ESTABLISHING SECURE DIGITAL RELATIONSHIP USING SYMBOLOGY

• US 20160087949A1
• Filed: 09/24/2014
• Published: 03/24/2016
• Est. Priority Date: 09/24/2014
• Status: Abandoned Application

• Current Assignee: Intel Corporation
• Original Assignee: Intel Corporation
• Inventors: Deleeuw, William C., Smith, Ned M.
• Application Number:
  US14/494,802
• Publication Number:
  US 20160087949A1
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: H04L 63/061 for key exchange, e.g. in peer-to-peer networks cryptographic mechanisms or cryptographic arrangements for key agreement H04L9/0838
• CPC Class Codes: H04L 63/0876 based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint
• CPC Class Codes: H04W 12/0471 Key exchange
• CPC Class Codes: H04W 12/106 Packet or message integrity
• CPC Class Codes: H04W 12/50 Secure pairing of devices
• CPC Class Codes: H04W 12/77 Graphical identity
• CPC Class Codes: H04W 4/14 Short messaging services, e.g. short message services [SMS] or unstructured supplementary service data [USSD]

Abstract

An embodiment includes an apparatus comprising: a display module; at least one memory coupled to the display module; at least one processor, coupled to the at least one memory, to perform operations comprising: (a) encoding first content, which is based on a first value, in a first bar code, (b) displaying the first bar code with the display module; (c) receiving a second bar code, which includes second content based on a second value, from a second computing node; (d) encoding third content, which is based on a third value, in a third bar code, (e) displaying the third bar code with the display module; (f) determining an encryption key based on the first and second values; and (g) exchanging a message, encrypted based on the encryption key, with the second computing node. Other embodiments are described herein.

Claims

1. At least one storage medium having instructions stored thereon for causing:

a first computing node to (a) encode first content, which is based on a first value, in a first bar code, (b) display the first bar code with a display module coupled to the first computing node;

(c) receive a second bar code, which includes second content based on a second value, from a second computing node;

(d) encode third content, which is based on a third value, in a third bar code, (e) display the third bar code with the display module;

(f) determine a session key based on the first and second values; and

(g) exchange a message, encrypted with the session key, with the second computing node.

2. The at least one medium of claim 1,

wherein the first, second, and third bar codes include at least one of a 2 dimensional (2D) bar code, a 3D bar code, and a quick response (QR) code;

wherein the display module includes at least one of a 2D display and a 3D projection system.

3. The at least one medium of claim 1, wherein the first content includes a first public key corresponding to the first computing node and the second content includes a second public key corresponding to the second computing node.

4. The at least one medium of claim 1, wherein the second bar code includes a message authentication code (MAC) based on the first and second values and an identifier for the second computing node, the at least one medium comprising instructions to cause the first computing node to authenticate the MAC based on the first and second values.

5. The at least one medium of claim 4, wherein the third bar code includes an additional MAC based on the first and second values and an identifier for the first computing node.

6. The at least one medium of claim 1 comprising instructions to cause the first computing node to display the first bar code via an out-of-band (OOB) input/output (I/O) channel.

7. The at least one medium of claim 1 comprising instructions to cause the first computing node to digitally sign information included in at least one of the first and third bar codes and authenticate a signature, corresponding to the second computing node, on information included in the second bar code.

8. The at least one medium of claim 7, wherein the signature is a signature on the first and second content.

9. The at least one medium of claim 7 comprising instructions to cause the first computing node to sign the information included in the first bar code based on a private key included in a group signature scheme.

10. The at least one medium of claim 1, wherein the instructions to cause the first computing node to receive the second bar code include instructions to cause the first computing node to scan the second bar code via an out-of-band (OOB) input/output (I/O) channel.

11. The at least one medium of claim 1 comprising instructions to cause the first computing node to determine the session key via a Sigma protocol.

12. An apparatus comprising:

a display module;

at least one memory coupled to the display module;

at least one processor, coupled to the at least one memory, to perform operations comprising;

(a) encoding first content, which is based on a first value, in a first bar code, (b) displaying the first bar code with the display module;

(c) receiving a second bar code, which includes second content based on a second value, from a second computing node;

(d) encoding third content, which is based on a third value, in a third bar code, (e) displaying the third bar code with the display module;

(f) determining an encryption key based on the first and second values; and

(g) exchanging a message, encrypted based on the encryption key, with the second computing node.

13. The apparatus of claim 12, wherein (a) the first, second, and third bar codes include at least one of a 2 dimensional (2D) bar code, a 3D bar code, and a quick response (QR) code;

(b) the display module includes at least one of a 2D display and a 3D projection system; and

(c) the message includes at least one of an email, short message service text, chat, audio, and video.

14. The apparatus of claim 12, wherein the first content includes a first public key of the first computing node and the second content includes a second public key of the second computing node.

15. The apparatus of claim 12, wherein the second bar code includes a message authentication code (MAC) based on the first and second values and an identifier for the second computing node, the operations comprising authenticating the MAC based on the first and second values.

16. The apparatus of claim 15, wherein the third bar code includes an additional MAC based on the first and second values and an identifier for the first computing node.

17. The apparatus of claim 12, wherein the operations comprise displaying the first bar code via an out-of-band (OOB) input/output (I/O) channel.

18. The apparatus of claim 12, wherein the operations comprise digitally signing information included in at least one of the first and third bar codes and authenticating a signature, corresponding to the second computing node, on information included in the second bar code.

19. The apparatus of claim 18, wherein the signature is a signature on the first and second content.

20. The apparatus of claim 19, wherein the operations comprise signing the information included in the first bar code based on a private key included in a group signature scheme.

21. The apparatus of claim 12, wherein the operations comprise scanning the second bar code via an out-of-band (OOB) input/output (I/O) channel.

22. The apparatus of claim 12, wherein the operations comprise determining the encryption key via a Sigma protocol.

23. An apparatus comprising:

a display module;

at least one memory coupled to the display module;

at least one processor, coupled to the at least one memory, to perform operations comprising;

(a) encoding first content, which is based on a first value, in a first bar code, (b) displaying the first bar code with the display module;

(c) receiving a second bar code, which includes second content based on a second value, from a second computing node;

(d) determining an encryption key based on the first and second values; and

(e) exchanging a communication, encrypted based on the encryption key, with the second computing node.

24. The apparatus of claim 23, wherein the communication includes at least one of an email, short message service text, chat, audio, and video.

25. The apparatus of claim 23:

wherein the operations comprise digitally signing information included in the first bar code and authenticating a signature, corresponding to the second computing node, on information included in the second bar code;

wherein the signature is a signature on the first and second content.