BLUETOOTH AUTHENTICATION SYSTEM AND METHOD

• US 20120108208A1
• Filed: 01/07/2010
• Published: 05/03/2012
• Est. Priority Date: 01/07/2009
• Status: Active Grant

• Current Assignee: Vizpin Inc.
• Original Assignee: Resonance Holdings Limited
• Inventors: Willis, Nicholas Hedley
• Granted Patent: US 8,706,083 B2
• Time in Patent Office: Days
• US Class Current: 455/411
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 84/18 Self-organising networks, e.g. ad-hoc networks or sensor networks

Abstract

A method of controlling an authorisation device arranged to authorise a mobile communication device, the method including the steps of: a central control device generating a control parameter associated with the one or more authorisation devices, the central control device communicating the control parameter to the one or more authorisation devices, the central control device generating a Bluetooth compatible PIN based on the control parameter, and the central control device communicating the PIN to a mobile communication device.

Claims

1. A method of controlling an authorisation device arranged to authorise a mobile communication device, the method including the steps of:

a central control device generating a control parameter associated with the one or more authorisation devices,

the central control device communicating the control parameter to the one or more authorisation devices,

the central control device generating a Bluetooth compatible PIN based on the control parameter, and

the central control device communicating the PIN to a mobile communication device.

2. The method of claim 1 further including the steps of assigning the one or more authorisation devices to one or more groups, and assigning each group a unique control parameter.

3. The method of claim 1, wherein the control parameter is communicated to the one or more authorisation devices by at least one of a wired or wireless data connection.

4. The method of claim 3, wherein the wired data connection includes the use of at least one of an internet protocol connection, a serial bus connection, and a universal serial bus connection.

5. The method of claim 3, wherein the wireless data connection includes at least one of a GSM connection, a Bluetooth connection, a Wi-Fi connection and a radio frequency connection.

6. The method of claim 1, wherein the PIN is communicated to the mobile communication device by one or more of an SMS, internet page, e-mail message, voice message, and postal delivery.

7. The method of claim 1, wherein the central control device generates the PIN based on the control parameter and one or more further parameters.

8. The method of claim 7, wherein the further parameter includes a Bluetooth address of the mobile communication device.

9. The method of claim 8, wherein the Bluetooth address is detected over a Bluetooth connection established between the mobile communication device and central control device.

10. The method of claim 8, wherein the Bluetooth address is retrieved from a database store.

11. The method of claim 7, wherein the further parameter includes location information associated with the location of the one or more authorisation devices.

12. The method of claim 11, wherein the location information for each of the one or more authorisation devices is retrieved from a database store.

13. The method of claim 11, wherein the location information for each of the one or more authorisation devices is retrieved from the one or more authorisation devices.

14. The method of claim 11, wherein the location information is a GPS co-ordinate.

15. The method of claim 7, wherein the further parameter includes temporal information.

16. The method of claim 15, wherein the temporal information is based on a time period during which the authorisation device may authorise.

17. The method of claim 15, wherein the temporal information is based on a time period during which the authorisation device may not authorise.

18. The method of claim 15, wherein the temporal information is a re-occurring time period.

19. The method of claim 15, wherein the temporal information is a single occurrence time period.

20. The method of claim 7, wherein the further parameter includes information based on a level of privileges assigned to the user.

21. A method of authorising a mobile communication device using an authorisation device, the method including the steps of:

the authorisation device discovering a mobile communication device using Bluetooth,

the authorisation device forwarding a Bluetooth connection authentication request to the mobile communication device,

the authorisation device receiving a Bluetooth authentication response based on a PIN entered on the mobile communication device in response to the authentication request,

the authorisation device dynamically generating a Bluetooth matching response based on a PIN generated from a control parameter,

the authorisation device determining whether the received Bluetooth authentication response is identical to the Bluetooth matching response and authorising based upon the determination.

22. The method of claim 21, wherein the step of dynamically generating a Bluetooth matching response includes the steps of:

the authorisation device dynamically generating a Bluetooth pairing PIN based on the control parameter, and the authorisation device dynamically generating an internal Bluetooth authentication matching response based on the dynamically generated Bluetooth pairing PIN to enable the authorisation device to determine whether the received Bluetooth authentication response is identical to the internal Bluetooth authentication matching response.

23. The method of claim 21, wherein the authorisation device receives the control parameter from a central control device by at least one of a wired or wireless data connection.

24. The method of claim 23, wherein the wired data connection includes the use of at least one of an internet protocol connection, a serial bus connection, and a universal serial bus connection.

25. The method of claim 23, wherein the wireless data connection includes at least one of a GSM connection, a Bluetooth connection, a Wi-Fi connection and a radio frequency connection.

26. The method of claim 21, wherein the control parameter is based on a random number assigned to the authorisation device.

27. The method of claim 21 further including the step of the authorisation device dynamically generating the Bluetooth matching response based on the control parameter and one or more further parameters.

28. The method of claim 27, wherein the further parameter includes a Bluetooth address of the mobile communication device.

