated: May 4, 2010. cited by applicant .
European Search and Examination Report. Application No. 06113903.6. Dated: Oct. 30, 2006. cited by applicant .
European Examination Report. Application No. 06113903.6. Dated: Jun. 11, 2008. cited by applicant .
Amendment. Co-pending U.S. Appl. No. 11/432,414. Dated: Mar. 11, 2010. cited by applicant .
Request for Continued Examination (RCE). Co-pending U.S. Appl. No. 11/432,414. Dated: Mar. 11, 2010. cited by applicant .
Office Action. Co-pending U.S. Appl. No. 11/432,414. Dated: May 24, 2010. cited by applicant .
Amendment. Co-pending U.S. Appl. No. 11/432,414. Dated: Sep. 23, 2010. cited by applicant .
Amendment After Final. Co-pending U.S. Appl. No. 11/097,282. Dated: Dec. 7, 2009. cited by applicant .
Advisory Action. Co-pending U.S. Appl. No. 11/097,282. Dated: Dec. 16, 2009. cited by applicant .
Notice of Appeal. Co-pending U.S. Appl. No. 11/097,282. Dated: Apr. 6, 2010. cited by applicant .
Amendment. Co-pending U.S. Appl. No. 11/097,282. Dated: Oct. 5, 2010. cited by applicant .
Request for Continued Examination (RCE). Co-pending U.S. Appl. No. 11/097,282. Dated: Oct. 5, 2010. cited by applicant .
Response. Co-pending U.S. Appl. No. 11/432,414. Dated: Jun. 8, 2011. cited by applicant .
Response and RCE. Co-pending U.S. Appl. No. 11/097,282. Dated: Jun. 17, 2011. cited by applicant .
Office Action. Co-pending U.S. Appl. No. 11/432,414. Dated: Mar. 17, 2011. cited by applicant .
Office Action. Co-pending U.S. Appl. No. 11/097,282. Dated: Oct. 27, 2010. cited by applicant .
Response/Amendment. Co-pending U.S. Appl. No. 11/097,282. Dated: Jan. 27, 2011. cited by applicant .
Final Office Action. Co-pending U.S. Appl. No. 11/097,282. Dated: Feb. 17, 2011. cited by applicant .
Final Office Action. Co-pending U.S. Appl. No. 11/432,414. Dated: Dec. 8, 2010. cited by applicant .
Response/Amendment. Co-pending U.S. Appl. No. 11/432,414. Dated: Dec. 22, 2010. cited by applicant .
Request for Continued Examination (RCE). Co-pending U.S. Appl. No. 11/432,414. Dated: Dec. 22, 2010. cited by applicant .
Notice of Allowance. Canadian Application No. 2,587,576. Dated: Jan. 5, 2011. cited by applicant .
European Communication Under Rule 71(3) EPC. Application No. 06113903.6. Dated: Feb. 11, 2009. cited by applicant .
United States Office Action. Co-pending U.S. Appl. No. 11/432,414. Dated: Jan. 7, 2010. cited by applicant .
Amendment. Co-pending U.S. Appl. No. 11/432,414. Dated: Sep. 17, 2009. cited by applicant .
Amendment. Co-pending U.S. Appl. No. 11/097,282. Dated: Dec. 7, 2009. cited by applicant .
United States Final Office Action. Co-pending U.S. Appl. No. 11/097,282. Dated: Oct. 6, 2009. cited by applicant .
United States Office Action. Co-pending U.S. Appl. No. 11/432,414. Dated: Jun. 17, 2009. cited by applicant .
Amendment. Co-pending U.S. Appl. No. 11/097,282. Dated: Jul. 20, 2009. cited by applicant .
United States Office Action. Co-pending U.S. Appl. No. 11/097,282. Dated: Feb. 18, 2009. cited by applicant .
Request for Continued Examination. Co-pending U.S. Appl. No. 11/097,282. Dated: Jan. 15, 2009. cited by applicant .
Amendment. Co-pending U.S. Appl. No. 11/097,282. Dated: Jan. 15, 2009. cited by applicant .
Advisory Action. Co-pending U.S. Appl. No. 11/097,282. Dated: Dec. 24, 2008. cited by applicant .
