SYNCHRONIZATION TEST FOR DEVICE AUTHENTICATION

• US 20080240440A1
• Filed: 08/24/2007
• Published: 10/02/2008
• Est. Priority Date: 03/27/2007
• Status: Active Grant

• Current Assignee: Qualcomm, Inc.
• Original Assignee: Qualcomm, Inc.
• Inventors: Xiao, Lu, Rose, Gregory Gordon, JULIAN, David Jonathan
• Granted Patent: US 8,837,724 B2
• Time in Patent Office: Days
• US Class Current: 380/277
• CPC Class Codes: G06F 21/35 communicating wirelessly
• CPC Class Codes: G06F 21/40 by quorum, i.e. whereby two or more security principals are required
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/50 Secure pairing of devices
• CPC Class Codes: H04W 12/68 Gesture-dependent or behaviour-dependent
• CPC Class Codes: H04W 88/02 Terminal devices

Abstract

Device authentication is based on the ability of a human to synchronize the movements of his or her fingers. A pairing procedure for two wireless devices may thus involve a synchronization test that is based on the relative timing of actuations of input devices on each of the wireless devices. In some aspects a synchronization test involves determining whether actuations of user input devices on two different wireless devices occurred within a defined time interval. In some aspects a synchronization test involves comparing time intervals defined by multiple actuations of user input devices on two wireless devices.

Claims

1. A method of authenticating, comprising:

providing a first indication relating to at least one time of actuation of a first user input device that is associated with a first device;

receiving a second indication relating to at least one time of actuation of a second user input device that is associated with a second device;

comparing the first indication with the second indication to determine whether the at least one time of actuation of the first user input device is sufficiently similar to the at least one time of actuation of the second user input device; and

authenticating the second device based on the comparison.

2. The method of claim 1, wherein:

the first indication indicates a time at which the first user input device was actuated; and

the second indication relates to a time at which the second user input device was actuated.

3. The method of claim 2, wherein the second indication indicates a time at which a message from the second device was received at the first device.

4. The method of claim 2, wherein:

the comparison comprises calculating a time difference between the time at which the first user input device was actuated and the time at which the second user input device was actuated; and

the authentication of the second device is based on whether the time difference is less than or equal to a threshold time interval.

5. The method of claim 4, further comprising transmitting, if the time difference is less than or equal to the threshold time interval, a third indication relating to another time the first user input device was actuated.

6. The method of claim 4, wherein:

the first indication indicates a time at which the first user input device was engaged; and

the third indication indicates a time at which the first user input device was disengaged.

7. The method of claim 4, further comprising performing a key agreement calculation if the time difference is less than or equal to the threshold time interval, wherein the key agreement calculation is based on:

a first cryptographic key associated with the first device; and

a second cryptographic key associated with the second device and received in conjunction with the second indication.

8. The method of claim 7, wherein the key agreement calculation provide a cryptographic key for securing communication between the first and second devices.

9. The method of claim 2, wherein:

the first indication is provided and the second indication is received in conjunction with a synchronization test; and

the method further comprises rejecting, during the synchronization test and after the reception of the second indication, any indications purporting to be representative of at least one time of actuation of the second user input device.

10. The method of claim 1, wherein:

the at least one time of actuation of the first user input device comprises a plurality of actuation times that define a first set of time intervals; and

the at least one time of actuation of the second user input device comprises a plurality of actuation times that define a second set of time intervals.

11. The method of claim 10, wherein the comparison comprises:

calculating a series of time differences between each interval of the first set of time interval and a corresponding interval of the second set of time intervals; and

generating a verification count based on how many of the time differences are less than or equal to a threshold time interval.

12. The method of claim 11, wherein the authentication of the second device is based on whether the verification count is greater than or equal to a threshold count.

13. The method of claim 10, further comprising receiving a first commitment value that is based on the second set of time intervals.

14. The method of claim 13, wherein the first commitment value comprises a hash code or a message authentication code.

15. The method of claim 13, wherein the first commitment value is further based on data to be authenticated.

16. The method of claim 15, wherein the data to be authenticated comprises at least one of the group consisting of:

a pre-shared key, a public key, and a device identifier.

17. The method of claim 13, wherein the first commitment value comprises a message authentication code that is further based on a cryptographic key that is shared by the first and second devices.

18. The method of claim 13, further comprising:

generating a second commitment value based on the second set of time intervals;

wherein the authentication of the second device is based on whether the second commitment value equals the first commitment value.

