Method of authenticating universal serail bus on-the-go device

• US 20050251589A1
• Filed: 05/04/2004
• Published: 11/10/2005
• Est. Priority Date: 05/04/2004
• Status: Abandoned Application

• Current Assignee: Faraday Technology Corp.
• Original Assignee: Faraday Technology Corp.
• Inventors: Wang, Jung-Chung
• Application Number:
  US10/839,523
• Publication Number:
  US 20050251589A1
• Time in Patent Office: Days
• US Class Current: 710/5
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 2221/2129 Authenticate client device independently of the user

Abstract

A method for authenticating a universal serial bus on-the-go device is provided. A first device and a second device connected via a universal serial bus supporting an on-the-go protocol are provided. The first device is a host and the second device is a peripheral device. The host uses an authentication rule to determine whether the peripheral device is an authentic device. When the peripheral device is an authentic device, the host sends an enable signal to the peripheral device to perform a host negotiation protocol so that the first device changes role to the peripheral device and the second device changes role to the host; and when the peripheral device is not the authentic device, the host declines to perform the host negotiation protocol with the peripheral device. Hence, the data security of the USB host is enhanced. The data security of the USB peripheral device can also enhanced by providing the authentication mechanism before the USB device (peripheral device) has been accessed by the other devices (e.g., the USB host) in order to prevent the unauthorized user from accessing the data in the USB peripheral device.

Claims

1. A method of authenticating a universal serial bus on-the-go device, comprising:

providing a first device and a second device, said first device and said second device being connected via a universal serial bus supporting an on-the-go protocol, said first device being a host and said second device being a peripheral device;

said host using an authentication rule to determine whether said peripheral device is an authentic device;

wherein when said peripheral device is said authentic device, said host sends an enable signal to said peripheral device to perform a host negotiation protocol so that said first device changes role to said peripheral device and said second device changes role to said host; and

when said peripheral device is not said authentic device, said host declines to perform said host negotiation protocol with said peripheral device.

2. The method of claim 1, wherein said step of providing said first device and said second device includes determining said first device as said host and said second device as said peripheral device according to a session request protocol.

3. The method of claim 1, wherein said authentication rule is a share key authentication.

4. The method of claim 1, wherein said step of said host using an authentication rule to determine whether said peripheral device is an authenticated device includes:

said host sending a plain text to said peripheral device;

said peripheral device ciphering said plain text based on a share key to obtain a corresponding cipher text;

said peripheral device sending said cipher text to said host; and

said host determining whether said cipher text is correct according to said share key and said plain text,

wherein when said cipher text is correct, said peripheral device is an authentic device;

wherein when said cipher text is not correct, said peripheral device is not an authentic device.

5. The method of claim 4, further comprising when said host does not obtain said cipher text in a predetermined time after said host sends said plain text to said peripheral device, said host declining to perform said host negotiation protocol with said peripheral device.

6. The method of claim 4, further comprising

said peripheral device sending a peripheral device data to said host;

and

said host determining whether said peripheral device supports said authentication rule based on said peripheral device data, wherein when said peripheral device does not support said authentication rule, said host declines to perform said host negotiation protocol with said peripheral device.

7. The method of claim 4, wherein said peripheral device data includes a peripheral device identification information, said method further comprising

said host setting up a device authentication information table, said device authentication information table recording said peripheral device identification information and a number of failed authentication corresponding to said peripheral device identification information;

wherein when said host determines said cipher text is not correct, said peripheral device identification information corresponding to said peripheral device is stored in said device authentication information table and one is added to said number of failed authentication; and

said host checking said number of failed authentication, wherein when said number of failed authentication is larger than a predetermined number, said host declines to perform said host negotiation protocol with said peripheral device.

8. The method of claim 7, wherein said predetermined number is three.

9. The method of claim 7, further comprising when said host determines said cipher text is correct, resetting said number of failed authentication to be zero.

10. A method of authenticating a universal serial bus on-the-go device, comprising:

providing a first device and a second device, said first device and said second device being connected via a universal serial bus supporting an on-the-go protocol, said first device being a host and said second device being a peripheral device;

said peripheral device using an authentication rule to determine whether said host is an authenticated device;

wherein when said host is an authentic device, said peripheral device allows said host to access data in said peripheral device; and

wherein when said host is not an authentic device, said peripheral device declines said host to access said data in said peripheral device.

11. The method of claim 10, wherein said step of providing said first device and said second device includes determining said first device as said host and said second device as said peripheral device according to a session request protocol.

12. The method of claim 10, wherein said authentication rule is a share key authentication.

13. The method of claim 10, wherein said step of said host using an authentication rule to determine whether said peripheral device is an authentic device includes

said peripheral device sending a plain text to said host;

said host ciphering said plain text based on a share key to obtain a corresponding cipher text;

said host sending said cipher text to said peripheral device; and

said peripheral device determining whether said cipher text is correct according to said share key and said plain text,

wherein when said cipher text is correct, said host is determined as an authentic device;

and wherein when said cipher text is not correct, said host is determined as not an authentic device.

14. The method of claim 13, further comprising

said peripheral device sending a peripheral device data to said host;

and

said host determining whether said peripheral device supports/enables said authentication rule based on said peripheral device data, wherein when said peripheral device does not support/enable said authentication rule, said host is allowed to access said data in said peripheral device.