Systems And Methods For Initial Authentication Of Wireless Communication

• US 20180176776A1
• Filed: 12/21/2016
• Published: 06/21/2018
• Est. Priority Date: 12/21/2016
• Status: Active Grant

• Current Assignee: Silicon Laboratories Incorporated
• Original Assignee: Silicon Laboratories Incorporated
• Inventors: Knaappila, Jani K.
• Granted Patent: US 10,440,570 B2
• Time in Patent Office: Days
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 2221/2111 Location-sensitive, e.g. geographical location, GPS
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 12/50 Secure pairing of devices
• CPC Class Codes: H04W 12/64 using geofenced areas
• CPC Class Codes: H04W 4/023 using mutual or relative location information between multiple location based services [LBS] targets or of distance thresholds
• CPC Class Codes: H04W 4/80 Services using short range communication, e.g. near-field communication [NFC], radio-frequency identification [RFID] or low energy communication
• CPC Class Codes: H04W 76/14 Direct-mode setup
• CPC Class Codes: H04W 84/20 Master-slave selection or change arrangements

Abstract

Systems and methods are provided that may be implemented to use angle of arrival (AoA) of a signal transmitted between two Bluetooth Low Energy (BLE) wireless devices to initially authenticate a connection between the two BLE devices. In one example, bonding or pairing with a first BLE device may be restricted to only those other BLE devices having an antenna currently positioned to transmit a signal to the first BLE device from an allowed direction and within a predefined permitted range of AoA relative to the first BLE device.

Claims

1. A method, comprising using at least one programmable integrated circuit of a first wireless device to determine whether to initially authenticate a wireless connection with a second wireless device based on a comparison between an angle of arrival (AoA) of a first wireless signal received from the second wireless device to a predefined range of allowable AoA values;

and then to establish an authenticated wireless connection between the first and second wireless device only if it is determined to initially authenticate the wireless connection with the second wireless device.

2. The method of claim 1, further comprising:

receiving the first wireless signal from the second wireless device at the first wireless device while the first wireless device and second wireless device are communicating across an unauthenticated wireless connection;

using the at least one programmable integrated circuit to;

determine the AoA of the received first wireless signal relative to a reference vector defined to extend from a position of the first wireless device,

compare the determined AoA of the received first wireless signal to a predefined range of allowable AoA values relative to the reference vector to determine if the AoA of the received first wireless signal is within the predefined range of allowable AoA values, and

establish an authenticated wireless connection between the first and second wireless device only if the AoA of the received first wireless signal is within the predefined range of allowable AoA values and to deny an authenticated wireless connection between the first and second wireless devices if the AoA of the received first wireless signal is not within the predefined range of allowable AoA values.

3. The method of claim 1, where the predefined range of allowable AoA values is defined by a predefined value of maximum allowable AoA relative to a reference vector defined to extend from a position of the first wireless device;

and where the method further comprises;

receiving the first wireless signal from the second wireless device at the first wireless device while the first wireless device and second wireless devices are communicating across an unauthenticated wireless connection;

using the at least one programmable integrated circuit to;

determine the AoA of the received first wireless signal relative to the reference vector defined to extend from a position of the first wireless device,

compare the determined AoA of the received first wireless signal to the predefined value of maximum allowable AoA to determine if the AoA of the received first wireless signal is less than or equal to the predefined value of maximum allowable AoA, and

establish an authenticated wireless connection between the first and second wireless devices only if the AoA of the received first wireless signal is less than or equal to the predefined value of maximum allowable AoA and to deny an authenticated wireless connection between the first and second wireless device if the AoA of the received first wireless signal is greater than the predefined value of maximum allowable AoA.

4. The method of claim 1, further comprising using the at least one programmable integrated circuit of the first wireless device to:

compare a determined AoA of the received first wireless signal to the predefined range of allowable AoA values to determine if the AoA of the received first wireless signal is within the predefined range of allowable AoA values;

to deny an authenticated wireless connection between the first and second wireless devices if the AoA of the received first wireless signal is not within the predefined range of allowable AoA values; and

to notify the second wireless device of an authentication failure when the authenticated wireless connection is denied.

