Wireless device authentication and security key management

• US 8,738,907 B2
• Filed: 08/02/2007
• Issued: 05/27/2014
• Est. Priority Date: 08/02/2007
• Status: Active Grant

• Current Assignee: Motorola Solutions, Inc.
• Original Assignee: Motorola Solutions, Inc.
• Inventors: French, Michael T.
• Primary Examiner(s): McNally, Michael S
• Assistant Examiner(s): Johnson, Carlton
• Application Number:
  US11/833,043
• Publication Number:
  US 20090034736A1
• Time in Patent Office: 2,490 Days
• US Class Current: 713/168
• CPC Class Codes: H04L 2209/80 Wireless network architectures or network communication protocols for wireless network security H04W12/00
• CPC Class Codes: H04L 63/062 for key distribution, e.g. centrally by trusted party cryptographic mechanisms or cryptographic arrangements for key distribution involving a central third party H04L9/0819
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 9/0844 with user authentication or key authentication, e.g. ElGamal, MTI, MQV-Menezes-Qu-Vanstone protocol or Diffie-Hellman protocols using implicitly-certified keys
• CPC Class Codes: H04L 9/0891 Revocation or update of secret information, e.g. encryption key update or rekeying
• CPC Class Codes: H04L 9/3271 using challenge-response
• CPC Class Codes: H04W 12/04 Key management, e.g. using generic bootstrapping architecture [GBA]
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/63 Location-dependent; Proximity-dependent

Abstract

A method and wireless device for updating at least one cryptographic security key (116) associated with a wireless device (104) and an authentication module (108). An over-the-air programming message comprising security key update information is received (804) from an information processing system (118). The security key update information is processed (808). At least one new security key is extracted from the security key update information in response to the processing (806). At least one existing security key (116) is updated with the at least one new security key (124) that has been extracted.

Claims

1. An authentication method for authenticating one or more functions at a wireless device based on a proximity of the wireless device to a corresponding authentication module, the method comprising:

the wireless device determining that a particular function has been requested;

the wireless device determining whether the particular function requires authentication of the wireless device via a wireless authentication module that is physically separate from the wireless device prior to execution of the requested particular function as a proxy for determining whether the wireless device is allowed to execute the particular function at the wireless device'"'"'s current location;

responsive to the wireless device determining that the particular requested function requires authentication of the wireless device, the wireless device;

determining, via a short-range transceiver circuit of the wireless device, whether an authentication module is available within a short-range wireless communication range of the wireless device, and is thus proximate the wireless device, for use in authenticating the wireless device and thus determining whether the wireless device is allowed to execute the particular function at the wireless device'"'"'s current location;

responsive to determining that a particular authentication module is within the short-range wireless communication range of the wireless device, the wireless device sending an authentication challenge to the authentication module and determining whether the wireless device is able to authenticate itself via the particular authentication module by comparing a locally produced authentication result and a remotely produced authentication result calculated at the authentication module responsive to the authentication challenge and transmitted back to the wireless device via the short-range transceiver circuit;

if the wireless device is not able to authenticate itself via the authentication module, by comparing and not finding a match between the locally produced authentication result and the remotely produced authentication result, the wireless device determining that it is not allowed to execute the particular function at the wireless device'"'"'s current location and the wireless device refraining from executing the particular requested function;

if the wireless device is able to authenticate itself via the authentication module, by comparing and finding a match between the locally produced authentication result and the remotely produced authentication result, the wireless device determining that it is allowed to execute the particular function at the wireless device'"'"'s current location and the wireless device executing the particular requested function.

2. The method of claim 1, wherein the wireless device contains a plurality of keys, each key being associated with a different authentication module, the determining whether the wireless device is able to authenticate itself via the particular authentication module comprising determining whether the wireless device and the particular authentication module share a common one of the plurality of keys.

