Digital authentication over acoustic channel

• US 7,487,362 B2
• Filed: 02/23/2004
• Issued: 02/03/2009
• Est. Priority Date: 02/15/2002
• Status: Expired due to Fees

• Current Assignee: Qualcomm, Inc.
• Original Assignee: Qualcomm, Inc.
• Inventors: Jalali, Ahmad, Gantman, Alexander, Rose, Gregory G., Steenstra, Jack, Noerenberg, John W. II
• Primary Examiner(s): Parthasarathy; Pramila
• Application Number:
  US10/785,313
• Publication Number:
  US 20040221166A1
• Time in Patent Office: 1,807 Days
• Field of Search: 713/182
• US Class Current: 713/186
• CPC Class Codes: G06Q 20/341 Active cards, i.e. cards including their own processing means, e.g. including an IC or chip
• CPC Class Codes: G06Q 20/346 Cards serving only as information carrier of service
• CPC Class Codes: G06Q 20/4014 Identity check for transactions
• CPC Class Codes: G06Q 20/40975 using encryption therefor
• CPC Class Codes: G07F 7/1008 Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system
• CPC Class Codes: G07F 7/1016 Devices or methods for securing the PIN and other transaction-data, e.g. by encryption arrangements for secret communication, see H04L9/00
• CPC Class Codes: G07F 7/1025 Identification of user by a PIN code
• CPC Class Codes: H04L 9/3228 One-time or temporary data, i.e. information which is sent for every authentication or authorization, e.g. one-time-password, one-time-token or one-time-key
• CPC Class Codes: H04L 9/3297 involving time stamps, e.g. generation of time stamps

Abstract

Apparatus and method are disclosed for digital authentication and verification. In one embodiment, authentication involves storing a cryptographic key and a look up table (LUT), generating an access code using the cryptographic key; generating multiple parallel BPSK symbols based upon the access code; converting the BPSK symbols into multiple tones encoded with the access code using the LUT; and outputting the multiple tones encoded with the access code for authentication. In another embodiment, verification involves receiving multiple tones encoded with an access code; generating multiple parallel BPSK symbols from the multiple tones; converting the BPSK symbols into an encoded interleaved bit stream of the access code; de-interleaving the encoded interleaved bit stream; and recovering the access code from the encoded de-interleaved bit stream.

Claims

1. Apparatus for use in authentication comprising:

a storage medium configured to store a cryptographic key and a look up table (LUT);

a first processor coupled to the storage medium, configured to generate an access code using the cryptographic key;

a converter coupled to the processor, configured to convert the access code into multiple tones encoded with the access code; and

an audio output unit configured to output the multiple tones encoded with the access code for authentication;

wherein the converter comprises;

a binary phase shift keying (BPSK) module configured to generate multiple parallel BPSK symbols; and

a second processor coupled to the BPSK module and the storage medium, configured to convert the BPSK symbols into the multiple tones using the LUT.

2. The apparatus of claim 1, wherein either one of the first or second processor is further configured to repeat the BPSK symbols a selected number of times;

and wherein the second processor converts repeated BPSK symbols into the multiple tones.

3. The apparatus of claim 1, further comprising:

a clock module coupled to the first processor, configured to generate time elements; and

wherein the first processor is configured to generate the access code using the cryptographic key and a time element.

4. The apparatus of claim 1, further comprising:

an actuator coupled to the first processor, configured to receive a user command; and

wherein, the first processor is configured to generate the access code when the user command is received.

5. The apparatus of claim 1, further comprising:

a housing element configured to encase the storage medium, the first processor, the converter and the audio output unit; and

an opening through the housing element.

6. The apparatus of claim 1, further comprising:

an amplifier coupled to the converter, configured to amplify the multiple tones; and

wherein the audio output unit is configured to output the amplified multiple tones.

7. The apparatus of claim 1, further comprising:

a display module coupled to the first processor, configured to display the access code.

8. The apparatus of claim 1, further comprising:

a user input configured to receive a personal identification number (PIN);

wherein the converter is configured to convert the PIN into multiple tones encoded with the PIN; and

wherein the audio output unit is further configured to output the multiple tones encoded with the PIN for authentication.

9. Apparatus for use in authentication comprising:

a storage medium configured to store a cryptographic key and a look up table (LUT);

a processor coupled to the storage medium, configured to generate an access code using the cryptographic key;

a converter coupled to the processor, configured to convert the access code into multiple tones encoded with the access code; and

an audio output unit configured to output the multiple tones encoded with the access code for authentication;

wherein the converter comprises;

a binary phase shift keying (BPSK) module configured to generate multiple parallel BPSK symbols; and

wherein the processor is configured to convert the BPSK symbols into multiple tones using the LUT.

