System for providing device authentication in a wireless network

• US 7,289,790 B2
• Filed: 03/27/2006
• Issued: 10/30/2007
• Est. Priority Date: 10/10/2000
• Status: Expired due to Fees

• Current Assignee: North Star Innovations Inc. (Wi-LAN Inc.)
• Original Assignee: Freescale Semiconductor, Inc. (NXP Semiconductors NV)
• Inventors: Welborn, Matthew L., McCorkle, John W., Roberts, Richard D.
• Primary Examiner(s): Feild, Joseph
• Assistant Examiner(s): Nguyen, Huy D
• Application Number:
  US11/389,313
• Publication Number:
  US 20060179311A1
• Time in Patent Office: 582 Days
• Field of Search: 455/411, 455/410, 455/404.2, 455/414.2, 455/440, 455/456.1, 455/456.3, 455/456.5, 455/456.6, 342/118, 342/134, 375/340
• US Class Current: 455/411
• CPC Class Codes: G01S 13/0209 Systems with very large relative bandwidth, i.e. larger than 10 %, e.g. baseband, pulse, carrier-free, ultrawideband
• CPC Class Codes: G01S 7/023 Interference mitigation, e.g. reducing or avoiding non-intentional interference with other HF-transmitters, base station transmitters for mobile communication or other radar systems, e.g. using electro-magnetic interference [EMI] reduction techniques auxiliary means for detecting or identifying radar signals or the like G01S7/021; means for anti-jamming G01S7/36
• CPC Class Codes: H04B 1/7163 using impulse radio
• CPC Class Codes: H04J 3/0682 by delay compensation, e.g. by compensation of propagation delay or variations thereof, by ranging
• CPC Class Codes: H04L 25/4902 Pulse width modulation; Pulse position modulation
• CPC Class Codes: H04L 27/0004 using wavelets
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/0492 by using a location-limited connection, e.g. near-field communication or limited proximity of entities
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/162 at the data link layer
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/50 Secure pairing of devices
• CPC Class Codes: H04W 12/63 Location-dependent; Proximity-dependent
• CPC Class Codes: H04W 24/00 Supervisory, monitoring or testing arrangements
• CPC Class Codes: H04W 28/18 Negotiating wireless communication parameters
• CPC Class Codes: H04W 52/288 taking into account the usage mode, e.g. hands-free, data transmission, telephone
• CPC Class Codes: H04W 64/00 Locating users or terminals or network equipment for network management purposes, e.g. mobility management
• CPC Class Codes: H04W 74/00 Wireless channel access
• CPC Class Codes: H04W 80/02 Data link layer protocols
• CPC Class Codes: H04W 84/18 Self-organising networks, e.g. ad-hoc networks or sensor networks

Abstract

A system and method are provided for authenticating a new device in a wireless network using an authentication device. First, the new device estimates the distance between the new device and the authenticating device as a first distance measurement, and sends the first distance measurement to the authentication device. The authentication device then estimates the distance between the new device and the authenticating device as a second distance measurement. The authentication device then evaluates the first and second distance measurements to determine if they meet authentication criteria and sends authentication data to the new device only if the first and second distance measurements meet the authentication criteria. These criteria can be that they do not differ by more than a set error value or that they both are below a set maximum value.

Claims

1. An authentication device, comprising:

a memory configured to store authentication data;

an authentication enable element configured to transition the authentication device into and out of an authentication mode;

a transceiver configured to wirelessly communicate with a remote device and to provide the authentication data to the remote device when the authentication device is in the authentication mode;

an authentication circuit configured to perform signal and data analysis required to perform an authentication process with respect to the remote device; and

a ranging circuit configured to determine a first distance measurement using wireless ranging, the first distance measurement providing a measurement of a distance between the remote device and the authentication device, as made by the authentication device,

wherein the authentication circuit is configured to evaluate the first distance measurement to determine if it meets authentication criteria, and to send the authentication data to the remote device only if the first distance measurement meets the authentication criteria.

2. An authentication device, as recited in claim 1, wherein the authentication enable element is configured such that it must be externally instructed to enter into the authentication mode, and that it will automatically transition out of the authentication mode a set time after entering into the authentication mode.

3. An authentication device, as recited in claim 1, wherein the authentication criteria includes that the first distance measurement is below a set maximum value.

4. An authentication device, as recited in claim 1, wherein the authentication data includes an authentication public/private encryption key pair.

5. An authentication device, as recited in claim 1, further comprising a power regulation circuit to set a power transmission level for the transceiver to an authentication transmission power level in response to a power regulation command from the authentication enable element.

6. An authentication device, as recited in claim 5, wherein an authentication transmission range associated with the authentication transmission power level is lower than a normal transmission range associated with a normal transmission power level used for normal operation of an associated network.

7. An authentication device, as recited in claim 5, wherein the authentication transmission power level is between 15 and 25 dB below a normal transmission power level used for normal operation of an associated network.

8. An authentication device, comprising:

a memory configured to store authentication data;

a transceiver configured to wirelessly communicate with a remote device and to provide the authentication data to the remote device when the authentication device is in the authentication mode;

an authentication circuit configured to perform signal and data analysis required to perform an authentication process with respect to the remote device; and

a ranging circuit configured to determine a first distance measurement using wireless ranging, the first distance measurement providing a measurement of the distance between the remote device and the authentication device, as made by the authentication device,

wherein the authentication circuit is configured to evaluate the first distance measurement to determine if it meets authentication criteria, and to send the authentication data to the remote device only if the first distance measurement meets the authentication criteria.

9. An authentication device, as recited in claim 8, wherein the authentication enable element is configured such that it must be externally instructed to enter into the authentication mode, and such that it will automatically transition out of the authentication mode a set time after entering into the authentication mode.

10. An authentication device, as recited in claim 8, wherein the authentication criteria include that the first distance measurement is below a set maximum value.

11. An authentication device, as recited in claim 8, wherein the authentication data includes an authentication public/private encryption key pair.

12. An authentication device, as recited in claim 8, wherein the transceiver is configured to receive a second distance measurement from the remote device, the second distance measurement providing a measurement of the distance between the remote device and the authentication device, as made by the remote device.

13. An authentication device, as recited in claim 12, wherein the authentication circuit is configured to evaluate the first and second distance measurements to determine if they both meet the authentication criteria, and is configured to send the authentication data to the remote device only if the first and second distance measurements meet the authentication criteria.

14. An authentication device, as recited in claim 13, wherein the authentication criteria include that the first and second distance measurements are both below a set minimum value.

15. An authentication device, as recited in claim 13, wherein the authentication criteria includes that the first and second distance measurements are within a set variance from each other.

16. An authentication device, as recited in claim 13, wherein the authentication circuit is configured to determine the absolute value of a difference between the first and second measurements.

17. An authentication device, comprising:

a memory configured to store authentication data;

a transceiver configured to wirelessly communicate with a remote device and to provide the authentication data to the remote device when the authentication device is in the authentication mode;

an authentication circuit configured to perform signal and data analysis required to perform an authentication process with respect to the remote device; and

a power regulation circuit to set a power transmission level for the transceiver to an authentication transmission power level in response to a power regulation command from the authentication enable element,

wherein the authentication transmission power level is between 15 and 25 dB below a normal transmission power level used for normal operation of an associated network.