3. The method of claim 1, further comprising responsive to determining that no authentication modules are within the short-range wireless communication range of the wireless device, the wireless device determining that it is not allowed to execute the particular function at the wireless device'"'"'s current location and the wireless device refraining from executing the particular requested function.

4. The method of claim 1, further comprising affecting security of the wireless device and the authentication module by one of updating and adding a shared key to the wireless device and the authentication module, the shared key being received at the wireless device from a key manager device separate from the wireless device and the authentication module, and being transmitted to the authentication module via the wireless device.

5. The method of claim 1, further comprising affecting security of the wireless device and the authentication module by one of updating and adding a shared key to the wireless device and the authentication module, the shared key being separately transmitted to (i) the wireless device and (ii) to the particular authentication module without passing through the wireless device.

6. The method of claim 1, further comprising:

receiving, at the wireless device, a communication that the wireless device is to use the particular requested function, the particular requested function being a secure service.

7. The method of claim 1, further comprising:

receiving, over-the-air from a key manager device, a randomly generated seed and a proximity key created using the randomly generated seed,

generating the authentication challenge by generating a random challenge and using the proximity key to create the expected response,

sending the authentication challenge by forwarding the randomly generated seed as well as transmitting the random challenge, and

the particular authentication module generating the remotely produced authentication result by;

generating an authentication key from the randomly generated seed, and

generating the remotely produced authentication result from the authentication key and the random challenge.

8. The method of claim 1, further comprising the wireless device determining that a second particular requested function does not require authentication of the wireless device via a wireless authentication module that is physically separate from the wireless device prior to execution of the second particular requested function, and the wireless device responsively executing the second particular requested function without authenticating itself via any authentication module.

9. The method of claim 1, wherein the wireless device is associated with a plurality of different authentication modules, each different authentication module controlling access to one or more corresponding different functions in the wireless device based on the wireless device'"'"'s proximity to each corresponding different authentication module.

10. The method of claim 1, wherein a plurality of authentication modules are associated with a same set of functions at the wireless device, each authentication module in the plurality being associated with a different location and authenticating against different ones of the same set of functions so as to allow execution of different ones of the same set of functions at the different locations.

11. The method of claim 6, further comprising the wireless device performing an additional internal authentication process on the communication, in addition to determining whether the wireless device can authenticate itself via the particular authentication module.

12. The method of claim 1, further comprising affecting security of the wireless device and the authentication module by one of updating and adding a shared key to the wireless device and the particular authentication module, via the wireless device, if at least one of (i) another wireless device associated with the particular authentication module is compromised and (ii) a cryptographic period has expired.

13. The method of claim 1, wherein the short-range transceiver circuit comprises one of an RFID module, a Bluetooth module, a Zigbee module, and an infrared module.

14. The method of claim 1, wherein the particular requested function is one of (i) an encrypted transmission of voice, text, or multi-media, (ii) an encrypted reception of voice, text, or multi-media, and (iii) a display of sensitive data to a current user.

15. A wireless device adapted to authenticate one or more functions at the wireless device based on a proximity of the wireless device to a corresponding authentication module, the wireless device comprising:

a memory;

a processor communicatively coupled to the memory;

a short-range transceiver; and

a security key updating module communicatively coupled to the memory and the processor, wherein the security key updating module is adapted, responsive to detecting that a particular function has been requested and that the particular function requested requires authentication of the wireless device via a wireless authentication module that is physically separate from the wireless device prior to execution of the requested particular function as a proxy for determining whether the wireless device is allowed to execute the particular function at the wireless device'"'"'s current location, to;

determine, via the short-range transceiver, whether a particular authentication module is within a short-range wireless communication range of the wireless device, and is thus proximate the wireless device, for use in authenticating the wireless device and thus determining whether the wireless device is allowed to execute the particular function at the wireless device'"'"'s current location;