5. The method of claim 1, further comprising using the at least one programmable integrated circuit of the first wireless device to determine to initially authenticate a wireless connection with the second wireless device and to establish an authenticated wireless connection between the first and second wireless device only when the AoA of the first wireless signal received from the second wireless device is determined to be within the predefined range of allowable AoA values;

and then to maintain the authenticated wireless connection established between the first and second wireless devices even when a position of the second wireless device changes relative to the first wireless device such that a second wireless signal received from the second wireless device across the authenticated wireless connection has an AoA that is not within the predefined range of allowable AoA values.

6. The method of claim 1, where the method further comprises using the at least one programmable integrated circuit to:

implement a host layer coupled to a baseband processor by a link layer on first wireless device;

use the baseband processor to determine the AoA of the first wireless signal received from the second wireless device;

pass the determined AoA of the first wireless signal from the baseband processor to the host layer; and

use the host layer to compare the AoA of the first wireless signal received from the second wireless device to the predefined range of allowable AoA values, and then to determine whether to initially authenticate the wireless connection with the second wireless device based on the comparison between the AoA of the first wireless signal to the predefined range of allowable AoA values.

7. The method of claim 1, where the first and second wireless devices are each a Bluetooth Low Energy (BLE) enabled device;

and where the method further comprises;

receiving the first wireless signal from the second wireless device at the first wireless device while the first wireless device and second wireless device are communicating across an unauthenticated wireless connection;

receiving a request for pairing or bonding from the second wireless device while the first wireless device and second wireless device are communicating as slave and master across an unauthenticated wireless connection, the request for pairing or bonding being the same or different than the first wireless signal received from the second wireless device; and

using the at least one programmable integrated circuit to;

determine the AoA of the received first wireless signal relative to a reference vector defined to extend from a position of the first wireless device,

compare the determined AoA of the received first wireless signal to a predefined range of allowable AoA values relative to the reference vector to determine if the AoA of the received first wireless signal is within the predefined range of allowable AoA values, and

accept the pairing or bonding request and establish an authenticated paired or bonded wireless connection between the first and second wireless devices only if the AoA of the received first wireless signal is within the predefined range of allowable AoA values and deny the pairing or bonding request and not establish an authenticated wireless connection between the first and second wireless devices if the AoA of the received first wireless signal is not within the predefined range of allowable AoA values.

8. The method of claim 1, further comprising operating the first wireless device in a common wireless communication environment with the second wireless device and a third wireless device;

using the at least one programmable integrated circuit of the first wireless device to determine to initially authenticate a wireless connection with the third wireless device based on a comparison between an angle of arrival (AoA) of a second wireless signal received from the third wireless device to the predefined range of allowable AoA values; and

then to establish an authenticated wireless connection between the first and second wireless device only if it is determined to initially authenticate the wireless connection with the second wireless device.

9. An apparatus, comprising at least one programmable integrated circuit coupled to radio circuitry and configured to be coupled to an antenna as a first wireless device, the at least one programmable integrated circuit being programmed to:

determine whether to initially authenticate a wireless connection with a second wireless device based on a comparison between an angle of arrival (AoA) of a first wireless signal received from the second wireless device to a predefined range of allowable AoA values; and

then to establish an authenticated wireless connection between the first and second wireless device only if it is determined to initially authenticate the wireless connection with the second wireless device.

10. The apparatus of claim 9, where the at least one programmable integrated circuit is further programmed to:

determine the AoA of the received first wireless signal relative to a reference vector defined to extend from a position of the first wireless device and the first wireless signal from the second wireless device, the first wireless signal being received while the first wireless device and second wireless device are communicating across an unauthenticated wireless connection;

compare the determined AoA of the received first wireless signal to a predefined range of allowable AoA values relative to the reference vector to determine if the AoA of the received first wireless signal is within the predefined range of allowable AoA values; and

establish an authenticated wireless connection between the first and second wireless device only if the AoA of the received first wireless signal is within the predefined range of allowable AoA values and to deny an authenticated wireless connection between the first and second wireless devices if the AoA of the received first wireless signal is not within the predefined range of allowable AoA values.

