Split channel authenticity queries in multi-party dialog

• US 20060047606A1
• Filed: 09/01/2004
• Published: 03/02/2006
• Est. Priority Date: 09/01/2004
• Status: Active Grant

• Current Assignee: Malikie Innovations Limited (Key Patent Innovations Limited)
• Original Assignee: Blackberry Limited
• Inventors: Little, Herbert A., Klassen, Gerhard D., Yach, David
• Granted Patent: US 8,510,225 B2
• Time in Patent Office: Days
• US Class Current: 705/76
• CPC Class Codes: G06F 21/00 Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
• CPC Class Codes: G06F 21/42 using separate channels for security data
• CPC Class Codes: G06F 21/43 wireless channels
• CPC Class Codes: G06Q 20/1235 with control of digital rights management [DRM]
• CPC Class Codes: G06Q 20/3821 Electronic credentials
• CPC Class Codes: G06Q 20/386 using messaging services or messaging apps using mobile network messaging services for payment, e.g. SMS G06Q20/3255
• CPC Class Codes: H04L 2209/80 Wireless network architectures or network communication protocols for wireless network security H04W12/00
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/104 Grouping of entities
• CPC Class Codes: H04L 63/18 using different networks or channels, e.g. using out of band channels cryptographic mechanisms or cryptographic arrangements for key distribution involving distinctive intermediate devices or communication paths H04L9/0827; cryptographic mechanisms or cryptographic arrangements for authentication using a plurality of channels H04L9/3215
• CPC Class Codes: H04L 65/40 Support for services or applications
• CPC Class Codes: H04L 9/3215 using a plurality of channels network architectures or network communication protocols using different networks H04L63/18
• CPC Class Codes: H04L 9/3271 using challenge-response

Abstract

Authenticity of a proposed future or current participant in a multi-party dialog is checked by splitting an authenticity challenge query into at least two portions wherein none of the portions individually contains sufficient information to fully define the challenge query. These separated portions are then sent to another dialog participant over at least two different communication channels thus enhancing the probability that a successive challenge response is authentic. The authenticity challenge query and splitting thereof into plural portions may include formation of a logical combination (e.g., exclusive-OR) of first and second data strings (one of which may be a challenge question) to produce a resultant third data string where the separated and separately communicated portions include the first and third data strings as separate portions as being sent over respectively different communication channels.

Claims

1. A method for checking the authenticity of a proposed future or current participant in a multi-party dialog, said method comprising:

generating an authenticity challenge query from a first participant to a second dialog participant;

splitting said authenticity challenge query into at least two portions, wherein none of said portions individually contains sufficient information to fully define the challenge query; and

separately sending said portions to said second dialog participant over at least two different communication channels thus enhancing the probability that a successful challenge response is authentic.

2. A method as in claim 1 wherein said multi-party dialog is conducted substantially in real time over wireless communication channels using at least one mobile wireless communication device.

3. A method as in claim 1 wherein:

generating said authenticity challenge query includes a logical combination of first and second data strings to produce a resultant third data string, and

said splitting and separately sending steps include said first and third data strings being sent to said second dialog participant over respectively different communication channels.

4. A method as in claim 3 wherein said logical combination comprises an exclusive-OR of said first data string with said second data string.

5. A method as in claim 1 further comprising:

receipt by said second participant of said plural portions,

reconstruction of said authenticity challenge query from said received plural portions, and

sending of a response to said query by said second participant to said first participant.

6. A method as in claim 5 wherein:

generating said authenticity challenge query includes a logical combination of first and second data strings to produce a resultant third data string, and

said splitting and separately sending steps include said first and third data strings being sent to said second dialog participant over respectively different communication channels.

7. A method as in claim 6 wherein:

reconstruction of said authenticity challenge query includes a logical combination of said first and third data strings.

8. A method as in claim 7 wherein:

the logical combination used to generate said authenticity challenge query comprises an exclusive-OR of said first data string with said second data stream.

9. A method as in claim 8 wherein:

the logical combination used in reconstruction of said authenticity challenge query comprises an exclusive-OR of said received first data string with said received third data string.

10. A method as in claim 5 further comprising:

receipt by said first participant of the query response sent by the second participant; and

checking whether said received response is correct.

