CRYPTOGRAPHY METHOD

Abstract

The embodiments provide cryptography that is performed in each of two communicating devices and is based on information known only to the devices. The information is determined in each of the devices at the time of communications. Each of the devices determines the information without communicating key information related to the encryption key with each other. Channel characteristic reciprocity between the two devices allows creation of identical keys in each device. Each of the devices sends a first setup signal to the other device, receives a second setup signal from the other device, where the second setup signal may be a looped back version of the first setup signal, samples the second setup generates sampling results, creates a key based on the sampling results, and utilizes the key to exchange one or more secure data signals with the other device.

Claims

1. A first device comprising; one or more processors; and, memory in communication with the one or more processors, the memory comprising code that, when executed, causes the one or more processors to control the first device to: receive a setup signal from a second device; sample the setup signal and generate sampling results; create a key based on the sampling results; and, utilize the key to exchange at least one data signal with the second device.

2. The first device of claim 1, wherein the setup signal comprises a second setup signal and the code causes the one or more processors to control the first device to: send a first setup signal to the second device; and, receive the second setup signal from the second device, wherein the second setup signal comprises a looped back version of the first setup signal.

3. The first device of claim 2, wherein the code further causes the one or more processors to control the first device to: receive a third setup signal from the second device; and, send a fourth setup signal to the second device, the fourth setup signal comprising a looped back version of the third setup signal.

4. The first device of claim 2, wherein the first setup signal and the second setup signal are sent on the same frequency channel.

5. The first device of claim 2, wherein the first setup signal is sent on a first frequency channel and the second setup signal is sent on a second frequency channel that is offset from the first frequency channel.

6. The first device of claim 1, wherein the code further causes the one or more processors to control the first device to: sample the setup signal and generate sampling results by sampling the setup signal at each of a plurality of time intervals to generate a plurality of sets of bits, wherein each of the sets of bits indicates a magnitude of a sampled level; and, create the key based on the sampling results by using selected sets of the plurality of sets of bits having a magnitude above a threshold level.

7. The first device of claim 1, wherein the sampling results comprise one or more sets of bits and the code further causes the one or more processors to control the first device to create the key by inputting each of the one or more sets of bits into a decoder to generate a set of code words as the key.

8. The first device of claim 1, wherein the sampling results comprise one or more sets of bits and the code further causes the one or more processors to control the first device to create the key by inputting a set of most significant bits of each of the one or more sets of bits into a decoder to generate a set of code words as the key.

9. A method in a first device comprising: receiving a setup signal from a second device; sampling the setup signal and generating sampling results; creating a key based on the sampling results; and, utilizing the key to exchange at least one data signal with the second device.

10. The method of claim 9, wherein the setup signal comprises a second setup signal, the method further comprises sending a first setup signal to the second device, and, the receiving the second setup signal comprises: receiving the second setup signal from the second device, wherein the second setup signal comprises a looped hack version of the first setup signal.

11. The method of claim 10, f ether comprising: receiving a third setup signal from the second device; and, sending a fourth setup signal to the second device, the fourth setup signal comprising a looped back version of the third setup signal.

12. The method of claim 9, wherein the sampling the setup signal and generating sampling results comprises sampling the setup signal at each of a plurality of time intervals to generate a plurality of sets of bits, wherein each of the plurality of sets of bits indicates a magnitude of a sampled level, and the creating the key from the sampling results comprises creating the key using selected sets of the plurality of sets of bits having a magnitude above a threshold level.

13. The method of claim 9, wherein the sampling results comprise one or more sets of bits, each representing a sample in the sampling results, and the creating the key comprises inputting each of the one or more sets of bits into a decoder to generate a set of code words as the key.

14. The method of claim 9, wherein the sampling results comprise one or more sets of bits, each representing a sample in the sampling results, and the creating the key comprises inputting a set of most significant bits of each of the one or more sets of bits into a decoder to generate a set of code words as the key.

15. A system comprising: a first device and a second device configured to communicate with one another, wherein the first device receives a first setup signal from the second device, and the second device receives a second setup signal from the first device, and, wherein the first device samples the first setup signal and creates a first key and the second device samples the second setup signal and creates a second key, and the first device encrypts and decrypts data signals communicated between the first and second device using the first key, and the second device encrypts and decrypts the data signals communicated between the first and second device using the second key.

16. The system of claim 15, wherein the first setup signal comprises a looped back setup signal initially sent by the first device, and the second setup signal comprises a looped back setup signal initially sent by the second device.

17. The system of claim 15, wherein the first device samples the first setup signal at each of a plurality of time intervals to generate first sets of bits, each set of the first sets of bits indicating a magnitude sampled at the first device, and the second device samples the second setup signal at each of the plurality of time intervals to generate second sets of bits, each set of the second sets of bits indicating a magnitude sampled at the second device, and, the first and second devices create the first and second keys using, respectively, first selected sets of bits of the first sets of bits and second selected sets of bits of the second sets of bits that indicate a magnitude, respectively, above a first and second threshold level.

18. The system of claim 17, wherein the first device creates the first key by inputting the first selected sets of bits into a decoder to generate a first set of code words as the first key, and the second device creates the second key by inputting the second selected sets of bits into a decoder to generate a second set of code words as the second key.

19. The system of claim 17, wherein the first device creates the first key by inputting at least one most significant bit of each of the first selected sets of bits into a decoder to generate a first set of code words as the first key, and the second device creates the second key by inputting at least one most significant bit of each of the second selected sets of bits into a decoder to generate a second set of code words as the second key.

