Method and system for electronic device authentication

• US 7,136,999 B1
• Filed: 06/20/2000
• Issued: 11/14/2006
• Est. Priority Date: 06/20/2000
• Status: Expired due to Term

• Current Assignee: Uniloc 2017 LLC (SoftBank Group Corp.)
• Original Assignee: Koninklijke Philips Electronics N.V. (Koninklijke Philips N.V.)
• Inventors: Griffiths, Jonathan C.
• Primary Examiner(s): Zand, Kambiz
• Application Number:
  US09/597,198
• Time in Patent Office: 2,338 Days
• Field of Search: 713/168, 713/169, 380/270
• US Class Current: 713/168
• CPC Class Codes: H04L 63/0492 by using a location-limited connection, e.g. near-field communication or limited proximity of entities
• CPC Class Codes: H04L 63/061 for key exchange, e.g. in peer-to-peer networks cryptographic mechanisms or cryptographic arrangements for key agreement H04L9/0838
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/18 using different networks or channels, e.g. using out of band channels cryptographic mechanisms or cryptographic arrangements for key distribution involving distinctive intermediate devices or communication paths H04L9/0827; cryptographic mechanisms or cryptographic arrangements for authentication using a plurality of channels H04L9/3215
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/50 Secure pairing of devices
• CPC Class Codes: H04W 76/10 Connection setup
• CPC Class Codes: H04W 88/02 Terminal devices
• CPC Class Codes: H04W 88/06 adapted for operation in multiple networks or having at least two operational modes, e.g. multi-mode terminals
• CPC Class Codes: H04W 92/18 between terminal devices

Abstract

Electronic devices are authenticated to each other initially over a short-range wireless link. In particular, a user first enters a given authentication information in each device. Later, when the devices are out-of-range of the wireless link, they may be authenticated to each other without subsequent user input when one of the devices invites the other to exchange authentication information over an alternative communications link. If the authentication is successful, the devices may then communicate over the alternative communications link as if they were within range of the original wireless link.

Claims

1. A method of authenticating first and second electronic devices, comprising:

upon link set-up over a short-range wireless link, executing an authentication protocol by exchanging authentication information between the first and second electronic devices to initially authenticate communication between the first and second devices;

later, when the first and second electronic devices are beyond the short-range wireless link, executing the authentication protocol by exchanging the authentication information between the first and second electronic devices over an alternate communications link, then only allowing communication between the first and second devices if the first and second devices had initially been successfully authenticated.

2. The method of claim 1, wherein the authentication information is an authentication key.

3. The method of claim 1, wherein the authentication information a password.

4. The method of claim 1, wherein the first device is a master device and the second device is a slave device.

5. The method of claim 1, wherein the short-range wireless link is a radio link.

6. The method of claim 1, wherein the short-range wireless link is an infra-red link.

7. The method of claim 1, wherein the link set-up occurs when the first and second devices are in physical proximity.

8. The method of claim 1, wherein the short-range wireless link conforms to a given RF protocol.

9. The method of claim 8, wherein the given RF protocol is Bluetooth.

10. The method of claim 1 wherein the link set-up step includes entry of a given personal identification number into each of the first and second electronic devices.

11. The method of claim 1, wherein the alternate communications link is a computer network.

12. The method of claim 1, wherein the first electronic device is a client and the second electronic device is a server.

13. A method of authenticating first and second electronic devices, comprising:

upon link set-up over a first link, executing an authentication protocol by exchanging authentication information between the first and second electronic devices to initially authenticate communication between the first and second devices;

later, when the first and second electronic devices are connected using a second link, exchanging the authentication information between the first and second electronic devices over the second link, then only allowing communication between the first and second devices if the first and second devices had initially been successfully authenticated.

14. An electronic device, comprising:

a processor;

and

a memory loaded with a software routine executed by the processor (a) for generating authentication information useful in initially authenticating the electronic device to a another electronic device over a short-range wireless link, and (b) for later supplying the authentication information for later authentication of the electronic device to the other electronic device over an alternate communications link when the devices are beyond the short-range wireless link, then only allowing communication between the devices if the devices had initially been successfully authenticated.

15. The electronic device of claim 14, wherein the link set-up step includes entry of a given personal identification number into each of the first and second electronic devices.

16. The electronic device of claim 14, wherein the electronic device is a client and the second electronic device is a server.

17. A communications system, comprising:

a first electronic device;

a second electronic device;

a first communications link over which the first and second electronic devices authenticate each other using a given protocol that includes a link set-up and the exchange of authentication information following the link set-up, the authentication information being used to initially authenticate communication between the first and second electronic devices; and

a second communications link over which the first and second electronic devices later authenticate each other using the exchange of the authentication information, then only allowing communication between the first and second devices if the first and second devices had initially been successfully authenticated, wherein said first communications link and said second communications link are different types of links.