19. The method of claim 13, further comprising:

determining a time difference between a time of receipt of the first commitment value and a verification start time associated with the at least one time of actuation of the first user input device;

wherein the authentication of the second device is based on whether the time difference is less than or equal to a threshold time interval.

20. The method of claim 19, further comprising transmitting, if the time difference is less than or equal to the threshold time interval, a third indication relating to the at least one time of actuation of the first user input device.

21. The method of claim 20, wherein the third indication is transmitted a defined period of time after the verification start time.

22. The method of claim 13, further comprising transmitting a commitment value relating to the first set of time intervals.

23. The method of claim 10, wherein the authentication of the second device is based on the first set of time intervals being different than the second set of time intervals.

24. The method of claim 10, wherein the actuation times that define the first set of time intervals comprise a random sequence of times.

25. The method of claim 1, wherein each of the actuations comprises an engagement of a respective one of the user input devices or a disengagement of a respective one of the user input devices.

26. The method of claim 1, wherein the first user input device comprises a pushbutton, a keypad, a switch, or a touch-screen.

27. The method of claim 1, further comprising activating a pairing mode of the first device prior to acquiring the first indication.

28. The method of claim 1, further comprising generating an indication to initiate the actuation of the user input devices.

29. The method of claim 28, wherein the generation of the indication comprises activating or deactivating a lighting element or providing an output on a display screen.

30. An apparatus for authenticating, comprising:

a timing indicator configured to provide a first indication relating to at least one time of actuation of a first user input device that is associated with a first device;

a receiver configured to receive a second indication relating to at least one time of actuation of a second user input device that is associated with a second device;

a comparator configured to compare the first indication with the second indication to determine whether the at least one time of actuation of the first user input device is sufficiently similar to the at least one time of actuation of the second user input device; and

an authenticator configured to authenticate the second device based on the comparison.

31. The apparatus of claim 30, wherein:

the first indication indicates a time at which the first user input device was actuated; and

the second indication relates to a time at which the second user input device was actuated.

32. The apparatus of claim 31, wherein the second indication indicates a time at which a message from the second device was received at the first device.

33. The apparatus of claim 31, wherein:

the comparator is further configured to calculate a time difference between the time at which the first user input device was actuated and the time at which the second user input device was actuated; and

the authenticator is further configured to authenticate the second device based on whether the time difference is less than or equal to a threshold time interval.

34. The apparatus of claim 33, further comprising a transmitter configured to transmit, based on whether the time difference is less than or equal to the threshold time interval, a third indication relating to another time the first user input device was actuated.

35. The apparatus of claim 33, wherein:

the first indication indicates a time at which the first user input device was engaged; and

the third indication indicates a time at which the first user input device was disengaged.

36. The apparatus of claim 33, further comprising a cryptographic processor configured to perform a key agreement calculation if the time difference is less than or equal to the threshold time interval, wherein the key agreement calculation is based on:

a first cryptographic key associated with the first device; and

a second cryptographic key associated with the second device and received in conjunction with the second indication.

37. The apparatus of claim 36, wherein the key agreement calculation provide a cryptographic key for securing communication between the first and second devices.

38. The apparatus of claim 31, wherein:

the first indication is provided and the second indication is received in conjunction with a synchronization test; and

the receiver is further configured to reject, during the synchronization test and after the receipt of the second indication, any indications purporting to be representative of at least one time of actuation of the second user input device.

39. The apparatus of claim 30, wherein:

the at least one time of actuation of the first user input device comprises a plurality of actuation times that define a first set of time intervals; and

the at least one time of actuation of the second user input device comprises a plurality of actuation times that define a second set of time intervals.

40. The apparatus of claim 39, wherein the comparator is further configured to:

calculate a series of time differences between each interval of the first set of time interval and a corresponding interval of the second set of time intervals; and

generate a verification count based on how many of the time differences are less than or equal to a threshold time interval.

41. The apparatus of claim 40, wherein the authenticator is further configured to authenticate the second device based on whether the verification count is greater than or equal to a threshold count.

42. The apparatus of claim 39, wherein the receiver is further configured to receive a first commitment value that is based on the second set of time intervals.

43. The apparatus of claim 42, wherein the first commitment value comprises a hash code or a message authentication code.

44. The apparatus of claim 42, wherein the first commitment value is further based on data to be authenticated.

45. The apparatus of claim 44, wherein the data to be authenticated comprises at least one of the group consisting of:

a pre-shared key, a public key, and a device identifier.