11. The apparatus of claim 9, where the predefined range of allowable AoA values is defined by a predefined value of maximum allowable AoA relative to a reference vector defined to extend from a position of the first wireless device;

and where the at least one programmable integrated circuit is further programmed to;

determine the AoA of the received first wireless signal relative to the reference vector defined to extend from a position of the first wireless device, the first wireless signal being received while the first wireless device and second wireless device are communicating across an unauthenticated wireless connection;

compare the determined AoA of the received first wireless signal to the predefined value of maximum allowable AoA to determine if the AoA of the received first wireless signal is less than or equal to the predefined value of maximum allowable AoA; and

establish an authenticated wireless connection between the first and second wireless devices only if the AoA of the received first wireless signal is less than or equal to the predefined value of maximum allowable AoA and to deny an authenticated wireless connection between the first and second wireless device if the AoA of the received first wireless signal is greater than the predefined value of maximum allowable AoA.

12. The apparatus of claim 9, where the at least one programmable integrated circuit is further programmed to:

compare a determined AoA of the received first wireless signal to the predefined range of allowable AoA values to determine if the AoA of the received first wireless signal is within the predefined range of allowable AoA values;

to deny an authenticated wireless connection between the first and second wireless devices if the AoA of the received first wireless signal is not within the predefined range of allowable AoA values; and

to notify the second wireless device of an authentication failure when the authenticated wireless connection is denied.

13. The apparatus of claim 9, where the at least one programmable integrated circuit is further programmed to:

determine to initially authenticate a wireless connection with the second wireless device and to establish an authenticated wireless connection between the first and second wireless device only when the AoA of the first wireless signal received from the second wireless device is determined to be within the predefined range of allowable AoA values; and

then to maintain the authenticated wireless connection established between the first and second wireless devices even when a position of the second wireless device changes relative to the first wireless device such that a second wireless signal received from the second wireless device across the authenticated wireless connection has an AoA that is not within the predefined range of allowable AoA values.

14. The apparatus of claim 9, where the at least one programmable integrated circuit is further programmed to:

implement a host layer coupled to a baseband processor by a link layer;

use the baseband processor to determine the AoA of the first wireless signal received from the second wireless device;

pass the determined AoA of the first wireless signal from the baseband processor to the host layer; and

use the host layer to compare the AoA of the first wireless signal received from the second wireless device to the predefined range of allowable AoA values, and then to determine whether to initially authenticate the wireless connection with the second wireless device based on the comparison between the AoA of the first wireless signal to the predefined range of allowable AoA values.

15. The apparatus of claim 9, where the first and second wireless devices are each a Bluetooth Low Energy (BLE) enabled device;

and where the at least one programmable integrated circuit is further programmed to;

receive the first wireless signal from the second wireless device at the first wireless device while the first wireless device and second wireless device are communicating across an unauthenticated wireless connection;

receive a request for pairing or bonding from the second wireless device while the first wireless device and second wireless device are communicating as slave and master across an unauthenticated wireless connection, the request for pairing or bonding being the same or different than the first wireless signal received from the second wireless device;

determine the AoA of the received first wireless signal relative to a reference vector defined to extend from a position of the first wireless device;

compare the determined AoA of the received first wireless signal to a predefined range of allowable AoA values relative to the reference vector to determine if the AoA of the received first wireless signal is within the predefined range of allowable AoA values; and

accept the pairing or bonding request and establish an authenticated paired or bonded wireless connection between the first and second wireless devices only if the AoA of the received first wireless signal is within the predefined range of allowable AoA values and deny the pairing or bonding request and not establish an authenticated wireless connection between the first and second wireless devices if the AoA of the received first wireless signal is not within the predefined range of allowable AoA values.

16. The apparatus of claim 9, where the first and second wireless devices are each a Bluetooth Low Energy (BLE) enabled device;

and where the at least one programmable integrated circuit is further programmed to;

initially authenticate a wireless connection with a third wireless device based on a comparison between an angle of arrival (AoA) of a second wireless signal received from the third wireless device to the predefined range of allowable AoA values while the first wireless device is operating in a common wireless communication environment with the second wireless device and the third wireless device; and

then to establish an authenticated wireless connection between the first and second wireless device only if it is determined to initially authenticate the wireless connection with the second wireless device.

