Afero, Inc.

Clif Liu

Scott Zimmerman

Chris Aiuto

Shannon Holland

Evan Jeng

Kerry Quinn

Stephen Sewerynek

Daniel Altin

Robey Pointer

Erhard Riedl

Lucas Finkelstein

An apparatus and method are described for sharing WiFi credentials. For example, one embodiment of a method comprises: generating a first secret on a first IoT device, the first IoT device having WiFi credentials stored thereon; sharing the first secret with a second IoT device; encrypting the WiFi credentials on the first IoT device using the first secret to generate encrypted WiFi credentials; receiving the encrypted WiFi credentials from the first IoT device at an IoT service; encrypting the encrypted WiFi credentials at the IoT service using a second secret to generate twice-encrypted WiFi credentials, the second secret known by the second IoT device; transmitting the twice-encrypted WiFi credentials from the IoT service to the second IoT device; decrypting, at the second IoT device, the twice-encrypted WiFi credentials using the second secret to generate the encrypted WiFi credentials and decrypting the encrypted WiFi credentials using the first secret to generate the WiFi credentials; and establishing a secure WiFi connection on the second IoT device using the WiFi credentials.

Apparatus and method for sharing credentials in an internet of things (IoT) system

A system and method are described for performing service-initiated updates to IoT devices. For example, one embodiment of a system comprises: a plurality of IoT devices, each IoT device comprising: a storage device to store attributes and/or program code; a processor to execute the program code using the attributes to perform one or more specified functions of the IoT device, and attribute/code management circuitry and/or logic to manage a current state of the attributes and/or program code; an Internet of Things (IoT) cloud service to be communicatively coupled to IoT devices over the Internet, the IoT cloud service including an update service to initiate updates of the attributes and/or program code stored on the plurality of IoT devices, an IoT device to transmit a notification to the update service upon reaching a particular initialization state, the notification including an indication of a current attribute and/or program code state; the update service to responsively determine whether an update to the current attribute and/or program code state is available and, if so, to use a first key to generate a signature over a binary which includes the update to the attribute and/or program code state to generate a signed binary; the update service to further store the signed binary in a designated network location and to generate or retrieve a Uniform Resource Locator (URL) identifying the network location, the update service to transmit an update command to the IoT device containing the URL; the attribute/code management circuitry and/or logic of the IoT device to interpret the URL to retrieve the signed binary, to use a second key to verify the signature, and to responsively update the attribute and/or program code in accordance with the binary.

System and method for service-initiated internet of things (IoT) device updates

A system, apparatus, and method are described for a secure IoT wireless network configuration. For example, one embodiment of an Internet of Things (IoT) hub comprises: a local wireless communication interface to establish local wireless connections with one or more IoT devices and/or IoT extender hubs; a network router to establish network connections over the Internet on behalf of the IoT devices and/or IoT extender hubs; an authentication module pre-configured with a passphrase and a hidden service set identifier (SSID), the authentication module to receive a connection requests from the IoT devices and/or an IoT extender hubs and to grant the connection requests when the IoT devices and/or IoT extender hubs use the pre-configured passphrase and hidden SSID; and a firewall of the IoT hub to block all outgoing and incoming connection requests other than those directed to designated servers of an IoT service with known host names.

System and method for automatic wireless network authentication in an internet of things (IOT) system

A method and system for connecting an Internet of Things (IoT) hub to a wireless network. One embodiment of the method includes establishing a secure communication channel between an IoT hub and an IoT service through a client device using a first secret; generating a second secret on the client device and transmitting it to the IoT hub; encrypting a wireless key using the second secret to generate a first-encrypted key and transmitting it to the IoT service; encrypting the first-encrypted key using the first secret to generate a twice-encrypted key and transmitting it to the IoT hub over the secure communication channel; decrypting the twice-encrypted key at the IoT hub using the first secret to generate the first-encrypted key and decrypting it using the second secret to generate the wireless key usable to establish a secure wireless connection between the IoT hub and the local wireless network.

Apparatus and method for sharing WiFi security data in an internet of things (IoT) system

A system and method are described for reducing traffic when connecting an Internet of Things (IoT) device to an IoT hub. For example, one embodiment of a system comprises: an Internet of Things (IoT) device comprising a wireless communication module to establish communication with a plurality of IoT hubs over local wireless communication channels, advertising control logic to transmit first advertising beacons to the plurality of IoT hubs indicating that the IoT device is connectable; each of the IoT hubs to attempt to connect with the IoT device to provide commands and/or data to the IoT device, the IoT device to establish a connection with a first IoT hub of the plurality of IoT hubs to receive the commands and/or data from the first IoT hub; and the advertising control logic to begin transmitting a second advertising beacon to the IoT hubs indicating that the IoT device is not connectable after establishing the connection with the first IoT hub.

System and method for reducing wireless traffic when connecting an IoT hub to an IoT device

An apparatus for connecting an Internet of Things (IoT) hub to a wireless network, the apparatus including: 1) a security module to generate a first secret and a second secret, and to encrypt a wireless key using the second secret to generate a first-encrypted key; and 2) a connection logic to establish a secure communication channel between an IoT hub and an IoT service using the first secret, transmit the second secret to the IoT hub and the first-encrypted key to the IoT service, receive from the IoT service a twice-encrypted key generated by encrypting the first-encrypted key using the first secret, and transmit the twice-encrypted key to the IoT hub, which decrypts it using the first secret to generate the first-encrypted key, which is further decrypted using the second secret to generate the wireless key. The IoT hub using the wireless key to connect to the wireless network.

Growing community of inventors

San Jose, CA, United States of America

Clif Liu