Mobile device and key fob pairing for multi-factor security

• US 8,933,778 B2
• Filed: 09/28/2012
• Issued: 01/13/2015
• Est. Priority Date: 09/28/2012
• Status: Active Grant

• Current Assignee: Intel Corporation
• Original Assignee: Intel Corporation
• Inventors: Birkel, Steven, Wouhaybi, Rita, Kohlenberg, Tobias, Mo, Stanley, Stutman, Joni D.
• Primary Examiner(s): BROWN, VERNAL U
• Application Number:
  US13/631,440
• Publication Number:
  US 20140091903A1
• Time in Patent Office: 837 Days
• Field of Search: 340/5.54, 340/5.61, 340/5.8, 340/3.1, 340/5.72, 307/10.2, 307/10.1
• US Class Current: 340/5.54
• CPC Class Codes: B60R 25/24 using electronic identifiers containing a code not memorised by the user
• CPC Class Codes: B60R 25/241 whereby access privileges are related to the identifiers
• CPC Class Codes: B60R 25/245 where the antenna reception area plays a role
• CPC Class Codes: G07C 2209/04 Access control involving a hierarchy in access rights
• CPC Class Codes: G07C 9/00309 operated with bidirectional data transmission between data carrier and locks
• CPC Class Codes: G07C 9/20 involving the use of a pass

Abstract

Systems and methods may provide for determining a first proximity status of a first mobile device with respect to a vehicle, and determining a second proximity status of a second mobile device with respect to the vehicle. Additionally, an accessibility of one or more functions of the vehicle may be configured based at least in part on the first proximity status and the second proximity status. In one example, a policy associated with one or more of the first mobile device and the second mobile device may be identified, wherein the accessibility is configured further based on the policy.

Claims

1. At least one non-transitory machine readable storage medium comprising a set of instructions which, when executed by a processor, cause a first mobile device to:

store a policy including a multi-factor condition that is to include a number uniquely configured for a user stating how many devices are to be required to allow a function of a vehicle to be accessible to the user;

receive a request from a security module of the vehicle; and

transmit the policy to the security module in response to the request.

2. The at least one medium of claim 1, wherein the multi-factor condition is to indicate whether the one or more functions are to be accessible if either the first mobile device or a second mobile device are not in proximity of the vehicle.

3. The at least one medium of claim 1, wherein the instructions, when executed, cause the first mobile device to pair the first mobile device with the vehicle.

4. The at least one medium of claim 3, wherein the instructions, when executed, cause the first mobile device to receive a passcode via a user interface of the first mobile device, and wherein the first mobile device is to be paired with the vehicle only if the passcode satisfies a login constraint of the policy.

5. The at least one medium of claim 1, wherein the instructions, when executed, cause the first mobile device to receive a notification that the first mobile device is a master device, and wherein the policy is to include a plurality of user profiles.

6. The at least one medium of claim 1, wherein the instructions, when executed, cause the first mobile device to receive a notification that either the first mobile device or a second mobile device is not within proximity of the vehicle during an attempted access of one or more functions of the vehicle.

29. The at least one machine readable storage medium of claim 1, wherein two or more users are each to be associated with a uniquely configured number of equal value for a same function and with a different uniquely configured constraint, and two or more users are each to be associated with a uniquely configured number of equal value for a same function and with a same uniquely configured constraint.

7. At least one non-transitory machine readable storage medium comprising a set of instructions which, when executed by a processor, cause a vehicle to:

determine a first proximity status of a first mobile device with respect to the vehicle;

determine a second proximity status of a second mobile device with respect to the vehicle;

configure an accessibility of one or more functions of the vehicle based at least in part the first proximity status and the second proximity status; and

identify a policy associated with one or more of the first mobile device and the second mobile device, wherein the accessibility is to be configured further based on the policy, wherein the policy is to include a number uniquely configured for a user stating how many devices are to be required to allow a function of the vehicle to be accessible to the user.

8. The at least one machine readable storage medium of claim 7, wherein the instructions, when executed, cause the vehicle to receive a user request via a user interface of one or more of the first mobile device, the second mobile device and the vehicle, wherein the accessibility is be configured in response to the user request.

9. The at least one machine readable storage medium of claim 8, wherein the instructions, when executed, cause the vehicle to deny the user request if the first proximity status and the second proximity status do not satisfy a multi-factor condition of the policy that is to include the number.

