Proximity authentication protocol

• US 10,154,411 B2
• Filed: 03/02/2017
• Issued: 12/11/2018
• Est. Priority Date: 03/02/2016
• Status: Active Grant

• Current Assignee: Arm IP Limited
• Original Assignee: Arm IP Limited
• Inventors: Moran, Brendan James, Meriac, Milosch, Luff, Geraint David
• Primary Examiner(s): Nguyen, David Q
• Application Number:
  US15/447,729
• Publication Number:
  US 20170257760A1
• Time in Patent Office: 649 Days
• Field of Search: 455411, 455434, 726 4, 726 7
• CPC Class Codes: H04L 63/107 wherein the security policies are location-dependent, e.g. entities privileges depend on current location or allowing specific operations only from locally connected terminals
• CPC Class Codes: H04L 63/18 using different networks or channels, e.g. using out of band channels cryptographic mechanisms or cryptographic arrangements for key distribution involving distinctive intermediate devices or communication paths H04L9/0827; cryptographic mechanisms or cryptographic arrangements for authentication using a plurality of channels H04L9/3215
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 4/023 using mutual or relative location information between multiple location based services [LBS] targets or of distance thresholds
• CPC Class Codes: H04W 4/70 Services for machine-to-machine communication [M2M] or machine type communication [MTC]
• CPC Class Codes: H04W 4/80 Services using short range communication, e.g. near-field communication [NFC], radio-frequency identification [RFID] or low energy communication

Abstract

A machine implemented method of authenticating a communication channel between a first device and a second device by providing proof of proximity between both devices, the method comprising: generating, at the first device, an acoustic authentication signal to be received at the second device via a solid body acoustic coupling established between the first device and the second device thereby providing proof of proximity between both devices and so authenticating the communication channel between the first device and the second device.

Claims

1. A machine implemented method of authenticating a communication channel between a first device and a second device by providing proof of proximity between both devices, the method comprising:

transmitting, from the second device, a first device selection requirement;

transmitting, from the first device to the second device, first device authentication information, over the communication channel when the first device meets the first device selection requirement;

generating, at the first device, an acoustic authentication signal to be received at the second device via a solid body acoustic coupling established between the first device and the second device;

transmitting the acoustic authentication signal to the second device via the solid body acoustic coupling thereby providing proof of proximity between both devices; and

determining, at the second device, that the first device authentication information received over the communication channel corresponds to the acoustic authentication signal received via the solid body acoustic coupling, in order to authenticate the communication channel between the first device and the second device.

2. The method of claim 1, wherein the acoustic authentication signal is generated in response to pressure applied against the first device by the second device.

3. The method of claim 2, wherein the acoustic authentication signal is a modulated signal.

4. The method of claim 3, wherein the modulated signal carries a public key or a hash of the public key of the first device.

5. The method of claim 1, wherein the acoustic authentication signal is audible.

6. The method of claim 1, wherein the solid body acoustic coupling is provided through one or more layers, wherein optional one or more layers is a gel-like or flexible material.

7. The method of claim 1, wherein upon determining that the first device authentication information corresponds to the received acoustic authentication signal, the first and second device communicate on the authenticated communication channel.

8. The method of claim 1, wherein upon receiving the acoustic authentication signal at the second device, the second device identifies on which axis the acoustic authentication signal is travelling, and ignores acoustic authentication signals transmitted from unexpected axes.

9. The method of claim 1, wherein the acoustic authentication signal comprises a secret, and wherein the first device and/or the second device present proof-of-knowledge of the secret to authenticate the communication channel between the first device and the second device.

10. The method of claim 1, further comprising:

sensing, at the first device, inputs from the second device;

sending the inputs to a server; and

annotating the inputs with localisation information.

11. The method of claim 1, further comprising:

correlating, at a server, time of capture of the inputs to match the second device and the first device.

12. The method of claim 1, wherein the first device is provided at a table for ordering of food/drinks in Bars/Restaurants to the table, without knowing a location of the table.

13. The method of claim 1, wherein the first device is an IoT device.

14. The method of claim 1, wherein the solid body acoustic coupling is established between the first device and the second device when the second device is in physical contact with the first device.

15. A machine implemented method of authenticating a communication channel between a first device and a second device by providing proof of proximity between both devices, the method comprising:

transmitting, from the second device, a first device selection requirement;

receiving, at the second device, first device authentication information transmitted by the first device over the communication channel when the first device meets the first device selection requirement;

receiving, at the second device, an acoustic authentication signal transmitted by the first device via a solid body acoustic coupling established between the first device and the second device thereby providing proof of proximity between both devices; and

determining, at the second device, that the first device authentication information received over the communication channel corresponds to the acoustic authentication signal received via the solid body acoustic coupling, in order to authenticate the communication channel between the first device and the second device.