20. The system of claim 15 wherein the first and second setup signals comprise analog signals sent on the same channel.

Description

BRIEF DESCRIPTION OF THE DRAWINGS

[0008] FIG. 1A is a simplified diagram illustrating an example network into which an embodiment of the disclosure may be implemented;

[0009] FIG. 1B is a simplified block diagram illustrating portions of example devices;

[0010] FIG. 2 is a flow diagram illustrating cryptography operations performed in example communicating devices;

[0011] FIGS. 3A and 3B are plots illustrating sampling operations performed in example devices;

[0012] FIGS. 4A and 4B are flow diagrams illustrating example key creation operations using decoders;

[0013] FIG. 5A is a simplified block diagram illustrating example key creation operations using decoders;

[0014] FIG. 5B is a diagram illustrating further example key creation operations using decoders;

[0015] FIG. 6 illustrates an example device implemented as a mobile device; and,

[0016] FIG. 7 illustrates as example device implemented as a network device.

DETAILED DESCRIPTION

[0017] The system, devices, and methods will now be described by use of example embodiments. The example embodiments are presented in this disclosure for illustrative purposes, and not intended to be restrictive or limiting on the scope of the disclosure or the claims presented herein.

[0018] The disclosed embodiments provide a technical advantage in that two devices may configure encryption/decryption for secure communications on a channel between the two devices without exchanging keys or key related information over any channel, or by any other exchange methods, as a part of configuring or initiating the encryption/decryption. An advantage is also provided in that keys or key related information need not be provided to, or stored on, any of the devices prior to configuring the secure communications. As compared to cryptography methods that require exchange of keys or key related information by communicating devices when setting up secure communications, the embodiments prevent the possibility of exchanged key information being intercepted when exchanged between devices. As compared to cryptography methods in which devices rely on prior knowledge of keys or key information stored in the devices, the embodiments prevent the possibility that keys or key information may be compromised by theft or other misappropriation from a device or network.

[0019] The embodiments utilize the fact that a channel comprising communication links that are on the same frequency and opposite in direction between two devices shows reciprocity by exhibiting the same unique channel characteristics at each device. In order to maintain reciprocity of the channel during key generation, the time window within which the key generation occurs at each of the two devices may be relatively short. In an example implementation, time windows on the order of less than 1 millisecond may be used. Cryptography used to send secure signals between the, two devices may be based on these reciprocal unique channel characteristics. The unique channel characteristics may be determined at each of the two devices by sampling a setup signal. The embodiments allow each of the two devices to create identical keys in both devices, where the key is based on the reciprocal unique channel characteristics determined by and known only to each of the two devices. The identical keys may then be used to decrypt and encrypt data signals sent between the two devices.

[0020] Because the unique channel characteristics are based on the conditions of the channel between the two devices at the time of key generation, the unique channel characteristics may he only known to each of the two devices on that channel. Only the two devices may determine these channel characteristics. A third device that attempts to intercept communications will not be able to decode the communications. The third device cannot intercept the keys or key information because the keys or key information are not exchanged on any channel. Neither will the third device be able to determine the keys by determining the keys from the unique channel characteristics of the channel, which by the nature of the channel can be known only to each of the two communicating devices that communicate on that channel. The embodiments also provide an advantage in that the keys generated in each of two devices may be updated as appropriate to provide additional security. Because the keys are generated based on the characteristics of the channel between the two devices at the time of key generation, each time new keys are generated the keys will be based on different channel characteristics and will be different from previously generated keys.

[0021] The embodiments have application to provide secure communications, for example, in time division duplex networks or systems such as those operating according to the IEEE 802.11 Wi-Fi standards. In the Wi-Fi standards, a device may communicate with an access point of a network on a wireless bi-directional time division half-duplex frequency channel. The device and access point use the same channel frequency (i.e., same channel) for transmissions sent from the device to the access point and transmissions sent from the access point to the device. Implementations of the embodiments in a Wi-Fi network may utilize the characteristics of the bi-directional frequency channel between the device and access point to generate keys for encrypting/decrypting communications. The embodiments also have application to networks or systems using communication channels configured according to other standards. For example, setup signals sent on a single frequency setup channel between two devices may he used to create identical keys in both devices, while actual encrypted communications between the two devices may be sent over communication channels different than the setup channel.

[0022] Example implementations of the embodiments also provide advantages in that the implementations may be used in networks or systems having devices with low quality reception or transmission capability. In these situations, one or both of the two communicating devices may not be capable of precisely sampling a setup signal to determine the unique channel characteristics of a channel between the two devices. In these cases, one or more bit errors may exist in the results of setup signal sampling in one or both of the devices and the sampling results may not be identical in both devices. If the keys were created directly from the sampling results the keys may not be identical in the two devices. Implementations of the embodiments may be used in order to make the process more reliable and robust when one or both of the devices are such that the sampling results may not he identical in both devices. In one implementation, sets of bits representing each of the sampling results may be fed into an error correction decoder in each device to generate a set of code words for use as the key. In another implementation, sets of bits each representing one or more most significant bits (MSBs) from each of the sampling, results may be fed into an error correction decoder in each device to generate a set of code words for use as the key. Depending on the capability of the decoder, use of the decoder to generate the code words from the sampling results allows bit errors and discrepancies between the sampling results in the two devices to be removed. This helps ensure that the same key is created in both devices.

