Trusted device

• US 10,452,831 B2
• Filed: 05/31/2018
• Issued: 10/22/2019
• Est. Priority Date: 06/18/2013
• Status: Active Grant

• Current Assignee: Arm IP Limited
• Original Assignee: Arm IP Limited
• Inventors: Flautner, Krisztian, Vincent, Hugo John Martin, Phillips, Amyas Edward Wykes, Taylor, Robert George
• Primary Examiner(s): Truong, Thanhnga B
• Application Number:
  US15/994,024
• Publication Number:
  US 20180276363A1
• Time in Patent Office: 509 Days
• Field of Search: 713173, 726 20, 726 7, 726 9, 726 2, 726 3, 726 5, 715748, 710 16
• CPC Class Codes: G06F 21/32 using biometric data, e.g. fingerprints, iris scans or voiceprints
• CPC Class Codes: G06F 21/33 using certificates
• CPC Class Codes: G06F 21/34 involving the use of external additional devices, e.g. dongles or smart cards
• CPC Class Codes: G06F 21/35 communicating wirelessly
• CPC Class Codes: G06F 2221/2133 Verifying human interaction, e.g., Captcha
• CPC Class Codes: H04L 2463/082 applying multi-factor authentication cryptographic mechanisms or cryptographic arrangements including means for verifying the identity or authority of a user of the system or for message authentication H04L9/32
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 63/0861 using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231
• CPC Class Codes: H04L 9/3226 using a predetermined code, e.g. password, passphrase or PIN network architectures or network communication protocols for supporting authentication of entities using passwords in a packet data network H04L63/083
• CPC Class Codes: H04L 9/3231 Biological data, e.g. fingerprint, voice or retina network architectures or network communication protocols for supporting authentication of entities using biometrical features in a packet data network H04L63/0861
• CPC Class Codes: H04L 9/3234 involving additional secure or trusted devices, e.g. TPM, smartcard, USB or software token network architectures or network communication protocols for supporting authentication of entities using an additional device in a packet data network H04L63/0853
• CPC Class Codes: H04W 12/065 Continuous authentication
• CPC Class Codes: H04W 12/068 using credential vaults, e.g. password manager applications or one time password [OTP] applications
• CPC Class Codes: H04W 12/069 using certificates or pre-shared keys

Abstract

A trusted device, such as a wristwatch, is provided with authentication circuitry, used to perform an authentication operation to switch the trusted device into an authenticated state. Retention monitoring circuitry monitors the physical possession of the trusted device by the user following the authentication operation and switches the trusted device out of an authenticated state if the trusted device does not remain in the physical possession of the user. While the trusted device remains in the physical possession of the user, communication triggering circuitry is used to detect a request to establish communication with a target device that is one of a plurality of different target devices and communication circuitry is used to communicate with that target device using an authenticated identity of the user.

Claims

1. An apparatus comprising circuitry to:

authenticate with an authentication operation a user having a physical relationship between said apparatus and said user, including said user having physical possession of said apparatus and thereby switch said apparatus to an authenticated state;

continue to monitor physical possession of said apparatus by said user following said authentication operation, so as to continue to keep the apparatus in said authenticated state if said apparatus is determined to remain in the physical possession of said user; and

switch said apparatus out of said authenticated state when said physical relationship between said apparatus and said user changes such that said apparatus is determined to no longer be in physical possession of said user.

2. The apparatus as claimed in claim 1 further comprising:

circuitry to perform authenticated communication with a target device while said apparatus remains in the authenticated state.

3. The apparatus as claimed in claim 1 further comprising:

circuitry to detect a request to establish communication with a target device.

4. The apparatus as claimed in claim 3, further comprising a button, and wherein said circuitry to detect a request to establish communication with a target device is configured to enable communication responsive to a user pressing said button.

5. The apparatus as claimed in claim 3, wherein said communication with said target device includes communicating credentials including one or more of:

an application-program-interface key, a digital certificate, a user identity, a password and cryptographically signed data.

6. The apparatus as claimed in claim 3, wherein communication with said target device includes creation of credentials usable in subsequent authentications.

7. The apparatus as claimed in claim 3, wherein said communication with said target device includes the transfer of information including at least one of configuration data, personalisation preferences, network settings, contracts, receipts, computer programs, data logs, transaction records and credentials.

