METHODS FOR CREATING SECRET KEYS BASED UPON ONE OR MORE SHARED CHARACTERISTICS AND SYSTEMS THEREOF

• US 20090052663A1
• Filed: 04/10/2007
• Published: 02/26/2009
• Est. Priority Date: 04/10/2006
• Status: Active Grant

• Current Assignee: Digital LOBE LLC
• Original Assignee: Digital LOBE LLC
• Inventors: Kapp, Steven C., Hammond, Peter M., Munro, James F.
• Granted Patent: US 8,320,562 B2
• Time in Patent Office: Days
• US Class Current: 380/44
• CPC Class Codes: H04L 2209/08 Randomization, e.g. dummy operations or using noise
• CPC Class Codes: H04L 2209/80 Wireless network architectures or network communication protocols for wireless network security H04W12/00
• CPC Class Codes: H04L 9/0838 Key agreement, i.e. key establishment technique in which a shared key is derived by parties as a function of information contributed by, or associated with, each of these network architectures or network communication protocols for key exchange in a packet data network H04L63/061

Abstract

A method and system for generating one or more keys includes obtaining at two or more devices data based on movement of at least one of the devices with the respect to the other device. At least one key is generated based on the obtained data at each of the devices for use in securing communications between the devices. The key at each of the devices is substantially the same.

Claims

1. A method for independently generating one or more keys, the method comprising:

obtaining at two or more devices data based on movement of at least one of the devices with the respect to the other device; and

generating one or more keys based on the obtained data at each of the devices for use in securing communications between the devices, wherein the one or more keys at each of the devices is substantially the same.

2. The method as set forth in claim 1 wherein the obtaining the data further comprises obtaining the data in response to movement of at least one of the devices with the respect to the other device during one or more passes between the devices.

3. The method as set forth in claim 2 wherein the obtaining the data further comprises obtaining the data during two or more passes between the devices.

4. The method as set forth in claim 1 wherein the obtained data comprises one of distance, velocity, and pseudo-velocity measurements.

5. The method as set forth in claim 1 further comprising converting the obtained data into one or more converted parameters, wherein the generating the one or more keys is based on the one or more converted parameters.

6. The method as set forth in claim 5 wherein the converted parameters comprise one of distance, velocity, pseudo-velocity, acceleration, and pseudo-acceleration readings.

7. The method as set forth in claim 1 further comprising determining if an amount of the obtained data is greater than a quantity threshold for averaging at least portions of the data, wherein the obtaining the data obtains additional data if the amount of the obtained is less than the quantity threshold.

8. The method as set forth in claim 1 wherein the obtained data comprises distance measurements and further comprising determining if the distance measurements are less than a distance threshold, wherein the generating the key generates when the distance measurements are less than the distance threshold.

9. The method as set forth in claim 1 further comprising determining if the obtained data is less than a data threshold for the generating the one or more keys, wherein the obtaining the data obtains additional data if the obtained data is less than the data threshold.

10. The method as set forth in claim 1 further comprising averaging one or more portions of the obtained data, wherein the generating the one or more keys is based on the averaged portions of the obtained data.

11. The method as set forth in claim 1 further comprising filtering the obtained data before the generating the one or more keys.

12. The method as set forth in claim 1 wherein the obtaining the data further comprises obscuring a data acquisition system in at least one of the devices used for the obtaining the data.

13. The method as set forth in claim 12 wherein the obscuring comprises at least one of at least partially concealing the data acquisition system and moving the data acquisition system.

14. The method as set forth in claim 1 wherein the generating the one or more keys further comprises:

converting the obtained data into a plurality of binary numbers; and

selecting at least one bit from at least a portion of the binary numbers to generate the one or more keys.

