Personal digital identity device with near field and non near field radios for access control

• US 9,659,295 B2
• Filed: 08/26/2016
• Issued: 05/23/2017
• Est. Priority Date: 03/15/2013
• Status: Active Grant

• Current Assignee: Sideassure Incorporated
• Original Assignee: Tyfone Incorporated
• Inventors: Narendra, Siva G., Tadepalli, Prabhakar, Bloodworth, Donald Allen, Chakraborty, Saurav
• Primary Examiner(s): Tweel, Jr., John A
• Assistant Examiner(s): Aziz, Adnan
• Application Number:
  US15/249,081
• Publication Number:
  US 20160366591A1
• Time in Patent Office: 270 Days
• Field of Search: None
• CPC Class Codes: G05B 1/03 for comparing digital signals
• CPC Class Codes: G06F 1/163 Wearable computers, e.g. on a belt
• CPC Class Codes: G06F 1/1694 the I/O peripheral being a single or a set of motion sensors for pointer control or gesture input obtained by sensing movements of the portable computer
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/32 using biometric data, e.g. fingerprints, iris scans or voiceprints
• CPC Class Codes: G06F 21/35 communicating wirelessly
• CPC Class Codes: G06F 3/014 Hand-worn input/output arrangements, e.g. data gloves
• CPC Class Codes: G06F 3/017 Gesture based interaction, e.g. based on a set of recognized hand gestures interaction based on gestures traced on a digitiser G06F3/04883
• CPC Class Codes: G06F 3/0346 with detection of the device orientation or free movement in a 3D space, e.g. 3D mice, 6-DOF [six degrees of freedom] pointers using gyroscopes, accelerometers or tilt-sensors
• CPC Class Codes: G06F 3/048 Interaction techniques based on graphical user interfaces [GUI]
• CPC Class Codes: G06Q 20/206 comprising security or operator identification provisions, e.g. password entry
• CPC Class Codes: G06Q 20/3278 RFID or NFC payments by means of M-devices
• CPC Class Codes: G06Q 20/38215 Use of certificates or encrypted proofs of transaction rights
• CPC Class Codes: G06Q 20/3829 involving key management
• CPC Class Codes: G06Q 2220/00 Business processing using cryptography postage metering system using cryptography G06Q2250/05
• CPC Class Codes: H04L 12/04 Switchboards
• CPC Class Codes: H04L 67/10 in which an application is distributed across nodes in the network software deployment G06F8/60; multiprogramming arrangements G06F9/46
• CPC Class Codes: H04L 9/3271 using challenge-response
• CPC Class Codes: H04M 1/72412 using two-way short-range wireless interfaces
• CPC Class Codes: H04W 12/069 using certificates or pre-shared keys
• CPC Class Codes: H04W 12/68 : Gesture-dependent or behaviour-dependent
• CPC Class Codes: H04W 4/80 : Services using short range communication, e.g. near-field communication [NFC], radio-frequency identification [RFID] or low energy communication
• CPC Class Codes: H04W 88/02 : Terminal devices

Abstract

A personal digital ID device provides a digital identifier to a service for a predetermined duration in response to user interaction. The user interaction may include a button press. The personal digital ID device may be in the form of a bracelet, a key fob, or other form factor. The service may be provided by a mobile device, in the cloud, or elsewhere.

Claims

1. A personal digital ID device comprising:

a crypto/cipher engine having at least one digital identifier including one or more keys for challenge-response;

a near field radio;

a non-near field radio; and

a processor;

wherein the processor, the crypto/cipher engine, the near field radio, and the non-near field radio are configured to make the one or more keys for challenge-response available to perform authentication with a cloud service through a mobile device using the non-near field radio, and are further configured to make the one or more keys for challenge-response available to perform authentication with an access control device using the near field radio.

2. The personal digital ID device of claim 1 wherein the access control device comprises a building access control device.

3. The personal digital ID device of claim 2 further comprising a hardware based interaction component accessible to a user of the personal digital ID device.

4. The personal digital ID device of claim 3 wherein the identity authentication to a cloud service occurs only after the user interacts with the hardware based interaction component.

5. The personal digital ID device of claim 3 wherein the identity authentication to a building access control device occurs only after the user interacts with the hardware based interaction component.

6. The personal digital ID device of claim 2 wherein the one or more keys comprises a first cryptographic key to perform authentication to the cloud service, and a second cryptographic key to perform authentication to the building access control device.

7. The personal digital ID device of claim 6 wherein the first cryptographic key and the second cryptographic key are the same.

8. A personal digital ID device comprising:

a near field radio;

a non-near field radio; and

a smartcard secure element including at least one digital identifier;

wherein the smartcard secure element makes use of the at least one digital identifier to provide identity authentication to a cloud service through a mobile device using the non-near field radio, and makes use of the at least one digital identifier to provide identity authentication to an access control device using the near field radio.

9. The personal digital ID device of claim 8 wherein the access control device comprises a building access control device.

10. The personal digital ID device of claim 9 further comprising a hardware based interaction component accessible to a user of the personal digital ID device.

11. The personal digital ID device of claim 10 wherein the identity authentication to a cloud service occurs only after the user interacts with the hardware based interaction component.

12. The personal digital ID device of claim 10 wherein the identity authentication to a building access control device occurs only after the user interacts with the hardware based interaction component.

13. The personal digital ID device of claim 9 wherein the at least one digital identifier comprises at least one cryptographic key.

14. The personal digital ID device of claim 13 wherein the at least one cryptographic key comprises a first cryptographic key to provide identity authentication to the cloud service, and a second cryptographic key to provide identity authentication to the building access control device.

15. The personal digital ID device of claim 14 wherein the first cryptographic key and the second cryptographic key are the same.

16. The personal digital ID device of claim 9 wherein providing identity authentication comprises executing at least one security applet on the smartcard secure element.

17. The personal digital ID device of claim 16 wherein the at least one security applet comprises a first security applet to provide identity authentication to the cloud service, and a second security applet to provide identity authentication to the building access control device.

18. The personal digital ID device of claim 17 wherein the first security applet and the second security applet are the same.

19. A personal digital ID device comprising:

a crypto/cipher engine having at least one digital identifier;

a near field radio;

a non-near field radio; and

a processor;

wherein the processor, the crypto/cipher engine, the near field radio, and the non-near field radio are configured to make the at least one digital identifier available to perform authentication with a cloud service through a mobile device using the non-near field radio, and are further configured to make the at least one digital identifier available to perform authentication with an access control device using the near field radio.

20. The personal digital ID device of claim 19 wherein the access control device comprises a building access control device.

21. The personal digital ID device of claim 20 further comprising a hardware based interaction component accessible to a user of the personal digital ID device.

22. The personal digital ID device of claim 20 wherein the at least one digital identifier is made available to the cloud service only after the user interacts with the hardware based interaction component.

23. The personal digital ID device of claim 19 wherein the crypto/cipher engine comprises at least one smartcard secure element.