10. A method for use in authentication comprising:

storing a cryptographic key and a look up table (LUT);

generating an access code using the cryptographic key;

generating multiple parallel binary phase shift keying (BPSK) symbols based upon the access code;

converting the BPSK symbols into multiple tones encoded with the access code using the LUT; and

outputting the multiple tones encoded with the access code for authentication.

11. The method of claim 10, further comprising:

repeating the BPSK symbols a selected number of times before converting the BPSK symbols.

12. The method of claim 11, wherein repeating the BPSK symbols comprises repeating a set of three BPSK symbols the selected number of times;

and

wherein converting the BPSK symbols comprises converting each set of three BPSK symbols into the multiple tones using the LUT.

13. The method of claim 10, further comprising:

adding to the multiple tones, reference tones with reference phases; and

outputting the reference tones with the multiple tones.

14. The method of claim 10, further comprising generating time elements;

and wherein generating the access code comprises generating the access code using the cryptographic key and a time element.

15. The method of claim 10, further comprising receiving a user command;

and wherein generating the access code comprises generating the access code when the user command is received.

16. The method of claim 10, further comprising:

amplifying the multiple tones before outputting the multiple tones.

17. The method of claim 10, further comprising:

receiving a personal identification number (PIN);

converting the PIN into multiple tones encoded with the PIN; and

outputting the multiple tones encoded with the PIN for authentication.

18. Apparatus for use in authentication comprising:

means for storing a cryptographic key and a look up table (LUT);

means for generating an access code using the cryptographic key;

means for generating multiple parallel BPSK symbols based upon the access code;

means for converting the BPSK symbols into multiple tones encoded with the access code using the LUT; and

means for outputting the multiple tones encoded with the access code for authentication.

19. The apparatus of claim 18, further comprising means for repeating the BPSK symbols a selected number of times;

and

wherein the means for converting the BPSK converts the repeated BPSK symbols.

20. The apparatus of claim 18, further comprising means for adding to the multiple tones, reference tones with reference phases;

and

wherein the means for outputting the multiple tones outputs the reference tones with the multiple tones.

21. The apparatus of claim 18, further comprising means for generating time elements;

and

wherein the means for generating the access code generates the access code using the cryptographic key and a time element.

22. The apparatus of claim 18, further comprising means for receiving a user command;

and

wherein the means for generating the access code generates the access code when the user command is received.

23. The apparatus of claim 18, further comprising means for amplifying the multiple tones;

and

wherein means for outputting the multiple tones outputs the amplified multiple tones.

24. The apparatus of claim 18, further comprising:

means for receiving a personal identification number (PIN);

means for converting the PIN into multiple tones encoded with the PIN; and

means for outputting the multiple tones encoded with the PIN for authentication.

25. Apparatus for use in authentication comprising:

a storage medium configured to store a cryptographic key;

a processor coupled to the storage medium, configured to generate an access code using the cryptographic key;

a converter coupled to the processor, configured to convert the access code into multiple tones encoded with the access code; and

an audio output unit coupled to the converter, configured to output the multiple tones encoded with the access code for authentication;

wherein the converter comprises;

a binary phase shift keying (BPSK) module configured to generate multiple parallel repeated BPSK symbols based on the access code;

an inverse fast fourier transform (IFFT) module coupled to the BPSK module, configured to perform IFFT on the repeated BPSK symbols to generate code symbols; and

an up-converter coupled to the IFFT module, configured to modulate the code symbols into the multiple tones encoded with the access code.

26. A method for use in authentication comprising:

storing a cryptographic key;

generating an access code using the cryptographic key;

generating multiple parallel binary phase shift keying (BPSK) symbols based upon the access code;

repeating the BPSK symbols a selected number of times before converting the BPSK symbols;

performing inverse fast fourier transform (IFFT) on the repeated BPSK symbols to generate IFFT symbols;

modulating the IFFT symbols into the multiple tones encoded with the access code; and

outputting the multiple tones encoded with the access code for authentication.

27. The method of claim 26, wherein repeating the BPSK symbols comprises repeating a set of three BPSK symbols the selected number of times;

and

wherein converting the BPSK symbols comprises converting each set of three BPSK symbols into the multiple tones using the LUT.

