Vicinity-based multi-factor authentication

• US 9,030,290 B2
• Filed: 11/20/2012
• Issued: 05/12/2015
• Est. Priority Date: 11/16/2012
• Status: Active Grant

• Current Assignee: Telefonaktiebolaget LM Ericsson
• Original Assignee: Telefonaktiebolaget LM Ericsson
• Inventors: Keranen, Ari, Arkko, Jari
• Primary Examiner(s): Trieu, Van
• Assistant Examiner(s): Yu, Royit
• Application Number:
  US13/682,030
• Publication Number:
  US 20140139315A1
• Time in Patent Office: 903 Days
• Field of Search: 340 561- 564, 340/426.36, 726/14, 726/20, 380/270
• US Class Current: 340/5.51
• CPC Class Codes: G05B 1/00 Comparing elements, i.e. elements for effecting comparison directly or indirectly between a desired value and existing or anticipated values
• CPC Class Codes: G07C 9/00174 Electronically operated locks; Circuits therefor; Nonmechanical keys therefor, e.g. passive or active electrical keys or other data carriers without mechanical keys mechanical locks with electric permutation E05B49/00; arrangements for sensing or reading record carriers G06K7/00; electronic switching H03K17/00
• CPC Class Codes: H04L 2463/082 applying multi-factor authentication
• CPC Class Codes: H04L 63/0492 by using a location-limited connection, e.g. near-field communication or limited proximity of entities
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04W 12/068 using credential vaults, e.g. password manager applications or one time password [OTP] applications

Abstract

The invention relates to a wireless device, configured for ensuring authentication of a user, to a reference unit configured for ensuring authentication of a user of the wireless device and to a method for ensuring authentication of a user. The wireless device comprises a checking unit configured for scanning a distance to a reference unit and for checking if the distance scanned lies within a predetermined range such that authentication of the user is ensured. In this way, a wireless device is provided which is simple and cost-effective to realize and increases security by making sure that the rightful owner is available without the need of asking for PIN codes, passwords or other measures, such as biometric recognition, i.e. voice recognition, fingerprint recognition, retina recognition and the like.

Claims

1. A wireless device, configured for ensuring authentication of a user, comprising:

a processor for detecting that the wireless device is within the proximity of an object with which the device may interact; and

a scanner for scanning a distance from the wireless device to a reference unit in response to the processor detecting that the wireless device is within the proximity of the object with which the device may interact, wherein

the processor is configured to determine whether the distance scanned lies within a predetermined range such that authentication of the user is ensured, and

the object is separate and distinct from the reference unit.

2. The wireless device according to claim 1, wherein the processor is further configured for running a cryptographic challenge-response protocol which requests the reference unit to prove its identity using a shared secret cryptography and/or a public key cryptography while employing the scanner to scan the distance to the reference unit such that it is ensured that the wireless device and the reference unit are assigned to each other.

3. The wireless device according to claim 2, wherein the cryptographic challenge-response protocol requests a public key identity of the reference unit and the public key identity of the reference unit matches the public key identity stored at the wireless device.

4. The wireless device according to claim 1, wherein the predetermined range is selected by pairing the wireless device with the reference unit in such a way that the processor requests the position of the reference unit before calculating the distance between the reference unit and the wireless device.

5. The wireless device according to claim 1, wherein the predetermined range is adjusted by varying a radio power level and measuring the position of the reference unit such that the distance between the reference unit and the wireless device is extracted and compared with predetermined reference data.

6. The wireless device according to claim 1, wherein the processor is further configured for detecting that at least one security unit is arranged within the predetermined range to the reference unit.

7. The wireless device according to claim 6, wherein

the wireless device comprises an application unit, and

the at least one security unit is configured for sending a command to the application unit which is configured for running a program ensuring authentication of the user.

8. The wireless device according to claim 6, wherein when the distance between the reference unit and the wireless device or the distance between the reference unit and the at least one security unit lies outside the predetermined range such that authentication of the user fails, the processor is further configured for requesting a password and/or a PIN code from the user and/or for performing biometric recognition.

9. The wireless device according to claim 6, wherein the at least one security unit is integrated into the wireless device.

10. The wireless device according to claim 6, wherein the at least one security unit is integrated into a wristwatch, into jewelry, into clothing, into luggage, into a laptop, into a key fob or into a key chain.

11. A reference unit configured for ensuring authentication of a user of a wireless device according to claim 1, wherein the reference unit is integrated into clothing.

12. A method for ensuring authentication of a user, comprising the steps of:

a) determining, by one or more processors within the wireless device, that the wireless device is within the proximity of an object with which the device may interact;

b) in response to determining that the wireless device is within the proximity of the object, scanning a distance from the wireless device to a reference unit; and

c) checking if the distance scanned in step b) lies within a predetermined range such that authentication of the user is ensured, wherein

the object is separate and distinct from the reference unit.

13. The method according to claim 12, further comprising the step of detecting that at least one security unit is arranged within the predetermined range to the reference unit.

14. The method according to claim 13, further comprising the step of sending a command to an application unit which is configured for running a program ensuring authentication of the user.

15. The method of claim 12, wherein

the object is a door, and

the method further comprises the wireless device opening the door in response to the wireless device determining that the distance scanned in step (b) lies within the predetermined range.