Systems for wireless authentication based on bluetooth proximity

• US 8,045,961 B2
• Filed: 06/22/2009
• Issued: 10/25/2011
• Est. Priority Date: 06/22/2009
• Status: Expired due to Fees

• Current Assignee: Optima Direct, LLC (2S Ventures, LLC)
• Original Assignee: Abderrahman Ben Ayed, Mourad Ben Ayed
• Inventors: Ayed, Mourad Ben, Ayed, Abderrahman Ben
• Primary Examiner(s): WASHINGTON, ERIKA ALISE
• Application Number:
  US12/488,611
• Publication Number:
  US 20110215921A1
• Time in Patent Office: 855 Days
• Field of Search: None
• US Class Current: 455/411
• CPC Class Codes: G06F 21/35 communicating wirelessly
• CPC Class Codes: G08B 1/08 using electric transmission ; transformation of alarm signals to electrical signals from a different medium, e.g. transmission of an electric alarm signal upon detection of an audible alarm signal
• CPC Class Codes: H04B 7/00 Radio transmission systems, i.e. using radiation field H04B10/00, H04B15/00 take precedence
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 63/18 using different networks or channels, e.g. using out of band channels cryptographic mechanisms or cryptographic arrangements for key distribution involving distinctive intermediate devices or communication paths H04L9/0827; cryptographic mechanisms or cryptographic arrangements for authentication using a plurality of channels H04L9/3215
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/068 using credential vaults, e.g. password manager applications or one time password [OTP] applications
• CPC Class Codes: H04W 12/50 Secure pairing of devices
• CPC Class Codes: H04W 4/80 Services using short range communication, e.g. near-field communication [NFC], radio-frequency identification [RFID] or low energy communication
• CPC Class Codes: Y02D 30/70 in wireless communication networks

Abstract

A method and apparatus for wireless authentication, secure automatic access to application and to systems and for providing an alarm to users upon detecting that a monitored device is not within a desired proximity using a BLUETOOTH apparatus are described.

Claims

1. A method for automatically logging a user to a client application, wherein the client application can run on a first device, and the client application is selected from the group consisting of an enterprise application, a mobile application, a client-server application, a web application, a Customer Relationship Management (CRM) application, a mobile payment application, and a Near Field Communication (NFC) payment application, comprising the steps of:

establishing a two-way secure wireless connection between the first device and a second mobile device, the second mobile device comprising a single wireless transceiver selected from the group consisting of a BLUETOOTH transceiver, and a Wibree transceiver, wherein the second mobile device can pair wirelessly with a compatible apparatus in a first range,

wherein upon pairing with a compatible apparatus in a first range, the second mobile device switches to a non-discoverable mode,

wherein the second mobile device can connect to a programming device and can store user data from the programming device in flash memory onboard the second mobile device,

wherein upon the first device wirelessly receiving user data from the second mobile device, the user data is authenticated by authentication means selected from the group consisting of a Remote Authentication Dial In User Service (RADIUS) server, a client application authentication means, and a remote server authentication means, wherein the user data is selected from the group consisting of a username, a password, a digital key, a public key, a private key, an encryption key, and encrypted user information, and

upon successful authentication, the user is automatically logged to the client application.

2. The method of claim 1, further comprising the step of displaying a login screen upon an event selected from the group consisting of the two-way secure wireless connection fails, the user data is not received from the second mobile device, and the user data received from said second mobile device fails authentication, and

wherein upon detection of a connection drop, the user is logged out of the client application, said and the first device and the second mobile device may attempt to reconnect.

3. The method of claim 1, further comprising the step of connecting the second mobile device to a computer and flashing user data to flash memory onboard the second mobile device.

4. The method of claim 1, wherein upon detection of a connection drop from the first device, the second mobile device activates an audible alarm of at least 60 decibels.

5. The method of claim 1, further comprising the step of periodically lighting a logo onboard the first device.

6. The method of claim 1, further comprising the step of the second mobile device storing one or more files in flash memory onboard the second device, the one or more files being selected from the group consisting of a marketing brochure, a coupon, a promotion, an instruction manual, an invitation and a marketing collateral, wherein the second mobile device performs actions selected from the group consisting of upon pairing with the first device, the second mobile device sends the one or more files to the first device, the second mobile device sends one or more files to the first device a predefined time after pairing, the second mobile device accepts one or more files from trusted devices when in proximity to the trusted devices and sends the one or more files to the first device.