28. Apparatus for use in authentication comprising:

means for storing a cryptographic key;

means for generating an access code using the cryptographic key;

means for generating multiple parallel binary phase shift keying (BPSK) symbols based upon the access code;

means for repeating the BPSK symbols a selected number of times before converting the BPSK symbols;

means for performing inverse fast fourier transform (IFFT) on the repeated BPSK symbols to generate IFFT symbols;

means for modulating the IFFT symbols into the multiple tones encoded with the access code; and

means for outputting the multiple tones encoded with the access code for authentication.

29. Apparatus for use in verification comprising:

an audio input unit configured to receive multiple tones encoded with an access code;

a converter coupled to the audio input unit, configured to recover the access code from the multiple tones encoded with the access code; and

wherein the converter comprises;

a down-converter configured to demodulate the multiple tones into IFFT symbols;

a fast fourier transform (FFT) module configured to generate multiple parallel BPSK symbols from the IFFT symbols;

a BPSK module coupled to the processor, configured to convert the BPSK symbols into an encoded interleaved bit stream of the access code;

a de-interleaver coupled to the BPSK module, configured to de-interleave the encoded interleaved bit stream; and

a decoding module coupled to the de-interleaver, configured to recover the access code from the encoded de-interleaved bit stream.

30. The apparatus of claim 29, further comprising:

a storage medium configured to store a cryptographic key; and

a processor coupled to the storage medium and the converter, configured to verify the access code using the cryptographic key and to grant access if the access code is verified.

31. The apparatus of claim 30, wherein the audio input unit is further configured to receive multiple tones encoded with a personal identification number (PIN);

wherein the converter is further configured to recover the PIN from the multiple tones encoded with the PIN; and

wherein the processor is further configured to grant access if the access code and the PIN are verified.

32. The apparatus of claim 30, further comprising:

a clock module coupled to the first processor, configured to generate time elements; and

wherein the processor is configured to verify the access code using the cryptographic key and a time element.

33. The apparatus of claim 29, wherein the FFT module converts the multiple tones into repeated sets of BPSK symbols and generates a selected set of BPSK symbols;

and

wherein the BPSK module converts the selected set of BPSK symbols.

34. A method for use in verification comprising:

receiving multiple tones encoded with an access code;

generating multiple parallel BPSK symbols from the multiple tones;

converting the BPSK symbols into an encoded interleaved bit stream of the access code;

de-interleaving the encoded interleaved bit stream; and

recovering the access code from the encoded de-interleaved bit stream.

35. The method of claim 34, wherein performing FFT comprises generating repeated BPSK symbols;

wherein the method further comprises generating a selected set of BPSK symbols from the repeated BPSK symbols; and

wherein performing the BPSK comprises converting the selected set of BPSK symbols into the encoded interleaved bit stream.

36. The method of claim 35, wherein performing the FFT comprises converting the IFFT symbols into repeated sets of three BPSK symbols;

and

wherein generating the selected set of BPSK symbols comprises selecting three BPSK symbols from the repeated sets of three BPSK symbols to generate the selected set of BPSK symbols.

37. The method of claim 35, wherein performing the FFT comprises converting the IFFT symbols into repeated sets of three BPSK symbols;

and

wherein generating the selected set of BPSK symbols comprises selecting one of the repeated sets of three BPSK symbols to generate the selected set of BPSK symbols.

38. The method of claim 34, further comprising:

storing a cryptographic key;

verifying the access code using the cryptographic key; and

granting access if the access code is verified.

39. The method of claim 34, further comprising:

receiving multiple tones encoded with a personal identification number (PIN);

recovering the PIN from the multiple tones encoded with the PIN; and

granting access if the access code and the PIN are verified.

40. The method of claim 34, further comprising:

generating time elements; and

wherein verifying the access code comprises verifying the access code using the cryptographic key and a time element.

41. Apparatus for use in verification comprising:

means for receiving multiple tones encoded with an access code;

means for demodulating the multiple tones into inverse fast fourier transform (IFFT) symbols;

means for performing fast fourier transform (FFT) to generate repeated BPSK symbols from the IFFT symbols;

means for generating a selected set of BPSK symbols from the repeated BPSK symbols;

means for converting the selected set of BPSK symbols into an encoded interleaved bit stream of the access code;

means for de-interleaving the encoded interleaved bit stream; and

means for recovering the access code from the encoded de-interleaved bit stream.

42. The apparatus of claim 41, further comprising:

means for storing a cryptographic key;

means for verifying the access code using the cryptographic key; and

means for granting access if the access code is verified.