Amendment. Co-pending U.S. Appl. No. 11/097,282. Dated: Dec. 15, 2008. cited by applicant .
Amendment. Issued in co-pending U.S. Appl. No. 11/097,282. Dated: Aug. 1, 2008. cited by applicant .
Final Office Action. Issued in co-pending U.S. Appl. No. 11/097,282. Dated: Oct. 17, 2008. cited by applicant .
United States Office Action. Issued in co-pending U.S. Appl. No. 11/097,282. Dated: Apr. 2, 2008. cited by applicant .
Co-pending U.S. Appl. No. 11/432,414, "System and Method for Exchanging Encryption Keys Between a Mobile Device and a Peripheral Output Device", Filed May 12, 2006. cited by applicant .
Co-pending U.S. Appl. No. 11/097,282, "Securely Using a Display to Exchange Information", Filed Apr. 4, 2005. cited by applicant .
Anonymous "Connecting Your Devices" 2006. Retrieved from Internet: http://bluetooth.com/bluetooth/connect/devices. cited by applicant .
CanSec West @Stake, OllieWhitehouse Apr. 21-23, 2004 Vancouver. Retrieved from Internet: http://cansecwest.com/csw04/csw04-whitehouse.pdf. cited by applicant .
Anonymous "Wireless Ergonomic Keyboard w/Integrated Touch Pad" 2003. Retrieved from Internet: http://www.shouldexist.org/story/2003/4/26/35326/1601. cited by applicant .
KSI "Custom Products" Retrieved from Internet: http://www.ksikeyboards.com/customprod/custom.html. cited by applicant .
Hewlett-Packard "HP Business Inkjet 1200 Series Printer" Retrieved from Internet: http://h10010.www1.hp.com/wwpc/pscmisc/vac/us/product.sub.--pdf- s/411179.pdf. cited by applicant .
Frank Stajano and Ross Anderson, The Resurecting Duckling: security Issues for Ad-hoc wireless Networks, 1999, Springerverlag Berlin Heidelbeg. p. 1-11. cited by applicant .
David Holmes, Bluetooth developer conference, Director 3G applications AT & T wireless services, 2000, p. 1-10. cited by applicant .
Final Office Action. Co-pending U.S. Appl. No. 11/432,414. Dated: Jul. 18, 2011. cited by applicant .
United States Amendment for Co-pending U.S. Appl. No. 11/432,414, dated Nov. 1, 2012. cited by applicant .
United States Office Action for Co-pending U.S. Appl. No. 11/432,414, dated Aug. 15, 2012. cited by applicant .
United States Request for Continued Examination for Co-pending U.S. Appl. No. 11/432,414, dated Oct. 6, 2011. cited by applicant .
United States Reply for Co-pending U.S. Appl. No. 11/432,414, dated Oct. 6, 2011. cited by applicant .
United States Notice of Allowance and Examiner Initiated Interview Summary for Co-pending U.S. Appl. No. 11/097,282, dated Jun. 12, 2012. cited by applicant .
United States Request for Continued Examination for Co-pending U.S. Appl. No. 11/097,282, dated Mar. 2, 2012. cited by applicant .
United States Amendment for Co-pending U.S. Appl. No. 11/097,282, dated Mar. 2, 2012. cited by applicant .
United States Final Office Action for Co-pending U.S. Appl. No. 11/097,282, dated Dec. 30, 2012. cited by applicant .
United States Amendment for Co-pending U.S. Appl. No. 11/097,282, dated Dec. 10, 2011. cited by applicant .
United States Non-Final Office Action for Co-pending U.S. Appl. No. 11/097,282, dated Sep. 21, 2011. cited by applicant .
United States Request for Continued Examination for Co-pending U.S. Appl. No. 11/097,282, dated Jun. 17, 2011. cited by applicant .
United States Response for Co-pending U.S. Appl. No. 11/097,282, dated Jun. 17, 2011. cited by applicant .
United States Non-Final Office Action for Co-pending U.S. Appl. No. 11/097,282, dated Feb. 17, 2011. cited by applicant .
Canadian Office Action for Canadian Patent Application No. 2,546,488 dated Feb. 9, 2010. cited by applicant .
