EHF secure communication device

• US 9,894,524 B2
• Filed: 11/10/2015
• Issued: 02/13/2018
• Est. Priority Date: 03/15/2013
• Status: Active Grant

• Current Assignee: Molex LLC (KOCH Industries Incorporated)
• Original Assignee: Keyssa, Inc.
• Inventors: McCormack, Gary Davis, Kyles, Ian A.
• Primary Examiner(s): RAHIM, MONJUR
• Application Number:
  US14/936,877
• Publication Number:
  US 20160066188A1
• Time in Patent Office: 826 Days
• Field of Search: 726 4, 726 6
• CPC Class Codes: H01L 2224/49171 Fan-out arrangements
• CPC Class Codes: H01L 2224/73265 Layer and wire connectors
• CPC Class Codes: H01L 23/3128 the substrate having spherical bumps for external connection
• CPC Class Codes: H01L 2924/00012 Relevant to the scope of the group, the symbol of which is combined with the symbol of this group
• CPC Class Codes: H01L 2924/181 Encapsulation
• CPC Class Codes: H04B 1/401 for selecting or indicating operating mode
• CPC Class Codes: H04B 5/48 Transceivers
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/0876 based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint
• CPC Class Codes: H04L 63/107 wherein the security policies are location-dependent, e.g. entities privileges depend on current location or allowing specific operations only from locally connected terminals
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 76/14 Direct-mode setup
• CPC Class Codes: H04W 76/28 Discontinuous transmission [DTX]; Discontinuous reception [DRX]

Abstract

A communication device employs a contactless secure communication interface to transmit and receive data with a computing device using close proximity extremely high frequency (EHF) communication. The communication device and the computing device periodically initiate a discovery operation mode, whereby the devices periodically transmit identifying information about the respective devices and listen for identifying information from the other device. Upon completion of the discovery mode operation, the devices enter a link-training operation mode and exchange capability information about the respective devices. During transport mode operation the communication device employs methods to manage access to data stored on the communication device by encrypting the data using one or a combination of training information or capability information as a basis for generating an encryption key.

Claims

1. A method for regulating access to information located in a secure location, the method comprising:

determining, by an interface controller included in a computing device, whether a distance between a communication device and the computing device satisfies a threshold distance, the computing device included in an access control reader located at the secure location;

responsive to the distance between the communication device and the computing device satisfying the specified threshold distance;

establishing a communication channel between the communication device and the computing device, the communication channel enabling information exchange between the communication device and the computing device using extremely high frequency (EHF) signals,

identifying, by the computing device, content stored in the communication device having at least one specified file attribute,

copying, by the computing device, the identified content to a memory location accessible by the computing device included in the access control reader,

decoding the identified content by the computing device using encryption information that is generated based on a calculated measure of time of flight of an EHF transmission between the communication device and the computing device; and

removing, by the computing device, the identified content from the communication device.

2. The method of claim 1, wherein responsive to the distance between the communication device and the computing device satisfying the threshold distance, disabling specified functionality of the communication device.

3. The method of claim 2, wherein the specified functionality of the communication device includes wireless communication.

4. The method of claim 2, wherein the specified functionality of the communication device includes audio capture.

5. The method of claim 2, wherein the specified functionality of the communication device includes video capture.

6. The method of claim 2, wherein the specified functionality of the communication device is disabled when the communication device is at a specified location within the secure location.

7. The method of claim 1, wherein responsive to the distance between the communication device and the computing device satisfying the threshold distance, loading a secure profile on to the communication device.

8. The method of claim 1, wherein responsive to the distance between the communication device and the computing device satisfying the threshold distance, logging contents stored on the communication device.

19. The method of claim 1, wherein the measure of the time of flight corresponds to a round trip propagation time between the communication device and the computing device.

9. A method for regulating access by a user to a secure location, the method comprising:

determining, by an interface controller included in a communication device, whether a distance between the communication device, associated with the user, and an access control device located at the secure location satisfies a threshold distance;

responsive to the distance between the communication device and the access control device satisfying the threshold distance, the communication device and the access control device exchanging capability information describing functionality of the respective devices;

authenticating, by the access control device, the user based at least in part on the capability information; and

encoding content sent by the interface controller using encryption information generated based on a calculated measure of time of flight of an EHF transmission between the communication device and the access control device.

10. The method of claim 9, further comprising receiving training information from the communication device, the training information specifying a data pattern used by the access control device to select access control device settings to exchange information with the communication device over a transmission path.

11. The method of claim 10, further comprising authenticating the user based at least in part on the training information.

12. The method of claim 10, further comprising authenticating the user based at least in part on the user'"'"'s biometric information.

13. The method of claim 9, wherein the capability information comprises a device type.

14. The method of claim 9, wherein the capability information comprises a transport mode.

15. An access control system comprising:

a computing device comprising;

at least one transmitter configured to transmit data using close proximity extremely high frequency (EHF) electromagnetic energy to a communication device over a first transmission path, the communication device associated with a user;

at least one receiver configured to receive data from the communication device over a second transmission path;

an interface control circuit coupled to the at least one transmitter unit and the at least one receiver and configured to;

determine whether a distance between the communication device and the computing device satisfies a threshold distance, and

responsive to the distance between the communication device and the computing device satisfying the threshold distance, establish a communication channel between the communication device and the computing device, the communication channel enabling information exchange between the communication device and the computer device using EHF signals; and

a device controller coupled to the interface control circuit and configured to;

identify content stored on the communication device having at least one specified file attribute responsive to the distance between the communication device and the computing device satisfying the threshold distance,

copy the identified content to a memory location accessible by the computing device,

decode the identified content using encryption information generated based on a calculated measure of the time of flight of an EHF transmission between the communication device and the computing device, and

remove the identified content from the communication device.

16. The access control system of claim 15, wherein the device controller is configured to disable specified functionality of the communication device responsive to the determined distance between the communication device and the computing device satisfying the threshold distance.

17. The access control system of claim 16, wherein the specified functionality of the communication device includes wireless communication.

18. The access control system of claim 16, wherein the specified functionality of the communication device includes audio capture.