Using signal-generated location information to identify and authenticate available devices

• US 20040059914A1
• Filed: 12/09/2002
• Published: 03/25/2004
• Est. Priority Date: 09/12/2002
• Status: Abandoned Application

• Current Assignee: Avago Technologies General IP PTE Limited (Broadcom, Inc.)
• Original Assignee: Broadcom Corporation (Broadcom, Inc.)
• Inventors: Karaoguz, Jeyhan
• Application Number:
  US10/314,279
• Publication Number:
  US 20040059914A1
• Time in Patent Office: Days
• US Class Current: 713/168
• CPC Class Codes: G06Q 20/322 Aspects of commerce using mobile devices [M-devices]
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: G06Q 20/4014 Identity check for transactions
• CPC Class Codes: H04L 63/0492 by using a location-limited connection, e.g. near-field communication or limited proximity of entities
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 12/50 Secure pairing of devices
• CPC Class Codes: H04W 12/63 Location-dependent; Proximity-dependent

Abstract

An authentication device for authenticating a user of a wireless device within a wireless network can include a receiver configured to receive a request message from a sender to access a resource provided through a wireless network, and a fist processing unit configured to determined first signal-generated location information of the sender. The authentication device can also include a second processing unit configured to identity the sender using the first signal-generated location information, and to conform an identity of the sender, and a transmitter configured to transmit an authentication message authorizing access for the sender to access the resource.

Claims

1. A method of authenticating a user of a wireless device within a wireless network, said method comprising the steps of:

receiving a request message from a sender to access a resource provided through a wireless network;

determining first signal-generated location information of the sender;

identifying the sender using the first signal-generated location information;

confirming an identity of the sender; and

authorizing access for the sender to access the resource.

2. The method of claim 1, wherein the step of receiving the request message comprises the step of:

receiving a user identification and a user password from the sender to access the resource provided through the wireless network.

3. The method of claim 1, wherein the step of determining the first signal-generated location information comprises the steps of:

transmitting a first signal to the sender;

receiving a second signal from the sender; and

determining a distance range or a geographic position of the sender based on the first signal and the second signal.

4. The method of claim 1, wherein the step of identifying the sender comprises the steps of:

sending the request message to a server; and

receiving an identity verification of the sender from the server when the identity of the sender is confirmed.

5. The method of claim 4, wherein the step of identifying the sender comprises the steps of:

verifying the first signal-generated location information of the sender; and

receiving a cryptography protocol from the server.

6. The method of claim 5, further comprising the step of:

sending the cryptography protocol to the sender.

7. The method of claim 6,wherein the step of sending the cryptography protocol comprises the step of:

sending at least one encryption key and at least one decryption key to the sender.

8. The method of claim 7, wherein the step of authorizing access for the sender comprises the step of:

establishing a wireless communication session with the sender using the at least one encryption key and the at least one decryption key.

9. The method of claim 1, wherein the step of receiving the request message comprises the step of:

receiving a user identification and an encryption key from the sender.

10. The method of claim 9, wherein the step of identifying the sender comprises the steps of:

accessing user information based on the user identification;

encrypting a location information challenge using the encryption key; and

sending the location information challenge to the sender.

11. The method of claim 10, wherein the step of confirming an identity comprises the steps of:

determining second signal-generated location information of the sender; and

comparing the second signal-generated location with the location information challenge.

12. The method of claim 11, wherein the step of authorizing access for the sender comprises the step of:

establishing a wireless communication session with the sender when the second signal-generated location matches the location information challenge.

13. An authentication device for authenticating a user of a wireless device within a wireless network, said authentication device comprising:

a receiver configured to receive a request message from a sender to access a resource provided through a wireless network;

a first processing unit configured to determine first signal-generated location information of the sender;

a second processing unit configured to identity the sender using the first signal-generated location information, and to confirm an identity of the sender;

a transmitter configured to transmit an authentication message authorizing access for the sender to access the resource.