[0023] Referring now to FIG. 1A, therein is a simplified diagram illustrating an example network 100 into which an embodiment of the disclosure may be implemented. FIG. 1A shows device 102 communicating with device 104 over a channel 114. Device 102 may be a mobile device operating in the coverage area of network 100 and device 104 may be an access point of network 100. Channel 114 may comprise a time division half-duplex frequency channel that may he used by both device 102 and device 104 for exchanging communications with each other. In an implementation of Network 100, device 102 and device 104 may be configured to operate according to the. IEEE 802.11 Wi-Fi specifications. In other implementations, device 102 and device 104 may operate according to any other wireless specification or standard that specifies channels that allow keys to be generated in communicating devices according to the embodiments.,

[0024] FIG. 1B is a simplified block diagram illustrating example portions of devices 102 and 104 in an implementation of FIG. 1A. Device 102 includes a portion 105 that includes cryptography setup transceiver 116, sampler 128, bit string generator 130, and key creator 132. Device 104 includes a portion 107 that includes cryptography setup transceiver 134, sampler 136, bit string generator 138, and key creator 140. Portion 105 communicates with other functions on device 102 and portion 107 communicates with other functions on device 104 to perform operations of cryptography according to the embodiments of the disclosure. Device 102 and 104 may each include one or more processors, circuitry, and/or code comprising programs for implementing, respectively, the functions shown in portions 105 and 107. The functions shown in portions 105 and 107 of devices 102 and 104 may be separately configured on each device, or may be configured as combined, in whole or in part, with processors, circuitry, and/or code or programs that are also in utilized for other functions on the devices. For example, cryptography setup transceivers 116 and 134 may include, respectively, the transceivers or portions of the transceivers in devices 102 and 104 that are also used for data communication.

[0025] FIG. 2 is a flow diagram 200 illustrating cryptography operations performed in example communicating devices, such as devices 102 and 104 of FIGS. 1A and 1B. The operations performed in FIG. 2 may be explained using device 102 as the first device and device 104 as the second device of FIG. 2.

[0026] The process begins at 202 where device 102 sends signal S.sub.A 106 to device 104 on channel 114 using cryptography setup transceiver 116. Signal S.sub.A 106 may be an analog signal such as a sinusoidal signal sent on the frequency of channel 114. At 204, device 104 receives signal S.sub.A using cryptography setup transceiver 134 and loops back signal S.sub.A 106 to device 102 as signal S.sub.A, B 108 on channel 114. Signal S.sub.A, B 10$ may be identical to the signal S.sub.A 106 as it was received at cryptography setup transceiver 134. At 206 device 104 sends signal S.sub.B 110 to device 102 on channel 114 in the opposite direction using cryptography setup transceiver 134. Signal S.sub.B 110 may be an analog signal identical to signal S.sub.A. At 208, device 102 receives signal S.sub.B 110 using cryptography setup transceiver 116 and loops back signal S.sub.B 110 to device 104 as signal S.sub.B, A 112 on channel 114. Signal S.sub.B, A 112 may be identical to the signal S.sub.B 110 as it was received at cryptography setup transceiver 116.

[0027] At 210, device 102 samples signal S.sub.A, B 108. To perform the sampling, cryptography setup transceiver 116 provides the received signal S.sub.A, B 108 to sampler 128 as signal 126 and sampler 128 performs sampling on signal S.sub.A, B 108 to generate sampling results. Sampler 128 may perform the sampling by generating a series of samples, S.sub.1, S.sub.2 . . . S.sub.N, with each sample taken from signal S.sub.A, B 108 at a predetermined time interval. Each sample of S.sub.1, S.sub.2 . . . S.sub.N may comprise bits that represent a value of power of signal S.sub.A, B 108 at the time the sample was taken.

[0028] Next, at 212, device 102 generates a bit string from the results of the sampling on signal S.sub.A, B 108. In performing the bit string generation, sampler 128 provides the sampling results to bit string generator 130 as signal 142. Bit string generator 130 may then generate the bit string, B.sub.1, B.sub.2 . . . B.sub.M from the sampling results. In generating the bit string, bit string generator 130 may use only the samples of S.sub.1, S.sub.2 . . . S.sub.N that indicate a value of power above a threshold level. The threshold may be set to the median power level of the received signal S.sub.A, B 108 calculated over the time period within which the samples are taken. If the power of a sample S.sub.X is below the threshold it may be ignored. If the power of the sample S.sub.X is above the threshold the bits representing the power sample S.sub.X may be placed as a set in the bit string. The bit string generator 130 may process the complete sampling results in this manner to generate a bit string B.sub.1, B.sub.2 . . . B.sub.M for use in key creation in device 102.

[0029] At 214, device 104 may initiate the same the same sampling and bit string generation operations on the signal S.sub.B, A 112 as performed in device 102 at operations 210 and 212 on the signal S.sub.A, B 108. To perform the sampling at device 104. cryptography setup transceiver 134 provides the received signal S.sub.B, A 112 to sampler 136 as signal 146 and sampler 136 performs sampling on signal S.sub.B, A 112 to generate sampling results. Sampler 136 may perform the sampling by generating a series of samples, S′.sub.1, S′.sub.2 . . . S′.sub.N, with each sample taken from signal S.sub.B, A 112 at a predetermined time interval. Each sample of S′.sub.1, S′.sub.2 . . . S′.sub.N may comprise bits that represent a value of the power of signal S.sub.B, A 112 at the time the sample was taken. The time interval used for sampling in device 104 may be the same as the time interval used for sampling in device 102.

[0030] Next, at 216, device 104 generates a bit string from the results of the sampling on signal S.sub.B, A 112. In performing the bit string generation, sampler 136 provides the sampling results as signal 148 to bit string generator 138. Bit string generator 138 may then generate a bit string, C.sub.1, C.sub.2 . . . C.sub.M, from the sampling results. In generating the bit string, bit string generator 138 may use only the samples of S′.sub.1, S′.sub.2 . . . S′.sub.N that indicate a value of power or amplitude above a threshold level. The, threshold may be set to the median power level of the received signal S.sub.B, A 112 calculated over the time period within which the samples are taken. If the power of a sample S′.sub.X is below the threshold it may be ignored. If the power of the sample S′.sub.X is above the threshold the bits representing the power sample S′.sub.X may be placed as, a set of bits in the bit string. The bit string generator 138 may process the complete sampling results, in this manner to generate a bit string C.sub.1, C.sub.2 . . . C.sub.M for use in key creation in device 104.

