METHOD FOR COMMUNICATING AND DISTANCE BOUNDING SYSTEM

• US 20130102252A1
• Filed: 04/20/2011
• Published: 04/25/2013
• Est. Priority Date: 04/21/2010
• Status: Abandoned Application

• Current Assignee: ETH Zurich
• Original Assignee: ETH Zurich
• Inventors: Rasmussen, Kasper Bonne, Capkun, Srdjan
• Application Number:
  US13/641,225
• Publication Number:
  US 20130102252A1
• Time in Patent Office: Days
• US Class Current: 455/41.2
• CPC Class Codes: G09C 1/00 Apparatus or methods whereby a given sequence of signs, e.g. an intelligible text, is transformed into an unintelligible sequence of signs by transposing the signs or groups of signs or by replacing them by others according to a predetermined system cryptographic typewriters G09C3/00
• CPC Class Codes: H04K 1/04 by frequency scrambling, i.e. by transposing or inverting parts of the frequency band or by inverting the whole band
• CPC Class Codes: H04L 9/0841 involving Diffie-Hellman or related key agreement protocols
• CPC Class Codes: H04L 9/3215 using a plurality of channels network architectures or network communication protocols using different networks H04L63/18
• CPC Class Codes: H04L 9/3271 using challenge-response
• CPC Class Codes: H04W 12/04 Key management, e.g. using generic bootstrapping architecture [GBA]
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/50 Secure pairing of devices
• CPC Class Codes: H04W 12/64 using geofenced areas

Abstract

The method for communicating between a first device and a second device includes the steps of: the first and second device communicating by exchanging messages that are based on signals that are transmitted through a plurality of communication channels; the first device sending a challenge message to the second device over one communication channel; the second device sending, upon reception of the challenge message, a response message to the first device through at least two communication channels that have essentially identical signal propagation velocities; the first device measuring the time elapsed between the sending of the challenge message to the reception of the response message; and the first device computing its distance to the second device based on this time, knowledge about travelling speed of the challenge and the response message and the processing delay that the second device adds to generate and send the response message.

Claims

1. A method for communicating between a first device and a second device, that is preferably a reader for reading data from the first device and optionally destined for controlling the first device, the method comprising the steps of:

the first and second device communicating by exchanging messages that are based on signals that are transmitted through a plurality of communication channels;

the first device sending a challenge message to the second device over one communication channel;

the second device sending, upon reception of the challenge message, a response message to the first device through at least two communication channels that have essentially identical signal propagation velocities;

the first device measuring the time elapsed between the sending of the challenge message to the reception of the response message; and

the first device computing its distance to the second device based on this time, knowledge about travelling speed of the challenge and the response message and the processing delay that the second device adds to generate and send the response message;

wherein the second device;

encodes its response message by choosing a subset of the at least two communication channels;

generates said response message purely through an analogue signal processing means.

2. The method of claim 1, comprising the further step of:

the first and second device by exchanging the messages, establish a shared secret key.

3. The method of claim 1, comprising the further steps of:

defining a fixed nonce length for the first device and a fixed nonce length for the second device;

given a shared secret key, the first and second device each picking a random nonce at the defined lengths;

the first device encoding its chosen nonce into the challenge message;

calculating a constant time period as a fraction of the temporal length of the challenge message and thus a number of such constant time periods that fit into the temporal length of the challenge message;

the second device encoding its chosen nonce into the resulting number of calculated constant time periods, by choosing a subset of communication channels of the at least two communication channels for each of the defined constant time periods, to essentially reflect the portion of the challenge message that the second device receives during that constant time period, until the entire challenge message is piecewise reflected, this way, and the entire chosen nonce of the second device is encoded through this continuous choice of communication channels;

the first device decoding the chosen nonce of the second device by listening on the plurality of communication channels and using knowledge of the constant time period and knowledge of the way the second device encodes its nonce into the choice of the subset of communication channels.

4. The method of claim 3, comprising the further steps of:

the second device signing the nonce of the first device and the nonce of the second device with a shared secret key and thus establishing an additional message;

the second device sending that additional message to the first device;

the first device verifying the additional message by knowledge of his chosen nonce, the nonce chosen by the second device previously decoded by listening on the plurality of communication channels and by knowledge of the shared secret key.

5. The method of claim 1, wherein all of the communication channels are based on RF communication.

6. The method of claim 1, wherein the step of controlling access of the second device to the first device, in addition to the distance, takes into account credential information.

7. The method of claim 3, wherein the credential information is a preshared key known to the first and the second device, or the credential information is a cryptographic certificate, and the credential information is stored on a storage device that is separable from the second device.

8. The method of claim 1, wherein the first device comprises two or more levels of access, and the method comprises the further step of:

the first device controlling access to the different levels of access depending on the value of the computed distance.

9. A distance bounding system comprising:

a first device,

and a second device,

said first device being configured to communicate with said second device, and

said second device being configured to communicate with said first device, said first device comprising

a first transceiver for sending and receiving messages through a first communication channel;

a receiver for listening to a plurality of communications channels;

the first device being configured to

exchange messages through the first communication channel and/or through the plurality of communication channels;

compute the distance to the second device based on communication signal delays caused by the difference in signal propagation velocities; and

depending on the computed distance, to accept data from the second device and optionally also to control access to the device;

said second device comprising

a second transceiver for sending and receiving messages through said first communication channel;

at least one other transceiver or sending messages through a second or further communication channels;

an analogue processing means, capable of reflecting received messages from the first transceiver and selecting the communication channel through which the received message is reflected;

wherein said second or further communication channels are comprised in said plurality of communication channels.

10. A distance bounding system according to claim 9, where the analogue processing means and/or one of the transceivers of the second device comprise:

an electronic oscillator, oscillating with a frequency Δ

f;

a high pass filter with a cut off frequency below f_c+Δ

f and above f_c−

Δ

f, with f_c being the center frequency of the first communication channel;

a low pass filter with a cut off frequency above f_c−

Δ

f and below f_c+Δ

f;

an analogue selector with a first input signal having a center frequency of f_c+Δ

f, a second input signal having a center frequency of f_c−

Δ

f and a third, essentially binary input, selecting one of the two first input signals as its output signal.

11. A first device, configured to communicate with a further device, comprising

a transceiver for sending and receiving messages through a first communication channel;

a receiver for listening to a plurality of communications channels;

the device being configured to;

exchange messages through the first communication channel and/or through the second plurality of communication channels;

to compute the distance to the further device based on communication signal delays caused by the difference in signal propagation velocities; and

depending on the computed distance, to accept data from the further device and also to control access to the device.

12. A second device, configured to communicate with a further device, comprising

a first transceiver for sending and receiving messages through a first communication channel;

at least one other transceiver for sending messages through a second or further communication channels;

an analogue processing means, capable of reflecting received messages from the first transceiver and selecting the communication channel through which the received message is reflected.

13. A second device according to claim 12, where the analogue processing means and/or one of the transceivers comprise:

an electronic oscillator, oscillating with a frequency Δ

f;

a high pass filter with a cut off frequency below f_c+Δ

f and above f_c−

Δ

f, with f_c being the center frequency of the first communication channel;

a low pass filter with a cut off frequency above f_c−

Δ

f and below f_c+Δ

f;

an analogue selector with a first input signal having a center frequency of f_c+Δ

f, a second input signal having a center frequency of f_c−

Δ

f and a third, essentially binary input, selecting one of the two first input signals as its output signal.