Proximity detection system

• US 10,284,566 B2
• Filed: 04/01/2016
• Issued: 05/07/2019
• Est. Priority Date: 04/01/2016
• Status: Active Grant

• Current Assignee: Intel Corporation
• Original Assignee: Intel Corporation
• Inventors: Khosravi, Hormuzd M., Bronleewe, David A., Almahallawy, Khaled
• Primary Examiner(s): Hoffman, Brandon S
• Application Number:
  US15/088,771
• Publication Number:
  US 20170289118A1
• Time in Patent Office: 1,131 Days
• Field of Search: None
• CPC Class Codes: H04L 2463/082 applying multi-factor authentication
• CPC Class Codes: H04L 63/107 wherein the security policies are location-dependent, e.g. entities privileges depend on current location or allowing specific operations only from locally connected terminals
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/33 using wearable devices, e.g. using a smartwatch or smart-glasses
• CPC Class Codes: H04W 12/63 Location-dependent; Proximity-dependent
• CPC Class Codes: H04W 4/80 Services using short range communication, e.g. near-field communication [NFC], radio-frequency identification [RFID] or low energy communication

Abstract

Various systems and methods for providing a walk away lock are provided herein. A plurality of data packets may be received at a compute device from a user device. Here, each packet has corresponding time-to-receive value. A baseline latency value of the plurality of data packets may be determined based on their respective time-to-receive values. Additional data packets may be received from the user device, each of these additional data packets having their own corresponding time-to-receive values. A current latency value of the additional data packets may be calculated based on the respective time-to-receive values. A security operation may be performed based on the baseline latency value and the current latency value.

Claims

1. A device of providing a walk away lock, the device comprising:

a transceiver to;

receive a plurality of data packets from a user device, each packet having corresponding time-to-receive values; and

receive additional data packets from the user device, each of the additional data packets having corresponding time-to-receive values; and

a controller to;

determine a baseline latency value of the plurality of data packets based on the respective time-to-receive values;

calculate a current latency value of the additional packets based on the respective time-to-receive values; and

perform a security operation based on the baseline latency value and the current latency value;

wherein a particular time-to-receive value of the plurality of time-to-receive values comprises the time period from when the compute device started receiving a first byte of the data packet to when the compute device finished receiving a last bye of the data packet, and

wherein to calculate the current latency value includes the controller to average the corresponding time-to-receive values of the additional of data packets.

2. The device of claim 1, wherein to receive the plurality of data packets includes the transceiver to:

transmit a request for a data packet to the user device; and

receive a response from the user device.

3. The device of claim 2, wherein the response comprises a fixed-size data packet.

4. The device of claim 3, wherein the fixed-size data packet is 16 KB.

5. The device of claim 1, wherein to receive the plurality of data packets includes the transceiver to receive a data packet from the user device, where the user device transmitted the data packet to the transceiver without prompting from the device.

6. The device of claim 5, wherein the user device transmitted the data packet to the compute device based on a timer executing on the user device.

7. The device of claim 1, wherein to average the corresponding time-to-receive values of the additional data packets includes the controller to calculate a weighted average of the corresponding time-to-receive values of the additional data packets.

8. The device of claim 7, wherein to calculate the weighted average includes the controller to:

calculate a mean of a number of the corresponding time-to-receive values of the additional data packets;

weight the mean of the number of the corresponding time-to-receive values of the additional data packets, to provide a weighted mean;

weight a most recent time-to-receive value of the additional data packets, to provide a weighted recent value; and

add the weighted mean to the weighted recent value, resulting in the weighted average.

9. The device of claim 1, wherein to perform the security operation based on the baseline latency value and the current latency value includes the controller to:

determine that the current latency exceeds the baseline latency by more than a threshold amount; and

lock the compute device when the current latency exceeds the baseline latency by more than the threshold amount.

10. The device of claim 9, wherein the threshold amount is 30% greater than the baseline latency.

11. The device of claim 1, wherein to perform the security operation based on the baseline latency value and the current latency value includes the controller to:

determine that the current latency exceeds the baseline latency by less than a threshold amount; and

unlock the compute device when the current latency exceeds the baseline latency by less than the threshold amount.

12. The device of claim 11, wherein the threshold amount is 20% greater than the baseline latency.

13. A method of providing a walk away lock, the method comprising:

receiving, at a compute device, a plurality of data packets from a user device, each packet having corresponding time-to-receive values;

determining a baseline latency value of the plurality of data packets based on the respective time-to-receive values;

receiving additional data packets from the user device, each of the additional data packets having corresponding time-to-receive values;

calculating a current latency value of the additional data packets based on the respective time-to-receive values; and

performing a security operation based on the baseline latency value and the current latency value;

wherein a particular time-to-receive value of the plurality of time-to-receive values comprises the time period from when the compute device started receiving a first byte of the data packet to when the compute device finished receiving a last bye of the data packet.

14. The method of claim 13, wherein receiving the plurality of data packets comprises:

transmitting a request for a data packet to the user device; and

receiving a response from the user device.

15. The method of claim 13, wherein receiving the plurality of data packets comprises receiving a data packet from the user device, where the compute device transmitted the data packet to the user device without prompting from the compute device.

16. The method of claim 15, wherein the user device transmitted the data packet to the compute device based on a timer executing on the user device.

17. At least one non-transitory machine readable medium including instructions that, when executed by a machine, cause the machine to:

receive a plurality of data packets from a user device, each packet having corresponding time-to-receive values;

determine a baseline latency value of the plurality of data packets based on the respective time-to-receive values;

receive additional data packets from the user device, each of the additional data packets having corresponding time-to-receive values;

calculate a current latency value of the additional data packets based on the respective time-to-receive values; and

perform a security operation based the baseline latency value and the current latency value;

wherein a particular time-to-receive value of the plurality of time-to-receive values comprises the time period from when the compute device started receiving a first byte of the data packet to when the compute device finished receiving a last bye of the data packet, and

wherein to calculate the current latency value, the instructions cause the machine to average the corresponding time-to-receive values of the additional of data packets.

18. The at least one machine readable medium of claim 17, wherein to receive the plurality of data packets includes the instructions causing the machine to:

transmit a request for a data packet to the user device; and

receive a response from the user device.

19. The at least one machine readable medium of claim 18, wherein the response comprises a fixed-size data packet.

20. The at least one machine readable medium of claim 19, wherein the fixed-size data packet is 16 KB.

21. The at least one machine readable medium claim 17, wherein to receive the plurality of data packets includes the instructions causing the machine to receive a data packet from the user device, where the user device transmitted the data packet to the transceiver without prompting from the device.

22. The at least one machine readable medium of claim 21, wherein the user device transmitted the data packet to the compute device based on a timer executing on the user device.

23. The at least one machine readable medium of claim 17, wherein to average the corresponding time-to-receive values of the additional data packets includes the instructions causing the machine to calculate a weighted average of the corresponding time-to-receive values of the additional data packets.

24. The at least one machine readable medium of claim 23, wherein to calculate the weighted average includes the instructions causing the machine to:

calculate a mean of a number of the corresponding time-to-receive values of the additional data packets;

weight the mean of the number of the corresponding time-to-receive values of the additional data packets, to provide a weighted mean;

weight a most recent time-to-receive value of the additional data packets, to provide a weighted recent value; and

add the weighted mean to the weighted recent value, resulting in the weighted average.