METHODS FOR AUTHENTICATING DEVICE-TO-DEVICE COMMUNICATION

• US 20140380419A1
• Filed: 06/25/2014
• Published: 12/25/2014
• Est. Priority Date: 06/25/2013
• Status: Active Grant

• Current Assignee: Qardio, Inc.
• Original Assignee: Qardio, Inc.
• Inventors: PELUSO, Marco, IANNELLA, Rosario
• Granted Patent: US 10,064,052 B2
• Time in Patent Office: Days
• US Class Current: 726/3
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 9/40 Network security protocols
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/50 Secure pairing of devices
• CPC Class Codes: H04W 4/02 Services making use of location information
• CPC Class Codes: H04W 76/14 Direct-mode setup

Abstract

Devices and methods are described to enable devices to be paired in a convenient and secure way based on proximity with the use of a single radio transmission protocol. Using devices configurable to perform the processes described, users are able to pair Bluetooth enabled devices or other radio communication protocols simply by putting the devices briefly in contact, or within close proximity, usually few centimeters. When the two devices touch or are in close proximity, the encryption key is shared across the two devices without further interaction required by the user. The encryption key is not made visible, so one potential source of security breach is eliminated. After first setup, proximity is not required and the device can communicate securely based on the previously exchanged security tokens (and encryption keys) without the requirement of proximity. This method is hence superior to all other authentication methods in use as it combines the benefit of an easy setup/configuration with the use of secure communications and cheaper design and manufacturing.

Claims

1. An electronic system for wirelessly and securely authenticating during a first time pairing between proximate devices comprising:

one or more first devices wherein each of the one or more first devices has a first device memory and a first device secure communications component that uses a first unique electromagnetic communication identifier corresponding to the first device in connection with establishing a secure communication channel from the first device; and

one or more second devices wherein each of the one or more second devices has a second device memory and a second device secure communications component that uses a second unique electromagnetic communication identifier corresponding to the second device in connection with establishing a secure communication channel with the first device,

wherein the first device and the second device are wirelessly and securely authenticated during the first time pairing when the first device is positioned within a wireless communication distance to the second device and further wherein the first device and the second device are wirelessly and securely authenticated automatically when the first device and the second device are within a wireless communication distance.

2. The electronic system of claim 1 wherein each of the one or more second devices further comprises a transmission power monitor.

3. The electronic system of claim 1 wherein each of the one or more first devices is configurable to request a pairing with each of the one or more second devices.

4. The electronic system of claim 3 wherein the request for pairing is automatic.

5. The electronic system of claim 3 wherein the second device is configurable to validate a signal strength from the first device.

6. The electronic system of claim 5 further wherein a power present in a radio signal is measured.

7. The electronic system of claim 3 wherein pairing is achieved when a received signal strength indication is within a defined range.

8. The electronic system of claim 7 wherein the defined range includes a trigger level.

9. The electronic system of claim 8 wherein the trigger level is modified dynamically based on information received from the second device.

10. The electronic system of claim 8 wherein the trigger level is modified dynamically based on information coming from the surrounding environment.

11. The electronic system of claim 9 wherein the trigger level is modified dynamically also based on information coming from a surrounding environment.

12. A method for facilitating electronic communication among wireless devices comprising:

receiving from one or more of a first device wherein each of the one or more first devices have a first device memory and a first device secure communications component that uses a first unique electromagnetic communication identifier corresponding to the first device in connection with establishing a secure communication channel for transmitting data from the first device; and

sending information from the one or more first devices to one or more second devices.

13. The method for facilitating electronic communication among wireless devices of claim 12 wherein the second device further comprises a transmission power monitor.

14. The method for facilitating electronic communication among devices of claim 12 wherein the at least one first device is configurable to request a pairing with one or more of the at least one second device.

15. The method for facilitating electronic communication among devices of claim 14 further comprising a step of validating a signal strength from one or more of the at least one first device.

16. The method for facilitating electronic communication among one or more first devices and one or more second devices of claim 14 further wherein a power present in a radio signal is measured.

17. The method for facilitating electronic communication among one or more first devices and one or more second devices of claim 14 wherein pairing is achieved when a received signal strength indication is within a defined range.

18. The method for facilitating electronic communication among one or more first devices and one or more second devices of claim 17 wherein the defined range includes a certain trigger level.

19. A machine readable medium containing instructions that, when executed by a computing device, cause the computing device to perform a method, the method comprising:

receiving from a first device having a first device memory and a first device secure communications component that uses a unique short range electromagnetic communication identifier corresponding to the first device in connection with establishing a secure communication channel for transmitting data from the first device; and

sending information from the first device to a second device.

20. The method of claim 19 further comprising validating a signal strength from the first device.