14. The authentication device of claim 13, wherein the receiver is configured to receive a user identification and a user password from the sender to access the resource provided through the wireless network.

15. The authentication device of claim 13, wherein the first processing unit is configured to determine a distance range or a geographic position of the sender.

16. The authentication device of claim 13, wherein the second processing unit is configured to send the request message to a server;

and is configured to receive an identity verification of the sender from the server when the identity of the sender is confirmed.

17. The authentication device of claim 16, wherein the second processing unit is configured to verify the first signal-generated location information of the sender, and is configured to receive a cryptography protocol from the server.

18. The authentication device of claim 17, wherein the transmitter is configured to send the cryptography protocol to the sender.

19. The authentication device of claim 18, wherein the transmitter is configured to send at least one encryption key and at least one decryption key to the sender.

20. The authentication device of claim 19, wherein the second processing unit is configured to establish a wireless communication session with the sender using the at least one encryption key and the at least one decryption key.

21. The authentication device of claim 13, wherein the receiver is configured to receive a user identification and an encryption key from the sender.

22. The authentication device of claim 21, further comprising:

a memory configured to store user information.

23. The authentication device of claim 21, wherein the second processing unit is configured to access the user information based on the user identification.

24. The authentication device of claim 23, further comprising:

a cryptography unit configured to encrypt a location information challenge using the encryption key.

25. The authentication device of claim 24, wherein the transmitter is configured to send the location information challenge to the sender.

26. The authentication device of claim 25, wherein the first processing unit is configured to determine second signal-generated location information of the sender, and is configured to compare the second signal-generated location with the location information challenge.

27. The authentication device of claim 26, wherein the second processing unit is configured to establish a wireless communication session with the sender when the second signal-generated location matches the location information challenge.

28. A system of authenticating a user of a wireless device within a wireless network, said system comprises:

a first receiving means for receiving a request message from a sender to access a resource provided through a wireless network;

a first determining means for determining first signal-generated location information of the sender;

an identification means for identifying the sender using the first signal-generated location information;

a conforming means for confirming an identity of the sender; and

an authorizing means for authorizing access for the sender to access the resource.

29. The system of claim 28, wherein the first receiving means receives a user identification and a user password from the sender to access the resource provided through the wireless network.

30. The system of claim 28, wherein the first determining means comprises:

a transmitting means for transmitting a first signal to the sender;

a second receiving means for receiving a second signal from the sender; and

a second determining means for determining a distance range or a geographic position of the sender based on the first signal and the second signal.

31. The system of claim 28, wherein the identifying means comprises:

a sending means for sending the request message to a server; and

a second receiving means for receiving an identity verification of the sender from the server when the identity of the sender is confirmed.

32. The system of claim 31, wherein the identifying means comprises:

a verifying means for verifying the first signal-generated location information of the sender; and

a third receiving means for receiving a cryptography protocol from the server.

33. The system of claim 32, further comprising:

a transmitting means for transmitting the cryptography protocol to the sender.

34. The system of claim 33, wherein the transmitting means transmits at least one encryption key and at least one decryption key to the sender.

35. The system of claim 34, wherein the authorizing means authorizes the sender to establish a wireless communication session using the at least one encryption key and the at least one decryption key.

36. The system of claim 28, wherein the first receiving means receives a user identification and an encryption key from the sender.

37. The system of claim 36, wherein the identifying means comprises:

an accessing means for accessing user information based on the user identification;

an encrypting means for encrypting a location information challenge using the encryption key; and

a transmitting means for transmitting the location information challenge to the sender.

38. The system of claim 37,wherein the confirming means comprises:

a second determining means for determining a second signal-generated location information of the sender; and

a comparing means for comparing the second signal-generated location with the location information challenge.

39. The system of claim 38, wherein the authorizing means authorizes the sender to establish a wireless communication session when the second signal-generated location matches the location information challenge.