[0031] Use of signals S.sub.A and S.sub.B that are the identical, and use of processes for signal sampling and bit string generation that are the same in each of the devices 102 and 104, provides a bit string, B.sub.1, B.sub.2 . . . B.sub.M, and a bit string, C.sub.1, C.sub.2 . . . C.sub.M, that are identical, or nearly identical, to one another.

[0032] At 218, device 102 creates a key based on bit string B.sub.1, B.sub.2, . . . B.sub.M. The key is created in device 102 when bit string generator 130 provides bit string B.sub.1, B.sub.2 . . . B.sub.M to key creator 132 as signal 144. Key creator 132 then creates the key from the bit string B.sub.1, B.sub.2 . . . B.sub.M. In one example implementation, key creator 132 may create the key using all of the bits in the bit string B.sub.1, B.sub.2 . . . B.sub.M taken sequentially. For example, if the bit string B.sub.1, B.sub.2 . . . B.sub.m is a string in which B.sub.1=11011011, B.sub.2=10111011 . . . B.sub.M=11111101, a key may be created as k.sub.102=1101101110111011 . . . 11111101. In another example, key creator 132 may create key k.sub.102 using a subset of bits from each of B.sub.1, B.sub.2 . . . B.sub.M. For example, if the bit string B.sub.1, B.sub.2 . . . B.sub.M is a string in which B.sub.1=11011011, B.sub.2=10111011 . . . B.sub.m=11111101, k.sub.102 may be created by taking the four most significant bits from each of B.sub.1, B.sup.2 . . . B.sub.M to create k.sub.102=11011011 . . . 1111. Keys of different lengths may be created by varying the sampling, bit string generation, and key creation operations. Key creator 132 then outputs k.sub.102 at output 152 for use by device 102 in encryption/decryption.

[0033] At 220, device 104 creates a key based on C.sub.1, C.sub.2 . . . C.sub.M using the same operations that device 102 uses to create k.sub.102 from B.sub.1, B.sub.2. . . B.sub.M. The key is created in device 104 when bit string generator 138 provides bit string C.sub.1, C.sub.2 . . . C.sub.M to key creator 140 as signal 150. Key creator 138 then creates a key, k.sub.104, from the bit string C.sub.1, C.sub.2 . . . C.sub.M. In one example implementation, key creator 138 may create k.sub.104 using all of the bits in the bit string C.sub.1, C.sub.2 . . . C.sub.M. For example, if the bit string C.sub.1, C.sub.2 . . . C.sub.M is a string in which C.sub.1=11011011, C.sub.2=10111011 . . . C.sub.M=11111101, k.sub.104, may be created as k.sub.104=1101101110111011 . . . 11111101. In another example, <key creator 132 may create k.sub.1 4 using a subset of bits from each of C.sub.1, C.sub.2 . . . C.sub.M. For example, if the bit string C.sub.1, C.sub.2 . . . C.sub.M is a string in which C.sub.1=11011011, C.sub.2=10111011 . . . C.sub.M=11111101, k.sub.104 may be created by taking the four most significant bits from each of C.sub.1, C.sub.2 . . . C.sub.M to create k.sub.104=11011011 . . . 1111. Keys of different lengths may be created by varying the sampling bit string generation, and key creation operations. The operations used tear creating k.sub.104 in device 104 may be identical to the operations used for creating k.sub.102 in device 102. Key creator 140 then outputs k.sub.104 at output 154 for use by device 104 in encryption/decryption.

[0034] In a situation in which devices 102 and 104 include transceivers that are capable of signal transmission at precise power levels and are also capable of precise measurement of received signals, the keys in both devices will have a high probability of being identical. In this situation, an implementation may be used in which k.sub.102 and k.sub.104 may be created directly from the sampling results by using all the hits of each of the sampling results S.sub.1, S.sub.2 . . . S.sub.M and S′.sub.1, S′.sub.2 . . . S′.sub.M, respectively. In situations in which devices 102 and 104 include lower quality transceivers that are not capable of transmitting signals at precise power levels and/or are not capable of precise measurement of received signals, the keys created in each device may have a lower probably of being identical. In this type of situation, the implementation may be used in which k.sub.102 and k.sub.104 are created using only a subset of most significant hits from each of the sampling results S.sub.1, S.sub.2 . . . S.sub.M and S′.sub.1, S′.sub.2 . . . S′.sub.M, respectively, to provide a more robust key creation process. Use of a subset of the most significant bits from each of the sampling results allows errors that occur in the less important bits of the sampling results to be removed and not cause differences between k.sub.102 and k.sub.104.

[0035] At 222, when the keys have been created in each of device 102 and 104, devices 102 and 104 may then communicate data signals with each other while encrypting and/or decrypting communications using, respectively, keys k.sub.102 and k.sub.104. If k.sub.102 and k.sub.104have not been generated identically, because of transmission or reception conditions in the network, neither of the devices 102 or 104 will be capable of decrypting communications sent by the other. In this case one of the devices may determine that it cannot correctly decode transmissions and cause new keys to be created by initiating repetition of the process of FIG. 2.

