SYSTEMS FOR INTELLIGENT AUTHENTICATION BASED ON PROXIMITY

• US 20110293095A1
• Filed: 08/22/2011
• Published: 12/01/2011
• Est. Priority Date: 06/22/2009
• Status: Active Grant

• Current Assignee: Optima Direct, LLC (2S Ventures, LLC)
• Original Assignee: Mourad Ben Ayed
• Inventors: Ben Ayed, Mourad
• Granted Patent: US 8,498,618 B2
• Time in Patent Office: Days
• US Class Current: 380/270
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/35 communicating wirelessly
• CPC Class Codes: G06F 21/572 Secure firmware programming, e.g. of basic input output system [BIOS]
• CPC Class Codes: H04L 63/0492 by using a location-limited connection, e.g. near-field communication or limited proximity of entities
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/108 when the policy decisions are valid for a limited amount of time
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/50 Secure pairing of devices

Abstract

A method and apparatus for intelligent authentication based on proximity and using a short wireless device.

The method checks if the user captured a PIN code recently and if no signal drop was detected since the last PIN capture. It obtains user data from a unitary short wireless device and authenticates it.

If the user PIN was not captured recently, or if a signal drop was recently detected, the user is asked to enter a PIN code.

Claims

1. A unitary mobile apparatus with a volume smaller than 30 cm3, comprising:

a memory wherein said memory is less than 10 Mega Bytes,

a short wireless transceiver,

wherein upon pairing to a predefined number of authorized devices or upon detection of a predetermined number of unsuccessful pairing attempts, or upon passing of a predetermined period of time since last update,

said unitary mobile apparatus goes to a non-discoverable mode,

wherein upon updating said unitary mobile apparatus using a computer and a data cable,

said unitary mobile apparatus can go to a discoverable mode,

wherein on receipt of a connection request from a paired second apparatus said unitary mobile apparatus establishes a secure two-way wireless connection with the paired second apparatus,

wherein said unitary mobile apparatus can store a first code selected from the group consisting of;

one or more digital keys, one or more encrypted digital keys, user information,

wherein said unitary mobile apparatus can store at least a first function with a first identity,

wherein on receipt of a transformation directive message from the paired second apparatus,

wherein when said transformation directive identifies a first function stored on said mobile apparatus, the first function is applied to the first code to encode the first code,

wherein said unitary mobile apparatus automatically transmits the encoded first code to said second apparatus wirelessly.

2. The unitary mobile apparatus of claim 1 wherein:

upon detection of a connection drop, automatically performing actions selected from the group consisting of;

request a user code from the user,

automatically attempting to reestablish connection,

issuing an audible alarm.

3. The unitary mobile apparatus of claim 1 further comprising an earpiece selected from the group consisting of:

a foldable earpiece for voice communication,

a pull-up earpiece for voice communication,

a telescopic earpiece for voice communication,

a rotating telescopic earpiece for voice communication,

a slide earpiece for voice communication,

wherein said mobile apparatus can comprise a unit selected from the group consisting of;

a metal key for unlocking a lock,

a second transceiver module,

an MP3/MP4 player, a recording apparatus,

a bio sensor, a comb, a flash light, a lighter, a Swiss knife,

an induction charging means,

wherein upon positioning said unitary mobile apparatus within proximity of an induction charging station, said induction charging means charges a battery,

wherein said mobile apparatus can comprise an attachment means selected from the group consisting of;

a key chain, a ring, a bracelet and a clip.

4. The unitary mobile apparatus of claim 1 further comprising an earpiece movable relative to the body of said unitary mobile apparatus,

wherein on moving said earpiece,

said unitary mobile apparatus automatically operates as a headset.

5. The unitary mobile apparatus of claim 1 further comprising:

a data port for flashing of one or more programs and one or more digital keys to said unitary mobile apparatus,

wherein after said flashing, said unitary mobile apparatus preserves pairing to previously paired devices.

6. The unitary mobile apparatus of claim 1 comprising a resident firmware upgrade program for authorizing installation of new firmware,

wherein on detection of a firmware upgrade operation, said firmware upgrade program authenticates the new firmware,

wherein upon authentication, said firmware upgrade program authorizes installation of the new firmware on said unitary mobile apparatus.

