SYSTEM, APPARATUS, AND METHOD FOR RECEIVED SIGNAL STRENGTH INDICATOR (RSSI) BASED AUTHENTICATION

• US 20170150533A1
• Filed: 11/17/2016
• Published: 05/25/2017
• Est. Priority Date: 11/19/2015
• Status: Active Grant

• Current Assignee: Nike, Inc.
• Original Assignee: Nike, Inc.
• Inventors: Alipour, Hamid, Marreel, Robert P.
• Granted Patent: US 10,039,145 B2
• Time in Patent Office: Days
• CPC Class Codes: H04B 1/385 Transceivers carried on the body, e.g. in helmets
• CPC Class Codes: H04B 17/318 Received signal strength
• CPC Class Codes: H04L 43/16 Threshold monitoring
• CPC Class Codes: H04L 63/0861 using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231
• CPC Class Codes: H04M 1/72412 using two-way short-range wireless interfaces
• CPC Class Codes: H04M 2203/2094 Proximity
• CPC Class Codes: H04M 2250/02 including a Bluetooth interface
• CPC Class Codes: H04M 2250/06 including a wireless LAN interface
• CPC Class Codes: H04M 2250/12 including a sensor for measuring a physical value, e.g. temperature or motion telephones including GPS signal receivers H04M2250/10
• CPC Class Codes: H04W 12/04 Key management, e.g. using generic bootstrapping architecture [GBA]
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/33 using wearable devices, e.g. using a smartwatch or smart-glasses
• CPC Class Codes: H04W 12/50 Secure pairing of devices
• CPC Class Codes: H04W 12/63 Location-dependent; Proximity-dependent
• CPC Class Codes: H04W 12/65 Environment-dependent, e.g. using captured environmental data
• CPC Class Codes: H04W 4/80 Services using short range communication, e.g. near-field communication [NFC], radio-frequency identification [RFID] or low energy communication
• CPC Class Codes: H04W 64/00 Locating users or terminals or network equipment for network management purposes, e.g. mobility management
• CPC Class Codes: H04W 76/10 Connection setup
• CPC Class Codes: H04W 84/12 WLAN [Wireless Local Area Networks]

Abstract

Described herein are systems, apparatuses, and methods for performing proximity-based authentication operations using received signal strength indicator (RSSI) values. An expected proximity of devices to be paired is used to determine whether to execute a wireless personal area network (WPAN) connection process. This expected proximity is correlated with the RSSI value of received signals. By utilizing the RSSI value of received signals, embodiments do not utilize any additional hardware for performing the described proximity-based authentication process, and in some implementations, do not utilize any additional processes or routines to determine an RSSI value (e.g., some devices utilize RSSI values in order to adjust output power levels of transmitted signals, and thus, already execute processes or routines to determine RSSI values).

Claims

1. A first computing device comprising:

one or more antennas to receive a signal from a proximate second computing device during a wireless personal area network (WPAN) connection process, the received signal to comprise a device connection request signal; and

a wireless connection controller to;

determine a received signal strength indicator (RSSI) value for the received signal;

compare the RSSI value for the received signal with a threshold value; and

based on the comparison terminate the WPAN connection process with the proximate second computing device or complete the WPAN connection process with the proximate second computing device.

2. The first computing device of claim 1, wherein the wireless connection controller is to:

terminate the WPAN connection process with the proximate second computing device when the RSSI value for the received signal is below a threshold value.

3. The first computing device of claim 1, wherein the wireless connection controller is to further execute an authentication and key agreement (AKA) authentication process, and the one or more antennas are to further transmit data to the proximate second computing device subsequent to the execution of the AKA authentication process.

4. The first computing device of claim 1, wherein the wireless connection controller comprises a Bluetooth Low Energy (BTLE) controller, and the WPAN connection process comprises operations to:

execute a communications stack associated with the WPAN;

exchange paring request/response signals with the proximate second computing device;

execute a security management protocol (SMP);

establish an encrypted connection to perform one or more key distribution operations; and

exchange data over the encrypted connection.

5. The first computing device of claim 1, wherein the wireless connection controller is to further:

determine whether the proximate second computing device has previously attempted to execute the WPAN connection process in excess of a threshold value of attempts; and

terminate the WPAN connection process with the proximate second computing device when the proximate second computing device has previously attempted to execute the WPAN connection process in excess of the threshold value of attempts.