46. The apparatus of claim 42, wherein the first commitment value comprises a message authentication code that is further based on a cryptographic key that is shared by the first and second devices.

47. The apparatus of claim 42, further comprising:

a commitment generator configured to generate a second commitment value based on the second set of time intervals;

wherein the authenticator is further configured to authenticate the second device based on whether the second commitment value equals the first commitment value.

48. The apparatus of claim 42, wherein:

the comparator is further configured to determine a time difference between a time of receipt of the first commitment value and a verification start time associated with the at least one time of actuation of the first user input device; and

the authenticator is further configured to authenticate the second device based on whether the time difference is less than or equal to a threshold time interval.

49. The apparatus of claim 48, further comprising a transmitter configured to transmit, if the time difference is less than or equal to the threshold time interval, a third indication relating to the at least one time of actuation of the first user input device.

50. The apparatus of claim 49, wherein the third indication is transmitted a defined period of time after the verification start time.

51. The apparatus of claim 42, further comprising a transmitter configured to transmit a commitment value relating to the first set of time intervals.

52. The apparatus of claim 39, wherein the authenticator is further configured to authenticate the second device based on the first set of time intervals being different than the second set of time intervals.

53. The apparatus of claim 39, wherein the actuation times that define the first set of time intervals comprise a random sequence of times.

54. The apparatus of claim 30, wherein each of the actuations comprises an engagement of a respective one of the user input devices or a disengagement of a respective one of the user input devices.

55. The apparatus of claim 30, wherein the first user input device comprises a pushbutton, a keypad, a switch, or a touch-screen.

56. The apparatus of claim 30, further comprising a pairing mode controller configured to activate a pairing mode of the first device prior to acquiring the first indication.

57. The apparatus of claim 30, further comprising an output device configured to generate an indication to initiate the actuation of the user input devices.

58. The apparatus of claim 57, wherein the output device is further configured to activate or deactivate a lighting element or provide an output on a display screen.

59. An apparatus for authenticating, comprising:

means for providing a first indication relating to at least one time of actuation of a first means for inputting that is associated with a first device;

means for receiving a second indication relating to at least one time of actuation of a second means for inputting that is associated with a second device;

means for comparing the first indication with the second indication to determine whether the at least one time of actuation of the first means for inputting is sufficiently similar to the at least one time of actuation of the second means for inputting; and

means for authenticating the second device based on the comparison.

60. The apparatus of claim 59, wherein:

the first indication indicates a time at which the first means for inputting was actuated; and

the second indication relates to a time at which the second means for inputting was actuated.

61. The apparatus of claim 60, wherein the second indication indicates a time at which a message from the second device was received at the first device.

62. The apparatus of claim 60, wherein:

the means for comparing calculates a time difference between the time at which the first means for inputting was actuated and the time at which the second means for inputting was actuated; and

the means for authenticating authenticates the second device based on whether the time difference is less than or equal to a threshold time interval.

63. The apparatus of claim 62, further comprising means for transmitting, based on whether the time difference is less than or equal to the threshold time interval, a third indication relating to another time the first means for inputting was actuated.

64. The apparatus of claim 62, wherein:

the first indication indicates a time at which the first means for inputting was engaged; and

the third indication indicates a time at which the first means for inputting was disengaged.

65. The apparatus of claim 62, further comprising means for performing a key agreement calculation if the time difference is less than or equal to the threshold time interval, wherein the key agreement calculation is based on:

a first cryptographic key associated with the first device; and

a second cryptographic key associated with the second device and received in conjunction with the second indication.

66. The apparatus of claim 65, wherein the key agreement calculation provide a cryptographic key for securing communication between the first and second devices.

67. The apparatus of claim 60, wherein:

the first indication is provided and the second indication is received in conjunction with a synchronization test; and

the means for receiving rejects, during the synchronization test and after the receipt of the second indication, any indications purporting to be representative of at least one time of actuation of the second means for inputting.

68. The apparatus of claim 59, wherein:

the at least one time of actuation of the first means for inputting comprises a plurality of actuation times that define a first set of time intervals; and

the at least one time of actuation of the second means for inputting comprises a plurality of actuation times that define a second set of time intervals.

69. The apparatus of claim 68, wherein the means for comparing:

calculates a series of time differences between each interval of the first set of time interval and a corresponding interval of the second set of time intervals; and

generates a verification count based on how many of the time differences are less than or equal to a threshold time interval.

