Physical location verification

• US 20070081508A1
• Filed: 12/08/2006
• Published: 04/12/2007
• Est. Priority Date: 04/21/2005
• Status: Active Grant

• Current Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Original Assignee: Microsoft Corporation
• Inventors: Mittal, Sharad, Agiwal, Ankur, Roberts, David, Alam, Mohammad, Madhavan, Poovanpilli, Deng, Zhong
• Granted Patent: US 8,909,194 B2
• Time in Patent Office: Days
• US Class Current: 370/338
• CPC Class Codes: H04L 63/0492 by using a location-limited connection, e.g. near-field communication or limited proximity of entities
• CPC Class Codes: H04L 63/061 for key exchange, e.g. in peer-to-peer networks cryptographic mechanisms or cryptographic arrangements for key agreement H04L9/0838
• CPC Class Codes: H04L 67/14 Session management for real-time applications in data packet communications networks H04L65/1066
• CPC Class Codes: H04W 12/04 Key management, e.g. using generic bootstrapping architecture [GBA]
• CPC Class Codes: H04W 12/50 Secure pairing of devices
• CPC Class Codes: H04W 12/63 Location-dependent; Proximity-dependent
• CPC Class Codes: H04W 52/28 using user profile, e.g. mobile speed, priority or network state, e.g. standby, idle or non transmission
• CPC Class Codes: H04W 52/281 taking into account user or data type priority
• CPC Class Codes: H04W 52/283 Power depending on the position of the mobile
• CPC Class Codes: H04W 52/367 Power values between minimum and maximum limits, e.g. dynamic range
• CPC Class Codes: H04W 8/005 Discovery of network devices, e.g. terminals
• CPC Class Codes: Y04S 40/20 Information technology specific aspects, e.g. CAD, simulation, modelling, system security

Abstract

A process for secure, safe, and easy provisioning of a wireless device with credentials to connect to a wireless network. A connecting wireless device and an established wireless device both utilize low power transmission at close proximity to exchange wireless connection setting information and/or a password. The connecting wireless device is moved into proximity with the established wireless device and a low power setting is discovered at which the wireless devices may communicate with a sufficiently low error rate. The proximity of the connecting wireless device to the established wireless device is verified and the connecting wireless device is then passed the secret information by the established network device.

Claims

1. A method of operating a first device to authenticate a second device, the method comprising:

a) with the first device, providing information defining at least one action, the information provided in a format obtainable only proximate the first device; and

b) conditioning authentication of the second device to the first device on the action being performed.

2. The method of claim 1, wherein providing information from a first location comprises providing information in an audible and/or visible format.

3. The method of claim 1, wherein providing information from a first location comprises displaying information on a computer screen.

4. The method of claim 1, wherein providing information from a first location comprises generating sound with a computer.

5. The method of claim 1, wherein the act b) comprises determining that the action was taken by receiving a wireless communication from the second device.

6. The method of claim 1, wherein the act b) comprises determining that the action was taken by measuring at a plurality of times separation between the second device and a reference point, the measuring comprising receiving a wireless communication from the second device.

7. The method of claim 1, wherein:

i) the at least one action comprises placing the second device immediately adjacent a reference point; and

ii) determining that the action was taken comprises measuring, based on at least one wireless communication, separation between the second device and the reference point.

8. A computer-storage medium having thereon computer-executable instructions for performing a method of authenticating a device, the method comprising:

a) providing information in a human perceptible format defining at least one action; and

b) receiving at least one wireless communication characteristic of the at least one action.

9. The computer-storage medium of claim 8, wherein the computer-executable instructions for performing the method further comprise computer-executable instructions for performing steps comprising:

c) communicating with the device in a low power wireless mode.

10. The computer-storage medium of claim 9, wherein the computer-executable instructions for performing the method further comprise computer-executable instructions for performing steps comprising:

d) in response to receiving at least one wireless communication characteristic of the at last one action, communicating secret information to the device in the low power wireless mode.

11. The computer-storage medium of claim 10, wherein providing information in the human perceptible format comprises displaying information on a computer screen and/or generating a sound.

12. The computer-storage medium of claim 8, wherein receiving at least one wireless communication characteristic of the at least one action comprises receiving a plurality of range measurement packets in accordance with a MAC protocol of a wireless network.

13. The computer-storage medium of claim 8, wherein the computer-executable instructions for receiving at least one wireless communication characteristic of the at least one action comprise computer-executable instructions for causing a network interface card to measure a propagation time for wireless communication with the device at least two times.

14. A method of authentication comprising:

a) observing information in human perceptible form, the information defining at least one action;

b) moving a device having a wireless transmitter in accordance with the at least one action, such that the device occupies at least two positions; and

c) transmitting with the wireless transmitter from the at least two positions.

15. The method of claim 14, wherein the device is a portable electronic device and moving the device comprises moving the portable electronic device.

16. The method of claim 14, further comprising, transmitting from a first device to be authenticated wireless information and wherein moving the device comprises moving a second device.

17. The method of claim 14, further comprising:

c) initiating wireless communication between the device and an access point to gain access by the device to a wireless network; and

wherein observing the information comprises observing the information in response to an instruction conveyed in a wireless communication from the wireless access point.

18. The method of claim 17, wherein moving the device in accordance with the at least one action comprises touching the access point with the device.

19. The method of claim 17, further comprising:

d) receiving with the device security information from the wireless access point.

20. The method of claim 14, further comprising:

c) initiating wireless communication between the device and an access point to gain access by the device to a wireless network; and

wherein observing the information comprises observing the information displayed by the wireless access point.