PAN Router Proxy Rekeying for Secure Legacy Zigbee Rejoin
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Legacy Zigbee devices that have lost network credentials can insecurely rejoin a personal area network (PAN) using a well-known encryption key, exposing the active network key to eavesdroppers and compromising network security, which is discouraged by the Connectivity Standards Alliance.
Innovation Solution
Implement a proxy connection using a unique third network key to allow legacy devices to rejoin the PAN, with the router acting as an intermediary to encrypt and decrypt messages using the third key, thereby protecting the active network key from exposure.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If legacy devices use well-known encryption keys for rejoining the PAN, then device compatibility and ease of reconnection are improved, but network security deteriorates as the active network key becomes vulnerable to eavesdroppers
Solution Approach 1:
The patent introduces a router as an intermediary device between the coordinator and legacy joiner devices. The router receives join requests encrypted with well-known keys from legacy devices, then re-encrypts the network key using a unique key before forwarding it to the coordinator for distribution to authorized devices. This intermediary approach allows legacy devices to maintain compatibility while preventing direct exposure of the active network key to potential eavesdroppers.
Solution Approach 2:
The patent segments the network into two distinct communication paths: one for legacy devices using well-known encryption keys, and another for authorized devices using unique encryption keys. The router acts as the segmentation point, maintaining separate key management for different device types. This segmentation allows the network to support both legacy and modern security requirements simultaneously.
2Object-affected harmful factors
If the network adopts new security specifications requiring unique encryption keys, then network security is improved, but device complexity and upgrade costs increase for legacy devices
Solution Approach 1:
The router is designed with multi-functionality to handle both legacy join requests using well-known keys and modern secure communications using unique keys. It can process join requests from devices with different security capabilities, translating between the two key systems. This universality allows the network to enforce strong security policies while maintaining backward compatibility without requiring legacy devices to be upgraded.
3Object-affected harmful factors
If the router acts as a proxy to re-encrypt messages using a third network key, then the active network key protection is improved, but the communication process complexity increases
Solution Approach 1:
The router serves as a cryptographic intermediary that automatically performs key translation. When a legacy device sends a join request encrypted with a well-known key, the router intercepts it, extracts the necessary information, and communicates with the coordinator using secure unique keys. The router handles the complexity of multiple encryption schemes transparently, presenting a simplified interface to both legacy and modern devices.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
The disclosure relates to a method and a router for securely connecting a device to a wireless personal area network. Example embodiments include a method (300) of connecting a joiner device (212) to a wireless personal area network (PAN), the PAN comprising a plurality of devices configured to communicate messages encrypted with a first network key across the PAN, the plurality of devices comprising a router (311), the method comprising: i) receiving by the router (311) from the joiner device (212) a join request message encrypted by a second network key; ii) sending by the router (311) to the joiner device (212) a join confirmation message that contains a third network key; iii) receiving subsequent incoming messages (314) by the router (311) from the joiner device (212) encrypted by the third network key, re-encrypting by the router (311) each subsequent incoming message with the first network key and transmitting the re-encrypted subsequent incoming messages (315) to other devices in the PAN (100, 600); and iv) receiving by the router (311) from other devices in the PAN (100, 600) subsequent outgoing messages (316) for the joiner device (212) encrypted by the first network key, re-encrypting the subsequent outgoing messages with the third network key and sending the re-encrypted subsequent outgoing messages (317) by the router (311) to the joiner device (212).