15. The method as set forth in claim 14 wherein the selecting further comprises:

determining a first set of least significant bits in the binary numbers with noise below a noise threshold;

determining a second set of most significant bits in the binary numbers which are not measurably random; and

determining a third set of one or more bits in each of the binary numbers which are measurably random based on the determination of the first set of least significant bits in the binary numbers with noise below a noise threshold and the second set of most significant bits in the binary numbers which are not measurably random, wherein the selecting at least one bit is selected from the determined third set.

16. The method as set forth in claim 1 further comprising identifying a presence of one of the devices with respect to another one of the devices, wherein the obtaining the data further comprises obtaining the data when the identifying signals the presence of one of the devices with respect to another one of the devices.

17. The method as set forth in claim 16 further comprising determining if there is adequate signal strength for the obtaining the data, wherein the obtaining the data further comprises obtaining the data when the signal strength is determined to be adequate.

18. The method as set forth in claim 1 further comprising synchronizing the devices before the obtaining the data.

19. A system for independently generating one or more keys, the system comprising:

a data acquisition system at each of two or more devices, each of the data acquisition systems obtains data based on movement of at least one of the devices with the respect to the other device; and

a key generation system that generates one or more keys based on the obtained data from each of the data acquisition systems for use in securing communications between the devices, wherein the one or more keys at each of the devices are substantially the same.

20. The system as set forth in claim 19 wherein each of the data acquisition systems obtains the data in response to movement of at least one of the devices with the respect to the other device during one or more passes between the devices.

21. The system as set forth in claim 20 wherein each of the data acquisition systems obtains the data during two or more passes between the devices.

22. The system as set forth in claim 19 wherein the obtained data comprises one of distance, velocity, and pseudo-velocity measurements.

23. The system as set forth in claim 19 further comprising a conversion system that converts the obtained data into one or more converted parameters, wherein the key generation system generates the one or more keys based on the one or more converted parameters.

24. The system as set forth in claim 23 wherein the converted parameters comprise one of distance, velocity, pseudo-velocity, acceleration, and pseudo-acceleration readings.

25. The system as set forth in claim 19 wherein each of the data acquisition systems determine if an amount of the obtained data is greater than a quantity threshold for averaging at least portions of the data, wherein each of the data acquisition systems obtains additional data if the amount of the obtained is less than the quantity threshold.

26. The system as set forth in claim 19 wherein the obtained data comprises distance measurements and wherein each of the data acquisition systems determines if the distance measurements are less than a distance threshold, wherein the key generation system generates the one or more keys when the distance measurements are less than the distance threshold.

27. The system as set forth in claim 19 wherein each of the data acquisition systems determine if the obtained data is less than a data threshold for generating the one or more keys, wherein each of the data acquisition systems obtains additional data if the obtained data is less than the data threshold.

28. The system as set forth in claim 19 further comprising an averaging system that averages one or more portions of the obtained data, wherein the key generation system generates the one or more keys based on the averaged portions of the obtained data.

29. The system as set forth in claim 19 further comprising a filtering system that filters the obtained data before the key generation system generates the one or more keys.

30. The system as set forth in claim 19 further comprising an obscuring system that obscures one or more of the data acquisition systems.

31. The system as set forth in claim 30 wherein the obscuring system comprises at least one of a concealment system that at least partially conceals at least one of the data acquisition systems and adjustment system that moves at least one of the data acquisition systems.

32. The system as set forth in claim 19 wherein the key generation system further comprises:

a binary conversion system that converts the obtained data into a plurality of binary numbers; and

a selection system that selects at least one bit from at least a portion of the binary numbers to generate the one or more keys.

33. The system as set forth in claim 32 wherein the selection system further comprises:

a first determination system that determines a first set of least significant bits in the binary numbers with noise below a noise threshold;

a second determination system that determines a second set of most significant bits in the binary numbers which are not measurably random; and

a third determination system that determines a third set of one or more bits in each of the binary numbers which are measurably random based on the determination of the first set of least significant bits in the binary numbers with noise below a noise threshold and the second set of most significant bits in the binary numbers which are not measurably random, wherein the selection system selects at least one bit is selected from the determined third set.