70. The apparatus of claim 69, wherein the means for authenticating authenticates the second device based on whether the verification count is greater than or equal to a threshold count.

71. The apparatus of claim 68, wherein the means for receiving receives a first commitment value that is based on the second set of time intervals.

72. The apparatus of claim 71, wherein the first commitment value comprises a hash code or a message authentication code.

73. The apparatus of claim 71, wherein the first commitment value is further based on data to be authenticated.

74. The apparatus of claim 73, wherein the data to be authenticated comprises at least one of the group consisting of:

a pre-shared key, a public key, and a device identifier.

75. The apparatus of claim 71, wherein the first commitment value comprises a message authentication code that is further based on a cryptographic key that is shared by the first and second devices.

76. The apparatus of claim 71, further comprising:

means for generating a second commitment value based on the second set of time intervals;

wherein the means for authenticating authenticates the second device based on whether the second commitment value equals the first commitment value.

77. The apparatus of claim 71, wherein:

the means for comparing determines a time difference between a time of receipt of the first commitment value and a verification start time associated with the at least one time of actuation of the first means for inputting; and

the means for authenticating authenticates the second device based on whether the time difference is less than or equal to a threshold time interval.

78. The apparatus of claim 77, further means for transmitting, if the time difference is less than or equal to the threshold time interval, a third indication relating to the at least one time of actuation of the first means for inputting.

79. The apparatus of claim 78, wherein the third indication is transmitted a defined period of time after the verification start time.

80. The apparatus of claim 71, further comprising means for transmitting a commitment value relating to the first set of time intervals.

81. The apparatus of claim 68, wherein the means for authenticating authenticates the second device based on the first set of time intervals being different than the second set of time intervals.

82. The apparatus of claim 68, wherein the actuation times that define the first set of time intervals comprise a random sequence of times.

83. The apparatus of claim 59, wherein each of the actuations comprises an engagement of a respective one of the first and second means for inputting or a disengagement of a respective one of the first and second means for inputting.

84. The apparatus of claim 59, wherein the first means for inputting comprises a pushbutton, a keypad, a switch, or a touch-screen.

85. The apparatus of claim 59, further comprising means for activating a pairing mode of the first device prior to acquiring the first indication.

86. The apparatus of claim 59, further comprising means for generating an indication to initiate the actuation of the first and second means for inputting.

87. The apparatus of claim 86, wherein the means for generating an indication activates or deactivates a lighting element or provides an output on a display screen.

88. A computer-program product for authenticating comprising:

computer-readable medium comprising codes executable by at least one computer to;

provide a first indication relating to at least one time of actuation of a first user input device that is associated with a first device;

receive a second indication relating to at least one time of actuation of a second user input device that is associated with a second device;

compare the first indication with the second indication to determine whether the at least one time of actuation of the first user input device is sufficiently similar to the at least one time of actuation of the second user input device; and

authenticate the second device based on the comparison.

89. A headset for wireless communication, comprising:

a timing indicator configured to provide a first indication relating to at least one time of actuation of a first user input device that is associated with a first device;

a receiver configured to receive a second indication relating to at least one time of actuation of a second user input device that is associated with a second device;

a comparator configured to compare the first indication with the second indication to determine whether the at least one time of actuation of the first user input device is sufficiently similar to the at least one time of actuation of the second user input device;

an authenticator configured to authenticate the second device based on the comparison; and

a transducer adapted to provide an audio output based on a signal received via the receiver.

90. A watch for wireless communication, comprising:

a timing indicator configured to provide a first indication relating to at least one time of actuation of a first user input device that is associated with a first device;

a receiver configured to receive a second indication relating to at least one time of actuation of a second user input device that is associated with a second device;

a comparator configured to compare the first indication with the second indication to determine whether the at least one time of actuation of the first user input device is sufficiently similar to the at least one time of actuation of the second user input device;

an authenticator configured to authenticate the second device based on the comparison; and

a user interface adapted to provide an indication based on a signal received via the receiver.

91. A sensing device for wireless communication, comprising:

a timing indicator configured to provide a first indication relating to at least one time of actuation of a first user input device that is associated with a first device;

a receiver configured to receive a second indication relating to at least one time of actuation of a second user input device that is associated with a second device;

a comparator configured to compare the first indication with the second indication to determine whether the at least one time of actuation of the first user input device is sufficiently similar to the at least one time of actuation of the second user input device;

an authenticator configured to authenticate the second device based on the comparison; and

a sensor adapted to provide data to be transmitted to the second device.