Physical location verification

• US 8,909,194 B2
• Filed: 12/08/2006
• Issued: 12/09/2014
• Est. Priority Date: 04/21/2005
• Status: Active Grant

• Current Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Original Assignee: Microsoft Corporation
• Inventors: Madhavan, Poovanpilli G., Roberts, David A., Alam, Mohammad Shabbir, Deng, Zhong, Mittal, Sharad, Agiwal, Ankur
• Primary Examiner(s): Rampuria, Sharad
• Application Number:
  US11/635,864
• Publication Number:
  US 20070081508A1
• Time in Patent Office: 2,923 Days
• Field of Search: 370/328, 370/338, 455410-411, 455/41.2, 4554561-457, 455/440, 455/441, 455/1
• US Class Current: 455/411
• CPC Class Codes: H04L 63/0492 by using a location-limited connection, e.g. near-field communication or limited proximity of entities
• CPC Class Codes: H04L 63/061 for key exchange, e.g. in peer-to-peer networks cryptographic mechanisms or cryptographic arrangements for key agreement H04L9/0838
• CPC Class Codes: H04L 67/14 Session management for real-time applications in data packet communications networks H04L65/1066
• CPC Class Codes: H04W 12/04 Key management, e.g. using generic bootstrapping architecture [GBA]
• CPC Class Codes: H04W 12/50 Secure pairing of devices
• CPC Class Codes: H04W 12/63 Location-dependent; Proximity-dependent
• CPC Class Codes: H04W 52/28 using user profile, e.g. mobile speed, priority or network state, e.g. standby, idle or non transmission
• CPC Class Codes: H04W 52/281 taking into account user or data type priority
• CPC Class Codes: H04W 52/283 Power depending on the position of the mobile
• CPC Class Codes: H04W 52/367 Power values between minimum and maximum limits, e.g. dynamic range
• CPC Class Codes: H04W 8/005 Discovery of network devices, e.g. terminals
• CPC Class Codes: Y04S 40/20 Information technology specific aspects, e.g. CAD, simulation, modelling, system security

Abstract

A process for secure, safe, and easy provisioning of a wireless device with credentials to connect to a wireless network. A connecting wireless device and an established wireless device both utilize low power transmission at close proximity to exchange wireless connection setting information and/or a password. The connecting wireless device is moved into proximity with the established wireless device and a low power setting is discovered at which the wireless devices may communicate with a sufficiently low error rate. The proximity of the connecting wireless device to the established wireless device is verified and the connecting wireless device is then passed the secret information by the established network device.

Claims

1. A method of operating a first device to authenticate a portable wireless device, the method comprising:

with the first device, selecting a pattern of physical movements from among a set of patterns or randomly generating the pattern of physical movements and prescribing the selected pattern to the portable wireless device by communicating wirelessly, via an antenna of the first device, with the portable wireless device to provide to the portable wireless device pattern information indicating the pattern of physical movements;

analyzing signal information obtained from the antenna to determine, by the first device, whether the portable wireless device has been physically moved with movements that match the pattern of physical movements prescribed by the selected pattern; and

wherein when it has been determined that the portable wireless device has been physically moved according to the pattern of physical movements then the portable wireless device is determined to have been authenticated, and wherein when it has been determined that the portable wireless device has not been moved according to the pattern of physical movements then the wireless device is determined to have not been authenticated, and wherein pattern information provided to the first device comprises information configured to be used by the first device to display or play a description of the pattern of physical movements.

2. The method of claim 1, wherein, according to the pattern information, the portable wireless device provides audio instructions describing the pattern of physical movement.

3. The method of claim 1, wherein according to the pattern information, the portable wireless device displays information describing the pattern of physical movements.

4. The method of claim 1, further comprising providing an authentication of the portable wireless device in response to determining that the portable wireless device has been physically moved according to the pattern of physical movements.

5. The method of claim 1, wherein the determining whether the portable wireless device has been physically moved according to the pattern of movements comprises measuring at a plurality of times separation between the portable wireless device and a reference point, the measuring comprising receiving a wireless communication from the second device via the antenna.

6. The method of claim 5, wherein the determining whether the portable wireless device has been physically moved according to the pattern of movements further comprises:

measuring, based on at least one wireless MAC (media access control) protocol, separation between the portable wireless device and the reference point.

7. A method, performed by a first device comprising a first antenna, the method authenticating a second device comprising a second antenna, the method comprising:

providing, from the first device to the second device, text or media indicating a pattern of physical movements, the physical movements including at least one movement away from first device;

receiving wireless communications from the antenna of the second device;

analyzing the received wireless communications to determine whether the wireless communications indicate that the second device has moved relative to the first device according to the pattern of physical movements; and

indicating that the second device is authenticated when the received wireless communications have been determined to indicate that the pattern of physical movements occurred.

8. The method of claim 7, wherein the computer-executable instructions for performing the method further comprise computer-executable instructions for performing steps comprising:

communicating with the second device in a low power wireless mode.

9. The method of claim 8, wherein the computer-executable instructions for performing the method further comprise computer-executable instructions for performing steps comprising:

in response to the indicating, communicating secret information to the second device in the low power wireless mode.

10. The method of claim 9, wherein the method further comprises providing, by the second device, information in the human perceptible format that indicates the pattern of physical movements.

11. The method of claim 7, wherein the wireless communications comprise a plurality of range measurement packets in accordance with a MAC protocol of a wireless network.

12. The method of claim 7, wherein:

the analyzing comprises causing a network interface card to measure a propagation time for wireless communication with the device at least two times, at least one of those times corresponding to the movement away from the first device; and

the determining is based on data obtained when propagation time is measured at least two times.

13. A method of authentication comprising:

receiving, at a portable device from an authenticating device, via a wireless receiver of the portable device, information indicating a pattern of motions prescribed by the authenticating device;

outputting, by a portable device, information indicating the pattern of motions, the pattern of motions comprising a motion toward the authenticating device and a motion away from the authenticating device; and

transmitting, by a wireless transmitter of the portable device, signals while the portable device is being physically moved by a user of the portable device according to the pattern of motions such that the portable device moves away from the authenticating device and toward the authenticating device.

14. The method of claim 13, wherein the portable device is a portable phone.

15. The method of claim 13, wherein the authenticating device comprises a wireless access point, the method further comprising:

initiating wireless communication between the portable device and the wireless access point to gain access by the portable device to a wireless network.

16. The method of claim 15, wherein the pattern of motions includes touching the wireless access point with the portable device.

17. The method of claim 15, further comprising:

receiving with the portable device security information from the wireless access point.

18. The method of claim 13, further comprising:

initiating wireless communication between the portable device and an access point to gain access by the device to a wireless network; and

wherein the access point are the authenticating device.

19. A method of authenticating a wireless device for wireless access to a wireless access device, the method performed by the wireless access device, the method comprising:

receiving a request from the wireless device for network access via the wireless access device;

responsive to the request, randomly selecting or generating a physical movement pattern comprised of indicia of a prescribed sequence of physical movements;

informing the wireless device of the movement pattern, and, according to the informing, the wireless device providing output perceivable by a user thereof to inform the user of the movement pattern;

after the informing, monitoring emissions from the wireless device, identifying ranges between the first and second wireless devices from the emissions using a range measurement process, and according to the identifying determining whether the wireless device has moved the prescribed sequence of physical movements; and

determining whether to grant the request for wireless access according to the determining of whether the wireless device has moved the prescribed sequence of physical movements.