Method and apparatus for increasing the security of wireless data services

• US 20020123325A1
• Filed: 03/01/2001
• Published: 09/05/2002
• Est. Priority Date: 03/01/2001
• Status: Abandoned Application

• Current Assignee: Telefonaktiebolaget LM Ericsson
• Original Assignee: Telefonaktiebolaget LM Ericsson
• Inventors: Cooper, Gerald M.
• Application Number:
  US09/797,359
• Publication Number:
  US 20020123325A1
• Time in Patent Office: Days
• US Class Current: 455/411
• CPC Class Codes: H04L 63/0492 by using a location-limited connection, e.g. near-field communication or limited proximity of entities
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/0861 using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231
• CPC Class Codes: H04L 67/12 specially adapted for proprietary or special-purpose networking environments, e.g. medical networks, sensor networks, networks in vehicles or remote metering networks
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/50 Secure pairing of devices
• CPC Class Codes: H04W 84/18 Self-organising networks, e.g. ad-hoc networks or sensor networks

Abstract

The security of wireless communications between two or more devices is enhanced by requiring detection of the physical proximity of the devices. One or more of the devices operates in a non-secure mode, wherein the authentication process required to enter into secure communications is disabled. Upon detection of the physical proximity of another device, the device enters a secure mode, wherein authentication is enabled. The entry of a security code required by the authentication process may comprise the transmission of a device address or other data, either across the proximity detection interface or via the wireless communications interface. In addition to the detection of physical proximity, a hardware handshake protocol between the two devices may be defined. For additional security, the device must enter a handshake mode before the hardware handshake will complete. The handshake mode may require entry of a password or screening by a biometric sensor.

Claims

1. A method of securing wireless communications between two devices across a wireless communications link, comprising:

detecting the physical proximity of said devices;

performing authentication between said devices in response to said detected proximity; and

engaging said devices in secure wireless communication following said authentication.

2. The method of claim 1, wherein detecting the physical proximity of said devices comprises performing a hardware handshake via an interface having a limited operating range.

3. The method of claim 2, wherein said limited operating range interface requires physical contact between said two devices.

4. The method of claim 3, wherein said physical contact comprises contact selected from the group consisting of electrical contact between at least one electrode disposed on the exterior of each said device, electrical contact between said devices via at least one electrically conductive cable connected between said devices, and optical contact between said devices via at least one optically conductive waveguide connected between said devices.

5. The method of claim 2, wherein said limited operating range interface is selected from the group consisting of electromagnetic coupling, inductive coupling, backscatter modulation of a radio frequency electromagnetic field, magnetic coupling, capacitive coupling, sonic signals transferred between said devices, and line-of-sight transmission of optical signals between said devices.

6. The method of claim 1, wherein said physical proximity of said devices is in the range from 0 to about 6 inches.

7. The method of claim 6, wherein said physical proximity of said devices is in the range from 0 to about 2 inches.

8. The method of claim 7, wherein said physical proximity of said devices comprises physical contact between said devices.

9. The method of claim 2, wherein performing a hardware handshake occurs only when at least one of said devices is in a hardware handshake mode.

10. The method of claim 9, additionally comprising placing said device in said hardware handshake mode by an action selected from the group consisting of actuation of a switch, entering a password, and completing a biometric scan.

11. The method of claim 1, wherein performing authentication between said two devices in response to said detected proximity comprises transferring a security code from one said device to the other.

12. The method of claim 11, wherein said security code is transferred across said wireless communications link.

14. The method of claim 13, wherein detecting the physical proximity of said second device by said first device comprises the completion of a hardware handshake between said first and second devices, said handshake occurring across an interface with a limited operating range.

15. The method of claim 14, wherein said hardware handshake is performed only when said first device is in a handshake mode.

16. The method of claim 15, additionally comprising placing said device in said hardware handshake mode by an action selected from the group consisting of actuation of a switch, entering a password, and completing a biometric scan.

17. The method of claim 13, wherein performing said authentication in said second mode includes transferring a security code from said first device to said second device.

18. The method of claim 17, wherein said security code is transferred across said limited operating range interface.

19. The method of claim 17, wherein said security code is transferred across the wireless communications interface of said first and second devices.

13. A method of selectively allowing authentication between a first and second device, each said device capable of wireless communications, said first device having a first mode wherein said authentication is inhibited and a second mode wherein said authentication is allowed, comprising:

operating said first device in said first mode;

entering said second mode in response to detecting the physical proximity of said second device by said first device; and

performing said authentication in said second mode.

20. A first device capable of wireless communications, adapted to detect the physical proximity of said first device to a second device capable of wireless communications, and further adapted to allow authentication with said second device thereby enabling secure wireless communications therebetween, in response to said detection of physical proximity of said first and second devices.