DIGITAL HANDSHAKE FOR AUTHENTICATION OF DEVICES

• US 20110296508A1
• Filed: 05/26/2010
• Published: 12/01/2011
• Est. Priority Date: 05/26/2010
• Status: Active Grant

• Current Assignee: Apple Inc.
• Original Assignee: Apple Inc.
• Inventors: Cranfill, Caroline, Os, Marcel Van
• Granted Patent: US 8,856,901 B2
• Time in Patent Office: Days
• US Class Current: 726/7
• CPC Class Codes: G06F 21/445 by mutual authentication, e.g. between devices or programs
• CPC Class Codes: G06Q 30/06 Buying, selling or leasing transactions
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 63/0876 based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 9/0827 involving distinctive intermediate devices or communication paths network architectures or network communication protocols using different networks H04L63/18
• CPC Class Codes: H04L 9/0841 involving Diffie-Hellman or related key agreement protocols

Abstract

This is directed to a digital handshake for establishing a secure communications path between two electronic devices. Each device can capture an image of the other device using a camera (e.g., a front facing camera or a back facing camera) and extract, from the captured image, a key or seed associated with the other device. For example, each device can display a seed to be identified from an image taken by the other device. Using the extracted keys or seeds, each device can generate, using a same process, an identical digital handshake key. The digital handshake key can then be used to define a secure communications path between the two devices and share information securely. In some embodiments, a digital handshake key can be shared among several devices to create a multi-device secure communications path. Once a communications path has been established, the devices in the path can be identified and authenticated from the digital handshake key to receive access to secured goods, services or information.

Claims

1. A method for authenticating a first device connected to a second device, comprising:

establishing a communications path with a first device, wherein the communications path is secured by a digital handshake key generated from a seed extracted from a captured image of the first device;

authenticating the first device from the generated digital handshake key;

identifying an available good associated with the first device; and

providing an indication to release the identified good to a user of the first device.

2. The method of claim 1, wherein authenticating further comprises:

authenticating the first device from the extracted seed.

3. The method of claim 1, further comprising:

receiving a request from the first device to access the good associated with the first device.

4. The method of claim 1, wherein:

the second device is associated with a store selling goods.

5. The method of claim 4, wherein:

the second device is a pharmacy; and

the goods comprise medicine.

6. The method of claim 1, further comprising:

receiving, from a third device, authorization to associate the good with the first device.

7. The method of claim 6, wherein:

the third device is associated with a doctor; and

the good comprises medicine prescribed by a doctor; and

receiving comprises receiving a prescription for the medicine.

8. The method of claim 1, wherein:

access to the available good is restricted to the device with which the good is associated.

9. An electronic device for authenticating to a service provider, comprising control circuitry and communications circuitry, the control circuitry operative to:

direct the communications circuitry to establish a secure communications path with the service provider, wherein the communications path is secured by a digital handshake key extracted from a key displayed by the electronic device for detection by the service provider;

provide a request to the service provider for a service personal to a user of the electronic device; and

receive, from the service provider, authorization to use the service.

10. The electronic device of claim 9, wherein the control circuitry is further operative to:

authenticate to the service provider using the key displayed by the electronic device.

11. The electronic device of claim 10, wherein:

the key is uniquely associated with the electronic device.

12. The electronic device of claim 9, wherein the control circuitry is further operative to:

direct the communications device to provide payment information to the service provider.

13. The electronic device of claim 9, wherein:

the electronic device is positioned opposite a camera of the service provider.

14. A method for sharing information between a device and another device using a digital handshake, comprising:

capturing an image of another device;

extracting, from the image, a key associated with the other device;

establishing a secure communications path with the other device using the extracted key;

selecting content to share with the other device; and

providing the selected content to the other device for display over the secure communications path.

15. The method of claim 14, wherein:

the selected content comprises the content displayed on a device display.

16. The method of claim 15, wherein:

providing further comprises providing a link to the device display.

17. The method of claim 14, wherein:

selecting further comprises selecting content associated with an application operating on the device.

18. The method of claim 17, wherein:

the application comprises a social networking application; and

the content comprises an instruction to interact with the other device within the social network associated with the social networking application.

19. Computer readable media for authenticating a first device connected to a second device, comprising computer readable code recorded thereon for:

establishing a communications path with a first device, wherein the communications path is secured by a digital handshake key generated from a seed extracted from a captured image of the first device;

authenticating the first device from the generated digital handshake key;

identifying an available good associated with the first device; and

providing an indication to release the identified good to a user of the first device.

20. The computer-readable media of claim 19, comprising further computer readable code recorded thereon for:

authenticating the first device from the extracted seed.