Microsoft patents secure handshake between computer and external hubs
Microsoft describes a method for a computer to securely verify an external hub, such as a docking station, before allowing it to manage connected devices. The hub proves its identity using a digital certificate and shares a credential based on user interaction, which the computer checks against data from another device. Once verified, the computer issues a new certificate to the hub for future secure connections.
In the filing’s own words
The techniques described herein involve methods, systems, and computer program products for secure communication between a hub security controller of a peripheral hub and a system security controller of a computer system. The hub security controller identifies a request to enter a secure peripheral mode, establishes a communication channel with the system security controller by presenting a cryptographic certificate, and sends a credential based on user interaction with a peripheral device. Upon receiving acknowledgment, the hub security controller requests and receives a second cryptographic certificate, replacing the first for future sessions. The system security controller receives the credential, compares it with a second credential from another peripheral device, and sends acknowledgment if they match. It then generates and sends the second cryptographic certificate to the hub security controller. This process ensures secure communication and credential verification between the hub and system security controllers.
What exactly they claim (claim 1)
1. A method implemented in a hub security controller of a peripheral hub comprising: identifying a first request to enter a secure peripheral mode; establishing a communication channel with a system security controller in a computer system that is communicatively coupled to the peripheral hub, wherein establishing the communication channel includes presenting a first cryptographic certificate to the system security controller; sending a credential via the communication channel to the system security controller, the credential being identified based on user interaction with a peripheral device coupled to the peripheral hub; receiving an acknowledgment of acceptance of the credential by the system security controller via the communication channel; sending a second request for a second cryptographic certificate via the communication channel to the system security controller; receiving the second cryptographic certificate from the system security controller via the communication channel; and binding the hub security controller to the system security controller, including replacing the first cryptographic certificate with the second cryptographic certificate for establishing a subsequent communications session with the system security controller.
Facts
- Company
- Microsoft (Microsoft Technology Licensing, LLC)
- Official title
- SECURE TERMINAL ROOT OF TRUST DELEGATION TO EXTERNAL PERIPHERAL HUB
- Publication number
- US20260280901A1
- Application number
- 19078620
- Filed
- Mar 13, 2025
- Published
- Sep 17, 2026
- Inventors
- 3
- Claims
- 20
Classified under
H04L 9/3263 Electricity & electronicsMore from Microsoft in Security & privacy
- Microsoft patents system to call 911 for others during video calls Sep 22, 2026
- Microsoft patents system to block fake code suggested by AI Sep 15, 2026
- Microsoft patents one-way data flow to block network attacks Sep 10, 2026
- Microsoft patents voice coding that hides speaker identity for secure calls Sep 17, 2026
- Microsoft patents security checks for AI chats using user and model profiles Oct 1, 2026
Summaries are simplified from the filing’s own abstract and first claim. A patent filing is not a product announcement.
Patent data and drawings: U.S. Patent and Trademark Office (USPTO). Nebula is not affiliated with or endorsed by the USPTO.