SYSTEMS AND METHODS FOR DEVICE PAIRING WITH OPTICAL CODES

• US 20180091304A1
• Filed: 09/26/2017
• Published: 03/29/2018
• Est. Priority Date: 09/26/2016
• Status: Active Grant

• Current Assignee: Snap, Inc.
• Original Assignee: Snap, Inc.
• Inventors: Brook, Peter, Dahlquist, Nicolas, Hanover, Matthew
• Granted Patent: US 10,581,608 B2
• Time in Patent Office: Days
• CPC Class Codes: G06K 19/10 at least one kind of marking being used for authentication, e.g. of credit or identity cards verification of coded identity or credit cards in mechanisms actuated by them G07F7/12
• CPC Class Codes: G06K 7/10762 Relative movement
• CPC Class Codes: G06K 7/1413 1D bar codes
• CPC Class Codes: G06K 7/1417 2D bar codes
• CPC Class Codes: H04B 10/114 Indoor or close-range type systems
• CPC Class Codes: H04L 2209/80 Wireless
• CPC Class Codes: H04L 63/18 using different networks or channels, e.g. using out of band channels cryptographic mechanisms or cryptographic arrangements for key distribution involving distinctive intermediate devices or communication paths H04L9/0827; cryptographic mechanisms or cryptographic arrangements for authentication using a plurality of channels H04L9/3215
• CPC Class Codes: H04L 9/0844 with user authentication or key authentication, e.g. ElGamal, MTI, MQV-Menezes-Qu-Vanstone protocol or Diffie-Hellman protocols using implicitly-certified keys
• CPC Class Codes: H04L 9/14 using a plurality of keys or algorithms
• CPC Class Codes: H04L 9/3066 involving algebraic varieties, e.g. elliptic or hyper-elliptic curves
• CPC Class Codes: H04L 9/3226 using a predetermined code, e.g. password, passphrase or PIN network architectures or network communication protocols for supporting authentication of entities using passwords in a packet data network H04L63/083
• CPC Class Codes: H04W 12/04 Key management, e.g. using generic bootstrapping architecture [GBA]
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/33 using wearable devices, e.g. using a smartwatch or smart-glasses
• CPC Class Codes: H04W 12/50 Secure pairing of devices
• CPC Class Codes: H04W 12/77 Graphical identity
• CPC Class Codes: H04W 4/80 Services using short range communication, e.g. near-field communication [NFC], radio-frequency identification [RFID] or low energy communication

Abstract

Embodiments for device pairing using optical codes are described. One embodiment is a host device with a memory and one or more processors configured to pair the host device with a wearable device. The paring involves generating and displaying an image including a first optical code, decoding decode a pairing advertisement from the wearable device, generating a second optical code, the second optical code comprising a host pairing advertisement code, and decoding a second pairing advertisement including the host pairing advertisement code. Additional embodiments involve, in response to the second pairing advertisement, establishing a communication channel between the host device and the wearable device, communicating keys between the host and wearable device, and using an application-level elliptic curve Diffie-Hellman (ECDH) exchange with the first key and the second key to establish a shared secret.

Claims

1. A host device configured for pairing with a wearable device, the host device comprising:

a memory; and

one or more processors coupled to the memory and configured to;

generate and initiate display of an image including a first optical code;

decode a pairing advertisement from the wearable device;

generate and display a second optical code, the second optical code comprising a host pairing advertisement code; and

decode a second pairing advertisement including the host pairing advertisement code.

2. The host device of claim 1 wherein the one or more processors are further configured to:

in response to the second pairing advertisement, establish a communication channel between the host device and the wearable device;

receive, via the communication channel, a first key from the wearable device; and

generate a second key in response to the first key;

communicate the second key to the wearable device from the host device via the communication channel; and

establish an encrypted connection using the first key and the second key;

wherein the encrypted connection is established using an application-level elliptic curve Diffie-Hellman (ECDH) exchange with the first key and the second key to establish a shared secret.

3. The host device of claim 2, wherein the one or more processors are further configured to:

generate a first keyed-hash message authentication code (HMAC) based on the shared secret, wherein the shared secret comprises a Diffie-Hellman (DH) Key;

initiate transmission of the first HMAC to the wearable device;

process a second HMAC based on the DHKey received from the wearable device.

4. The host device of claim 3 wherein the one or more processors are further configured to generate a set of handshaking information following processing of the second HMAC;

and

initiate storing, in a memory coupled to the one or more processors, a set of handshaking information to enable a secure connection to be reestablished without optical code pairing.

5. The host device of claim 4 wherein the first optical code comprise a custom reference shape associated with a shape feature rule.

6. The host device of claim 5 wherein the shape feature rule is stored in the memory as part of a shared application environment operating on the host device and the wearable device.

7. The host device of claim 1 further comprising:

a touchscreen display coupled to the one or more processors, wherein the touchscreen display is configured to;

receive a second user input to initiate execution of a host portion of the shared application environment using the one or more processors;

display the first optical code in response to a second user input following the first input; and

automatically display the second optical code in response to the second pairing advertisement.

8. The host device of claim 7 further comprising:

a wireless transceiver, wherein the wireless transceiver is configured to detect one or more pairing advertisements only during display of a host optical code on the touchscreen display.

9. The host device of claim 7 wherein the one or more processors are configured to processes the pairing advertisement only while the first optical code is displayed on the touchscreen display.

