Method and apparatus for simplified audio authentication

• US 20030120925A1
• Filed: 02/15/2002
• Published: 06/26/2003
• Est. Priority Date: 12/21/2001
• Status: Active Grant

• Current Assignee: Qualcomm, Inc.
• Original Assignee: Qualcomm, Inc.
• Inventors: Quick, Roy Franklin Jr., Gantman, Alexander, Rose, Gregory G.
• Granted Patent: US 7,251,730 B2
• Time in Patent Office: Days
• US Class Current: 713/176
• CPC Class Codes: G06Q 20/341 Active cards, i.e. cards including their own processing means, e.g. including an IC or chip
• CPC Class Codes: G06Q 20/346 Cards serving only as information carrier of service
• CPC Class Codes: G06Q 20/3823 combining multiple encryption tools for a transaction
• CPC Class Codes: G06Q 20/3825 Use of electronic signatures
• CPC Class Codes: G06Q 20/4014 Identity check for transactions
• CPC Class Codes: G06Q 20/40975 using encryption therefor
• CPC Class Codes: G07F 7/1008 Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system
• CPC Class Codes: G07F 7/1016 Devices or methods for securing the PIN and other transaction-data, e.g. by encryption arrangements for secret communication, see H04L9/00
• CPC Class Codes: G07F 7/1025 Identification of user by a PIN code
• CPC Class Codes: H04L 2209/80 Wireless network architectures or network communication protocols for wireless network security H04W12/00
• CPC Class Codes: H04L 9/32 including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials
• CPC Class Codes: H04L 9/3226 using a predetermined code, e.g. password, passphrase or PIN network architectures or network communication protocols for supporting authentication of entities using passwords in a packet data network H04L63/083
• CPC Class Codes: H04L 9/3247 involving digital signatures
• CPC Class Codes: H04W 12/068 using credential vaults, e.g. password manager applications or one time password [OTP] applications
• CPC Class Codes: H04W 12/069 using certificates or pre-shared keys
• CPC Class Codes: H04W 12/65 Environment-dependent, e.g. using captured environmental data

Abstract

An apparatus and method for authentication having a processor and at least one activator coupled to the processor is claimed. A signature generator is coupled to the processor and capable of generating a secure identifier. An emitter coupled to the signal generator capable of emitting the secure identifier. A receiver receives the emitted secure identifier and verifies that the secure identifier was appropriately transmitted. The public key corresponding to the key identifier transmitted is accessed to determine the validity of the secure identifier using the accessed key and that the time indicated in the received secure identifier is verified to be within acceptable time tolerances.

Claims

1. An authentication apparatus operable to produce a secure identifier, the apparatus comprising:

a processor;

a clock coupled to the processor configurable to generate a time element;

a memory element coupled to the processor configurable to store a private key and public key information;

at least one actuator coupled to the processor;

a signature generator coupled to the processor operable to generate a digital signature, the digital signature being a function of the private key and the time element; and

an emitter coupled to the signal generator operable to emit the secure identifier, the secure identifier comprising the digital signature, time element, and public key information.

2. The apparatus set forth in claim 1, the signature generator further comprising:

a random number generator coupled to the processor to encrypt the digital signature.

3. The apparatus set forth in claim 1, wherein the time element comprises a predetermined number of least significant bits of the time.

4. The apparatus set forth in claim 1, further comprising an input element coupled to the processor, the input element capable of receiving a personal identification number (PIN).

5. The apparatus set forth in claim 1, further comprising an input element coupled to the processor, the input element capable of receiving a challenge.

6. The apparatus set forth in claim 1, further comprising a display coupled to the processor, the display capable of displaying key identifiers.

7. The apparatus set forth in claim 1, wherein the secure identifier emitted is emitted as an audio tone.

8. The apparatus set forth in claim 1, wherein the secure identifier emitted is emitted as an optical signal.

9. The apparatus set forth in claim 1, wherein the actuator is a push-button switch.

10. The apparatus set forth in claim 1, wherein the actuator is a voice activated switch.

11. The apparatus set forth in claim 1, wherein the public key information is a public key identifier.

12. The apparatus set forth in claim 11, wherein the pubic key identifier is derived from the public key information.

13. The apparatus set forth in claim 1, wherein the public key information is the public key.

14. The apparatus set forth in claim 1, wherein the digital signature is encrypted using a personal identification number (PIN).

15. A method of authenticating, comprising:

generating a time element;

identifying a key identifier;

generating a digital signature;

generating a secure identifier as a function of the time element, the key identifier, the digital signature; and

emitting the secure identifier.

16. The method set forth in claim 15, further comprising identifying a PIN, and wherein generating a digital signature is further a function of the PIN.

17. The method set forth in claim 15, wherein the secure identifier emitted is emitted as an audible tone.

18. The method set forth in claim 15, wherein the secure identifier emitted is emitted as an optical signal.

19. The method set forth in claim 15, wherein the digital signature is derived from a private key.

20. An authentication receiver, comprising:

a receiver configurable to receive a secure identifier, the secure identifier comprising;

a digital signature, the digital signature comprising information derived from a private key,

a public key identifier; and

a time identifier; and

a verifier configurable to verify the secure identifier, the verifier comprising;

memory comprising information corresponding to the public key information received and time tolerance information;

a key retriever coupled to the memory and configurable to retrieve a public key corresponding to the public key identifier; and

a time verifier coupled to the memory and configurable to verify that the received time identifier falls within acceptable time tolerances.