[0036] In an alternative implementation of FIG. 2, the setup signal that is sampled at device 102 at operation 210 may be a setup, signal that originates at device 104 rather than a setup signal that originates at device 102 and is looped back from device 104 to device 102. Similarly, in the alternative implementation the setup signal that is sampled at device 104 at operation 214 may be a setup signal that originates at device 10.2 rather than a setup signal that originates at device 104 and is looped back from device 102 to device 104. This alternative implementation may be used when devices 102 and 104 are able to transmit the setup signals at a selected transmit power level with good accuracy and the distance between devices 102 and 104 is known or determinable. In this case the error variance of transmissions in each device from the selected transmit power level, must be low. If the transmit power and the distance are known, the receiving device may calculate an expected power level for the received setup signal. The expected power level may be used to set the threshold for deciding which samples of the setup signal to keep for use in generating a hit string for key generation.

[0037] Also, in another implementation, one or more of the setup signals may be sent using channels offset from one another. For example, one or more of the signals sent in the direction from device 102 to device 104 (i.e., S.sub.B, A 112 and S.sub.A 106), and one or more of the signals sent in the direction from device 104 to device 102 (i.e., S.sub.A, B 108 and 110), may be sent on one or more frequency channels that are offset from the center frequency of channel 114. The amount of frequency offset may be chosen so that the reciprocity of the channel characteristics still allows generation of identical, or nearly identical, keys. For example, the offset may be a frequency offset of several percent of the center frequency of channel 114. Additionally, other offsets may be used as long as the offsets are of a magnitude that allows generation of the same encryption/decryption keys in each of the devices from the setup signals.

[0038] FIGS. 3A and 3B are plots illustrating sampling operations performed in example devices. FIG. 3A shows an example sampling of S.sub.A, B at operation 210 of FIG. 2. S.sub.1, S.sub.2, S.sub.3 . . . S.sub.N are samples taken of S.sub.A, B by sampler 128 at intervals of time that are shown along the time axis. Each sample is a bit string that indicates the value of a power level indicated by the height of the sample relative to the power axis. Similarly, FIG. 3B shows an example sampling of S.sub.B, A at operation 214 of FIG. 2. S′.sub.1, S′.sub.2, S′.sub.3 . . . S′.sub.N are samples taken of S.sub.B, A by sampler 136 at intervals of time that are shown along the time axis. Each sample comprises a bit string that indicates the value of a power level indicated by the height of the line associated with the sample relative to the power axis.

[0039] FIG. 3A also shows how bit string generator 130 may generate the bit string B.sub.1, B.sub.2 . . . B.sub.M at operation 212. Bit string generator 130 my take each sample S.sub.1, S.sub.2 . . . S.sub.N, that is above a threshold power level, PL.sub.1 (shown on the power axis), and create the bit string B.sub.1, B.sub.2 . . . B.sub.M by inserting the bits of each of samples S.sub.1, S.sub.3 . . . S.sub.N into B.sub.1, B.sub.2 . . . B.sub.M. In this example the number of samples, N, is less than the number of sets of bits, M, that are inserted into the bit string. In FIG. 3A, S.sub.2 may be one sample that is discarded. If the values of the samples where S.sub.1=10101010, S.sub.3=11111111, . . . S.sub.N=11001100 the generated bit string would be B.sub.1=10101010, B.sub.2=11111111 . . . B.sub.M=11001100. The threshold power level PL.sub.1 may be set to the median power level of the received signal S.sub.A, B 108 calculated over the time period within which the samples S.sub.1, S.sub.3 . . . S.sub.N are taken.

[0040] Referring again to FIG. 3B, bit string generator 138 of device 104 may generate the hit string C.sub.1, C.sub.2 . . . C.sub.M at operation 216 in a similar manner. Bit string generator 138 my take each sample S′.sub.1, S′.sub.2 . . . S′.sub.N, that is above a threshold power level, PL.sub.2 (shown on the power axis), and create the bit string C.sub.2, C.sub.2 . . . C.sub.M by inserting the bits of each of samples S′.sub.1, S′.sub.3 . . . S′.sub.N into C.sub.1 , C.sub.2 . . . C.sub.M. In the example of FIG. 3B, the number of samples, N, is less than the number of sets of bits, M, that are inserted into the bit string. In FIG. 3B, S′.sub.2 may be one sample that is discarded. If the values of the samples where S′.sub.1=10101010, S′.sub.3=11111111 . . . S′N=11001100 the bit string would be C1=10101010, C2=11111111 . . . CM=11001100. The threshold power level PL.sub.2 may he set to the median power level of the received signal S.sub.B, A 112 calculated over the time period within which the samples S′.sub.1, S′.sub.3 . . . S′.sub.N are taken.

[0041] The bit string generated in operations 212 and 216 of FIG. 2 may be used to create a key as was described for operations 218 and 220 by taking all of the of the bits of the bit string to create the key. Subsets of the bits may also be used, for example by taking a number of most significant bits of each set of B.sub.1, B.sub.2 . . . B.sub.M or C.sub.1, C.sub.2 . . . C.sub.M to create a key. Effectively, this is taking a number of most significant bits of each sample of S.sub.1, S.sub.2, S.sub.3 . . . S.sub.N with a value above the threshold PL.sub.1, and, each sample of S′.sub.1, S′.sub.3 . . . S′.sub.N with a value above the threshold PL.sub.2. In other implementations, for a more robust key creation, and to avoid creating keys in each of devices 102 and 104 that differ, the keys may be created using an error correction decoder.

