Clock synchronization and centralized guard time provisioning
    11.
    发明授权
    Clock synchronization and centralized guard time provisioning 有权
    时钟同步和集中保护时间供应

    公开(公告)号:US09338757B2

    公开(公告)日:2016-05-10

    申请号:US13633840

    申请日:2012-10-02

    发明人: Jin-Meng Ho

    IPC分类号: H04W56/00

    摘要: Embodiments of the invention provide a method to accommodate clock drift and guard time in a centralized fashion. In one embodiment, a first device is adapted to communicate with a second device. A clock in the first device is synchronized to a clock in the second device using beacon or/and acknowledgement frames received from the second device. A centralized guard time is calculated by the second device between two neighboring allocation intervals. The centralized guard time accounts for clock drift in the first and second devices during a nominal synchronization interval. An interval at least as long as the centralized guard time is provisioned by the second device between two neighboring allocation intervals. One or more frames are transmitted between the devices within the allocation intervals.

    摘要翻译: 本发明的实施例提供了以集中方式适应时钟漂移和保护时间的方法。 在一个实施例中,第一设备适于与第二设备通信。 使用从第二设备接收的信标或/和确认帧,第一设备中的时钟与第二设备中的时钟同步。 集中保护时间由第二设备在两个相邻分配间隔之间计算。 在标称同步间隔期间,集中保护时间考虑了第一和第二设备中的时钟漂移。 至少与第二设备在两个相邻分配间隔之间提供集中保护时间的间隔。 在分配间隔内的设备之间传送一个或多个帧。

    FRAME STRUCTURE FOR MEDIUM ACCESS IN BODY AREA NETWORKS (BAN)
    13.
    发明申请
    FRAME STRUCTURE FOR MEDIUM ACCESS IN BODY AREA NETWORKS (BAN) 审中-公开
    机体接入网框架结构(BAN)

    公开(公告)号:US20150092732A1

    公开(公告)日:2015-04-02

    申请号:US14567700

    申请日:2014-12-11

    发明人: Jin-Meng Ho

    IPC分类号: H04L29/06 H04W72/04 H04L9/08

    摘要: A system and method for providing a variety of medium access and power management methods are disclosed. A defined frame structure allows a hub and a node to use said methods for secured or unsecured communications with each other. Contended access is available during a random access phase. The node uses an alternate doubling of a backoff counter to reduce interference and resolve collisions with other nodes attempting to communicate with the hub in the random access phase. Non-contended access is also available, and the hub may schedule reoccurring or one-time allocation intervals for the node. The hub and the node may also establish polled and posted allocation intervals on an as needed basis. The node manages power usage by being at active mode at times during the beacon period when the node is expected to transmit or receive frames.

    摘要翻译: 公开了一种用于提供各种介质访问和电源管理方法的系统和方法。 定义的帧结构允许集线器和节点使用所述方法来实现彼此的安全或不安全的通信。 在随机访问阶段可以访问受访问。 该节点使用退避计数器的替代加倍来减少干扰并且解决与在随机访问阶段尝试与集线器通信的其他节点的冲突。 还可以使用非竞争的访问,并且集线器可以为该节点安排重发或一次分配间隔。 集线器和节点还可以根据需要建立轮询和发布的分配间隔。 该节点通过在节点期望发送或接收帧的信标周期期间的时间处于活动模式来管理功率使用。

    One-way key fob and vehicle pairing

    公开(公告)号:US10477402B2

    公开(公告)日:2019-11-12

    申请号:US15588083

    申请日:2017-05-05

    发明人: Jin-Meng Ho

    摘要: Key fob and vehicle control unit identifiers (IDs) are used for entity authentication or trust transfer to achieve a secured initial pairing. The key fob is capable of transmitting only (not receiving) and is paired with a control unit in a vehicle or with any other control device. Use of the key fob and control unit IDs prevents unauthorized pairing and access to the operation key (OpKey) that is later used for communications between the devices. Elliptical curve cryptography (ECC) is used for strong security and efficient implementation. In the pairing process, device IDs are used for entity authentication and public key cryptography is used for easy key management. Symmetric encryption is used for fast normal operation and to accommodate key fob addition or revocation after key fob loss.

    Pairwise temporal key creation for secure networks

    公开(公告)号:US10333907B2

    公开(公告)日:2019-06-25

    申请号:US15866762

    申请日:2018-01-10

    发明人: Jin-Meng Ho

    IPC分类号: H04L9/08 H04L9/32 H04L29/06

    摘要: A system and method for establishing a pairwise temporal key (PTK) between two devices based on a shared master key and using a single message authentication codes (MAC) algorithm is disclosed. The devices use the shared master key to independently compute four MACs representing the desired PTK, a KCK, and a first and a second KMAC. The Responder sends its first KMAC to the Initiator, which retains the computed PTK only if it verifies that the received first KMAC equals its computed first KMAC and hence that the Responder indeed possesses the purportedly shared master key. The Initiator sends a third message including the second KMAC to the Responder. The Responder retains the computed PTK only if it has verified that the received second KMAC equals its computed second KMAC and hence that the Initiator indeed possesses the purportedly shared master key.

