Method and apparatus for virtual pairing with a group of semi-connected devices

摘要

One feature provides a method for a client node to establish a session key with a group node by obtaining an epoch identity value associated with a current epoch, wherein obtaining the epoch identity value includes one of computing the epoch identity value based on a node real time or negotiating the epoch identity value with the group node, computing a restricted key using a shared secret key, the epoch identity value, and a group node identity associated with the group node, and executing a session key establishment protocol with the group node to derive the session key using the restricted key as a master key in the session key establishment protocol. The session key may be established between the group node and the client node even though communications between the group node and the central node is only intermittently available during the current epoch.

主权项

1. A method operational at a client node for establishing a session key between the client node and a group node, the method comprising:
obtaining an epoch identity value associated with a current epoch by (a) negotiating an epoch identity value with the group node based on an exchange of epoch identity value information with the group node if the client node has no reliable time clock and (b) obtaining the epoch identity value from a node time value if a group node time value is within a predetermined time threshold of a client node time value; computing a restricted key using a shared secret key, the epoch identity value, and a group node identity associated with the group node, the shared secret key known to the client node and a central node but unknown to the group node; and executing a session key establishment protocol with the group node to derive the session key using the restricted key as a master key in the session key establishment protocol.