34. The system as set forth in claim 19 further comprising an identification system that identifies a presence of one of the devices with respect to another one of the devices, wherein each of the data acquisition systems obtains the data when the identification system identifies the presence of one of the devices with respect to another one of the devices.

35. The system as set forth in claim 19 further comprising a signal determination system that determines if there is adequate signal strength for the obtaining the data, wherein each of the data acquisition systems obtains the data when the signal strength is determined to be adequate.

36. The system as set forth in claim 19 further comprising a synchronization system that synchronizing the systems before each of the data acquisition systems obtains the data.

37. A method for securing communications by independently generating one or more keys, the method comprising:

obtaining data based on one or more shared characteristics between two or more devices;

generating one or more keys based on the obtained data on the one or more shared characteristic independently at one or more of the devices; and

using the one or more generated keys for securing communications without transmitting the one or more generated keys between the devices.

38. The method as set forth in claim 37 wherein the obtaining the data further comprises obtaining the data based on movement of at least one of the devices with the respect to the other device during one or more passes between the devices.

39. The method as set forth in claim 38 wherein the obtaining the data further comprises obtaining the data during two or more passes between the devices.

40. The method as set forth in claim 37 wherein the obtained data comprises one of distance, velocity, and pseudo-velocity measurements.

41. The method as set forth in claim 37 further comprising converting the obtained data into one or more converted parameters, wherein the generating the one or more keys is based on the one or more converted parameters.

42. The method as set forth in claim 41 wherein the converted parameters comprise one of distance, velocity, pseudo-velocity, acceleration, and pseudo-acceleration readings.

43. The method as set forth in claim 37 further comprising determining if an amount of the obtained data is greater than a quantity threshold for averaging at least portions of the data, wherein the obtaining the data obtains additional data if the amount of the obtained is less than the quantity threshold.

44. The method as set forth in claim 37 wherein the obtained data comprises distance measurements and further comprising determining if the distance measurements are less than a distance threshold, wherein the generating the one or more keys generates when the distance measurements are less than the distance threshold.

45. The method as set forth in claim 37 further comprising determining if the obtained data is less than a data threshold for the generating the one or more keys, wherein the obtaining the data obtains additional data if the obtained data is less than the data threshold.

46. The method as set forth in claim 37 further comprising averaging one or more portions of the obtained data, wherein the generating the one or more keys is based on the averaged portions of the obtained data.

47. The method as set forth in claim 37 further comprising filtering the obtained data before the generating the one or more keys.

48. The method as set forth in claim 37 wherein the obtaining the data further comprises obscuring a data acquisition system in at least one of the devices used for the obtaining the data.

49. The method as set forth in claim 48 wherein the obscuring comprises at least one of at least partially concealing the data acquisition system and moving the data acquisition system.

50. The method as set forth in claim 37 wherein the generating the one or more keys further comprises:

converting the obtained data into a plurality of binary numbers; and

selecting at least one bit from at least a portion of the binary numbers to generate the one or more keys.

51. The method as set forth in claim 50 wherein the selecting further comprises:

determining a first set of least significant bits in the binary numbers with noise below a noise threshold;

determining a second set of most significant bits in the binary numbers which are not measurably random; and

determining a third set of one or more bits in each of the binary numbers which are measurably random based on the determination of the first set of least significant bits in the binary numbers with noise below a noise threshold and the second set of most significant bits in the binary numbers which are not measurably random, wherein the selecting at least one bit is selected from the determined third set.

52. The method as set forth in claim 37 further comprising identifying a presence of one of the devices with respect to another one of the devices, wherein the obtaining the data further comprises obtaining the data when the identifying signals the presence of one of the devices with respect to another one of the devices.

53. The method as set forth in claim 52 further comprising determining if there is adequate signal strength for the obtaining the data, wherein the obtaining the data further comprises obtaining the data when the signal strength is determined to be adequate.