[0042] FIG. 4A illustrates a process 400 that may be used by devices 102 and 104 in performing the key creation operations at 218 and 220 of FIG. 2. In the process, at 402, key creator 132 inputs the bit string B.sub.1, B.sub.2 . . . B.sub.M into a decoder, decoder A, in device 102. Similarly, at 404, key creator 140 inputs the bit string C.sub.1, C.sub.2 . . . C.sub.M into a decoder, decoder B, in device 104. At 406, decoder A generates a set of code words. CA.sub.1, CA.sub.2 . . . CA.sub.M, where each code word in the set corresponds to one of B.sub.1, B.sub.2 . . B.sub.M. At 408, decoder B generates a set of code words, CB.sub.1, CB.sub.2 . . . CB.sub.M, where each code word in the set corresponds to one of C.sub.1, C.sub.2 . . . C.sub.M. Depending on the decoder used, each code word in the set CA.sub.1, CA.sub.2 . . . CA.sub.M and each code word in the set CB.sub.1, CB.sub.2 . . . CB.sub.M may be generated by the decoder to be one of Z potential different code words, where Z=2.sup.y, and y=the number of bits in each set B.sub.X of B.sub.1, B.sub.2 . . . B.sub.M, or each set C.sub.X of C.sub.1, C.sub.2 . . . C.sub.M. In the implementation of FIG. 4A, y may equal the number of bits in each amplitude sample taken at operation 210 or 214. When the sets of code words have been created in each device, at 410 devices 102 and 104 encrypt and decrypt data signal communications between the two devices using the created code words.

[0043] FIG. 4B illustrates an alternative implementation of a process 412 that may be used by devices 102 and 104 in performing the key creation operations at 218 and 220 of FIG. 2. At 414, key creator 132 inputs y bits at a time into decoder A in device 102 from each set of the bits B.sub.1, B.sub.2 . . . B.sub.M. The y hits may comprise the y most significant bits of each set of bits in B.sub.1, B.sub.2, . . . B.sub.M. Similarly, at 416, key creator 138 inputs y bits at a time into decoder B in device 104 from each set of bits C.sub.1, C.sub.2 . . . C.sub.M. The y bits may comprise the y most significant bits of each set C.sub.X its C.sub.1, C.sub.2 . . . C.sub.M. At 418, decoder A generates a set of code words, CA.sub.1, CA.sub.2 . . . CA.sub.M, where each code word in the set is generated from the y bits of one of B.sub.1, B.sub.2 . . . B.sub.M. At 420, decoder B similarly generates a set of code words, CB.sub.1, CB.sub.2. . . CB.sub.M, where each code word in the set is generated from the y bits of one of C.sub.1, C.sub.2 . . . C.sub.M. Depending on the decoder used, each code word in the set CA.sub.1, CA.sub.2 . . . CA.sub.M and CB.sub.1, CB.sub.2 . . . CB.sub.M may be generated by the decoder to be one of a total number of Z potential different code words, where Z=2.sup.y. Then, at 422, devices 102 and 104 encrypt and decrypt data communications between the two devices using the generated set of code words.

[0044] FIG. 5A is a simplified block diagram illustrating example key creation operations performed in the embodiment of FIGS. 4A and 45. FIG. 4A shows decoder A, and decoder B of, respectively, devices 102 and 104. Bits of each B.sub.X of B.sub.1, B.sub.2 . . . B.sub.M 506 are separately fed into decoder A to generate a code word CA.sub.X. The bits of each B.sub.X fed into decoder A may comprise all bits of B.sub.X as described for operation 402, or a set of y bits of B.sub.X as described for operation 414. When all B.sub.X of B.sub.1, B.sub.2 . . . B.sub.M have been input into decoder A, a set of code words CA.sub.1, CA.sub.2 . . . C.sub.M will be generated. Each of CA.sub.1, CA.sub.2 . . . C.sub.M will correspond to one of B.sub.1, B.sub.2 . . . B.sub.M and each of CA.sub.1, CA.sub.2 . . . C.sub.M will be one of Z different code words, where Z=2.sup.y and y is the number of bits input into the decoder from each B.sub.1, B.sub.2 . . . B.sub.M. Similarly, bits of each C.sub.X of C.sub.1, C.sub.2 . . . C.sub.M 508 are separately fed into decoder B to generate a set of code words CB.sub.1, CB.sub.2 . . . CB.sub.M in an identical manner.

[0045] FIG. 5B is a diagram illustrating further example operations of key creation using decoders. FIG. 5B shows how error code correction principles may be utilized to create identical keys in each of two communicating devices despite the presence of errors in the results of the sampling done on the setup signals. FIG. 5B shows use of decoders configured to use an error correction code having code words represented by the center points CW.sub.1, CW.sub.2, CW.sub.3 . . . CW.sub.Z, respectively, of each circle 514, 516, 520, and 522. Each circle may represent, respectively, the decoding space of a code word CW.sub.1, CW.sub.2, CW.sub.3 . . . CW.sub.Z. Binary values input to a decoder that fall into the decoding space of a code word CW.sub.X will be output by the decoder as CW.sub.X. In the implementations, each of the code words in the communicating devices may be correlated with a code word of CW.sub.1, CW.sub.2 . . . CW.sub.Z. For example, CA.sub.1 and CB.sub.1 may be correlated with CW.sub.1, and CA.sub.2 and CB.sub.2 may be correlated with CW.sub.2.

[0046] Because of the way in which an error correction decoder operates, when any string of y bits entered into the decoder falls within the decoding space of a code word CW.sub.X, the decoder will output code word CW.sub.X. The size of the decoding space depends on the error correction capability of the decoder. Depending on the error correction code implemented in the decoder, two y-bit strings input into the decoder may contain different bits but still result in the same code word CW.sub.X being output if the two different y-bit strings are both within the decoding space of CW.sub.X. For example, B.sub.1 and C.sub.1 may each include different bits as input into the decoder, but both may be within the decoding space of CW.sub.1 as long as the difference is within the error correction capability of the decoder. This error correction capability is commonly given in terms of capability to correct a certain number of bit errors in the decoder input as compared to an expected input for generating CW.sub.X. For example, FIG. 5B shows B.sub.1 and C.sub.1 having different values but both being in the space of CW. This will result in the identical code word CW.sub.1 being generated as CA.sub.1 in device 102 and as CB.sub.1 in device 104. Similarly, the same result will occur for B.sub.2 and C.sub.2 in the space of CW.sub.2 to generate CA.sub.2 and CB.sub.2, and, for B.sub.3 and C.sub.3 in the space of CW.sub.3 to generate CA.sub.3 and CB.sub.3.

