SENSOR DERIVED AUTHENTICATION FOR ESTABLISHING PEER-TO-PEER NETWORKS

• US 20100199092A1
• Filed: 02/02/2009
• Published: 08/05/2010
• Est. Priority Date: 02/02/2009
• Status: Active Grant

• Current Assignee: Apple Inc.
• Original Assignee: Apple Inc.
• Inventors: Franklin, Jeremy C., Sharpe, Nathaniel S., Andrus, David C., Kearney, Philip F., Zimmermann, Christopher B.
• Granted Patent: US 8,837,716 B2
• Time in Patent Office: Days
• US Class Current: 713/171
• CPC Class Codes: G06F 21/36 by graphic or iconic representation
• CPC Class Codes: G06F 3/017 Gesture based interaction, e.g. based on a set of recognized hand gestures interaction based on gestures traced on a digitiser G06F3/04883
• CPC Class Codes: H04L 2209/805 Lightweight hardware, e.g. radio-frequency identification [RFID] or sensor
• CPC Class Codes: H04L 2463/061 applying further key derivation, e.g. deriving traffic keys from a pair-wise master key cryptographic mechanisms or cryptographic arrangements for generation of secret information including derivation or calculation of cryptographic keys or passwords H04L9/0861
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 9/0838 Key agreement, i.e. key establishment technique in which a shared key is derived by parties as a function of information contributed by, or associated with, each of these network architectures or network communication protocols for key exchange in a packet data network H04L63/061
• CPC Class Codes: H04L 9/0844 with user authentication or key authentication, e.g. ElGamal, MTI, MQV-Menezes-Qu-Vanstone protocol or Diffie-Hellman protocols using implicitly-certified keys
• CPC Class Codes: H04L 9/0861 Generation of secret information including derivation or calculation of cryptographic keys or passwords
• CPC Class Codes: H04L 9/0866 involving user or device identifiers, e.g. serial number, physical or biometrical information, DNA, hand-signature or measurable physical characteristics
• CPC Class Codes: H04L 9/3297 involving time stamps, e.g. generation of time stamps
• CPC Class Codes: H04W 12/037 of the control plane, e.g. signalling traffic
• CPC Class Codes: H04W 12/04 Key management, e.g. using generic bootstrapping architecture [GBA]
• CPC Class Codes: H04W 12/50 Secure pairing of devices
• CPC Class Codes: H04W 12/65 Environment-dependent, e.g. using captured environmental data
• CPC Class Codes: H04W 12/68 Gesture-dependent or behaviour-dependent
• CPC Class Codes: H04W 76/14 Direct-mode setup
• CPC Class Codes: H04W 84/18 Self-organising networks, e.g. ad-hoc networks or sensor networks

Abstract

Methods, systems and devices for generating an authentication key are provided. Two or more communications devices can generate an authentication key by monitoring a physical stimulus that is experienced by both devices (e.g., a common physical stimulus). Each device can then use an identical, predetermined algorithm to generate a common authentication key based on the stimulus. The devices can use the common authentication key to establish a secure network.

Claims

1. A method for generating an authentication key to form a secure network between a first device and a second device, the method comprising:

monitoring a sensor output during a first physical stimulus experienced by the first device and the second device; and

generating an authentication key based on the sensor output.

2. The method of claim 1, further comprising:

receiving a user input; and

monitoring in response to receiving.

3. The method of claim 1, wherein the sensor output comprises an accelerometer output.

4. The method of claim 1, wherein the first physical stimulus comprises tapping the first device and the second device together.

5. The method of claim 1, wherein monitoring comprises measuring a characteristic value of the sensor output.

6. The method of claim 5, wherein the characteristic value is based on a temporal property of the sensor output.

7. The method of claim 5, wherein generating comprises performing an algorithm using the characteristic value to generate an authentication key.

8. The method of claim 1, wherein the monitoring further comprises monitoring a sensor output during a second physical stimulus experienced by the first device and the second device.

9. The method of claim 8, wherein:

the first physical stimulus comprises tapping the first device and the second device together a first time; and

the second physical stimulus comprises tapping the first device and the second device together a second time.

10. The method of claim 8, wherein the monitoring comprises measuring a characteristic value based on time elapsed between the first physical stimulus and the second physical stimulus.

11. The method of claim 1, further comprising forming a secure peer-to-peer wireless network between the first device and the second device using the authentication key.

12. A first communications device for generating an authentication key to form a secure network with a second communications device, the first communications device comprising:

a sensor providing at least one sensor output in response to detecting a stimulus;

control circuitry electrically coupled with the sensor and operable to generate an authentication key based on the at least one sensor output; and

wireless communications circuitry electrically coupled with the control circuitry, wherein the wireless communications circuitry is operable to form a secure network with the second communications device using the authentication key.

13. The device of claim 12, further comprising an input mechanism electrically coupled with the control circuitry and operable to receive a user input that initiates generation of the authentication key.

14. The device of claim 12, wherein the control circuitry comprises processing circuitry operable to measure a characteristic value of the at least one sensor output.

15. The device of claim 14, further comprising a memory coupled to the control circuitry, wherein the memory comprises an instruction code for generating an authentication key based on the characteristic value.

16. A method for generating an authentication key to form a secure network, the method comprising:

detecting a presence of another device;

monitoring a sensor output during a physical stimulus; and

generating an authentication key based on the sensor output.

17. The method of claim 16, wherein detecting the presence of another device comprises receiving a wireless communication from the other device.

18. The method of claim 16, further comprising notifying the other device before the monitoring.

19. The method of claim 16, further comprising forming a secure peer-to-peer wireless network with the other device using the authentication key.

20. A method for generating an authentication key to form a secure network, the method comprising:

receiving an input from a user selecting an application to establish a secure network;

monitoring a sensor output during a physical stimulus;

generating an authentication key based on the sensor output;

establishing a secure wireless network with another device using the authentication key;

notifying the user that the network has been established.

21. The method of claim 20, further comprising instructing the user to provide a physical stimulus while monitoring the sensor output.

22. The method of claim 20, further comprising instructing the user to provide two or more physical stimuli while monitoring the sensor output.

23. The method of claim 22, further comprising notifying the user how many physical stimuli have occurred while monitoring the sensor output.

24. A computer readable medium for a first communications device, the computer readable medium comprising:

a first instruction code for monitoring a sensor output during a first physical stimulus experienced by the first device and a second device; and

a second instruction code for generating an authentication key based on the sensor output.