Method and mobile device for generating a data authentication key

• US 9,253,633 B2
• Filed: 12/21/2012
• Issued: 02/02/2016
• Est. Priority Date: 12/20/2012
• Status: Active Grant

• Current Assignee: Telefonaktiebolaget LM Ericsson
• Original Assignee: Telefonaktiebolaget LM Ericsson
• Inventors: Larmo, Anna, Keranen, Ari, Li, Daoyuan, Susitaival, Riikka
• Primary Examiner(s): Zecher, Dede
• Assistant Examiner(s): CHIANG, JASON
• Application Number:
  US13/724,169
• Publication Number:
  US 20140181926A1
• Time in Patent Office: 1,138 Days
• Field of Search: 726/6
• US Class Current: 1/1
• CPC Class Codes: G06F 21/30 Authentication, i.e. establishing the identity or authorisation of security principals
• CPC Class Codes: H04L 2209/80 Wireless network architectures or network communication protocols for wireless network security H04W12/00
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 9/0844 with user authentication or key authentication, e.g. ElGamal, MTI, MQV-Menezes-Qu-Vanstone protocol or Diffie-Hellman protocols using implicitly-certified keys
• CPC Class Codes: H04L 9/0872 using geo-location information, e.g. location data, time, relative position or proximity to other entities
• CPC Class Codes: H04L 9/32 including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials
• CPC Class Codes: H04L 9/3273 for mutual authentication network architectures or network communication protocols for achieving mutual authentication in a packet data network H04L63/0869
• CPC Class Codes: H04W 12/04 Key management, e.g. using generic bootstrapping architecture [GBA]
• CPC Class Codes: H04W 12/50 Secure pairing of devices
• CPC Class Codes: H04W 12/65 Environment-dependent, e.g. using captured environmental data
• CPC Class Codes: H04W 12/68 Gesture-dependent or behaviour-dependent

Abstract

The invention relates to a method for generating a data authentication key for allowing data communication over a wireless channel between a first mobile device and a second mobile device, comprising: associating said mobile devices to each other by means of said key. The invention comprises: allowing a shared physical or mechanical condition to be applied generally simultaneously upon said devices; detecting, in said first mobile device, said condition; defining, in said first mobile device, said authentication key based on the detected condition; and transmitting said key to said second mobile device. The invention also relates to a mobile device configured for generating a data authentication key for allowing data communication over a wireless channel to a further mobile device.

Claims

1. A method in a system comprising a first mobile device and a second mobile device, comprising:

detecting, in said first mobile device, a physical or mechanical condition;

defining, by said first mobile device, an authentication code based on the detected condition;

transmitting, from said first mobile device, said defined authentication code to said second mobile device;

receiving at said second mobile device said authentication code defined by said first mobile device;

storing in a memory of the second mobile device said received authentication code defined by said first mobile device;

transmitting, from said first mobile device to said second mobile device, an authentication request message;

receiving, at the second mobile device, the transmitted authentication request message;

in response to receiving the authentication request message, the second mobile device a) retrieving from said memory said received authentication code transmitted by said first mobile device and b) transmitting to the first mobile device an authentication response message comprising said retrieved authentication code;

the first mobile device receiving the authentication response message transmitted by the second mobile device; and

in response to receiving the authentication response message, the first mobile device authenticating the second mobile device using the authentication code defined by the first mobile device and the authentication code included in the authentication response message transmitted by the second mobile device, wherein authenticating the second mobile device comprises comparing the authentication code defined by the first mobile device with the authentication code included in the authentication response message.

2. The method according to claim 1, further comprising:

detecting, in said second mobile device, said physical or mechanical condition;

defining, in said second mobile device, a second other authentication code based on said condition detected in said second mobile device; and

transmitting, from said second mobile device, said second authentication code to said first mobile device.

3. The method according to claim 1, wherein:

the condition comprises movement of the first mobile device, and the step of detecting said condition comprises receiving an output signal from an accelerometer.

4. The method according to claim 1, wherein:

the condition comprises a noise, and

the step of detecting said condition comprises using a microphone to detect said noise.

5. The method according to claim 1, further comprising:

registering a time stamp associated with said physical or mechanical condition.

6. The method according to claim 1, further comprising:

transmitting, from said first mobile device, information defining the identity of said first mobile device to said second device; and

transmitting, from said second mobile device, information defining the identity of said second mobile device to said first device.

7. The method according to claim 1, wherein access to measurement data in the first mobile device, by the second mobile device, is based on the second mobile device having the authentication code.

8. The method of claim 1, wherein the first mobile device and the second mobile device are paired to each other.

9. The method of claim 8, wherein the pairing is initiated by using a user input unit on the first mobile device and the second mobile device.

10. The method of claim 8, wherein the pairing is initiated by initiating an icon on a display of the first mobile device and the second mobile device.

11. The method of claim 1, wherein the method further comprises:

generating, at the first mobile device, measurement data based on an output of a sensor; and

the first mobile device sending the measurement data to the second mobile device in response to authenticating the second mobile device.

12. The method of claim 11, wherein the sensor is an environmental sensor for sensing the environment in which the first mobile device is located.

13. The method of claim 12, wherein the sensor is located in the first mobile device and comprises one or more of a temperature sensor and a chemical sensor, wherein the temperature sensor senses temperature levels outside a human body.

14. The method of claim 13, wherein the first mobile device generates temperature data based on the temperature levels and transmits the temperature data to the second mobile device, wherein the second mobile device sends the temperature data to a remote server.

15. The method of claim 14, wherein the first mobile device transmits audio, photo, or video files to the second mobile device.

16. The method of claim 13, wherein the physical or mechanical condition is based on tapping or knocking the first mobile device.

17. A system comprising:

a first mobile device comprising a first receiver and a first transmitter; and

a second mobile device comprising a second receiver and a second transmitter, wherein

the first mobile device is configured to;

detect a physical or mechanical condition;

define an authentication code based on the detected condition; and

employ the first transmitter to transmit said defined authentication code to said second mobile device,

the second mobile device is configured such that, in response to receiving the authentication code defined and transmitted by the first mobile device, the second mobile device stores in a memory of the second mobile device said received authentication code,

the first mobile device is further configured to employ the first transmitter to transmit to the second mobile device an authentication request message,

the second mobile device is configured such that, in response to receiving the authentication request message transmitted by the first mobile device, the second mobile device a) retrieves from said memory said received authentication code transmitted by said first mobile device and b) employs the second transmitter to transmit to the first mobile device an authentication response message comprising said retrieved authentication code, and

the first mobile device is configured such that, in response to receiving the authentication response message transmitted by the second mobile device, the first mobile device authenticates the second mobile device using the authentication code defined by the first mobile device and the authentication code included in the authentication response message transmitted by the second mobile device, wherein the first mobile device is configured such that it authenticates the second mobile device by comparing the authentication code defined by the first mobile device with the authentication code included in the authentication response message.