Canadian Voluntary Amendment for Canadian Patent Application No. 2,546,488 dated Nov. 4, 2010. cited by applicant .
Co-pending U.S. Appl. No. 13/616,789, for "Securely Using a Display to Exchange Information", filed Sep. 14, 2012. cited by applicant .
Office Action. U.S. Appl. No. 13/616,789. Dated: Jul. 26, 2013. cited by applicant .
Hewlett-Packard "HP Business Inkjet 1200 Series Printer", Retrieved from the Internet on Oct. 8, 2013, http://h10010.www1.hp.com/wwpscmisc/vac/us/product.sub.--pdfs/411179.pdf. cited by applicant .
KSI "Custom Products", dated May 12, 2006, retrieved from the Internet on Oct. 8, 2013, http://www.ksikeyboards.com/customprod/custom.html. cited by applicant .
Request for Continued Examination (RCE). U.S. Appl. No. 11/432,414. Dated: Oct. 9, 2013. cited by applicant .
Notice of Allowance. U.S. Appl. No. 11/432,414. Dated: Sep. 20, 2013. cited by applicant .
Examiner-Initiated Interview Summary. U.S. Appl. No. 11/432,414. Dated: Sep. 20, 2013. cited by applicant .
United States Amendment After Final for U.S. Appl. No. 11/432,414, dated May 7, 2013. cited by applicant .
United States Final Office Action for U.S. Appl. No. 11/432,414, dated Mar. 12, 2013. cited by applicant .
United States Final Office Action for U.S. Appl. No. 11/432,414, dated Jul. 18, 2011. cited by applicant .
Canadian Notice of Allowance for Canadian Patent Application No. 2,546,388:dated Nov. 5, 2010. cited by applicant .
Prosecution documents for U.S. Appl. No. 11/432,418 issued to Patent No. 8,005,223. cited by applicant .
Advisory Action for U.S. Appl. No. 11/432,414, dated May 29, 2013. cited by applicant .
Amendment for U.S. Appl. No. 11/432,414, dated Jun. 11, 2013. cited by applicant .
Request for Continued Examination for U.S. Appl. No. 11/432,414, dated Jun. 11, 2013. cited by applicant .
Prosecution documents for U.S. Appl. No. 11/097,282 issued to Patent No. 8,316,416. cited by applicant .
Notice of Allowance. U.S. Appl. No. 11/432,414. Dated: Dec. 5, 2013. cited by applicant.
This application is a continuation of, and claims priority to, prior U.S. patent application Ser. No. 11/432,418, filed on May 12, 2006, the entirety of which is hereby incorporated by reference.
1. A method by a computing device of providing additional security over an established wireless connection between the computing device and a peripheral device, the method comprising: determining that a pairing process between the computing device and the peripheral device is complete; the computing device entering into an additional security operational mode; the computing device triggering transmission of a command to the peripheral device over the wireless connection to cause the peripheral device to enter the additional security operational mode, or the computing device receiving a command transmitted from the peripheral device over the wireless connection before the computing device enters into the additional security operational mode; after the pairing process is complete: automatically generating an encryption key at the computing device in a binary form; at the computing device, converting the encryption key in the binary form into a number comprising fewer alphanumeric digits than the encryption key in the binary form; at the computing device, displaying the number comprising fewer alphanumeric digits on a display of the computing device, for entry at the peripheral device; and at the computing device, encrypting data transmitted to the peripheral device or decrypting data received from the peripheral device over the wireless connection, using the encryption key and in accordance with an encryption algorithm.
5. The method of claim 1, further comprising generating a new encryption key at the computing device and repeating the converting and the displaying in accordance with a pre-defined schedule, without repeating, the pairing process.
6. The method of claim 1, further comprising generating a new encryption key at the computing device and repeating the converting and the displaying periodically, in accordance with a pre-defined frequency, without repeating the pairing process.
7. The method of claim 1, further comprising generating a new encryption key at the computing device and repeating the converting and the displaying in response to a user request, without repeating the pairing process.