29. The method of claim 28 further including the step of detecting the Bluetooth address of the mobile communication device over a Bluetooth connection established between the mobile communication device and the authorisation device.

30. The method of claim 27, wherein the further parameter includes location information associated with the location of the authorisation device.

31. The method of claim 30 further including the step of the authorisation device retrieving the location information from a database store.

32. The method of claim 30 further including the step of the authorisation device dynamically determining the location information.

33. The method of claim 30, wherein the location information is a GPS co-ordinate.

34. The method of claim 27, wherein the further parameter includes temporal information.

35. The method of claim 34, wherein the temporal information is based on a time period during which the authorisation device may authorise.

36. The method of claim 34, wherein the temporal information is based on a time period during which the authorisation device may not authorise.

37. The method of claim 34, wherein the temporal information is a re-occurring time period.

38. The method of claim 34, wherein the temporal information is a single occurrence time period.

39. The method of claim 34 further including the step of the authorisation device dynamically determining a current time.

40. The method of claim 21, whereupon the authorisation device authorising the mobile communication device, the authorisation remains valid for a predefined number of authorisation attempts.

41. The method of claim 40 including the further step of the authorisation device requesting further authorisation after the predefined number of authorisation attempts have been made.

42. The method of claim 21, whereupon the authorisation device, authorising the mobile communication device, the authorisation remains valid for a predefined temporal period.

43. The method of claim 42 including the further step of the authorisation device requesting further authorisation after the predefined temporal period has expired.

44. The method of claim 21 whereupon the authorisation device authorising the mobile communication device, the authorisation remains valid until manually de-authorised.

45. The method of claim 44, wherein the manual de-authorisation is by way of a third party in control of the authorisation device or the user of the mobile communication device.

46. The method of claim 21, wherein the authorisation device records authorisation event information.

47. The method of claim 46, further including the step of transmitting the event information via a wired or wireless data connection upon receiving a third party request via a wired or wireless data connection.

48. The method of claim 47, wherein the third party is an administrator.

49. The method of claim 47, wherein the wired data connection includes the use of at least one of an internet protocol connection, a serial bus connection, and a universal serial bus connection.

50. The method of claim 47, wherein the wireless data connection includes at least one of a GSM connection, a Bluetooth connection, a Wi-Fi connection and a radio frequency connection.

51. The method of claim 27, wherein the further parameter includes information based on a level of privileges assigned to the user.

52. A central control device for controlling authorisation using an authorisation device and a mobile communication device, the central control device including a control parameter generating module, a communication module and a PIN generating module, wherein:

the control parameter generating module is arranged to generate a control parameter, the control parameter being associated with the one or more authorisation devices,

the PIN generating module is arranged to generate a Bluetooth compatible PIN based on the control parameter, and

the communication module is arranged to communicate the control parameter to the one or more authorisation devices and communicate the PIN to a mobile communication device.

53. The central control device of claim 52, wherein the one or more authorisation devices are assigned to one or more groups and the communication module is arranged to communicate a unique control parameter to each group.

54. The central control device of claim 52, wherein the communication module is arranged to communicate the control parameter to the one or more authorisation devices via a wired or wireless data connection.

55. The central control device of claim 54, wherein the wired data connection includes the use of at least one of an internet protocol connection, a serial bus connection, and a universal serial bus connection.

56. The central control device of claim 54, wherein the wireless data connection includes at least one of a GSM connection, a Bluetooth connection, a Wi-Fi connection and a radio frequency connection.

57. The central control device of claim 52, wherein the control parameter is based on a random number assigned to each authorisation device.

58. The central control device of claim 52, wherein the communication module is arranged to communicate the PIN to the mobile communication device by one or more of an SMS, Internet page, e-mail message, voice message, and postal delivery.

59. The central control device of claim 52, wherein the PIN generating module is arranged to generate the PIN based on the control parameter and one or more further parameters.

60. The central control device of claim 59, wherein the further parameter includes a Bluetooth address of the mobile communication device.

61. The central control device of claim 60, wherein the communication module is arranged to detect the Bluetooth address over a Bluetooth connection established between the mobile communication device and central control device.

62. The central control device of claim 60, wherein the communication module is arranged to retrieve the Bluetooth address from a database store.

63. The central control device of claim 59, wherein the further parameter includes location information associated with the location of the one or more authorisation devices.

64. The central control device of claim 63, wherein the communication module is arranged to retrieve the location information for each of the one or more authorisation devices from a database store.

65. The central control device of claim 63, wherein the communication module is arranged to retrieve the location information for each of the one or more authorisation devices from the one or more authorisation devices.

66. The central control device of claim 63, wherein the location information is a GPS co-ordinate.

67. The central control device of claim 59, wherein the further parameter includes temporal information.

68. The central control device of claim 67, wherein the temporal information is based on a time period during which the authorisation device may authorise.

69. The central control device of claim 67, wherein the temporal information is based on a time period during which the authorisation device may not authorise.