    ACCESS AND POWER MANAGEMENT FOR CENTRALIZED NETWORKS

    公开(公告)号:US20180041963A1

    公开(公告)日:2018-02-08

    申请号:US15783422

    申请日:2017-10-13

    发明人: Jin-Meng Ho

    摘要: A system and method for managing power in a subnet having a hub in communication with one or more nodes is disclosed. The hub and nodes communicate using one or more non-contention access methods, such as scheduled, polled or posted access. The node may enter a sleep or hibernation state while no scheduled, polled or posted allocation interval is pending. The hibernation state allows the node to hibernate through one or more entire beacon periods. In the sleep state, the node may be asleep between any scheduled, polled and posted allocation intervals for the node or during another node's scheduled allocation interval in a current beacon period. By selecting which access scheme is in use, the node and hub can increase the node's chances to be in hibernation or sleep state and minimize power consumption.

    One-Way Key Fob and Vehicle Pairing Verification, Retention, and Revocation
    19.
    发明申请
    One-Way Key Fob and Vehicle Pairing Verification, Retention, and Revocation 审中-公开
    单向钥匙扣和车辆配对验证,保留和撤销

    公开(公告)号:US20160218870A1

    公开(公告)日:2016-07-28

    申请号:US15090125

    申请日:2016-04-04

    发明人: Jin-Meng Ho

    IPC分类号: H04L9/08 B60R25/24

    摘要: Embodiments of the invention provide methods for key fob to control unit verification, retention, and revocation. After an initial pairing between a key fob and a control unit, the devices share a secret operation key (OpKey). For verification, the key fob sends the 8 lowest-order bits of a 128-bit counter and some bits of an AES-128, OpKey encrypted value of the counter to the control unit. For key revocation and retention, the control unit is prompted to enter an OpKey retention and revocation mode. Subsequently, each of the remaining or new key fobs is prompted by the user to send a verification message to the control unit. When the control unit is prompted to exit the OpKey retention and revocation mode, it retains the OpKeys of only the key fobs that sent a valid verification message immediately before entering and exiting the OpKey retention and revocation mode.

    摘要翻译: 本发明的实施例提供了用于控制单元验证,保留和撤销的密钥卡的方法。 在密钥卡和控制单元之间的初始配对之后,设备共享秘密操作密钥(OpKey)。 为了验证,密钥卡将128位计数器的8个最低位和计数器的AES-128,OpKey加密值的一些位发送到控制单元。 对于关键撤销和保留,提示控制单元进入OpKey保留和撤销模式。 随后,用户提示剩余或新的密钥卡中的每一个向控制单元发送验证消息。 当控制单元被提示退出OpKey保留和撤销模式时,它仅保留在进入和退出OpKey保留和撤销模式之前立即发送有效验证消息的密钥框的OpKey。

    PAIRWISE TEMPORAL KEY CREATION FOR SECURE NETWORKS
    20.
    发明申请
    PAIRWISE TEMPORAL KEY CREATION FOR SECURE NETWORKS 审中-公开
    配对安全网络的时间关键创新

    公开(公告)号:US20150163207A1

    公开(公告)日:2015-06-11

    申请号:US14593628

    申请日:2015-01-09

    发明人: Jin-Meng Ho

    IPC分类号: H04L29/06

    摘要: A system and method for establishing a pairwise temporal key (PTK) between two devices based on a shared master key and using a single message authentication codes (MAC) algorithm is disclosed. The devices use the shared master key to independently compute four MACs representing the desired PTK, a KCK, and a first and a second KMAC. The Responder sends its first KMAC to the Initiator, which retains the computed PTK only if it verifies that the received first KMAC equals its computed first KMAC and hence that the Responder indeed possesses the purportedly shared master key. The Initiator sends a third message including the second KMAC to the Responder. The Responder retains the computed PTK only if it has verified that the received second KMAC equals its computed second KMAC and hence that the Initiator indeed possesses the purportedly shared master key.

    摘要翻译: 公开了一种基于共享主密钥和使用单个消息认证码(MAC)算法在两个设备之间建立成对时间密钥(PTK)的系统和方法。 这些设备使用共享主密钥来独立地计算表示期望的PTK,KCK和第一和第二KMAC的四个MAC。 响应者将其第一个KMAC发送到启动器,该启动器仅在验证接收到的第一个KMAC等于其计算的第一个KMAC时保留计算的PTK,并且因此响应者确实拥有所谓的共享主密钥。 发起方将第二个消息包括第二个KMAC发送给响应者。 响应者只有在已经验证接收到的第二个KMAC等于其计算的第二个KMAC的情况下才保留计算的PTK,因此启动器确实拥有所谓的共享主密钥。