Methods and systems for messaging with physical presence and temporal verifications

• US 9,191,213 B2
• Filed: 12/18/2013
• Issued: 11/17/2015
• Est. Priority Date: 12/18/2013
• Status: Active Grant

• Current Assignee: Xerox Corporation (Xerox Holdings Corp.)
• Original Assignee: Xerox Corporation (Xerox Holdings Corp.)
• Inventors: Tredoux, Gavan, Prabhat, Saurabh, Jain, Kanishk
• Primary Examiner(s): THIAW, CATHERINE B
• Application Number:
  US14/132,687
• Publication Number:
  US 20150172059A1
• Time in Patent Office: 699 Days
• US Class Current: 1/1
• CPC Class Codes: G06F 21/35 communicating wirelessly
• CPC Class Codes: G06F 2221/2111 Location-sensitive, e.g. geographical location, GPS
• CPC Class Codes: G06F 2221/2137 Time limited access, e.g. to a computer or data
• CPC Class Codes: H04L 2209/42 Anonymization, e.g. involving pseudonyms
• CPC Class Codes: H04L 63/0492 by using a location-limited connection, e.g. near-field communication or limited proximity of entities
• CPC Class Codes: H04L 9/3247 involving digital signatures
• CPC Class Codes: H04L 9/3297 involving time stamps, e.g. generation of time stamps
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/63 Location-dependent; Proximity-dependent

Abstract

A system and method for verifying proximity to a computational tag by receiving a first token from a server and transmitting the first token to the computational tag. The computational tag can verify the first token and generate a second token based on the first token where the second token includes a signature of the computational tag. The computational tag can transmit the second token to the mobile device and the mobile device can transmit the second token to the server. The server can verify the second token and allow access to a messaging service based on the verification of the second token.

Claims

1. A method for verifying proximity to a computational tag, the method comprising:

transmitting, by a mobile device to a server, a request to access a messaging service that requires proximity verification;

receiving, at the mobile device, a first token from the server in response to the request;

transmitting, via the mobile device, the first token to the computational tag, whereby the computational tag is powered by the mobile device and wherein;

the computational tag verifies the first token using power from the mobile device;

the computational tag generates a second token based on the first token using power from the mobile device; and

the second token comprises a signature of the computational tag and a timestamp;

receiving, at the mobile device, the second token from the computational tag; and

transmitting, via the mobile device, the second token to the server, wherein the server verifies proximity to the computational tag based on a verification of the second token and allows access to the messaging service based on the verification of the second token.

2. The method of claim 1, wherein:

the first token comprises a signature of the server;

the computational tag verifies the first token by verifying the signature of the server; and

the signature of the computational tag is a countersignature.

3. The method of claim 1, wherein the first token is transmitted to the computational tag using proximity communication.

4. The method of claim 3, wherein the proximity communication comprises at least one of Radio-frequency identification (RFID), a communication using near-field communication (NFC) standard, and a communication using Bluetooth®

standard.

5. The method of claim 3, wherein the computational tag is powered using the proximity communication.

6. The method of claim 1, wherein the access to the messaging service comprises at least one of read access and write access.

7. The method of claim 1, wherein the messaging service comprises at least one of email, text messaging, instant messaging, an electronic bulletin board, an internet forum, a websites, a blog, and a newsgroup.

8. The method of claim 1, wherein:

the verification of the second token comprises verifying the signature of the computational tag and verifying that the timestamp is within a specified time window.

9. A method for verifying proximity to a computational tag, the method comprising:

receiving, at a server, a request from a mobile device to access a messaging service that requires proximity verification;

transferring, by the server, a first token to the mobile device in response to the request, wherein;

the mobile device transmits the first token to the computational tag, whereby the computational tag is powered by the mobile device;

the mobile device receives a second token from the computational tag that is based on the first token and comprises a signature of the computational tag and a timestamp; and

the computational tag generates the second token using power from the mobile device;

receiving, at the server, the second token from the mobile device;

verifying, at the server, the second token and verifying proximity to the computational tag based on verifying the second token; and

allowing the mobile device access to the messaging service based on verifying the second token.

10. The method of claim 9, further comprising generating the first token wherein:

the first token comprises a signature;

the computational tag verifies the first token by verifying the signature; and

the signature of the computational tag is a countersignature.

11. The method of claim 9, wherein the first token is transmitted to the computational tag using proximity communication.

12. The method of claim 11, wherein the proximity communication comprises at least one of Radio-frequency identification (RFID), a communication using near-field communication (NFC) standard, and a communication using Bluetooth®

standard.

13. The method of claim 11, wherein the computational tag is powered using the proximity communication.

14. The method of claim 9, wherein the access to the messaging service comprises at least one of read access and write access.

15. The method of claim 9, wherein the messaging service comprises at least one of email, text messaging, instant messaging, an electronic bulletin board, an internet forum, a websites, a blog, and a newsgroup.

16. The method of claim 9, wherein:

verifying the second token comprises verifying the signature of the computational tag and verifying that the timestamp is within a specified time window.

17. A system for verifying proximity to a computational tag, the system comprising:

a processing system comprising one or more microprocessors; and

a memory system comprising one or more computer-readable media, wherein the one or more computer-readable media contain instructions that, when executed by the processing system, cause the processing system to perform operations comprising;

transmitting, by a mobile device to a server, a request to access a messaging service that requires proximity verification;

receiving, at the mobile device, a first token from the server in response to the request;

transmitting, via the mobile device, the first token to the computational tag, whereby the computational tag is powered by the mobile device and wherein;

the computational tag verifies the first token using power from the mobile device;

the computational tag generates a second token based on the first token using power from the mobile device; and

the second token comprises a signature of the computational tag and a timestamp;

receiving, at the mobile device, the second token from the computational tag; and

transmitting the second token to the server, wherein the server verifies proximity to the computational tag based on a verification of the second token and allows access to the messaging service based on the verification of the second token.

18. The system of claim 17, wherein:

the first token comprises a signature of the server;

the computational tag verifies the first token by verifying the signature of the server; and

the signature of the computational tag is a countersignature.

19. The system of claim 17, wherein:

the first token is transmitted to the computational tag using proximity communication; and

the computational tag is powered using the proximity communication.

20. The system of claim 17, wherein the access to the messaging service comprises at least one of read access and write access.