70. The central control device of claim 67, wherein the temporal information is a re-occurring time period.

71. The central control device of claim 67, wherein the temporal information is a single occurrence time period.

72. An authorisation device for authorising a mobile communication device, the authorisation device including a communication module, response module and control module:

the communication module arranged to discover a mobile communication device using Bluetooth, forward a Bluetooth connection authentication request to the mobile communication device, and receive a Bluetooth authentication response based on a PIN entered on the mobile communication device in response to the authentication request,

the response module arranged to dynamically generate a Bluetooth matching response based on a control parameter, and

the control module arranged to determine whether the received Bluetooth authentication response is identical to the Bluetooth matching response and authorising based upon the determination.

73. The authorisation device of claim 72, wherein the response module is arranged to dynamically generate the Bluetooth matching response by dynamically generating a Bluetooth pairing PIN based on the control parameter, and dynamically generate an internal Bluetooth authentication matching response based on the dynamically generated Bluetooth pairing PIN so the control module is enable to determine whether the received Bluetooth authentication response is identical to the internal Bluetooth authentication matching response.

74. The authorisation device of claim 72, wherein the communication module is arranged to receive the control parameter from a central control device via a wired or wireless data connection.

75. The authorisation device of claim 74, wherein the wired data connection includes the use of at least one of an Internet protocol connection, a serial bus connection, and a universal serial bus connection.

76. The authorisation device of claim 74, wherein the wireless data connection includes at least one of a GSM connection, a Bluetooth connection, a Wi-Fi connection and a radio frequency connection.

77. The authorisation device of claim 72, wherein the control parameter is based on a random number assigned to the authorisation device.

78. The authorisation device of claim 72, wherein the response module is arranged to dynamically generate the matching response based on the control parameter and one or more further parameters.

79. The authorisation device of claim 78, wherein the authorisation device further includes a Bluetooth address reading module, and the further parameter includes a Bluetooth address of the mobile communication device.

80. The authorisation device of claim 79, wherein the Bluetooth address reading module is arranged to detect the Bluetooth address of the mobile communication device over a Bluetooth connection established between the mobile communication device and the authorisation device.

81. The authorisation device of claim 78, wherein the authorisation device further includes a location determination module (e.g. a GPS device) arranged to dynamically determine location information associated with the location of the authorisation device, and the further parameter includes the location information.

82. The authorisation device of claim 81, wherein the location determination module is a GPS module and the location information is a GPS co-ordinate.

83. The authorisation device of claim 78, wherein the authorisation device further includes a temporal information determination module (i.e. a clock reader) and the further parameter includes temporal information.

84. The authorisation device of claim 83, wherein the temporal information is based on a time period during which the authorisation device may authorise.

85. The authorisation device of claim 83, wherein the temporal information is based on a time period during which the authorisation device may not authorise.

86. The authorisation device of claim 83, wherein the temporal information is a re-occurring time period.

87. The authorisation device of claim 83, wherein the temporal information is a single occurrence time period.

88. The authorisation device of claim 83, wherein the temporal information determination module is arranged to dynamically determine a current time.

89. The authorisation device of claim 72, whereupon the authorisation device authorising the mobile communication device, the authorisation remains valid for a predefined number of authorisation attempts.

90. The authorisation device of claim 89, wherein the communication module is arranged to request further authorisation after the predefined number of authorisation attempts have been made.

91. The authorisation device of claim 72, whereupon the authorisation device authorising the mobile communication device, the authorisation remains valid for a predefined temporal period.

92. The authorisation device of claim 91, wherein the communication module is arranged to request further authorisation after the predefined temporal period has expired.

93. The authorisation device of claim 72, whereupon the authorisation device authorising the mobile communication device, the authorisation remains valid until manually de-authorised.

94. The authorisation device of claim 93, wherein the manual de-authorisation is by way of a third party in control of the authorisation device or the user of the mobile communication device.

95. The authorisation device of claim 72, wherein the authorisation device is arranged to record authorisation event information.

96. The authorisation device of claim 95, wherein the communication module is arranged to transmit the event information via a wired or wireless data connection upon receiving a third party request via a wired or wireless data connection.

97. The authorisation device of claim 96, wherein the third party is an administrator.

98. The authorisation device of claim 96, wherein the wired data connection includes the at least one of an internet protocol connection, a serial bus connection, and a universal serial bus connection.

99. The authorisation device of claim 96, wherein the wireless data connection includes at least one of a GSM connection, a Bluetooth connection, a Wi-Fi connection and a radio frequency connection.

100. A method of controlling an authorisation device arranged to authorise a mobile communication device substantially as herein described with reference to the accompanying figures.

101. A method of authorising a mobile communication device using an authorisation device substantially as herein described with reference to the accompanying figures.

102. A central control device for controlling authorisation using an authorisation device and a mobile communication device substantially as herein described with reference to the accompanying figures.

103. An authorisation device for authorising a mobile communication device, the authorisation device including a communication module substantially as herein described with reference to the accompanying figures.