Gesture-based encryption methods and systems

• US 9,252,952 B2
• Filed: 12/18/2013
• Issued: 02/02/2016
• Est. Priority Date: 12/20/2012
• Status: Active Grant

• Current Assignee: Lockheed Martin Corporation (Martin Marietta Corporation)
• Original Assignee: Lockheed Martin Corporation (Martin Marietta Corporation)
• Inventors: Morrison, John Stuart
• Primary Examiner(s): SHEHNI, GHAZAL B
• Application Number:
  US14/133,114
• Publication Number:
  US 20140181523A1
• Time in Patent Office: 776 Days
• Field of Search: None
• US Class Current: 1/1
• CPC Class Codes: G06F 21/32 using biometric data, e.g. fingerprints, iris scans or voiceprints
• CPC Class Codes: H04L 63/06 for supporting key management in a packet data network cryptographic mechanisms or cryptographic arrangements for key management H04L9/08
• CPC Class Codes: H04L 63/0861 using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231
• CPC Class Codes: H04L 9/0861 Generation of secret information including derivation or calculation of cryptographic keys or passwords
• CPC Class Codes: H04L 9/3231 Biological data, e.g. fingerprint, voice or retina network architectures or network communication protocols for supporting authentication of entities using biometrical features in a packet data network H04L63/0861

Abstract

Methods and systems for transmitting and receiving are disclosed. For example, a method for establishing secure communications can include measuring one or more human gestures using a sensor on a first device so as to create a first metric of the one or more human gestures, creating a strong encryption key based on the first metric, including time-based information incorporated into the first metric, and communicating to a second device using the strong encryption key to encrypt data sent to the second device.

Claims

1. A method for establishing secure communications, comprising:

measuring one or more human gestures using a sensor on a first device so as to create a first metric based on the one or more human gestures that includes time-based information corresponding to the one or more human gestures;

creating a strong encryption key based on the first metric, including the time-based information incorporated into the first metric;

communicating to a second device using the strong encryption key to encrypt data sent to the second device; and

performing an authentication between the first device and the second device including;

creating a first handshake string based on a communication initiation time, a unique device identifier of the first device and the first metric;

sending the first handshake string to the second device;

receiving a second handshake string from the second device, the second handshake string created using the communication initiation time, a unique device identifier of the second device and a second gesture-based metric created at the second device; and

verifying an identity of the second device using the second handshake string using pre-stored information including the unique device identifier of the second device and a reference image associated with the second device.

2. The method of claim 1, wherein the one or more human gestures are measured by a touch screen incorporated into the first device.

3. The method of claim 2, wherein the first metric includes spatial coordinates of locations touched, a sequence in which the locations were touched, and time information when the locations were touched.

4. The method of claim 1, further comprising creating an initial encryption key, and sending the strong encryption key to the second device in an encrypted form using the initial encryption key.

5. The method of claim 4, wherein creating the initial encryption key includes creating a first string using the second image reference, the first metric and the second metric.

6. The method of claim 5, wherein creating the strong encryption key includes creating a second string using time-based information of the first metric not used in the creation of the initial encryption key.

7. The method of claim 6, wherein creating the strong encryption key further includes applying a hash function to the second string.

8. The method of claim 6, wherein creating the strong encryption key further includes scrambling the second string.

9. A device for establishing secure communications, comprising:

a sensor capable of time-based measurement of one or more human gestures;

metric circuitry configured to create a first metric based on the one or more human gestures that includes time-based information corresponding to the one or more human gestures;

initial key generation circuitry capable of producing an initial encryption key based on a portion of the first metric;

strong key generation circuitry capable of producing a strong encryption key based on the first metric including time information of the first metric not used to create the initial encryption key;

encryption circuitry configured to encode the strong encryption key using the initial encryption key to create an encoded strong encryption key; and

input/output circuitry configured to send the encoded strong encryption key to a second device.

10. The device of claim 9, wherein the sensor includes a touch screen incorporated into the device, and wherein the first metric is derived based on plurality of locations touched by a user along with at least one of a sequence of locations touched and respective times that each location was touched.

11. The device of claim 9, further comprising authentication circuitry configured to perform authentication between the device and the second device.

12. The device of claim 11, wherein the authentication circuitry is configured to:

create a first handshake string based on a communication initiation time, a unique device identifier of the device and the first metric;

send the first handshake string to the second device;

receive a second handshake string from the second device, the second handshake string created using the communication initiation time, a unique device identifier of the second device and a second gesture-based metric created at the second device; and

verify the identity of the second device using the second handshake string using pre-stored information including the unique device identifier of the second device and a reference image of the second device.

13. The device of claim 11, wherein the strong key generation circuit generates the strong encryption key by producing a string based on the first metric, then applying a hash function to the string.

14. A method for establishing secure communications, comprising:

time-based measuring of one or more human gestures on a first device having a sensor;

creating a first metric using the sensor based on the one or more human gestures that includes time-based information corresponding to the one or more human gestures;

producing an initial encryption key based on a portion of the first metric;

producing a strong encryption key based on the first metric including the time-based information of the first metric not used to create the initial encryption key;

encoding the strong encryption key using the initial encryption key to create an encoded strong encryption key; and

sending the encoded strong encryption key to a second device.

15. The method of claim 14, wherein time-based measuring is performed using a touch screen incorporated into the first device, and wherein the first metric is derived based on plurality of locations touched by a user along with at least one of a sequence of locations touched and respective times that each location was touched.

16. The method of claim 15, further comprising performing an authentication between the first device and the second device.

17. The method of claim 16, wherein performing the authentication between the first device and the second device includes:

creating a first handshake string based on a communication initiation time, a unique device identifier of the first device and the first metric;

sending the first handshake string to the second device;

receiving a second handshake string from the second device, the second handshake string created using the communication initiation time, a unique device identifier of the second device and a second gesture-based metric created at the second device; and

verifying the identity of the second device using the second handshake string using pre-stored information including the unique device identifier of the second device and a reference image of the second device.