responsive to determining that a particular authentication module is within the short-range wireless communication range of the short-range transceiver, send an authentication challenge to the authentication module and determine whether the wireless device is able to authenticate itself via the particular authentication module by comparing a locally produced authentication result and a remotely produced authentication result calculated at the authentication module responsive to the authentication challenge and transmitted back to the wireless device via the short-range transceiver circuit;

if the wireless device is not able to authenticate itself via the authentication module, by comparing and not finding a match between the locally produced authentication result and the remotely produced authentication result, cause the processor to determine that it is not allowed to execute the particular function at the wireless device'"'"'s current location and to subsequently refrain from executing the particular requested function;

if the wireless device is able to authenticate itself via the authentication module, by comparing and finding a match between the locally produced authentication result and the remotely produced authentication result, cause the processor to determine that it is allowed to execute the particular function at the wireless device'"'"'s current location and to subsequently permit the processor to execute the particular requested function.

16. The wireless device of claim 15, wherein the wireless device contains a plurality of keys, each key being associated with a different authentication module, wherein the security key updating module is further adapted to determine whether the wireless device is able to authenticate itself via the particular authentication module by determining whether the wireless device and the particular authentication module share a common one of the plurality of keys.

17. The wireless device of claim 15, wherein the security key updating module is further adapted to, responsive to determining that no authentication modules are within the short-range wireless communication range of the wireless device, determine that it is not allowed to execute the particular function at the wireless device'"'"'s current location and subsequently refrain from executing the particular requested function.

18. The wireless device of claim 15, wherein the wireless device is adapted to:

receive, at the wireless device, a communication that the wireless device is to use the particular requested function, the particular requested function being a secure service.

19. The wireless device of claim 15, wherein the wireless device is adapted to:

receive, from a key manager over-the-air, a randomly generated seed and a proximity key created using the randomly generated seed,

generate the authentication challenge by generating a random challenge and using the proximity key to create the expected response, and

send the authentication challenge by forwarding the randomly generated seed as well as the random challenge to the particular authentication module via the short-range transceiver.

20. A method for updating authentication information at a wireless device and a particular local authentication module for use in authenticating the wireless device via the particular local authentication module when the particular local authentication module is within a short-range wireless communication range of the wireless device as a proxy for determining whether the wireless device is allowed to execute a function at the wireless device'"'"'s current location, the method comprising:

receiving, at the wireless device, a key modification communication from a key manager device having multiple encryptions;

decrypting an outer encryption of the key modification communication at the wireless device to produce an encrypted key modification message;

determining, via a short-range transceiver circuit of the wireless device, if a local authentication module is available that is associated with the wireless device and is available for use in authenticating the wireless device as a proxy for determining whether the wireless device is allowed to execute particular functions at the wireless device'"'"'s current location;

responsive to determining that a particular local authentication module is available that is associated with the wireless device and is available for use in authenticating the wireless device, updating the particular local authentication module, the updating comprising;

transmitting the encrypted key modification message from the wireless device to the particular local authentication module via the short-range transceiver circuit of the wireless device;

decrypting an encryption of the key modification message at the particular local authentication module to produce decrypted key modification instructions to update or invalidate a key associated with the wireless device and the particular local authentication module;

encrypting a key modification response at the particular local authentication module;

transmitting the encrypted key modification response from the particular local authentication module to the wireless device;

further encrypting the encrypted key modification response at the wireless device; and

transmitting the further encrypted key modification response from the wireless device to the key manager device;

decrypting the encrypted key modification message at the wireless device to produce the decrypted key modification instructions to update or invalidate a key associated with the wireless device and the particular local authentication module;

servicing the decrypted key modification instructions at the particular local authentication module and at the wireless device; and

if, as a result of the servicing, the particular local authentication module is no longer associated with the wireless device such that the wireless device cannot authenticate itself via the particular local authentication module as a proxy for determining whether the wireless device is allowed to execute particular functions at the wireless device'"'"'s current location, disallowing at least one previously allowed function of the wireless device associated with the particular local authentication module.