Secure Current Movement Indicator

• US 20150356289A1
• Filed: 06/04/2014
• Published: 12/10/2015
• Est. Priority Date: 06/04/2014
• Status: Active Grant

• Current Assignee: Qualcomm, Inc.
• Original Assignee: Qualcomm, Inc.
• Inventors: Brown, Craig Matthew, Linsky, Joel Benjamin, Paddon, Michael William, Northway, Craig William
• Granted Patent: US 9,424,417 B2
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: G06F 21/35 communicating wirelessly
• CPC Class Codes: G06F 21/44 Program or device authentication
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 63/0884 by delegation of authentication, e.g. a proxy authenticates an entity to be authenticated on behalf of this entity vis-à-vis an authentication entity
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/47 using near field communication [NFC] or radio frequency identification [RFID] modules
• CPC Class Codes: H04W 12/64 using geofenced areas
• CPC Class Codes: H04W 12/68 Gesture-dependent or behaviour-dependent
• CPC Class Codes: H04W 84/18 Self-organising networks, e.g. ad-hoc networks or sensor networks

Abstract

Methods, devices, systems, and non-transitory processor-readable storage media for authenticating a computing device to access functionalities. An embodiment method may include operations for receiving in the computing device a signal from a proximity beacon device, obtaining from the received signal information that indicates whether the proximity beacon device has detected movement, determining whether the obtained information matches stored data corresponding to the proximity beacon device, performing an abbreviated authentication operations for the computing device to access the functionalities when it is determined that the obtained information from the received signal matches the stored data, and performing a normal authentication operations for the computing device to access the functionalities when it is determined that the obtained information from the received signal does not match the stored data.

Claims

1. A method for authenticating a computing device to access functionalities, comprising:

receiving, in the computing device, a first signal from a proximity beacon device;

obtaining, from the received first signal, information that indicates whether the proximity beacon device has detected movement;

determining whether the obtained information from the received first signal matches stored data corresponding to the proximity beacon device;

performing an abbreviated authentication operation for the computing device to access the functionalities when it is determined that the obtained information from the received first signal matches the stored data; and

performing a normal authentication operation for the computing device to access the functionalities when it is determined that the obtained information from the received first signal does not match the stored data.

2. The method of claim 1, wherein the first signal is one of a broadcast message and a secure link.

3. The method of claim 1, further comprising authenticating the proximity beacon device based on the obtained information from the received first signal.

4. The method of claim 3, wherein authenticating the proximity beacon device based on the obtained information from the received first signal comprises:

transmitting a message to a server to authenticate the proximity beacon device based on the obtained information from the received first signal; and

receiving from the server a response message that indicates whether the proximity beacon device is authenticated.

5. The method of claim 1, wherein the obtained information from the received first signal includes an obscured device identifier.

6. The method of claim 1, wherein the obtained information from the received first signal includes a 64-bit movement indicator.

7. The method of claim 1, wherein the abbreviated authentication operation includes automatically logging into at least one of a WiFi router, a website, and an application or automatically configuring the computing device to operate in a configuration mode.

8. The method of claim 1, further comprising:

broadcasting a second signal with a device identifier;

receiving, from a server, a message that indicates whether a proximity broadcast receiver that received the broadcast second signal has been moved;

performing the abbreviated authentication operation for the computing device to access the functionalities when the received message indicates the proximity broadcast receiver has not been moved; and

performing the normal authentication operation for the computing device to access the functionalities when the received message indicates the proximity broadcast receiver has been moved.

9. A computing device, comprising:

a processor configured with processor-executable instructions to perform operations comprising;

receiving a first signal from a proximity beacon device;

obtaining, from the received first signal, information that indicates whether the proximity beacon device has detected movement;

determining whether the obtained information from the received first signal matches stored data corresponding to the proximity beacon device;

performing an abbreviated authentication operation for the computing device to access functionalities when it is determined that the obtained information from the received first signal matches the stored data; and

performing a normal authentication operation for the computing device to access the functionalities when it is determined that the obtained information from the received first signal does not match the stored data.

