Sensor derived authentication for establishing peer-to-peer networks

• US 10,089,456 B2
• Filed: 05/02/2017
• Issued: 10/02/2018
• Est. Priority Date: 02/02/2009
• Status: Active Grant

• Current Assignee: Apple Inc.
• Original Assignee: Apple Inc.
• Inventors: Andrus, David C., Kearney, Philip F., Zimmermann, Christopher B., Franklin, Jeremy C., Sharpe, Nathaniel S.
• Primary Examiner(s): Dolly, Kendall
• Application Number:
  US15/585,088
• Publication Number:
  US 20170337367A1
• Time in Patent Office: 518 Days
• CPC Class Codes: G06F 21/36 by graphic or iconic representation
• CPC Class Codes: G06F 3/017 Gesture based interaction, e.g. based on a set of recognized hand gestures interaction based on gestures traced on a digitiser G06F3/04883
• CPC Class Codes: H04L 2209/805 Lightweight hardware, e.g. radio-frequency identification [RFID] or sensor
• CPC Class Codes: H04L 2463/061 applying further key derivation, e.g. deriving traffic keys from a pair-wise master key cryptographic mechanisms or cryptographic arrangements for generation of secret information including derivation or calculation of cryptographic keys or passwords H04L9/0861
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 9/0838 Key agreement, i.e. key establishment technique in which a shared key is derived by parties as a function of information contributed by, or associated with, each of these network architectures or network communication protocols for key exchange in a packet data network H04L63/061
• CPC Class Codes: H04L 9/0844 with user authentication or key authentication, e.g. ElGamal, MTI, MQV-Menezes-Qu-Vanstone protocol or Diffie-Hellman protocols using implicitly-certified keys
• CPC Class Codes: H04L 9/0861 Generation of secret information including derivation or calculation of cryptographic keys or passwords
• CPC Class Codes: H04L 9/0866 involving user or device identifiers, e.g. serial number, physical or biometrical information, DNA, hand-signature or measurable physical characteristics
• CPC Class Codes: H04L 9/3297 involving time stamps, e.g. generation of time stamps
• CPC Class Codes: H04W 12/037 of the control plane, e.g. signalling traffic
• CPC Class Codes: H04W 12/04 Key management, e.g. using generic bootstrapping architecture [GBA]
• CPC Class Codes: H04W 12/50 Secure pairing of devices
• CPC Class Codes: H04W 12/65 Environment-dependent, e.g. using captured environmental data
• CPC Class Codes: H04W 12/68 Gesture-dependent or behaviour-dependent
• CPC Class Codes: H04W 76/14 Direct-mode setup
• CPC Class Codes: H04W 84/18 Self-organising networks, e.g. ad-hoc networks or sensor networks

Abstract

Methods, systems and devices for generating an authentication key are provided. Two or more communications devices can generate an authentication key by monitoring a physical stimulus that is experienced by both devices (e.g., a common physical stimulus). Each device can then use an identical, predetermined algorithm to generate a common authentication key based on the stimulus. The devices can use the common authentication key to establish a secure network.

Claims

1. A method for enabling a first computing device and a second computing device to communicate information, the method comprising, at the second computing device:

receiving a request from the first computing device to establish a connection with the second computing device;

deriving at least one symmetric key based on at least one physical stimulus that is detected by the first computing device and the second computing device, wherein the first computing device correspondingly derives the at least one symmetric key in accordance with the at least one physical stimulus;

establishing a communication channel with the first computing device based on the at least one symmetric key; and

communicating, to the first computing device over the communication channel, at least a portion of information stored on the second computing device, wherein the first computing device updates its operational configuration in accordance with the at least a portion of information.

2. The method of claim 1, wherein the communication channel is a secure communication channel.

3. The method of claim 1, wherein the at least one physical stimulus is output by the first computing device or the second computing device.

4. The method of claim 1, wherein the at least a portion of information is associated with a user account identifier.

5. The method of claim 4, wherein the user account identifier is an email address.

6. The method of claim 1, wherein the at least one symmetric key is encrypted.

7. The method of claim 1, wherein the at least one symmetric key is generated based at least in part on one or more audio signals.

8. The method of claim 1, wherein the first and second computing devices have different hardware profiles.

9. A second computing device configured to communicate information with a first computing device, the second computing device comprising:

at least one processor; and

at least one memory configured to store instructions that, when executed by the at least one processor, cause the second computing device to;

receive a request from the first computing device to establish a connection with the second computing device;

derive at least one symmetric key based on at least one physical stimulus that is detected by the first computing device and the second computing device, wherein the first computing device correspondingly derives the at least one symmetric key in accordance with the at least one physical stimulus;

establish a communication channel with the first computing device based on the at least one symmetric key; and

communicate, to the first computing device over the communication channel, at least a portion of information stored on the second computing device, wherein the first computing device updates its operational configuration in accordance with the at least a portion of information.

10. The second computing device as described in claim 9, wherein the at least one physical stimulus is output by the first computing device or the second computing device.

11. The second computing device as described in claim 9, wherein the at least a portion of information is associated with a user account identifier.

12. The second computing device as described in claim 11, wherein the user account identifier is an email address.

13. The second computing device as described in claim 9, wherein the at least one symmetric key is encrypted.

14. The second computing device as described in claim 9, wherein the at least one symmetric key is generated based at least in part on one or more audio signals.

15. The second computing device as described in claim 9, wherein the first and second computing devices have different hardware profiles.

16. At least one non-transitory machine-readable storage medium configured to store instructions that, when executed by at least one processor included in a second computing device, cause the second computing device to communicate information with a first computing device, by carrying out steps that include:

receiving a request from the first computing device to establish a connection with the second computing device;

deriving at least one symmetric key based on at least one physical stimulus that is detected by the first computing device and the second computing device, wherein the first computing device correspondingly derives the at least one symmetric key in accordance with the at least one physical stimulus;

establishing a communication channel with the first computing device based on the at least one symmetric key; and

communicating, to the first computing device over the communication channel, at least a portion of information stored on the second computing device, wherein the first computing device updates its operational configuration in accordance with the at least a portion of information.

17. The at least one non-transitory machine-readable storage medium as described in claim 16, wherein the at least one physical stimulus is output by the first computing device or the second computing device.

18. The at least one non-transitory machine-readable storage medium as described in claim 16, wherein the at least a portion of information is associated with a user account identifier.

19. The at least one non-transitory machine-readable storage medium as described in claim 18, wherein the user account identifier is an email address.

20. The at least one non-transitory machine-readable storage medium as described in claim 16, wherein the at least one symmetric key is encrypted.