[0047] If the decoder used in device 102 and device 104 has an error correction capability of x bits, than B.sub.X and C.sub.X may each differ from a code word CW.sub.X by up to x bits, but each still result in CW.sub.X being output from the decoder when B.sub.X and C.sub.X are input into the decoder. Because identical signals and the same process are used in both device 102 and 104 to generate the bit strings B.sub.1, B.sub.2 . . . B.sub.M and C.sub.1, C.sub.2 . . . C.sub.M these bit strings should be identical or, allowing for differences in the devices and/or RF environment, nearly identical. Use of the same decoder configuration in both of devices 102 and 104 allows bit strings B.sub.1, B.sub.2 . . . B.sub.M and C.sub.1, C.sub.2 . . . C.sub.M to be input into the decoder to generate identical sets of code words in device 102 and 104. Even when B.sub.1, B.sub.2 . . . B.sub.M and C.sub.1, C.sub.2 . . . C.sub.M are not identical. As long as the differences between B.sub.X and C.sub.X are within a threshold that keeps them in the domain of the same code word, the same code words should be generated in each device. This provides more robust generation of identical keys in both devices.

[0048] Referring now to FIG. 6, therein is a simplified block diagram of an example device 600. The functions of device 102 of FIG. 1B may be implemented on a device such as, device 600. In an example implementation, device 600 may be a mobile device. Device 600 may include a processor 604, memory 608, user interfaces (U/Is) 606, and transceiver (TRX) 602. Memory 608 may be implemented as any type al computer readable storage media, including non-volatile and volatile memory. Memory 608 is shown as including code comprising device operating system (OS) 610, device applications 612, and encryption/decryption control programs 614. Processor 604 may comprise one or more processors, or other control circuitry, or any combination of processors and control circuitry. The encryption/decryption control programs 614 may provide the functions shown in device 102 in FIG. 1B. When executed, the encryption/decryption control programs 614 may cause processor 604 to control device 600 to perform processes described in relation to FIG. 2 and, FIGS. 4A and 4B.

[0049] User interfaces 606 may include any type of interface such as a touchscreen, a keypad, a voice controlled interface, interfaces that are gesture or motion based, an interface that receives input wirelessly, or any other type of interface that allows a user to provide appropriate control of device 600 for performing the operations of the embodiments.

[0050] In example implementations, device 600 may he any type of device that may be configured to communicate with a network or other device using encrypting/decrypting of data communications. For example, device 600 may be implemented in a smart phone, a tablet computer, a desktop computer, laptop computer device, gaming devices, media devices, smart televisions, multimedia cable/television boxes, smart phone accessory devices, tablet accessory devices, or personal digital assistants (PDAs). In an implementation, device 600 may operate according to a timed division half-duplexed communications standard. For example, device 600 may operate using half-duplex channels specified in the IEEE 802.11 Wi-Fi standards.

[0051] Referring now to FIG. 7, therein is a simplified block diagram of another example device 700. Device 700 may be implemented, for example, as device 104 in the network 100 of FIG. 1A. In one implementation device 700 may be an access point such as a IEEE 802.11 Wi-Fi access point. Device 700 includes processing unit 706, transceivers 714, and memory/storage 708 that includes code comprising applications 712 and encryption control programs 710. The encryption/decryption control programs 710 may provide the functions shown in device 104 in FIG. 1B. When executed, the encryption/decryption control programs 710 may cause processor 706 to control device 700 to perform processes described in relation to FIG. 2 and, FIGS. 4A and 4B.

[0052] Memory 708 may be implemented as any type of computer readable storage media, including non-volatile and volatile memory. Access point 700 connects to a network, such as the internet, over network interface 702. Processing unit 706 may comprise one or more processors, or other control circuitry or any combination of processors and control circuitry that provide overall control of the access point according to the disclosed embodiments. Transceivers 712 provide the capability for device 700 to communicate with devices, for example device 102 of FIG. 1A, over channels 716, such as RF channels configured according to the Wi-Fi standards.

[0053] The example embodiments disclosed herein may be described in the general context of processor-executable code or instructions stored on memory that may comprise one or more computer readable storage media (e.g., tangible non-transitory computer-readable storage media such as memory 608 or 708). As should he readily understood, the terms “computer-readable storage media” or “non-transitory computer-readable media” include the media for storing of data, code and program instructions, such as memory 608, 708, and do not include portions of the media for storing transitory propagated or modulated data communication signals.

[0054] While implementations have been disclosed and described as having functions implemented on particular wireless devices operating in a network, one or more of the described functions for the devices may be implemented on a different one of the devices than shown in the figures, or on different types of equipment operating in different systems.

