Authentication of devices in a wireless network

• US 8,769,616 B2
• Filed: 03/06/2012
• Issued: 07/01/2014
• Est. Priority Date: 05/05/2006
• Status: Active Grant

• Current Assignee: Avago Technologies General IP PTE Limited (Broadcom, Inc.)
• Original Assignee: NXP B.V. (NXP Semiconductors NV)
• Inventors: Dhand, Harsh, Rao, Shinivasa
• Primary Examiner(s): Armouche, Hadi
• Assistant Examiner(s): HOLMES, ANGELA R
• Application Number:
  US13/412,929
• Publication Number:
  US 20120167192A1
• Time in Patent Office: 847 Days
• Field of Search: 726 1- 5, 726/19, 713/182, 713/2, 713/150, 713168-169, 713/155, 713/186, 455/41.1, 705905-908
• US Class Current: 726/3
• CPC Class Codes: G06F 21/43 wireless channels
• CPC Class Codes: G06F 21/60 Protecting data
• CPC Class Codes: H04L 63/0492 by using a location-limited connection, e.g. near-field communication or limited proximity of entities
• CPC Class Codes: H04L 63/126 the source of the received data
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/10 Integrity
• CPC Class Codes: H04W 12/63 Location-dependent; Proximity-dependent
• CPC Class Codes: H04W 4/80 Services using short range communication, e.g. near-field communication [NFC], radio-frequency identification [RFID] or low energy communication
• CPC Class Codes: H04W 88/02 Terminal devices
• CPC Class Codes: Y10S 705/907 Specific computer id, e.g. serial number, configuration

Abstract

Various aspects are discussed, for example, a method is described for authentication of devices in a wireless network involving NFC (Near Field Communication), wherein

• • a device periodically switches its mode from a read mode, in which it is able to receive authentication data from one or more other devices, to a write mode, in which it sends out authentication data to the one or more other devices, according to a random time slot scheme,
  • the device authenticates itself after having received authentication data from another device during the read mode, and
  • the device switches permanently its mode to the write mode after being authenticated.

Claims

1. An apparatus comprising:

a chip configured and arranged to communicate using near field communication (NFC) and implement a bi-directional authentication process that includes

a read mode in which the chip operates to

receive an authentication identification;

compare the received authentication identification to stored authentication identification on the chip; and

authenticate the apparatus based upon the comparison of the received authentication identification to the stored authentication identification; and

a write mode in which the chip operates to

access the stored authentication identification; and

transmit the authentication identification to a second chip operating in the read mode, wherein in the read mode, the chip is further configured and arranged to attempt the bi-directional authentication process until the apparatus is authenticated or until a time out occurs; and

the chip is further configured and arranged to alternate between the read mode and the write mode until the apparatus is authenticated in read mode and thereafter to remain in write mode.

2. The apparatus of claim 1, wherein the chip is further configured and arranged to alternate between the read mode and the write mode at random intervals.

3. The apparatus of claim 1, wherein the chip is further configured and arranged to enter the read mode after a pre-specified application has started, and the chip and the second chip are configured and arranged to exchange information arbitrating for establishing a connection therebetween prior to implementation of the bi-directional authentication process.

4. The apparatus of claim 1, wherein the chip is further configured and arranged to enter a second authentication mode when it is shut down, in which the shutdown operation is authenticated.

5. The apparatus of claim 1, wherein the authentication identification includes an identifier for signalling a type of data and an encrypted user ID.

6. The apparatus of claim 1, wherein the chip is further configured and arranged to operate in the read mode for a predefined period.

7. The apparatus of claim 1, wherein the apparatus is a mobile phone, a personal digital assistant, or a smart card.

8. An apparatus comprising:

a chip configured and arranged to

communicate using near field communication (NFC),

implement an authentication protocol that includes an authentication mode in which the chip periodically switches from a read mode, in which it is configured to receive authentication data from a second chip, to a write mode, in which it is configured to send out authentication data to the second chip according to a random time slot scheme, and

to authenticate itself after having received authentication data from the second chip during the read mode and switch permanently to the write mode after being authenticated, wherein in the authentication mode, the chip is further configured and arranged to attempt the authentication process until the apparatus is authenticated or until a time out occurs.

9. The apparatus of claim 8, wherein the authentication protocol is implemented as part of an application or an operating system of the apparatus.

10. The apparatus of claim 8, wherein the authentication protocol includes an identifier for signalling a type of data and an encrypted user ID, and the chip and the second chip are configured and arranged to exchange information arbitrating for establishing a connection therebetween prior to implementation of the authentication mode.

11. The apparatus of claim 8, wherein the chip is further configured and arranged to operate in the read mode for a predefined period.

12. The apparatus of claim 8, wherein the chip is further configured and arranged to enter a second authentication mode when it is shut down, in which the shutdown operation is authenticated.

13. The apparatus of claim 8, wherein the apparatus is a mobile phone, a personal digital assistant, or a smart card.

14. A system comprising:

at least two chips configured and arranged to communicate using near field communication (NFC) and implement a bi-directional authentication process that includes

a read mode in which a chip operates to

receive an authentication identification from at least a second one of the at least two chips;

compare the received authentication identification to authentication identification stored on the chip; and

authenticate the chip based upon the comparison of the received authentication identification to the authentication identification stored on the chip; and

a write mode in which the chip operates to

access stored authentication identification; and

transmit the authentication identification to a chip operating in the read mode; and

the chips are further configured and arranged to alternate between the read mode and the write mode until the chips are authenticated in read mode and thereafter to remain in write mode, and to alternate between the read mode and the write mode at random intervals, to remain in read mode, and attempt the bi-directional authentication process until at least one of the two chips is authenticated and/or until a time out occurs.

15. The system of claim 14, wherein the authentication identification includes an identifier for signalling a type of data and an encrypted user ID.

16. The system of claim 14, wherein the chips are further configured and arranged to enter the read mode after being powered on, and the chip and the second one of the at least two chips are configured and arranged to exchange information arbitrating for establishing a connection therebetween prior to implementation of the bi-directional authentication process.

17. The system of claim 14, wherein the chips are further configured and arranged to operate in the read mode for a predefined period.