8. The apparatus as claimed in claim 3, wherein said circuitry to detect a request to establish communication with a target device is configured to trigger communication with said target device in response to at least one of:

detection of a distance of less than a threshold distance between said target device and said apparatus;

detection of said user touching said target device;

detection of a said user pressing a button on said target device;

receipt of a message specifying said target device;

said user selecting said target device from a list of devices.

9. The apparatus as claimed in claim 3, wherein said circuitry to detect a request to establish communication with a target device is configured to communicate independently of availability of communication between said apparatus and any other device.

10. The apparatus as claimed in claim 3, comprising circuitry configured to store identity data for use in said communication using said authenticated identity, said identity data comprising one or more public identity identifiers each having associated secret data.

11. The apparatus as claimed in claim 1, wherein said target device is one of a plurality of different devices.

12. The apparatus as claimed in claim 1, wherein said circuitry to continue to monitor physical possession of said apparatus includes one or more detection circuits comprising at least one of:

a clasp to hold said apparatus attached to said user when said clasp is in a closed state, said circuitry switching said apparatus out of said authenticated state when said clasp changes out of said closed state;

circuitry to detect contact between said apparatus and said user using one of more of;

electrical signals detected from said user;

temperature of a contact area between said apparatus and said user;

circuitry to detect proximity said apparatus and a proximity device worn by said user;

a photo-detector shielded from light when said apparatus is physical possession of said user;

a chemical detector to detect a chemical characteristic of said user;

circuitry to recognise one or more biometric characteristics of said user;

circuitry to detect motion of said apparatus as said user moves while said apparatus is in physical possession of said user;

circuitry to detect proximity of an implant within said user; and

circuitry having temperature sensors and configured to detect heat flux through said apparatus.

13. The apparatus as claimed in claim 12, wherein said circuitry to continue to monitor physical possession of said apparatus comprises a plurality of detection circuits and is configured to combine detection results from said plurality of detection circuits to determine a retention probability that said apparatus is in physical possession of said user and to switch said apparatus out of said authenticated state when said retention probability falls below a threshold probability level.

14. The apparatus as claimed in claim 13, wherein said circuitry to continue to monitor physical possession of said apparatus is configured to reduce said retention probability as a time since said authentication operation increases.

15. The apparatus as claimed in claim 1, wherein said circuitry to authenticate comprises at least one of:

biometric recognition circuitry to recognise one or more biometric characteristics of said user;

fingerprint recognition circuitry to recognise a fingerprint of said user;

face recognition circuitry to recognise a face of said user;

chemical recognition circuitry to recognise one or more chemical characteristics of said user;

ECG recognition circuitry to recognise ECG signals of said user;

bioimpedance circuitry to recognise one or more bioimpedance characteristics of said user;

gait recognition circuitry to recognise a gait of said user; and

implant recognition circuitry to recognise an implant within said user.

16. The apparatus as claimed in claim 1, wherein said circuitry to continue to monitor physical possession of said apparatus generates a retention probability to indicate a probability that said apparatus has remained in physical possession of said user since a previous positive authentication operation.

17. The apparatus as claimed in claim 1, wherein said apparatus is at least one of:

a wearable device; and

a wrist watch.

18. A method of trusted processing comprising the steps of:

authenticating with an authentication operation a user having a physical relationship between said apparatus and said user, including said user having physical possession of said apparatus and thereby switch said apparatus to an authenticated state;

continually monitoring physical possession of said apparatus by said user following said authentication operation;

continuing to keep said apparatus in said authenticated state while said apparatus is determined to remain in the physical possession of said user; and

switching said apparatus out of said authenticated state when said physical relationship between said apparatus and said user changes such that said apparatus is determined to no longer be in physical possession of said user.

19. A wristwatch comprising:

a display;

circuitry to detect with an authentication operation a user having a physical relationship between said wristwatch and said user, including said user having physical possession of said wristwatch and to switch said wristwatch to an authenticated state responsive to detecting said user having physical possession of said wristwatch; and

circuitry to continue to monitor physical possession of said wristwatch by said user following said authentication operation;

circuitry to continue to keep said wristwatch in said authenticated state if said wristwatch is determined to remain in the physical possession of said user; and

circuitry to switch said wristwatch out of said authenticated state when said physical relationship between said wristwatch and said user changes such that said wristwatch is determined to be no longer, in physical possession of said user.

20. The wristwatch as claimed in claim 19, wherein said authentication operation comprises receiving a password entered by a user.

21. The wristwatch as claimed in claim 19, wherein said circuitry to monitor physical possession of said wristwatch comprises circuitry to recognise one or more biometric characteristics of said user.