Device-to-device network membership confirmation

• US 10,097,555 B2
• Filed: 03/04/2016
• Issued: 10/09/2018
• Est. Priority Date: 03/04/2015
• Status: Active Grant

• Current Assignee: Neone, Inc.
• Original Assignee: Neone, Inc.
• Inventors: Glassco, Dave, Diacakis, Athanassios H., Cohen, Dan
• Primary Examiner(s): Shehni, Ghazal B
• Application Number:
  US15/060,605
• Publication Number:
  US 20160261602A1
• Time in Patent Office: 949 Days
• CPC Class Codes: H04L 12/06 Answer-back mechanisms or circuits
• CPC Class Codes: H04L 12/6418 Hybrid transport
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/061 for key exchange, e.g. in peer-to-peer networks cryptographic mechanisms or cryptographic arrangements for key agreement H04L9/0838
• CPC Class Codes: H04L 63/062 for key distribution, e.g. centrally by trusted party cryptographic mechanisms or cryptographic arrangements for key distribution involving a central third party H04L9/0819
• CPC Class Codes: H04L 63/065 for group communications cryptographic mechanisms or cryptographic arrangements for key management involving conference or group key H04L9/0833
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/0876 based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint
• CPC Class Codes: H04L 63/102 Entity profiles
• CPC Class Codes: H04L 67/1046 Joining mechanisms
• CPC Class Codes: H04L 67/52 specially adapted for the location of the user terminal
• CPC Class Codes: H04L 9/0866 involving user or device identifiers, e.g. serial number, physical or biometrical information, DNA, hand-signature or measurable physical characteristics
• CPC Class Codes: H04L 9/32 including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials
• CPC Class Codes: H04L 9/3271 using challenge-response
• CPC Class Codes: H04W 12/02 Protecting privacy or anonymity, e.g. protecting personally identifiable information [PII]
• CPC Class Codes: H04W 12/03 Protecting confidentiality, e.g. by encryption

Abstract

An electronic device in a device-to-device network of a user of the electronic device communicates with a group of one or more other instances of the electronic via dynamic connections that are based on pre-established and maintained (i.e., long-lived) associations in the device-to-device network. Moreover, a given dynamic connection between the electronic device and a given instance of the electronic device in the group is setup by the electronic device without assistance of a computer in another network, which conveys the communication within the group. During operation, the electronic device: confirms that a second instance of the electronic device in the group (which is associated with a second user in the device-to-device network) is associated with a provider of the electronic device; and when the association is confirmed, communicates a message to the second instance of the electronic device at a location specified by one of the associations.

Claims

1. An electronic device, comprising:

an interface circuit configured to communicate with a group of one or more other instances of the electronic device via dynamic connections that are based at least in part on pre-established and maintained associations in a device-to-device network of a user of the electronic device, wherein the pre-established and maintained associations are maintained for longer time than the dynamic connections,

wherein a pre-established and maintained association and a given dynamic connection between the electronic device and a given instance of the electronic device in the group is set up by the electronic device without assistance of a computer in another network;

wherein the pre-established and maintained associations are in response to invitations from the user without advertising in the device-to-device network, the device-to-device network partially overlaps one or more other device-to-device networks of users of the one or more other instances of the electronic device, and a given one of the one or more other device-to-device networks is controlled by a given one of the users; and

wherein the interface circuit is configured to communicate with the given instance of the electronic device via at least a non-wireless communication technique and the other network; and

a control circuit, coupled to the interface circuit, configured to;

confirm that a second instance of the electronic device in the group is associated with a provider of the electronic device, wherein the second instance of the electronic device is associated with a second user in the device-to-device network; and

when the association is confirmed, communicate, via the interface circuit, a message for the second instance of the electronic device at a location specified by one of the pre-established and maintained associations.

2. The electronic device of claim 1, wherein the electronic device comprises an authentication circuit that implements a coding technique that is shared by the group;

and

wherein confirming that the second instance of the electronic device is associated with the provider involves;

providing a challenge for the second instance of the electronic device;

generating an encoded version of the challenge using the authentication circuit;

receiving another encoded version of the challenge associated with the second instance of the electronic device; and

comparing the encoded version and the other encoded version to confirm that the second instance of the electronic device is associated with the provider of the electronic device.

3. The electronic device of claim 2, wherein the coding technique comprises one of:

a hash function; and

an encryption technique.

4. The electronic device of claim 2, wherein the coding technique is selected from a set of coding techniques based at least in part on a setting common to the group.

5. The electronic device of claim 2, wherein the coding technique involves generating a hash of the challenge and a key.

6. The electronic device of claim 2, wherein confirming that the second instance of the electronic device is associated with the provider involves:

determining, based at least in part on the other encoded version of the challenge, an identification number associated with one of;

the second instance of the electronic device, and an instance of an authentication circuit in the second instance of the electronic device;

accessing a list of identification numbers stored in memory in the electronic device; and

verifying based at least in part on the identification number and the list that communication with the second instance of the electronic device is allowed.

7. The electronic device of claim 1, wherein the confirmation is performed one of:

when the user invites the second user to join the device-to-device network; and

each time the electronic device communicates with the second instance of the electronic device.