10. The computing device of claim 9, wherein the first signal is one of a broadcast message and a secure link.

11. The computing device of claim 9, wherein the processor is configured with processor-executable instructions to perform operations further comprising authenticating the proximity beacon device based on the obtained information from the received first signal.

12. The computing device of claim 11, wherein the processor is configured with processor-executable instructions to perform operations such that authenticating the proximity beacon device based on the obtained information from the received first signal comprises:

transmitting a message to a server to authenticate the proximity beacon device based on the obtained information from the received first signal; and

receiving from the server a response message that indicates whether the proximity beacon device is authenticated.

13. The computing device of claim 9, wherein the obtained information from the received first signal includes an obscured device identifier.

14. The computing device of claim 9, wherein the obtained information from the received first signal includes a 64-bit movement indicator.

15. The computing device of claim 9, wherein the abbreviated authentication operation includes automatically logging into at least one of a WiFi router, a website, and an application or automatically configuring the computing device to operate in a configuration mode.

16. The computing device of claim 9, wherein the processor is configured with processor-executable instructions to perform operations further comprising:

broadcasting a second signal with a device identifier;

receiving, from a server, a message that indicates whether a proximity broadcast receiver that received the broadcast second signal has been moved;

performing the abbreviated authentication operation for the computing device to access the functionalities when the received message indicates the proximity broadcast receiver has not been moved; and

performing the normal authentication operation for the computing device to access the functionalities when the received message indicates the proximity broadcast receiver has been moved.

17. A non-transitory processor-readable storage medium having stored thereon processor-executable instructions configured to cause a processor of a computing device to perform operations for authenticating the computing device to access functionalities, the operations comprising:

receiving a first signal from a proximity beacon device;

obtaining, from the received first signal, information that indicates whether the proximity beacon device has detected movement;

determining whether the obtained information from the received first signal matches stored data corresponding to the proximity beacon device;

performing an abbreviated authentication operation for the computing device to access the functionalities when it is determined that the obtained information from the received first signal matches the stored data; and

performing a normal authentication operation for the computing device to access the functionalities when it is determined that the obtained information from the received first signal does not match the stored data.

18. The non-transitory processor-readable storage medium of claim 17, wherein the first signal is one of a broadcast message and a secure link.

19. The non-transitory processor-readable storage medium of claim 17, wherein the stored processor-executable instructions are configured to cause the processor to perform operations further comprising authenticating the proximity beacon device based on the obtained information from the received first signal.

20. The non-transitory processor-readable storage medium of claim 19, wherein the stored processor-executable instructions are configured to cause the processor to perform operations such that authenticating the proximity beacon device based on the obtained information from the received first signal comprises:

transmitting a message to a server to authenticate the proximity beacon device based on the obtained information from the received first signal; and

receiving from the server a response message that indicates whether the proximity beacon device is authenticated.

21. The non-transitory processor-readable storage medium of claim 17, wherein the obtained information from the received first signal includes an obscured device identifier.

22. The non-transitory processor-readable storage medium of claim 17, wherein the obtained information from the received first signal includes a 64-bit movement indicator.

23. The non-transitory processor-readable storage medium of claim 17, wherein the abbreviated authentication operation includes automatically logging into at least one of a WiFi router, a website, and an application or automatically configuring the computing device to operate in a configuration mode.

24. The non-transitory processor-readable storage medium of claim 17, wherein the stored processor-executable instructions are configured to cause the processor to perform operations further comprising:

broadcasting a second signal with a device identifier;

receiving, from a server, a message that indicates whether a proximity broadcast receiver that received the broadcast second signal has been moved;

performing the abbreviated authentication operation for the computing device to access the functionalities when the received message indicates the proximity broadcast receiver has not been moved; and

performing the normal authentication operation for the computing device to access the functionalities when the received message indicates the proximity broadcast receiver has been moved.

