Method for secure authentication of mobile devices

• US 20070178882A1
• Filed: 01/31/2006
• Published: 08/02/2007
• Est. Priority Date: 01/31/2006
• Status: Active Grant

• Current Assignee: Alcatel-Lucent SA (Nokia Corporation)
• Original Assignee: Alcatel-Lucent SA (Nokia Corporation)
• Inventors: Brok, Jacco, Zivkovic, Miroslav, Teunissen, Harold, Lagerberg, Ko Marcus
• Granted Patent: US 8,041,339 B2
• Time in Patent Office: Days
• US Class Current: 455/411
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/18 using different networks or channels, e.g. using out of band channels cryptographic mechanisms or cryptographic arrangements for key distribution involving distinctive intermediate devices or communication paths H04L9/0827; cryptographic mechanisms or cryptographic arrangements for authentication using a plurality of channels H04L9/3215
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/50 Secure pairing of devices
• CPC Class Codes: H04W 12/77 Graphical identity
• CPC Class Codes: H04W 4/80 Services using short range communication, e.g. near-field communication [NFC], radio-frequency identification [RFID] or low energy communication
• CPC Class Codes: H04W 84/12 WLAN [Wireless Local Area Networks]

Abstract

A method for authenticating a mobile device is provided. The method includes receiving a communication request from the mobile device. The mobile device is operable to exchange data over a primary channel. Authentication data is received from the mobile device over a second channel. The secondary channel is a short-range channel operable for exchanging data when the mobile device is within physical proximity. The authentication data is processed to determine whether the mobile device is a trusted device.

Claims

1. A method for authenticating a mobile device, comprising:

receiving a communication request from the mobile device, wherein the mobile device is operable to exchange data over a primary channel;

receiving authentication data from the mobile device over a secondary channel, wherein the secondary channel is a short-range channel operable for exchanging data when the mobile device is within physical proximity; and

processing the authentication data to determine whether the mobile device is a trusted device.

2. The method of claim 1, wherein the communication request is received by a second mobile device, and the secondary channel is a mobile-to-mobile channel between the first and second mobile devices.

3. The method of claim 2, wherein the authentication data is process by the second mobile device to pair the first and second mobile devices.

4. The method of claim 1, wherein the secondary channel is a radio frequency channel operable to exchange the authentication data between a distance of about 1 m or less.

5. The method of claim 4, wherein the authentication data is a radio frequency identification (RFID) tag.

6. The method of claim 5, wherein the RFID is varied according to a predetermined time interval.

7. The method of claim 1, wherein the secondary channel is an optical channel operable to exchange the authentication data between a distance of about 1 meter or less.

8. The method of claim 7, wherein the authentication data includes data encoded on a bar code, and receiving the authentication data further comprises capturing an image of the bar code using a camera.

9. The method of claim 8, wherein the bar code is electronically generated and presented on a display of the mobile device.

10. The method of claim 8, wherein the bar code is permanently embossed on the mobile device.

11. A method of authenticating a mobile device, comprising:

transmitting a communication request from the mobile device, wherein the mobile device is operable to exchange data over a primary channel;

transmitting authentication data from the mobile device over a secondary channel, wherein the secondary channel is a short-range channel operable for exchanging data with a receiving party when the mobile device and the receiving party are within physical proximity, and wherein the receiving party processes the authentication data to determine whether the mobile device is a trusted device.

12. The method of claim 11, wherein the receiving party is a second mobile device, and the secondary channel is a mobile-to-mobile channel between the first and second mobile devices.

13. The method of claim 11, wherein the secondary channel is a radio frequency channel operable to exchange the authentication data between a distance of about 1 m or less.

14. The method of claim 13, wherein the authentication data is a radio frequency identification (RFID) tag.

15. The method of claim 14, wherein the RFID is varied according to a predetermined time interval.

16. The method of claim 11, wherein the secondary channel is an optical channel operable to exchange the authentication data between a distance of about 1 meter or less.

17. The method of claim 16, wherein the authentication data includes data encoded on a bar code, and the receiving party processes the authentication data by performing the steps comprising:

capturing an image of the bar code using a camera; and

decoding the bar code to recover the encoded authentication data.

18. The method of claim 17, wherein the bar code is electronically generated and presented on a display of the mobile device.

19. The method of claim 17, wherein the bar code is varied according to a predetermined time interval.

20. The method of claim 17, wherein the bar code is permanently embossed on the mobile device.