6. The first computing device of claim 1, wherein the first computing device comprises a wearable computing device further comprising:

one or more biometric sensors for contacting a body part of a user to obtain biometric data of the user when the wearable computing device is worn by the user; and

a wearable housing to at least partially enclose the one or more antennas, the wireless connection controller, and the one or more biometric sensors.

7. The first computing device of claim 6, wherein the wearable housing comprises a flexible continuous band for wearing on a wrist of a user.

8. The first computing device of claim 1, further comprising:

a display to display data indicating the proximate second computing device is not within a proximate distance range when the RSSI value for the received signal is below the threshold value.

9. An apparatus comprising:

one or more memory devices;

one or more processors communicatively coupled to the one or more memory devices;

a device connection module, executable via the one or more processors using instructions stored by the one or more memory devices, to execute a wireless personal area network (WPAN) connection process, including operations to;

receive a signal from a peripheral device during WPAN connection process, the received signal to comprise at least one of a peripheral device advertising broadcast signal or a peripheral device pairing response signal;

determine a received signal strength indicator (RSSI) value for the received signal; and

based on the comparison terminate the WPAN connection process with the peripheral device or complete the WPAN connection process with the peripheral device.

10. The apparatus of claim 9, wherein the WPAN connection process further includes operations to:

terminate the WPAN connection process with the peripheral device when the RSSI value for the received signal is below a threshold value.

11. The apparatus of claim 9, wherein the device connection module is to complete the WPAN connection process by executing an authentication and key agreement (AKA) authentication process and the device connection module is to further:

receive data from the peripheral device subsequent to the execution of the AKA authentication process.

12. The apparatus of claim 9, wherein the peripheral device comprises a Bluetooth Low Energy (BTLE) device, and the threshold value is based, at least in part, on an expected proximity of the BTLE device and the apparatus.

13. The apparatus of claim 9, wherein the peripheral device comprises an Internet of Things (IoT) device, and the threshold value is based, at least in part, on an expected proximity of the IoT device and the apparatus.

14. The apparatus of claim 9, wherein the device connection module is to further:

determine whether the peripheral device has previously attempted to execute the WPAN connection process in excess of a threshold value of attempts; and

terminate the WPAN connection process with the peripheral device when the peripheral device has previously attempted to execute the WPAN connection process in excess of the threshold value of attempts.

15. The apparatus of claim 9, wherein the device connection module is configured to execute the WPAN connection process for a plurality of peripheral devices to be communicatively coupled to the apparatus at the same time.

16. The apparatus of claim 9, further comprising:

a display to display data indicating the peripheral device is not within a proximate distance range when the RSSI value for the received signal is below the threshold value.

17. A non-transitory computer-readable storage medium comprising contents that, when executed by a first device, cause the first to perform operations to:

receive a signal from a second device during a wireless personal area network (WPAN) connection process;

determine a received signal strength indicator (RSSI) value for the received signal; and

based on the RSSI value for the received signal terminate the WPAN connection process with the second device or complete the WPAN connection process with the second device.

19. The non-transitory computer-readable storage medium of claim 17, wherein the first device comprises a mobile computing device and the second device comprises a peripheral device.

20. The non-transitory computer-readable storage medium of claim 19, wherein the received signal comprises at least one of a peripheral device advertising broadcast signal or a peripheral device pairing response signal.

21. The non-transitory computer-readable storage medium of claim 17, wherein the first device comprises a peripheral device and the second device comprises a mobile computing device.

22. The non-transitory computer-readable storage medium of claim 21, wherein the received signal comprises a device connection request signal.

23. The non-transitory computer-readable storage medium of claim 17, wherein the operation to complete the WPAN connection process comprises an operation to execute an authentication and key agreement (AKA) authentication process, and the mobile computing device to further perform operations to:

transmit or receive data to or from the second device subsequent to the execution of the AKA authentication process.

24. The non-transitory computer-readable storage medium of claim 17, wherein at least one of the first device or the second device comprises a Bluetooth Low Energy (BTLE) device.

25. The non-transitory computer-readable storage medium of claim 17, wherein at least one of the first device or the second device comprises an Internet of Things (IoT) device.

18. The non-transitory computer-readable storage medium 17, wherein the operations further comprise operations to:

terminate the WPAN connection process with the second device when the RSSI value for the received signal is below a threshold value.