25. A communication system, comprising:

a proximity beacon device; and

a computing device,

wherein the computing device comprises a first processor is configured with processor-executable instructions to perform operations comprising;

receiving a first signal from the proximity beacon device;

obtaining, from the received first signal, information that indicates whether the proximity beacon device has detected movement;

determining whether the obtained information from the received first signal matches stored data corresponding to the proximity beacon device;

performing an abbreviated authentication operation for the computing device to access functionalities when it is determined that the obtained information from the received first signal matches the stored data; and

performing a normal authentication operation for the computing device to access the functionalities when it is determined that the obtained information from the received first signal does not match the stored data, and

wherein the proximity beacon device comprises;

a first sensor configured to generate sensor data indicating movement at the proximity beacon device; and

a second processor configured with processor-executable instructions to perform operations comprising;

transmitting the first signal that includes the information that indicates whether the movement is detected, wherein the information is at least one of a first device identifier and a movement indicator; and

adjusting the information transmitted in the first signal when the movement is detected based on the sensor data from the first sensor.

26. The communication system of claim 25, wherein the first signal is one of a broadcast message and a secure link.

27. The communication system of claim 25, wherein the abbreviated authentication operation includes automatically logging into at least one of a WiFi router, a website, and an application or automatically configuring the computing device to operate in a configuration mode.

28. The communication system of claim 25, wherein the first processor is configured with processor-executable instructions to perform operations further comprising authenticating the proximity beacon device based on the obtained information from the received first signal.

29. The communication system of claim 28, further comprising:

a server, comprising a third processor configured with processor-executable instructions to perform operations comprising;

receiving, from the computing device, a first message to authenticate the proximity beacon device based on the information from the first signal; and

transmitting, to the computing device, a response message that indicates whether the proximity beacon device is authenticated, and

wherein the first processor is configured with processor-executable instructions to perform operations such that authenticating the proximity beacon device based on the obtained information from the received first signal comprises;

transmitting the first message to the server to authenticate the proximity beacon device based on the obtained information from the received first signal; and

receiving from the server the response message that indicates whether the proximity beacon device is authenticated.

30. The communication system of claim 29, further comprising:

a proximity broadcast receiver, comprising;

a second sensor configured to generate sensor data indicating movement at the proximity broadcast receiver; and

a fourth processor configured with processor-executable instructions to perform operations comprising;

transmitting to the server a second message that includes an indicator having an initial value;

adjusting the indicator when the movement at the proximity broadcast receiver is detected based on the sensor data from the second sensor;

receiving from the computing device a second signal that includes a second device identifier associated with the computing device; and

transmitting to the server a sighting message that includes at least the second device identifier from the received second signal and the indicator,

wherein the first processor is configured with processor-executable instructions to perform operations further comprising;

broadcasting the second signal with the second device identifier;

receiving, from the server, a third message that indicates whether the proximity broadcast receiver that received the broadcast second signal has been moved;

performing the abbreviated authentication operation for the computing device to access the functionalities when the received third message from the server indicates the proximity broadcast receiver has not been moved; and

performing the normal authentication operation for the computing device to access the functionalities when the received third message from the server indicates the proximity broadcast receiver has been moved, and wherein the third processor is configured with processor-executable instructions to perform operations further comprising;

receiving, from the proximity broadcast receiver, the second message that includes the indicator having the initial value;

storing the indicator having the initial value;

receiving, from the proximity broadcast receiver, the sighting message;

determining whether the proximity broadcast receiver has been moved based on whether the indicator from the received sighting message matches the stored indicator having the initial value; and

transmitting, to the computing device, the third message that indicates whether the proximity broadcast receiver that received the broadcast second signal has been moved based in response to determining whether the proximity broadcast receiver has been moved.