[0055] The disclosed embodiments include a first device comprising one or more processors and memory in communication with the one or more processors, the memory comprising code that, when executed, causes the one or more processors to control the first device to receive a setup signal from a second device, sample the setup signal and generate sampling results, create a key based on the sampling results, and, utilize the key to exchange secure data signals with the second device. The setup signal may comprise a second setup signal and the code may cause the one or more processors to control the first device to send a first setup signal to the second device, and, receive the second setup signal from the second device, wherein the second setup signal comprises a looped back version of the first setup signal. The code may further cause the one or more processors to control the first device to receive a third setup signal from the second device, and, send a fourth setup signal to the second device, the fourth setup signal comprising a looped back version of the third setup signal. The first setup signal and the second setup signal may be sent on the same frequency channel. The first setup signal may be sent on a first frequency channel and the second setup signal may be sent on a second frequency channel that is offset from the first frequency channel.

[0056] The code may further cause the one or more processors to control the first device to sample the setup signal and the generate sampling results by sampling the setup signal at each of a plurality of time intervals to generate a plurality of sets of bits, wherein each of the sets of bits indicates a magnitude of a sampled level, and, create the key based on the sampling results by using only selected sets of the plurality of sets of bits having a magnitude above a threshold level. The sampling results may comprise one or more sets of bits and the code further may cause the one or more processors to control the first device to create the key by inputting each of the one or more sets of bits into a decoder to generate a set of code words as the key. The sampling results may comprise one or more sets of bits and the code may further cause the one or more processors to control the first device to create the key by inputting a set of most significant bits of each of the one or more sets of bits into a decoder to generate a set of code words as the key.

[0057] The disclosed embodiments also include a method in a first device comprising receiving a setup signal from a second device, sampling the setup signal and generating sampling results, creating a key based on the sampling results, and, utilizing the key to exchange data signals with the second device. The setup signal may comprise a second setup signal, and the method may further comprise sending a first setup signal to the second device on a channel, and the receiving the second setup signal may comprise receiving the second setup signal from the second device on the channel, wherein the second setup signal comprises a looped back version of the first setup signal. The method may further comprise receiving a third setup signal from the second device, and, sending a fourth setup signal to the second device, the fourth setup signal comprising a looped back version of the third setup signal. The sampling the setup signal and generating sampling results may comprise sampling the setup signal at each of a plurality of time intervals to generate a plurality of sets of its, wherein each of the plurality of sets of bits indicates a magnitude of a sampled level, and the creating the key from the sampling results may comprise creating the key using only selected sets of the plurality of sets of bits having a magnitude above a threshold level. The sampling results may comprise one or more sets of bits, each representing a sample in the sampling results, and the creating the key may comprise inputting each of the one or more sets of bits into a decoder to generate a set of code words as the key. The sampling results may comprise one or more sets of bits, each representing a sample in the sampling results, and the creating the key may comprise inputting a set of most significant bits of each of the one or more sets of bits into a decoder to generate a set of code words as the key.

[0058] The disclosed embodiments further include a system comprising a first device and a second device configured to communicate with one another, wherein the first device receives a first setup signal from the second device, and the second device receives a second setup signal from the first device, and, wherein the first device samples the first setup signal and creates a first key and the second device samples the second setup signal and creates a second key, and the first device encrypts and decrypts data signals communicated between the first and second device using the first key, and the second device encrypts and decrypts the data signals communicated between the first and second device using the second key. The first setup signal may comprise a looped back setup signal initially sent by the first device, and the second setup signal may comprise a looped back setup signal initially sent by the second device. The first device may sample the first setup signal at each of a plurality of time intervals to generate first sets of bits, each set of the first sets of bits indicating a magnitude sampled at the first device, and the second device may sample the second setup signal at each of the plurality of time intervals to generate second sets of bits, each set of the second sets of bits indicating a magnitude sampled at the second device, and, the first and second devices may create the first and second keys using, respectively, only first selected sets of bits of the first sets of hits and only second selected sets of bits of the second sets of bits that indicate a magnitude, respectively, above a first and second threshold level. The first device may create the first key by inputting the first selected sets of hits into a decoder to generate a first set of code words as the first key, and the second device may create the second key by inputting the second selected sets of hits into a decoder to generate a second set of code words as the second key. The first device may create the first key by inputting at least one most significant bit of each of the first selected sets of bus into a decoder to generate a first set of code words as the first key, and the second device may create the second key by inputting at least one most significant bit of each of the second selected sets of bits into a decoder to generate a second set of code words as the second key. The first and second setup signals may comprise analog signals sent on the same channel.

[0059] While the functionality disclosed herein has been described by illustrative example using descriptions of the various components and devices of embodiments by referring to functional blocks and processors or processing units, controllers, and memory including instructions and code, the functions and processes of the embodiments may be implemented and performed using any appropriate functional blocks, type of processor, circuitry or combinations of processors and/or circuitry and code. This may include, at least in part, one or more hardware logic components. For example, and without limitation, illustrative types of hardware logic components that can he used include field programmable gate arrays (FPGAs), application specific integrated circuits (ASICs), application specific standard products (ASSPs), system-on-a-chip systems (SOCs), complex programmable logic devices (CPLDs), etc. Use of the term processor or processing unit in this disclosure is mean to include all such implementations.

[0060] Although the subject matter has been described in language specific to structural features and/or methodological operations or acts, it is to be understood that the subject matter defined in the appended claims is not necessarily limited to the specific features, operations, or acts described above. Rather, the specific features, operations, and acts described above are disclosed as example embodiments, implementations, and of implementing the claims and these example configurations and arrangements may be changed significantly without departing from the scope of the present disclosure. Moreover, although the example embodiments have been illustrated with reference to particular elements and operations that facilitate the processes, these elements, and operations may or combined with or, be replaced by, any suitable devices, components, architecture or process that achieves the intended functionality of the embodiment. Numerous other changes, substitutions, variations, alterations, and modifications may he ascertained to one skilled in the art and it is intended that the present disclosure encompass all such changes, substitutions, variations, alterations, and modifications as falling within the scope of the appended claims.