8. The electronic device of claim 1, wherein the control circuit comprises:

a processor; and

memory, coupled to the processor, which stores program instructions configured to be executed by the processor, wherein, when excited by the processor, the program instructions cause the electronic device to perform the confirmation and the communication.

9. A non-transitory computer-readable storage medium for use in conjunction with an electronic device, the computer-readable storage medium storing program instructions, wherein, when executed by the electronic device, the program instructions cause the electronic device to communicate a message, by performing operations comprising:

confirming that a second instance of the electronic device in a group is associated with a provider of the electronic device, wherein the second instance of the electronic device is associated with a second user in a device-to-device network, and wherein the group comprises one or more other instances of the electronic device in a device-to-device network of a user of the electronic device; and

communicating, when the association is confirmed, the message for the second instance of the electronic device at a location specified by a pre-established and maintained association between the electronic device and the second instance of the electronic device;

wherein the pre-established and maintained association is maintained for longer time than the dynamic connection; and

wherein the communicating involves at least a dynamic connection that is based at least in part on the pre-established and maintained association and the pre-established and maintained association and the dynamic connection are set up by the electronic device without assistance of a computer in another network;

wherein the pre-established and maintained associations are in response to invitations from the user without advertising in the device-to-device network, the device-to-device network partially overlaps one or more other device-to-device networks of users of the one or more other instances of the electronic device, and a given one of the one or more other device-to-device networks is controlled by a given one of the users; and

wherein the communication between the electronic device and the second instance of the electronic device via the other network involves at least a non-wireless communication technique.

10. The computer-readable storage medium of claim 9, wherein the electronic device comprises an authentication circuit that implements a coding technique that is shared by the group;

and

wherein confirming that the second instance of the electronic device is associated with the provider comprises;

providing a challenge for the second instance of the electronic device;

generating an encoded version of the challenge using the authentication circuit;

receiving another encoded version of the challenge associated with the second instance of the electronic device; and

comparing the encoded version and the other encoded version to confirm that the second instance of the electronic device is associated with the provider of the electronic device.

11. The computer-readable storage medium of claim 10, wherein the coding technique comprises one of:

a hash function; and

an encryption technique.

12. The computer-readable storage medium of claim 10, wherein the coding technique is selected from a set of coding techniques based at least in part on a setting common to the group.

13. The computer-readable storage medium of claim 10, wherein the coding technique involves generating a hash of the challenge and a key.

14. The computer-readable storage medium of claim 10, wherein confirming that the second instance of the electronic device is associated with the provider comprises:

determining, based at least in part on the other encoded version of the challenge, an identification number associated with one of;

the second instance of the electronic device, and an instance of an authentication circuit in the second instance of the electronic device;

accessing a list of identification numbers stored in memory in the electronic device; and

verifying based at least in part on the identification number and the list that communication with the second instance of the electronic device is allowed.

15. The computer-readable storage medium of claim 9, wherein confirming that the second instance of the electronic device is associated with the provider is performed one of:

when the user invites the second user to join the device-to-device network; and

each time the electronic device communicates with the second instance of the electronic device.

16. A method for communicating a message, wherein the method comprises:

by an electronic device;

confirming that a second instance of the electronic device in a group is associated with a provider of the electronic device, wherein the second instance of the electronic device is associated with a second user in a device-to-device network, and wherein the group comprises one or more other instances of the electronic device in a device-to-device network of a user of the electronic device; and

communicating, when the association is confirmed, the message for the second instance of the electronic device at a location specified by a pre-established and maintained association between the electronic device and the second instance of the electronic device;

wherein the pre-established and maintained association is maintained for longer time than the dynamic connection; and

wherein the communicating involves at least a dynamic connection that is based at least in part on the association and the pre-established and maintained association and the dynamic connection are set up by the electronic device without assistance of a computer in another network;

wherein the pre-established and maintained associations are in response to invitations from the user without advertising in the device-to-device network, the device-to-device network partially overlaps one or more other device-to-device networks of users of the one or more other instances of the electronic device, and a given one of the one or more other device-to-device networks is controlled by a given one of the users; and

wherein the communication between the electronic device and the second instance of the electronic device via the other network involves at least a non-wireless communication technique.

17. The method of claim 16, wherein the electronic device comprises an authentication circuit that implements a coding technique that is shared by the group;

and

wherein confirming that the second instance of the electronic device is associated with the provider involves;

providing a challenge for the second instance of the electronic device;

generating an encoded version of the challenge using the authentication circuit;

receiving another encoded version of the challenge associated with the second instance of the electronic device; and

comparing the encoded version and the other encoded version to confirm that the second instance of the electronic device is associated with the provider of the electronic device.

18. The method of claim 17, wherein the coding technique is selected from a set of coding techniques based at least in part on a setting common to the group.

19. The method of claim 17, wherein confirming that the second instance of the electronic device is associated with the provider involves:

determining, based at least in part on the other encoded version of the challenge, an identification number associated with one of;

the second instance of the electronic device, and an instance of an authentication circuit in the second instance of the electronic device;

accessing a list of identification numbers stored in memory in the electronic device; and

verifying based at least in part on the identification number and the list that communication with the second instance of the electronic device is allowed.

20. The method of claim 16, wherein confirming that the second instance of the electronic device is associated with the provider is performed one of:

when the user invites the second user to join the device-to-device network; and

each time the electronic device communicates with the second instance of the electronic device.