Method And System For Using Location Information Acquired From GPS For Secure Authentication

• US 20090100530A1
• Filed: 10/12/2007
• Published: 04/16/2009
• Est. Priority Date: 10/12/2007
• Status: Active Grant

• Current Assignee: Avago Technologies International Sales Pte Limited (Broadcom, Inc.)
• Original Assignee: Broadcom Corporation (Broadcom, Inc.)
• Inventors: Chen, Xuemin (Sherman)
• Granted Patent: US 8,887,307 B2
• Time in Patent Office: Days
• US Class Current: 726/29
• CPC Class Codes: H04L 2209/12 Details relating to cryptographic hardware or logic circuitry
• CPC Class Codes: H04L 2209/60 Digital content management, e.g. content distribution
• CPC Class Codes: H04L 2209/80 Wireless
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/107 wherein the security policies are location-dependent, e.g. entities privileges depend on current location or allowing specific operations only from locally connected terminals
• CPC Class Codes: H04L 9/0662 with particular pseudorandom sequence generator
• CPC Class Codes: H04L 9/3226 using a predetermined code, e.g. password, passphrase or PIN network architectures or network communication protocols for supporting authentication of entities using passwords in a packet data network H04L63/083
• CPC Class Codes: H04L 9/3271 using challenge-response
• CPC Class Codes: H04N 21/4627 Rights management associated to the content security in data switching network management H04L41/28; security management or policies for network security H04L63/20; access security in wireless networks H04W12/08
• CPC Class Codes: H04N 21/6334 for authorisation, e.g. by transmitting a key wireless communications network key management H04W12/04; wireless communications network access security H04W12/08
• CPC Class Codes: H04N 21/83 Generation or processing of protective or descriptive data associated with content; Content structuring

Abstract

Secure functions may be accessed via an authentication process utilizing a password that may be generated within a chip integrated on a device. The password may be unique per chip location, per challenge and/or per chip. The location of the chip may be determined based on GPS information and securely stored and securely communicated to an external entity. Two or more of the chip location, a generated random number sample and a key from a table of keys may be passed to a hash function that may generate a password. An external entity attempting access may be challenged to respond with a password that matches the password generated by the hash function. The response may be compared with the password generated by the hash function and access to one or more secure functions may be granted based on the comparison.

Claims

1. A method for processing data in a communication system, the method comprising:

authenticating access to one or more secure functions controlled by a device, using a password that is unique per location of a chip and per challenge, wherein said chip is integrated within said device.

2. The method according to claim 1, comprising generating within said chip, said password that is unique per location of said chip and per challenge.

3. The method according to claim 1, comprising generating within said chip, a random number sample from a random number generator (RNG).

4. The method according to claim 1, comprising generating within said chip, a secret word that is unique per chip utilizing a secure secret algorithm, wherein said password is generated based on said generated secret word.

5. The method according to claim 1, comprising determining a location of said chip based on global positioning system (GPS) information.

6. The method according to claim 5, comprising securely storing said chip location, wherein said chip location is inaccessible by an external entity.

7. The method according to claim 5, comprising securely communicating said chip location to a specified external entity.

8. The method according to claim 5, comprising storing within said chip, one or more of:

a chip ID that is unique to said chip and a table of keys, wherein said table of keys comprises a key and a corresponding key index.

9. The method according to claim 8, comprising passing two or more of:

said chip location, a generated random number sample and said key from said table of keys, to a hash function.

10. The method according to claim 9, comprising:

generating within said chip, a password from said hash function;

challenging an external entity attempting access, to respond with a password that matches said password generated from said hash function.

11. The method according to claim 10, comprising:

storing in a register, two or more of;

said generated random number sample, said chip ID which is unique to said chip and said key index; and

communicating contents of said register to said external entity attempting access, wherein an authorized external entity has knowledge of two or more of said chip ID, said location of said chip, said key table with corresponding key indices, and said hash function.

12. The method according to claim 11, comprising

comparing a response generated by said external entity attempting access, with said password generated from said hash function;

and

granting said access to said one or more secure functions based on said comparison.

13. A system for processing data in a communication system, the system comprising:

one or more circuits that authenticate access to one or more secure functions controlled by a device, using a password that is unique per location of a chip and per challenge, wherein said chip is integrated within said device.

14. The system according to claim 13, wherein said one or more circuits generates within said chip, said password that is unique per location of a chip and per challenge.

15. The system according to claim 13, wherein said one or more circuits generates within said chip, a random number sample from a random number generator (RNG).

16. The system according to claim 13, wherein said one or more circuits generates within said chip, a secret word that is unique per chip utilizing a secure secret algorithm, wherein said password is generated based on said generated secret word.

17. The system according to claim 13, wherein said one or more circuits determines a location of said chip based on global positioning system (GPS) information.

18. The system according to claim 17 wherein said one or more circuits securely stores said chip location, wherein said chip location is inaccessible by an external entity.

19. The system according to claim 17, wherein said one or more circuits securely communicates said chip location to a specified external entity.

20. The system according to claim 17, wherein said one or more circuits stores within said chip, one or more of:

a chip ID that is unique to said chip and a table of keys, wherein said table of keys comprises a key and a corresponding key index.

21. The system according to claim 20, wherein said one or more circuits passes two or more of:

said chip location, a generated random number sample and said key from said table of keys, to a hash function.

22. The system according to claim 21, wherein said one or more circuits

generates within said chip, a password from said hash function;

and

challenges an external entity attempting access, to respond with a password that matches said password generated from said hash function.

23. The system according to claim 22, wherein said one or more circuits

stores in a register, two or more of:

said generated random number sample, said chip ID which is unique to said chip and said key index; and

communicates contents of said register to said external entity attempting access, wherein an authorized external entity has knowledge of two or more of said chip ID, said location of said chip, said key table with corresponding key indices, and said hash function.

24. The system according to claim 23, wherein said one or more circuits

compares a response generated by said external entity attempting access, with said password generated from said hash function;

and

grants said access to said one or more secure functions based on said comparison.