17. A system, comprising:

a first wireless device and a second wireless device, the first wireless device including at least one programmable integrated circuit coupled to radio circuitry and an antenna, and the second wireless device including at least one programmable integrated circuit coupled to radio circuitry and an antenna;

where the at least one programmable integrated circuit of the second wireless device is programmed to transmit a first wireless signal to the first wireless device; and

where the at least one programmable integrated circuit of the first wireless device is programmed to;

determine whether to initially authenticate a wireless connection with the second wireless device based on a comparison between an angle of arrival (AoA) of the first wireless signal received from the second wireless device to a predefined range of allowable AoA values, and

then to establish an authenticated wireless connection between the first and second wireless device only if it is determined to initially authenticate the wireless connection with the second wireless device.

18. The system of claim 17, where the at least one programmable integrated circuit of the second wireless device is further programmed to transmit the first wireless signal to the first wireless device while the first wireless device and second wireless device are communicating across an unauthenticated wireless connection;

and where the at least one programmable integrated circuit of the first wireless device is further programmed to;

determine the AoA of the received first wireless signal relative to a reference vector defined to extend from a position of the first wireless device and the first wireless signal from the second wireless device;

compare the determined AoA of the received first wireless signal to a predefined range of allowable AoA values relative to the reference vector to determine if the AoA of the received first wireless signal is within the predefined range of allowable AoA values; and

establish an authenticated wireless connection between the first and second wireless device only if the AoA of the received first wireless signal is within the predefined range of allowable AoA values and to deny an authenticated wireless connection between the first and second wireless devices if the AoA of the received first wireless signal is not within the predefined range of allowable AoA values.

19. The system of claim 17, where the at least one programmable integrated circuit of the first wireless device is further programmed to:

compare a determined AoA of the received first wireless signal to the predefined range of allowable AoA values to determine if the AoA of the received first wireless signal is within the predefined range of allowable AoA values;

to deny an authenticated wireless connection between the first and second wireless devices if the AoA of the received first wireless signal is not within the predefined range of allowable AoA values; and

to notify the second wireless device of an authentication failure when the authenticated wireless connection is denied.

20. The apparatus of claim 17, where the at least one programmable integrated circuit of the first wireless device is further programmed to:

determine to initially authenticate a wireless connection with the second wireless device and to establish an authenticated wireless connection between the first and second wireless devices only when the AoA of the first wireless signal received from the second wireless device is determined to be within the predefined range of allowable AoA values; and

then to maintain the authenticated wireless connection established between the first and second wireless devices even when a position of the second wireless device changes relative to the first wireless device such that a second wireless signal received from the second wireless device across the authenticated wireless connection has an AoA that is not within the predefined range of allowable AoA values.

21. The system of claim 17, where the first and second wireless devices are each a Bluetooth Low Energy (BLE) enabled device;

where the at least one programmable integrated circuit of the second wireless device is further programmed to;

transmit the first wireless signal to the first wireless device while the first wireless device and second wireless device are communicating across an unauthenticated wireless connection; and

transmit a request for pairing or bonding to the first wireless device while the first wireless device and second wireless device are communicating as slave and master across an unauthenticated wireless connection, the request for pairing or bonding being the same or different than the first wireless signal transmitted to the first wireless device; and

where the at least one programmable integrated circuit of the first wireless device is further programmed to;

determine the AoA of the received first wireless signal relative to a reference vector defined to extend from a position of the first wireless device,

compare the determined AoA of the received first wireless signal to a predefined range of allowable AoA values relative to the reference vector to determine if the AoA of the received first wireless signal is within the predefined range of allowable AoA values, and

accept the pairing or bonding request and establish an authenticated paired or bonded wireless connection between the first and second wireless devices only if the AoA of the received first wireless signal is within the predefined range of allowable AoA values and deny the pairing or bonding request and not establish an authenticated wireless connection between the first and second wireless devices if the AoA of the received first wireless signal is not within the predefined range of allowable AoA values.