7. The method claim 1, further comprising the step of storing at least one set of access parameters corresponding to at least one client application on the second mobile device, wherein upon one client application requesting a set of login parameters, the second mobile device automatically sends the set of corresponding login parameters wirelessly.

8. A unitary apparatus, comprising:

a flash storage means, an attachment means selected from the group consisting of a key chain, a ring, a bracelet and a clip, a single transceiver selected from the group consisting of a BLUETOOTH transceiver, and a Wibree transceiver,

wherein said single transceiver can pair with a second apparatus in a first range,

wherein said single transceiver can establish a secure two-way wireless connection with a paired second apparatus,

wherein upon pairing with a compatible apparatus in a first range, said single transceiver can switch to a non-discoverable mode,

wherein said single transceiver can send data wirelessly to said paired second apparatus,

an alarm means whereby said alarm means can issue an audible sound of at least 60 decibels,

a data port for connecting to a third device and for flashing user data onboard said flash storage means,

whereby said user data is selected from the group consisting of a user name, a password, a seat position, a steering wheel inclination, a rear view mirror position, a side mirror position, a radio station, an internet station, a game selection, channel information, a security code, an access code, a phone book, a public key, a private key, an encryption key and a decryption key,

wherein said second apparatus is selected from the group consisting of a mobile phone, a Personal Computer (PC) and a Personal Digital Assistant (PDA), wherein a processor onboard said second apparatus can execute a client application, wherein said client application can request user data from said unitary apparatus, upon authentication of said user data, said user can be automatically logged in to said client application, and if said user data is not authenticated a login screen can display on said second apparatus,

wherein said second apparatus further comprises a folding earpiece and a microphone, whereby when folded said apparatus automatically operates as a standard BLUETOOTH headset providing voice functionality.

9. The unitary apparatus of claim 8, not comprising a unitary microcontroller chipset, and not comprising a reset function.

10. The unitary apparatus of claim 8, comprising a motion detector, wherein, upon detection of a connection drop from said unitary apparatus, said user is automatically logged out of said client application.

11. The unitary apparatus of claim 8, further comprising a chipset for enabling the sending and receiving of data to and from an iPhone™

using BLUETOOTH.

12. The unitary apparatus of claim 8, wherein said second apparatus is an electronic system and whereby said electronic system can perform actions selected from the group consisting of:

upon a user moving a door handle, said electronic system verifies said unitary apparatus is within proximity and unlocks said door,

upon a user moving a door handle, said electronic system verifies said unitary apparatus is within proximity, establishes a wireless connection and unlocks said door,

upon detection of a connection drop, said electronic system locks said door,

upon a user pressing a button, said electronic system verifies that said unitary apparatus is within proximity and starts an engine, and

upon detection of said unitary apparatus being within proximity said electronic system requests user information, and automatically provides said user information to one or more systems.

13. The unitary apparatus of claim 8, wherein said second apparatus is an automobile electronic system and whereby said automobile electronic system can send a wireless request to said unitary apparatus, and upon receipt of a message comprising user information from said unitary apparatus, said automobile electronic system can perform actions selected from the group consisting of:

adjust seat position according to user information,

adjust wheel position according to user information,

adjust side mirror position according to user information,

adjust rear view mirror position according to user information,

set radio station according to user information,

load phone book according to user information, and

run games according to user information.

14. The unitary apparatus of claim 8, further comprising a means selected from group consisting of a keypad for entering digits, a Liquid Crystal Display (LCD) for displaying digits, a finger print reader, a voice synthesizer, and an iris scanner.

15. The client application of claim 8, wherein said client application further comprises an application programming interface (API) configured to provide an interface between said unitary apparatus and said client application.

16. The client application of claim 8, wherein said client application is a web application, and said web application makes a call to a browser plug-in configured to provide an interface between said unitary apparatus and said client application.

17. The client application of claim 8, wherein upon receipt of user data from said unitary apparatus, said user data is sent to a Remote Authentication Dial In User Service (RADIUS) server.