System and method for establishing secondary channels

• US 7,916,861 B2
• Filed: 09/28/2006
• Issued: 03/29/2011
• Est. Priority Date: 04/25/2003
• Status: Active Grant

• Current Assignee: Palo Alto Research Center, Inc. (Xerox Holdings Corp.)
• Original Assignee: Palo Alto Research Center, Inc. (Xerox Holdings Corp.)
• Inventors: Smetters, Diana K., Balfanz, Dirk, Durfee, Glenn E., Pendleton, Bryan A., Conley, Kenneth W.
• Primary Examiner(s): Pich; Ponnoreay
• Application Number:
  US11/528,904
• Publication Number:
  US 20070019806A1
• Time in Patent Office: 1,643 Days
• Field of Search: 713168-169
• US Class Current: 380/33
• CPC Class Codes: H04L 63/061 for key exchange, e.g. in peer-to-peer networks cryptographic mechanisms or cryptographic arrangements for key agreement H04L9/0838
• CPC Class Codes: H04L 63/18 using different networks or channels, e.g. using out of band channels cryptographic mechanisms or cryptographic arrangements for key distribution involving distinctive intermediate devices or communication paths H04L9/0827; cryptographic mechanisms or cryptographic arrangements for authentication using a plurality of channels H04L9/3215

Abstract

A method for establishing a secondary communication channel between at least two computing devices over a network medium through use of a primary channel connects a first computing device with a first telephonic unit and a second computing device with a second telephonic unit. If the two telephonic units are in communication with each other over a primary channel, and communication channels are established between the computing devices and their respective telephonic units, then the first computing device transmits its location information to the second computing device over the primary channel. A connection is then established between the second computing device and the first computing device over a secondary communication channel.

Claims

1. A system for establishing a secondary communication channel between at least two computing devices over a network medium utilizing a primary channel, comprising:

a processor;

a memory;

means for determining whether a first telephonic unit is in communication over said primary channel, which is a low-bandwidth voice channel, with said second telephonic unit;

means for establishing a communication channel between a first computing device, which is connected to the first telephonic unit, and a second computing device, which is connected to the second telephonic unit, over said primary channel;

means for receiving at said second computing device location information and a security token transmitted by said first computing device over said primary channel;

means for creating a connection between said second computing device and said first computing device over a secondary channel, which is a high-bandwidth data channel;

means for transmitting the received security token to the first computing device by the second computing device over said secondary channel; and

means for verifying that the security token transmitted over the secondary channel matches the security token transmitted over the primary channel.

2. The system of claim 1, wherein at least one of said computing devices connects to one of said telephonic units utilizing Bluetooth technology.

3. The system of claim 1, further comprising means for establishing a secure connection between said first computing device and said second computing device over said secondary channel.

4. The system of claim 3, wherein establishing a secure connection comprises:

means for transmitting a first security token from said first computing device to said second computing device over said primary channel;

means for transmitting a second security token from said second computing device to said first computing device over said secondary channel;

means for verifying that said second security token sent over said secondary channel matches said first security token sent over said primary channel;

means for continuing communication if said first security token and said second security token are in agreement; and

means for terminating communication if said first security token and said second security token are not in agreement.

5. The system of claim 1, wherein said connection between said second computing device and said first computing device over a secondary channel is created by said second computing device by utilizing said location information sent by said first computing device over said primary channel.

6. The system of claim 1, further comprising means for transmitting location information from said second computing device to said first computing device over said primary channel.

7. The system of claim 6, wherein said connection between said second computing device and said first computing device over a secondary channel is created by both said first computing device and said second computing device by utilizing said location information sent by said first computing device and said second computing device over said primary channel.

8. The system of claim 1, further comprising:

means for transmitting a public key commitment from said first computing device over said primary channel to said second computing device;

means for transmitting a public key commitment from said second computing device over said primary channel to said first computing device;

means for transmitting a public key commitment from said first computing device over said secondary channel to said second computing device;

means for transmitting a public key commitment from said second computing device over said secondary channel to said first computing device;

means for determining whether said public key commitments received over said primary channel match said public key commitments received over said secondary channel;

means for continuing communication if said public key commitments received over said primary channel match said public key commitments received over said secondary channel; and

means for terminating communication if said public key commitments are not in agreement.

9. The system of claim 1, wherein said primary channel comprises an audio channel.

10. The system of claim 1, wherein said primary channel comprises a data channel.

11. They system of claim 1, wherein at least one of the computing devices comprises a personal digital assistant having cell phone and Internet connectivity.

12. The system of claim 1, wherein at least one of the computing devices comprises a table-top computer with wired connection.

13. The system of claim 1, wherein at least one of the computing devices comprises a video-conference camera with Internet connectivity.

14. The system of claim 1, wherein at least one of said computing devices connects to one of said telephonic units utilizing an 802.11 link.

15. The system of claim 1, wherein at least one of said computing devices connects to one of said telephonic units utilizing an analog headset connection.

16. The system of claim 1, wherein at least one of said computing devices connects to one of said telephonic units utilizing a serial connection.

17. The system of claim 1, wherein at least one of said computing devices connects to one of said telephonic units utilizing aerial acoustic technology.

18. The system for of claim 1, wherein at least one of said computing devices and at least one of said telephonic units comprise a single, integrated device.

19. The system of claim 1, wherein not less than one of said telephonic units comprises a walkie-talkie.

20. The system of claim 1, wherein not less than one of said telephonic units comprises a cellular telephone.