7. The unitary mobile apparatus of claim 1 further comprising:

upon receipt of a signal from a microphone, encrypt said signal, send it to a paired mobile phone,

upon receipt of a signal from a paired mobile phone, decrypt said signal, and send it to a speaker.

8. A method comprising:

pairing with a remote unitary mobile apparatus,

wherein said unitary mobile apparatus has a short wireless transceiver,

wherein onboard memory of said unitary mobile apparatus is less than 10 Mega Bytes,

wherein volume of said unitary mobile apparatus is less than 30 cm3,

upon receiving a user request for access,

if a connection drop was detected after the last time the user entered a user code,

or if the time period elapsed since the last time the user entered a user code exceeds a predetermined period of time,

requesting a user code from the user,

validating said user code,

sending a message comprising a transformation directive to said remote unitary mobile apparatus,

wherein said transformation directive message identifies at least one first function stored onboard said remote unitary mobile apparatus,

wherein said at least one first function is applied to at least one first code to encode the at least one first code,

wherein upon receipt of a reply from said remote unitary mobile apparatus,

applying at least one first reverse function to extract said at least one first code from said reply.

9. The method of claim 8 wherein upon user activating a reset interface, un-pairing said remote unitary mobile apparatus.

10. The method of claim 8 comprising performing an action selected from the group consisting of:

using the key to authorize access,

using the key to activate an actuator,

using the key to activate a lock,

using the key to decrypt data,

using the key to encrypt data.

11. The method of claim 8 wherein:

if said reply is not received within a predetermined time from sending a message,

performing an action selected from the group consisting of;

block access, logout, close a connection, conceal data, encrypt data, lock, turn off, close.

12. The method of claim 8 wherein:

upon detection of a connection drop, performing an action selected from the group consisting of;

request a user code from the user, block access, logout, encrypt data, lock.

13. The method of claim 8 wherein every time a message is send, said transformation directive identifies a different function.

14. The method of claim 8 comprising:

connecting said remote unitary mobile apparatus to a computer using a data cable,

updating data onboard said remote unitary mobile apparatus,

wherein after said updating data, said remote unitary mobile apparatus preserves pairing to previously paired devices.

15. The method of claim 8 comprising using the key to decode data,

wherein if said data size exceeds a predetermined size,

decode a first part of said data of a predetermined size,

upon receiving a request for more data,

decode next part of said data of a predetermined size.

16. The method claim 8 further comprising storing at least one first set of access parameters corresponding to at least one first client interface,

wherein upon receiving a request for access parameters from at least one first client interface,

said remote unitary mobile apparatus automatically sends a first set of access parameters corresponding to said at least one first client interface.

17. The method of claim 8 comprising:

obtaining a second code from a user,

extracting a third code from said second code,

using said first code and said third code to generate a key,

performing an action selected from the group consisting of;

using the key to authorize access,

using the key to activate an actuator,

using the key to activate a lock,

using the key to decrypt data,

using the key to encrypt data.

18. A method for authorization comprising:

pairing with a remote unitary mobile apparatus having a short wireless transceiver and a volume less than 30 cm3,

upon receiving a user request for access,

if a connection drop was not detected after the last time the user entered a user code,

and if the time period elapsed since the last time the user entered a user code did not exceed a predetermined period of time,

obtaining a second code from said paired remote unitary mobile apparatus,

upon validation of said second code, automatically authorizing the user access.

19. The method of claim 18 wherein if the time period elapsed since the last time the user entered a user code exceeded a predetermined period of time, or if the time period elapsed since the last time the user entered a user code exceeded a predetermined period of time, request a user code from the user.

20. The method of claim 18 comprising:

upon receiving a first request for access,

searching the onboard device registry for paired remote unitary mobile apparatuses,

trying to establish a wireless connection with the found apparatuses,

wherein upon establishing a wireless connection with a remote unitary mobile apparatus,

storing the address of said remote unitary mobile apparatus.