10. A computing device configured to provide additional security over an established wireless connection between the computing device and a peripheral device, the computing device comprising: a processor and a memory, wherein the processor of the computing device is configured to: determine that a pairing process between the computing device and the peripheral device is complete; place the computing device into an additional security operational mode; trigger transmission of a command to the peripheral device over the wireless connection to cause the peripheral device to enter the additional security operational mode, or receive a command transmitted from the peripheral device over the wireless connection before placing the computing device into the additional security operational mode; after the pairing process is complete: automatically generate an encryption key at the computing device in a binary form; convert the encryption key in the binary form into a number comprising fewer alphanumeric digits than the encryption key in the binary form; display the number comprising fewer alphanumeric digits on a display of the computing device, for entry at the peripheral device; and encrypt data transmitted to the peripheral device or decrypt data received from the peripheral device over the wireless connection, using the encryption key and in accordance with an encryption algorithm.
11. A method by a peripheral device of providing additional security over an established wireless connection between a computing device and the peripheral device, the method comprising: determining that a pairing process between the computing device and the peripheral device is complete; the peripheral device entering into an additional security operational mode; the peripheral device triggering transmission of a command to the computing device over the wireless connection to cause the computing device to enter the additional security operational mode, or the peripheral device receiving a command transmitted from the computing device over the wireless connection before the peripheral device enters into the additional security operational mode; after the pairing process is complete: receiving input via the peripheral device, wherein the input is a number comprising alphanumeric digits; at the peripheral device, converting the number into an encryption key in binary form having more digits than the number; and at the peripheral device, encrypting data transmitted to computing device or decrypting data received from the computing device over the wireless connection, using the encryption key and in accordance with an encryption algorithm.
15. The method of claim 11, further comprising, receiving new input at the computing device and repeating the converting in accordance with a pre-defined schedule, without repeating the pairing process.
16. The method of claim 11, further comprising receiving new input at the computing device and repeating the converting periodically, in accordance with a pre-defined frequency, without repeating the pairing process.
17. The method of claim 11, further comprising receiving new input at the computing device and repeating the converting in response to a user request, without repeating the pairing process.
19. The method of claim 11, wherein the peripheral device comprises ,a keyboard.
20. A peripheral device configured to provide additional security over an established wireless connection between a computing device and the peripheral device, the peripheral device comprising: a processor and a memory, wherein the processor of the peripheral device is configured to: determine that a pairing process between the computing device and the peripheral device is complete; place the peripheral device into an additional security operational mode; trigger transmission of a command to the computing device over the wireless connection to cause the computing device to enter the additional security operational mode, or receive a command transmitted from the computing device over the wireless connection before placing the peripheral device into the additional security operational mode; after the pairing process is complete: receive input via the peripheral device, wherein the input is a number comprising alphanumeric digits; convert the number into an encryption key in binary form having more digits than the number; and encrypt data transmitted to computing device or decrypt data received from the computing device over the wireless connection, using the encryption key and in accordance with an encryption algorithm.
Although the wireless network associated with mobile device 100 is a GSM/GPRS wireless network in one example implementation of mobile device 100, other wireless networks may also be associated with mobile device 100 in variant implementations. Different types of wireless networks that may be employed include, for example, data-centric wireless networks, voice-centric wireless networks, and dual-mode networks that can support both voice and data communications over the same physical base stations. Combined dual-mode networks include, but are not limited to, Code Division Multiple Access (CDMA) or CDMA2000 networks, GSM/GPRS networks (as mentioned above), and future third-generation (3G) networks like EDGE and UMTS. Some older examples of data-centric networks include the Mobitex.TM. Radio Network and the DataTAC.TM. Radio Network. Examples of older voice-centric data networks include Personal Communication Systems (PCS) networks like GSM and Time Division Multiple Access (TDMA) systems.
Other network communication technologies that may be employed include, for example, Integrated Digital Enhanced Network (iDEN.TM.), Evolution-Data Optimized (EV-DO), and High Speed Downlink Packet Access (HSDPA).
