Methods for authentication using near-field

• US 9,277,407 B2
• Filed: 08/25/2014
• Issued: 03/01/2016
• Est. Priority Date: 03/29/2010
• Status: Active Grant

• Current Assignee: Motorola Solutions, Inc.
• Original Assignee: Motorola Solutions, Inc.
• Inventors: Blanco, Alejandro G., Preston, John B., Boerger, Mark, Hanna, George S.
• Primary Examiner(s): LEMMA, SAMSON B
• Application Number:
  US14/467,570
• Publication Number:
  US 20140366095A1
• Time in Patent Office: 554 Days
• Field of Search: 713/172, 713/173, 713/185, 713/168, 726/9, 380/44, 380/247, 380/270, 708/250
• US Class Current: 1/1
• CPC Class Codes: H04L 63/0492 by using a location-limited connection, e.g. near-field communication or limited proximity of entities
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 63/18 using different networks or channels, e.g. using out of band channels cryptographic mechanisms or cryptographic arrangements for key distribution involving distinctive intermediate devices or communication paths H04L9/0827; cryptographic mechanisms or cryptographic arrangements for authentication using a plurality of channels H04L9/3215
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/50 Secure pairing of devices
• CPC Class Codes: H04W 92/18 between terminal devices

Abstract

Authentication methods are used to authenticate, a device1 having an ESN1 (electronic serial number), a device2 having an ESN2, and/or a user of the devices. In one implementation, device1 receives the ESN2 in a near-field signal; derives an authentication result as a function of the ESN1 and ESN2; and sends the authentication result to an authenticator device to use in completing authentication. Authentication is confirmed when the device1 authentication result matches an authentication result independently generated by the authenticator device, which is provisioned with the ESN1 and ESN2. In a second implementation, device1 generates a RAND1 (random number) and sends the RAND1 to device2 over a near-filed link. An authenticator device confirms authentication upon receiving the same RAND1 from both device1 and device2.

Claims

1. A method for authentication comprising:

generating, at a first device of a user, a number;

sending, by the first device to each of a second device of the user and an authenticator device, the number;

receiving, by the second device from the first device, the number;

sending, by the second device to the authenticator device, the number;

in response to receiving the same number from both the first and second devices, authenticating, by the authenticator device, the first device, the second device, and the user.

2. The method of claim 1, wherein generating a number comprises generating a random number.

3. The method of claim 1, wherein the authentication is for at least one of access to a network or access to a service.

4. The method of claim 1, further comprising:

receiving, by the first device, an authentication demand; and

wherein sending, by the first device to each of a second device of the user and an authenticator device, the number comprises sending the number in response to receiving the authentication demand.

5. The method of claim 4, wherein the authentication demand is one of:

responsive to a registration request sent by the first device to the authenticator device;

or

unsolicited by the first device.

6. The method of claim 1 further comprising:

receiving by the first device or the second device, an indication of failed authentication upon the authenticator device receiving the number from the first device and a different number from another device coupled to the first device.

7. The method of claim 1, wherein sending, by the first device to the second device, the number comprises sending the number over a near-field link.

8. The method of claim 7, wherein the near-field link used to carry the number communicates a magnetic signal with limited propagation.

9. A system for authentication comprising:

a first device of a user that is configured to generate a number and send the number to each of a second device of the user and an authenticator device;

the second device, wherein the second device is configured to receive the number from the first device and send the number to the authenticator device; and

the authenticator device, wherein the authenticator device is configured to, in response to receiving the same number from both the first and second devices, authenticate the first device, the second device, and the user.

10. The system of claim 9, wherein the first device is configured to generate a number by generating a random number.

11. The system of claim 9, wherein the authentication is for at least one of access to a network or access to a service.

12. The system of claim 9, wherein the authenticator device is configured to send an authentication demand to the first device and wherein the first device is configured to send the number in response to receiving the authentication demand.

13. The system of claim 12, wherein the authentication demand is sent one of:

responsive to a registration request sent to the authenticator device from the first device;

or

unsolicited by the first device.

14. The system of claim 9, wherein the authenticator device is configured to, in response to receiving the number from the first device and a different number from the second device, convey an indication of failed authentication to the first device or the second device.

15. The system of claim 9, wherein the first device is configured to send the number to the second device over a near-field link and the second device is configured to receive the number over the near-field link.

16. The system of claim 15, wherein the near-field link used to carry the number communicates a magnetic signal with limited propagation.