21. The apparatus set forth in claim 20, the secure identifier further comprises a PIN, and wherein the receiver is configurable to decrypt the digital signature using the PIN.

22. The apparatus set forth in claim 20, wherein the key retriever compares the public key identifier received to public key information stored in memory.

23. The apparatus set forth in claim 20, wherein the time tolerance information comprises information regarding clock drift.

24. The apparatus set forth in claim 20, wherein the secure identifier is emitted as an audible tone.

25. The apparatus set forth in claim 20, wherein the secure identifier is emitted as an optical signal.

26. A method of authenticating, comprising:

receiving a secure identifier, the secure identifier comprising a digital signature, a key identifier, and a time identifier; and

verifying the secure identifier, verifying comprising;

verifying that the public key identifier received corresponds to known information regarding the public key identifier received; and

verifying the time identifier such that the time identifier received is within predetermined time tolerances.

27. The method set forth in claim 26, the digital signature further comprises a PIN, and where receiving further comprises decrypting at least a portion of the digital signature using the PIN.

28. The method set forth in claim 26, wherein the secure identifier received is received as an audible tone.

29. The method set forth in claim 26, wherein the secure identifier received is received as an optical signal.

30. An authentication apparatus operable to produce a secure identifier, the apparatus comprising:

a processor means;

a clock means coupled to the processor configurable to generate a time element;

a memory element means coupled to the processor means configurable to store a private key means and public key information means;

at least one actuator means coupled to the processor means;

a signature generator means coupled to the processor means operable to generate a digital signature means, the digital signature means being a function of the private key means and the time element means; and

an emitter means coupled to the signal generator means operable to emit the secure identifier, the secure identifier comprising the digital signature, time element, and public key information.

31. The apparatus set forth in claim 30, the signature generator means further comprising:

a random number generator means coupled to the processor means to encrypt the digital signature means.

32. The apparatus set forth in claim 30, wherein the time element means comprises a predetermined number of least significant bits of the time.

33. The apparatus set forth in claim 30, further comprising an input element means coupled to the processor means, the input element means capable of receiving a personal identification number (PIN) means.

34. The apparatus set forth in claim 30, further comprising an input element means coupled to the processor means, the input element means capable of receiving a challenge means.

35. The apparatus set forth in claim 30, further comprising a display means coupled to the processor means, the display means capable of displaying at least one key identifier means.

36. The apparatus set forth in claim 30, wherein the secure identifier means emitted is emitted as an audio tone means.

37. The apparatus set forth in claim 30, wherein the secure identifier means emitted is emitted as an optical signal means.

38. The apparatus set forth in claim 30, wherein the actuator means is a push-button switch.

39. The apparatus set forth in claim 30, wherein the actuator means is a voice activated switch.

40. The apparatus set forth in claim 30, wherein the public key information means is a public key identifier means.

41. The apparatus set forth in claim 40, wherein the pubic key identifier means is derived from the public key information means.

42. The apparatus set forth in claim 30, wherein the public key information is the public key.

43. The apparatus set forth in claim 30, wherein the digital signature means is encrypted using a personal identification number (PIN) means.

44. A method of authenticating, comprising:

means for generating a time element;

means for identifying a key identifier;

means for generating a digital signature;

means for generating a secure identifier as a function of the time element, the key identifier, the digital signature; and

means for emitting the secure identifier.

45. The method set forth in claim 44, further comprising means for identifying a PIN, and wherein means for generating a digital signature is further a function of the PIN.

46. The method set forth in claim 44, wherein the secure identifier emitted is emitted as an audible tone.

47. The method set forth in claim 44, wherein the secure identifier emitted is emitted as an optical signal.

48. The method set forth in claim 44, wherein the digital signature is derived from a private key.

49. An authentication receiver, comprising:

a receiver means configurable to receive a secure identifier means, the secure identifier means comprising;

a digital signature means, the digital signature means comprising information derived from a private key means,

a public key identifier means; and

a time identifier means; and

a verifier means configurable to verify the secure identifier means, the verifier means comprising;

memory means comprising information corresponding to the public key information means received and time tolerance information means;

a key retriever means coupled to the memory means and configurable to retrieve a public key means corresponding to the public key identifier means; and

a time verifier means coupled to the memory means and configurable to verify that the received time identifier means falls within acceptable time tolerances.

50. The apparatus set forth in claim 49, the secure identifier means further comprises a PIN means, and wherein the receiver is configurable to decrypt the digital signature means using the PIN means.

51. The apparatus set forth in claim 49, wherein the key retriever means compares the public key identifier means received to public key information means stored in memory.

52. The apparatus set forth in claim 49, wherein the time tolerance information comprises information regarding clock drift.

53. The apparatus set forth in claim 49, wherein the secure identifier means is emitted as an audible tone.

54. The apparatus set forth in claim 49, wherein the secure identifier means is emitted as an optical signal.

55. A method of authenticating, comprising:

means for receiving a secure identifier, the secure identifier comprising a digital signature, a key identifier, and a time identifier; and

means for verifying the secure identifier, verifying comprising;

means for verifying that the public key identifier received corresponds to known information regarding the public key identifier received; and

means for verifying the time identifier such that the time identifier received is within predetermined time tolerances.

56. The method set forth in claim 55, the digital signature further comprises a PIN, and where means for receiving further comprises decrypting the digital signature using the PIN.

57. The method set forth in claim 55, wherein the secure identifier received is received as an audible tone.

58. The method set forth in claim 55, wherein the secure identifier received is received as an optical signal.