Mobile device 100 may send and receive communication signals over network 200 after required network registration or activation procedures have been completed. Network access is associated with a subscriber or user of a mobile device 100. To identify a subscriber, mobile device 100 requires a Subscriber Identity Module or "SIM" card 126 to be inserted in a SIM interface 128 in order to communicate with a network. SIM 126 is one type of a conventional "smart card" used to identify a subscriber of mobile device 100 and to personalize the mobile device 100, among other things. Without SIM 126, mobile device 100 is not fully operational for communication with network 200. By inserting SIM 126 into SIM interface 128, a subscriber can access all subscribed services. Services could include: web browsing and messaging such as e-mail, voice mail, Short Message Service (SMS), and Multimedia Messaging Services (MMS). More advanced services may include: point of sale, field service and sales force automation. SIM 126 includes a processor and memory for storing information. Once SIM 126 is inserted in SIM interface 128, it is coupled to microprocessor 102. In order to identify the subscriber, SIM 126 contains some user parameters such as an International Mobile Subscriber Identity (IMSI). An advantage of using SIM 126 is that a subscriber is not necessarily bound to any single physical mobile device. SIM 126 may store additional subscriber information for a mobile device as well, including datebook (or calendar) information and recent call information.
It will be understood by persons skilled in the art that the act of exchanging an encryption key need not involve the transmission of the actual encryption key itself from one device to the other. It will also be understood that it is not necessary that an actual encryption key be initially generated at only one device and then subsequently transferred to the other device in order to constitute an "exchange". It is sufficient that the encryption key to be used is derived at or otherwise becomes known to each device, through the processing of some data that is shared between the two devices. In that case, a key "exchange" is deemed to have occurred.
In exemplary embodiments, a software application that executes on mobile device 100 (e.g. by microprocessor 102, of FIG. 1) is programmed to perform at least a first subset of the steps of method 330, and a software application that executes on peripheral device 310 (e.g. as firmware of peripheral device 310) is programmed to perform at least a second subset of the steps of method 330. In variant embodiments, the instructions to perform some or all of the steps of method 330 may be embedded in hardware.
At step 334, both the mobile device 100 and the peripheral device 310 are placed into an "additional security" operational mode, which indicates that data transmissions are to be encrypted with an encryption key that is to be exchanged between the two devices as described herein.
Mobile device 100 may be placed into the additional security operational mode, for example, in response to a user request (e.g. the user manually selects a corresponding configuration option at the mobile device 100), automatically after pairing has been completed at step 332, or automatically in accordance with a pre-defined schedule. The manner in which mobile device 100 can be placed into the additional security operational mode may be reflected in configuration settings on mobile device 100. In variant embodiments, the values of the configuration settings may be set in accordance with a security policy ("IT Policy") governing the use of mobile device 100.
It will be understood by persons skilled in the art that the term "keyboard" is not to be limited to devices that solely provide keyboard or keypad input capabilities. Similarly, the term "printer" is not to be limited to devices that solely provide printing capabilities. Some peripheral devices may provide multiple input and/or output capabilities. By way of example, a given device may be considered to be a "keyboard" in respect of embodiments described with reference to FIGS. 5A and 5B, while the same device may also be considered to be a "printer" in respect of embodiments described with reference to FIGS. 6A and 6B.
In view of the foregoing, it will be understood that the term "recover" and its derivations used herein in the specification and in the claims with reference to recovery of the encryption key (e.g. steps 344/344a/344b) is to be interpreted broadly, and may be, for example, interchangeable with the more general term "generate" and its respective derivations. In particular, the act of recovering an encryption key does not presuppose that the actual encryption key must first be generated at one device before it is recovered at the other device. For example, as noted above in respect of certain embodiments, an encryption key may be generated at each of two devices from the same, shared string. Accordingly, it is not necessary that an encryption key be first "generated" at one device in order that the encryption key may be "recovered" at the other device.
It will also be understood by persons skilled in the art that the order of the steps of the above methods may be modified in variant embodiments. For example, encryption keys may be exchanged between two devices in accordance with an embodiment of a method described herein before the pairing of two devices is initiated or before a wireless connection between the two devices is otherwise established. In the case where an encryption key is "pre-exchanged" in this manner and stored, the encryption key may be subsequently retrieved and automatically used to encrypt and decrypt data transmitted over a wireless connection once the wireless connection is established.
Previous Patent US 8,855,309 | Next Patent US 8,855,311