Security operations for wireless devices

• US 10,548,007 B2
• Filed: 11/15/2013
• Issued: 01/28/2020
• Est. Priority Date: 11/15/2013
• Status: Expired due to Fees

• Current Assignee: HERE Global B.V. (HERE Holding Corporation)
• Original Assignee: HERE Global B.V. (HERE Holding Corporation)
• Inventors: Tuukkanen, Marko Tapio
• Primary Examiner(s): Brown, Anthony D
• Application Number:
  US15/036,601
• Publication Number:
  US 20160286396A1
• Time in Patent Office: 2,265 Days
• Field of Search: 726 5
• CPC Class Codes: G06F 21/40 by quorum, i.e. whereby two or more security principals are required
• CPC Class Codes: G06F 2221/2111 Location-sensitive, e.g. geographical location, GPS
• CPC Class Codes: H04L 2209/805 Lightweight hardware, e.g. radio-frequency identification [RFID] or sensor
• CPC Class Codes: H04L 2463/082 applying multi-factor authentication
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 63/105 Multiple levels of security
• CPC Class Codes: H04L 63/18 using different networks or channels, e.g. using out of band channels cryptographic mechanisms or cryptographic arrangements for key distribution involving distinctive intermediate devices or communication paths H04L9/0827; cryptographic mechanisms or cryptographic arrangements for authentication using a plurality of channels H04L9/3215
• CPC Class Codes: H04L 9/085 Secret sharing or secret splitting, e.g. threshold schemes
• CPC Class Codes: H04L 9/3226 using a predetermined code, e.g. password, passphrase or PIN network architectures or network communication protocols for supporting authentication of entities using passwords in a packet data network H04L63/083
• CPC Class Codes: H04W 12/069 using certificates or pre-shared keys
• CPC Class Codes: H04W 4/80 Services using short range communication, e.g. near-field communication [NFC], radio-frequency identification [RFID] or low energy communication
• CPC Class Codes: H04W 76/10 Connection setup

Abstract

Methods and apparatuses are disclosed for determining based on predetermined criteria a combination of one or more user devices to be used for a security operation from a set of associated user devices. The user devices are configured to wirelessly communicate security information. In response to the determination security information is communicated by the determined combination of one or more user devices.

Claims

1. A method comprising

determining, based on predetermined criteria, a combination of at least two user devices to be used for a security operation from a set of user devices associated with a first user and configured to wirelessly communicate security information,

wherein the at least two user devices each comprise only one part of a security credential associated with the first user;

determining that the at least two user devices are located in a predefined manner relative to each other; and

in response to the determining that the at least two user devices are located in a predefined manner relative to each other, causing communication of security information by the determined combination of the at least two user devices to another party,

wherein causing communication of security information comprises causing communication of only the one part of the security credential comprised by at least one of the user devices, and

wherein the security information comprises the security credential.

2. A method according to claim 1 wherein the predetermined criteria is based on required level of security.

3. A method according to claim 2 wherein the required level of security depends on the value and/or importance of an action to be secured by the security operation.

4. A method according to claim 1, comprising determining the distance between user devices and controlling use of user devices for the security operation accordingly.

5. A method according to claim 1, comprising determining by an action processor device that more than one user device is needed for securing an action, and communicating from the action processor device to a first user device or directly to at least one second user device instructions for causing communication of at least part of a security credential from the at least one second user device.

6. A method according to claim 1, comprising determining by a first user device that more than one user device is needed for securing an action, and communicating from the first user device to at least one second user device instructions for causing communication of at least part of a security credential from the at least one second user device.

7. A method according to claim 1, comprising receiving at least part of a security credential from at least one second user device and sending the received at least part of a security credential to a data processing device of another party of a transaction to be secured.

8. A method according to claim 1, comprising communicating from a first user device to a second user device instructions to provide at least part of a security credential, and communicating from the second user device at least part of a security credential to another party directly or via the first user device.

9. A method according to claim 1, comprising determining the outcome of the security operation based on information of the order security information is provided by at least two user devices and/or the source of security information and/or identity of at least one user device.

10. A method according to claim 1, comprising causing presentation of a notification via at least one user device of the set of associated user devices in response to determination an unsuccessful security operation.

11. An apparatus comprising at least one processor, and at least one memory including computer program code, wherein the at least one memory and the computer program code are configured, with the at least one processor, cause the apparatus at least to:

determine, based on predetermined criteria, a combination of at least two user devices to be used for a security operation from a set of user devices associated with a first user and configured to wirelessly communicate security information,

wherein the at least two user devices each comprise only one part of a security credential associated with the first user; and

cause wireless communication of security information by the determined combination of the at least two user devices to another party,

wherein the apparatus is caused to cause wireless communication of security information by causing communication of only the one part of the security credential comprised by at least one of the user devices, and

wherein the security information comprises the security credential.

12. An apparatus according to claim 11 wherein the predetermined criteria depends on the value and/or importance of an action to be secured by the security operation.

13. An apparatus according to claim 11, configured to determine that at least two user devices, each having at least a part of a security credential associated with the first user, are located in a predefined manner relative to each other, and in response to the determining cause communication of said parts of security credentials.

14. An apparatus according to claim 11, configured to determine the distance between two or more user devices and control use of user devices for the security operation accordingly.

15. An apparatus according to claim 11, configured to determine that more than one user device is needed for securing an action, and in response thereto cause communication from an action processor device to a first user device or directly to at least one second user device instructions for causing communication of at least part of a security credential from the at least one second user device.

16. An apparatus according to claim 11, configured to determine that more than one user devices is needed for securing an action and in response thereto cause communication from the first user device to at least one second user device instructions for causing communication of at least part of a security credential from the at least one second user device.

17. An apparatus according to claim 11, configured to cause communication from a first user device to at least one second user device instructions to provide at least part of a security credential to another party directly or via the first user device.

18. An apparatus according to claim 11, configured to determine the outcome of a security operation based on information of the order security information is provided by at least two user devices and/or the source of security information and/or identity of at least one user device.