COMMUNICATION PROTOCOL FOR DEVICE AUTHENTICATION

• US 20070226497A1
• Filed: 03/06/2007
• Published: 09/27/2007
• Est. Priority Date: 03/27/2006
• Status: Active Grant

• Current Assignee: Intertrust Technologies Corporation (Fidelio Acquisition Co LLC)
• Original Assignee: Kyocera Corporation
• Inventors: TAYLOR, John P.
• Granted Patent: US 8,296,565 B2
• Time in Patent Office: Days
• US Class Current: 713/168
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/81 by operating on the power supply, e.g. enabling or disabling power-on, sleep or resume operations
• CPC Class Codes: G06F 2221/2129 Authenticate client device independently of the user
• CPC Class Codes: H04L 2209/80 Wireless network architectures or network communication protocols for wireless network security H04W12/00
• CPC Class Codes: H04L 9/3271 using challenge-response
• CPC Class Codes: H04M 1/0262 for a battery compartment
• CPC Class Codes: H04M 1/72409 by interfacing with external accessories hands-free H04M1/60
• CPC Class Codes: H04M 1/72412 using two-way short-range wireless interfaces

Abstract

A communication protocol between a master device, such as a mobile phone, and a peripheral device facilitates authentication of the peripheral device. When a peripheral device is detected, the master device initiates a wake-up command to the peripheral device, transmits an authentication request command followed by challenge data to the peripheral device, and awaits responses from the peripheral device. The accessory receives the challenge data, performs a hash function on the challenge data, and generates response data. An authentication response type byte is sent to the handset followed by the response data. The handset compares the response data to pre-stored data that is associated with the challenge data. A match indicates that the accessory is authentic. The challenge/response data, also referred to as a plaintext/cyphertext pair, is pre-generated external to the handset using the hash function, then pre-stored in the handset.

Claims

1. A method for a device to authenticate an accessory having at least one communication port connected to the device, the method comprising:

driving the at least one communication port to a first voltage level to maintain the accessory in a sleep mode;

transitioning the at least one communication port to a second voltage level to initiate a wake up condition in the accessory;

transmitting a wake up command to the accessory via the at least one communication port;

transmitting an information request command via the at least one communication port to the accessory;

receiving an information request response via the at least one communication port from the accessory;

authenticating the accessory when at least a portion of the received information request response matches a pre-stored expected information request response.

2. The method of claim 1, wherein the information request command is an authentication command, and wherein the information request response is an authentication response-type byte from the accessory.

3. The method of claim 2, further comprising:

sending a plaintext challenge to the accessory.

4. The method of claim 3, further comprising:

receiving a cyphertext response from the accessory on the at least one communication port.

5. The method of claim 4 further comprising:

comparing the cyphertext response with a pre-stored cyphertext response associated with the plaintext challenge;

permitting use of the accessory if the cyphertext response matches the pre-stored cyphertext response; and

limiting use of the accessory if the cyphertext response does not match the pre-stored cyphertext response.

6. The method of claim 1, further comprising:

monitoring the at least one communication port;

detecting the accessory attached to the at least one communication port;

driving the at least one communication port to the first voltage level to maintain the accessory in a sleep mode.

7. The method of claim 3, further comprising:

monitoring the single communication port for a voltage level transition at the accessory;

detecting the voltage level transition at the accessory;

entering a command listen mode at the accessory;

detecting the wake up command at the accessory;

receiving the authentication command from the device;

receiving the plaintext challenge from the device;

performing a hash function on the received plaintext challenge utilizing a secure authentication image file to generate a cyphertext response;

sending an authentication response type byte to the handset; and

sending the generated cyphertext response to the handset.

8. The method of claim 1, wherein the information request command is a timing command, and wherein the information request response comprises a timing response and a timing byte.

9. The method of claim 1, wherein the information request command is a temperature command, and wherein the information request response comprises a temperature response and temperature data.

10. The method of claim 1, wherein the information request command is an identification command, and wherein the information request response comprises an identification response and identification data.

11. The method of claim 1, wherein the transmitting and the receiving steps between the device and the accessory are half duplex communications.

12. The method of claim 1, wherein the device is a wireless communication device, and the accessory is a battery.

13. A system for authenticating an accessory, comprising:

a device comprising;

at least one communication port for connection to the accessory;

a memory for storing at least one information request command and at least one expected information request response; and

a processor coupled to the memory and the at least one communication port, the processor driving the at least one communication port to a first voltage level to maintain the accessory in a sleep mode, transitioning the at least one communication port to a second voltage level to initiate a wake up condition in the accessory, transmitting a wake up command to the accessory via the at least one communication port, transmitting the at least one information request command via the at least one communication port to the accessory, receiving an information request response via the at least one communication port from the accessory, and authenticating the accessory when at least a portion of the received information request response matches the at least one expected information request response; and

the accessory for attachment to the device through the at least one communication port, the accessory comprising;

a secure authentication image file; and

a accessory processor for detecting a voltage level transition, entering a command listen mode, detecting the wake up command, receiving the at least one information request command, generating an information request response, and transmitting the information request response to the device through the at least one communication port.

14. The system of claim 13, wherein the at least one information request command comprises an authentication command and a plaintext challenge;

wherein at least a portion of the information request response is a cyphertext response;

wherein the accessory processor performs a hash function on the received plaintext challenge utilizing the secure authentication image file to generate the cyphertext response.

15. The system of claim 13, wherein the information request command is a timing command, and wherein the information request response comprises a timing response and a timing byte.

16. The system of claim 13, wherein the information request command is a temperature command, and wherein the information request response comprises a temperature response and temperature data.

17. The system of claim 13, wherein the information request command is an identification command, and wherein the information request response comprises an identification response and identification data.

18. The system of claim 13, wherein the transmitting and the receiving steps between the device and the accessory are half duplex communications.

19. The system of claim 13, wherein the device is a wireless communication device and the accessory is a battery for supplying power to the wireless communication device.