54. The method as set forth in claim 37 further comprising synchronizing the devices before the obtaining the data.

55. A system for securing communications by independently generating one or more keys, the system comprising:

one or more data acquisition systems that obtain data based on one or more shared characteristics between two or more devices;

a key generation system that generates one or more keys based on the obtained data on the one or more shared characteristic independently at one or more of the devices; and

one or more communication systems that use the one or more generated keys for securing communications without transmitting the one or more generated keys between the devices.

56. The system as set forth in claim 55 wherein each of the data acquisition systems obtains the data in response to movement of at least one of the devices with the respect to the other device during one or more passes between the devices.

57. The system as set forth in claim 56 wherein each of the data acquisition systems obtains the data during two or more passes between the devices.

58. The system as set forth in claim 55 wherein the obtained data comprises one of distance, velocity, and pseudo-velocity measurements.

59. The system as set forth in claim 55 further comprising a conversion system that converts the obtained data into one or more converted parameters, wherein the key generation system generates the one or more keys based on the one or more converted parameters.

60. The system as set forth in claim 59 wherein the converted parameters comprise one of distance, velocity, pseudo-velocity, acceleration, and pseudo-acceleration readings.

61. The system as set forth in claim 55 wherein each of the data acquisition systems determine if an amount of the obtained data is greater than a quantity threshold for averaging at least portions of the data, wherein each of the data acquisition systems obtains additional data if the amount of the obtained is less than the quantity threshold.

62. The system as set forth in claim 55 wherein the obtained data comprises distance measurements and wherein each of the data acquisition systems determines if the distance measurements are less than a distance threshold, wherein the key generation system generates the one or more keys when the distance measurements are less than the distance threshold.

63. The system as set forth in claim 55 wherein each of the data acquisition systems determine if the obtained data is less than a data threshold for generating the one or more keys, wherein each of the data acquisition systems obtains additional data if the obtained data is less than the data threshold.

64. The system as set forth in claim 55 further comprising an averaging system that averages one or more portions of the obtained data, wherein the key generation system generates the one or more keys based on the averaged portions of the obtained data.

65. The system as set forth in claim 55 further comprising a filtering system that filters the obtained data before the key generation system generates the one or more keys.

66. The system as set forth in claim 55 further comprising an obscuring system that obscures one or more of the data acquisition systems.

67. The system as set forth in claim 66 wherein the obscuring system comprises at least one of a concealment system that at least partially conceals at least one of the data acquisition systems and adjustment system that moves at least one of the data acquisition systems.

68. The system as set forth in claim 55 wherein the key generation system further comprises:

a binary conversion system that converts the obtained data into a plurality of binary numbers; and

a selection system that selects at least one bit from at least a portion of the binary numbers to generate the one or more keys.

69. The system as set forth in claim 68 wherein the selection system further comprises:

a first determination system that determines a first set of least significant bits in the binary numbers with noise below a noise threshold;

a second determination system that determines a second set of most significant bits in the binary numbers which are not measurably random; and

a third determination system that determines a third set of one or more bits in each of the binary numbers which are measurably random based on the determination of the first set of least significant bits in the binary numbers with noise below a noise threshold and the second set of most significant bits in the binary numbers which are not measurably random, wherein the selection system selects at least one bit is selected from the determined third set.

70. The system as set forth in claim 55 further comprising an identification system that identifies a presence of one of the devices with respect to another one of the devices, wherein each of the data acquisition systems obtains the data when the identification system identifies the presence of one of the devices with respect to another one of the devices.

71. The system as set forth in claim 55 further comprising a signal determination system that determines if there is adequate signal strength for the obtaining the data, wherein each of the data acquisition systems obtains the data when the signal strength is determined to be adequate.

72. The system as set forth in claim 55 further comprising a synchronization system that synchronizing the systems before each of the data acquisition systems obtains the data.