11. A system for checking the authenticity of a proposed future or current participant in a multi-party dialog, said system comprising:

means for generating an authenticity challenge query from a first participant dialog to a second dialog participant;

means for splitting said authenticity challenge query into at least two portions, wherein none of said portions individually contains sufficient information to fully define the challenge query; and

means for separately sending said portions to said second dialog participant over at least two different communication channels thus enhancing the probability that a successful challenge response is authentic.

12. A system as in claim 11 wherein said multi-party dialog is conducted substantially in real time over wireless communication channels using at least one mobile wireless communication device.

13. A system as in claim 11 wherein:

means for generating said authenticity challenge query includes means for forming a logical combination of first and second data strings to produce a resultant third data string, and

said means for splitting and separately sending include means for sending said first and third data strings to said second dialog participant over respectively different communication channels.

14. A system as in claim 13 wherein said means for forming a logical combination comprises means for performing an exclusive-OR of said first data string with said second data strings.

15. A system as in claim 11 further comprising:

means at said second participant location for receiving said plural portions,

means for reconstruction of said authenticity challenge query from said received plural portions, and

means for sending of a response to said query by said second participant to said first participant.

16. A system as in claim 15 wherein:

means for generating said authenticity challenge query includes means for forming a logical combination of first and second data strings to produce a resultant third data string, and

said means for splitting and separately sending include means for sending said first and third data strings to said second dialog participant over respectively different communication channels.

17. A system as in claim 16 wherein:

said means for reconstruction of said authenticity challenge query includes means for forming a logical combination of said received first and third data strings.

18. A system as in claim 17 wherein:

said means for forming a logical combination used to generate said authenticity challenge query comprises means for performing an exclusive-OR of said first data string with said second data stream.

19. A system as in claim 18 wherein:

said means for forming a logical combination used in reconstruction of said authenticity challenge query comprises means for forming an exclusive-OR of said received first data string with said received third data string.

20. A system as in claim 15 further comprising:

means at said first participant location for receiving the query response sent by the second participant; and

means for checking whether said received response is correct.

21. A computer program storage medium holding a computer program which, when executed, provides a method for checking the authenticity of a proposed future or current participant in a multi-party dialog, said method comprising:

generating an authenticity challenge query from a first dialog participant to a second dialog participant;

splitting said authenticity challenge query into at least two portions, wherein none of said portions individually contains sufficient information to fully define the challenge query; and

separately sending said portions to said second dialog participant over at least two different communication channels thus enhancing the probability that a successful challenge response is authentic.

22. A computer program storage medium as in claim 21 wherein said multi-party dialog is conducted substantially in real time over wireless communication channels using at least one mobile wireless communication device.

23. A computer program storage medium as in claim 21 wherein:

generating said authenticity challenge query includes a logical combination of first and second data strings to produce a resultant third data string, and

said splitting and separately sending steps include sending said first and third data strings to said second dialog participant over respectively different communication channels.

24. A computer program storage medium as in claim 23 wherein said logical combination comprises an exclusive-OR of said first data string with said second data string.

25. A computer program storage medium as in claim 21 further comprising:

receipt by said second participant of said plural portions,

reconstruction of said authenticity challenge query from said received plural portions, and

sending of a response to said query by said second participant to said first participant.

26. A computer program storage medium as in claim 25 wherein:

generating said authenticity challenge query includes a logical combination of first and second data strings to produce a resultant third data string, and

said splitting and separately sending steps include sending said first and third data strings to said second dialog participant over respectively different communication channels.

27. A computer program storage medium as in claim 26 wherein:

reconstruction of said authenticity challenge query includes a logical combination of said received first and third data strings.

28. A computer program storage medium as in claim 27 wherein:

the logical combination used to generate said authenticity challenge query comprises an exclusive-OR of said first data string with said second data stream.

29. A computer program storage medium as in claim 28 wherein:

the logical combination used in reconstruction of said authenticity challenge query comprises an exclusive-OR of said received first data string with said received third data string.

30. A computer program storage medium as in claim 25 further comprising:

receipt by said first participant of the query response sent by the second participant; and

checking whether said received response is correct.