10. The host device of claim 1 wherein the one or more processors are further configured to:

initiate the display of the first optical code during a first time period;

initiate a second display of the first optical code during a second time period different than the first time period;

initiate activation of a listening protocol on a wireless interface of the host device during the second time period associated with the second display of the first optical code;

process a third pairing advertisement broadcast by a second wearable device in response to the second wearable device detecting a third optical code from a second host device;

initiating display of a fourth optical code during a third time period, wherein the fourth optical code comprises a second host pairing advertisement code;

initiate activation of the listening protocol on the wireless interface of the host device during the fourth time period associated with the second display of the first optical code; and

processing a fourth pairing advertisement to determine that a host pairing advertisement code of the fourth pairing advertisement does not match the second host pairing advertisement code; and

initiate deactivation of the listening protocol without establishing a connection to the second wearable device at an end of the third time period.

11. The host device of claim 1, wherein the one or more processors are further configured to:

in response to decoding the second pairing advertisement, carry out an application-level elliptic curve Diffie-Hellman (ECDH) exchange to establish a shared secret and establish a secure connection between the wearable device and the host device.

12. The host device of claim 11, wherein the one or more processors are further configured to manage transmission of content from the wearable device to the host device across the secure connection;

and

initiate transmission of the content to a communication network.

13. A method for pairing a host device with a wearable device using optical codes, the method comprising:

initiating display of an image including a first optical code on a display of the host device;

decoding, by one or more processors of the host device, a pairing advertisement from the wearable device;

displaying a second optical code on the display of the host device, the second optical code comprising a host pairing advertisement code; and

decoding, using the one or more processors, a second pairing advertisement from the wearable device including the host pairing advertisement code.

14. The method of claim 13 further comprising:

in response to the second pairing advertisement, establishing a communication channel between the host device and the wearable device;

receiving, via the communication channel, a first key from the wearable device; and

generating a second key in response to the first key;

communicating the second key to the wearable device from the host device via the communication channel; and

establishing an encrypted connection using the first key and the second key, wherein the encrypted connection is established using an application-level elliptic curve Diffie-Hellman (ECDH) exchange with the first key and the second key to establish a shared secret.

15. The host device of claim 14 further comprising:

generating, by the host device, a first keyed-hash message authentication code (HMAC) based on the shared secret, wherein the shared secret comprises a Diffie-Hellman (DH) Key;

initiating, by the one or more processors of the host device, transmission of the first HMAC to the wearable device;

process, using the one or more processors, a second HMAC based on the DHKey received from the wearable device;

generating a set of handshaking information following processing of the second HMAC; and

storing, in the memory coupled to the one or more processors, a set of handshaking information to enable a secure connection to be reestablished without optical code pairing.

16. A non-transitory computer readable medium comprising instructions that, when executed by one or more processors of a host device, cause the host device to perform a method for device pairing using optical codes, the method comprising:

initiating display of an image including a first optical code on a display of the host device;

decoding, by one or more processors of the host device, a pairing advertisement from the wearable device;

displaying a second optical code on the display of the host device, the second optical code comprising a host pairing advertisement code; and

decoding, using the one or more processors, a second pairing advertisement from the wearable device including the host pairing advertisement code.

17. The non-transitory computer readable medium of claim 16 wherein the instructions further cause the host device to perform operations comprising:

in response to the second pairing advertisement, establishing a communication channel between the host device and the wearable device;

receiving, via the communication channel, a first key from the wearable device; and

generating a second key in response to the first key;

communicating the second key to the wearable device from the host device via the communication channel; and

establishing an encrypted connection using the first key and the second key, wherein the encrypted connection is established using an application-level elliptic curve Diffie-Hellman (ECDH) exchange with the first key and the second key to establish a shared secret.

18. The non-transitory computer readable medium of claim 17 wherein the instructions further cause the host device to perform operations comprising:

generating, by the host device, a first keyed-hash message authentication code (HMAC) based on the shared secret, wherein the shared secret comprises a Diffie-Hellman (DH) Key;

initiating, by the one or more processors of the host device, transmission of the first HMAC to the wearable device;

process, using the one or more processors, a second HMAC based on the DHKey received from the wearable device;

generating a set of handshaking information following processing of the second HMAC; and

storing, in the memory coupled to the one or more processors, a set of handshaking information to enable a secure connection to be reestablished without optical code pairing.

19. The non-transitory computer readable medium of claim 16 wherein the instructions further cause the host device to execute a host portion of a shared application environment operating on the host device and the wearable device;

wherein the first optical code is displayed as part of the shared application environment.

20. The non-transitory computer readable medium of claim 16 wherein the instructions further cause the host device to perform operations comprising:

initiating the display of the first optical code during a first time period;

initiating a second display of the first optical code during a second time period different than the first time period;

initiating activation of a listening protocol on a wireless interface of the host device during the second time period associated with the second display of the first optical code;

processing a third pairing advertisement broadcast by a second wearable device in response to the second wearable device detecting a third optical code from a second host device;

initiating display of a fourth optical code during a third time period, wherein the fourth optical code comprises a second host pairing advertisement code;

initiating activation of the listening protocol on the wireless interface of the host device during the fourth time period associated with the second display of the first optical code;

processing a fourth pairing advertisement to determine that a host pairing advertisement code of the fourth pairing advertisement does not match the second host pairing advertisement code; and

initiating deactivation of the listening protocol without establishing a connection to the second wearable device at an end of the third time period.