10. The at least one machine readable storage medium of claim 8, wherein the instructions, when executed, cause the vehicle to grant the user request if the first proximity status and the second proximity status satisfy a multi-factor condition of the policy that is to include the number.

11. The at least one machine readable storage medium of claim 7, wherein the instructions, when executed, cause the vehicle to apply one or more of a time constraint of the policy, a location constraint of the policy, and a login constraint of the policy to at least one of the one or more functions of the vehicle.

12. The at least one machine readable storage medium of claim 7, wherein the instructions, when executed, cause the vehicle to generate a notification via a user interface of one or more of the first mobile device, the second mobile device and the vehicle to announce that either the first mobile device is not present or the second mobile device is not present.

13. The at least one machine readable storage medium of claim 7, wherein at least one of the one or more functions of the vehicle includes one or more of a door unlock function, a trunk unlock function, an ignition function, a user setting function, a vehicle operation function, and a replacement device pairing function.

28. The at least one machine readable storage medium of claim 11, wherein the time constraint is to include a period of time uniquely configured for the user within which the user is to be allowed to access the function, and the location constraint to include a geographic location uniquely configured for the user within which the user is to be allowed to access the function.

14. An apparatus comprising:

a first factor module to determine a first proximity status of a first mobile device with respect to a vehicle;

a second factor module to determine a second proximity status of a second mobile device with respect to the vehicle; and

a security module to configure an accessibility of one or more functions of the vehicle based at least in part the first proximity status and the second proximity status, the security module further to identify a policy associated with one or more of the first mobile device and the second mobile device, wherein the accessibility is to be configured further based on the policy, wherein the policy is to include a number uniquely configured for a user stating how many devices are to be required to allow a function of the vehicle to be accessible to the user.

15. The apparatus of claim 14, wherein the security module further to receive a user request via a user interface of one or more of the first mobile device, the second mobile device and the vehicle, wherein the accessibility is to be configured in response to the user request.

16. The apparatus of claim 15, wherein the security module includes a denial component to deny the user request if the first proximity status and the second proximity status do not satisfy a multi-factor condition of the policy that is to include the number.

17. The apparatus of claim 15, wherein the security module includes a grant component to grant the user request if the first proximity status and the second proximity status satisfy a multi-factor condition of the policy that is to include the number.

18. The apparatus of claim 14, wherein the grant component further to apply one or more of a time constraint of the policy, a location constraint of the policy, and a login constraint of the policy to at least one of the one or more functions of the vehicle.

19. The apparatus of claim 14, wherein the security module includes a notification component to generate a notification via a user interface of one or more of the first mobile device, the second mobile device and the vehicle to announce that either the first mobile device is not present or the second mobile device is not present.

20. The apparatus of claim 14, wherein at least one of the one or more functions of the vehicle is to include one or more of a door unlock function, a trunk unlock function, an ignition function, a user setting function, a vehicle operation function, and a replacement device pairing function.

21. The apparatus of claim 14, further including a proximity sensor, wherein the first factor module further to use the proximity sensor to determine the first proximity status and the second factor module is to use the proximity sensor to determine the second proximity status.

22. A mobile device comprising:

a policy repository to store a policy including a multi-factor condition that is to include a number uniquely configured for a user stating how many devices are to be required to allow a function of a vehicle to be accessible to the user; and

a wireless interface to receive a request from a security module of the vehicle and transmit the policy to the security module in response to the request.

23. The mobile device of claim 22, wherein the multi-factor condition further to indicate whether the one or more functions are to be accessible if either the first mobile device or a second mobile device are not in proximity of the vehicle.

24. The mobile device of claim 22, further including a pairing module to pair the first mobile device with the vehicle.

25. The mobile device of claim 24, wherein the pairing module further to receive a passcode via a user interface of the first mobile device, and wherein the first mobile device is to be paired with the vehicle only if the passcode satisfies a login constraint of the policy.

26. The mobile device of claim 22, wherein the wireless interface further to receive a notification that the first mobile device is a master device, and wherein the policy is to include a plurality of user profiles.

27. The mobile device of claim 22, wherein the wireless interface further to receive a notification that either the first mobile device or the second mobile device is not within proximity of the vehicle during an attempted access of one or more functions of the vehicle.