Methods and devices for transferring a secret to enable authenticated wireless communication

• US 20040253983A1
• Filed: 06/13/2003
• Published: 12/16/2004
• Est. Priority Date: 06/13/2003
• Status: Active Grant

• Current Assignee: Nokia Corporation
• Original Assignee: Nokia Corporation
• Inventors: Vanhatalo, Aki, Kokkonen, Jari
• Granted Patent: US 7,502,629 B2
• Time in Patent Office: Days
• US Class Current: 455/558
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 9/3271 using challenge-response
• CPC Class Codes: H04M 1/675 the user being required to insert a coded card, e.g. a smart card carrying an integrated circuit chip
• CPC Class Codes: H04M 1/72412 using two-way short-range wireless interfaces
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/50 Secure pairing of devices
• CPC Class Codes: H04W 84/18 Self-organising networks, e.g. ad-hoc networks or sensor networks
• CPC Class Codes: H04W 88/02 Terminal devices

Abstract

A handheld electronic device comprising: a memory device and a processor. The memory device is temporarily removable from the handheld electronic device for connection with another device. The removable memory device includes a data base structure in which a secret is associated with a predetermined identifier, such that querying the database structure using the predetermined identifier returns the secret. The removable memory device also includes an interface that enables the handheld electronic device to amend and query the data base structure and enables the another device to query the database structure using the predetermined identifier to obtain the secret. The processor is for amending the database structure and for querying the data base structure, wherein querying the database structure using the predetermined identifier returns the secret.

Claims

1. A handheld electronic device comprising:

a memory device, that is temporarily removable from the handheld electronic device for connection with another device, the memory device including;

a data base structure in which a secret is associated with a predetermined identifier, such that querying the database structure using the predetermined identifier returns the secret; and

an interface that enables the handheld electronic device to amend and query the data base structure and enables the another device to query the database structure using the predetermined identifier to obtain the secret; and

a processor for amending the database structure and for querying the data base structure, wherein querying the database structure using the predetermined identifier returns the secret.

2. A handheld electronic device as claimed in claim 1, wherein the data base structure

includes a plurality of entries, each of which includes a first field for storing an identifier and at least a second associated field for storing data.

3. A handheld electronic device as claimed in claim 2, wherein the data base structure

is for contact information, wherein the first field stores an identifier for the contact and the second associated field stores contact information.

4. A handheld electronic device as claimed in claim 2, wherein the database structure includes an entry having the predetermined identifier in a first field and the secret in the associated second field.

5. A handheld electronic device as claimed in claim 1, wherein the secret is a PIN.

6. A handheld electronic device as claimed in claim 1, arranged to perform an authentication procedure, based upon the secret, with the another device.

7. A handheld electronic device as claimed in claim 1, wherein the authentication procedure is based upon a challenge-response mechanism in which the response is dependent upon at least the secret and a random number.

8. A handheld electronic device as claimed in claim 7, further comprising a low power radio frequency transceiver for communicating with a low power radio frequency transceiver of the another device.

9. A handheld electronic device as claimed in claim 8, arranged to obtain the device address of the another device using an inquiry procedure, wherein the authentication procedure is based upon a challenge-response mechanism in which the response is dependent upon at least the secret, a random number and the device address of the another device.

10. A handheld electronic device as claimed in claim 9, further comprising a random number generator wherein the random number used in the authentication procedure is generated in the random number generator and communicated to the another device using the low power radio transceiver.

11. A handheld electronic device as claimed in claim 10, arranged to compare a response received from the another device via the low power radio frequency transceiver with a response produced in the handheld electronic device to authenticate the another device for radio communication.

12. An electronic device comprising:

an interface for connection with a memory device, that is temporarily removable from a handheld electronic device for connection with the electronic device, the memory device including;

a data base structure in which a secret is associated with a predetermined identifier, such that querying the database structure using the predetermined identifier returns the secret; and

a processor for querying the data base structure using the predetermined identifier to obtain the secret.

13. An electronic device as claimed in claim 12, further comprising a memory storing the predetermined identifier.

14. An electronic device as claimed in claim 12, wherein the secret is a PIN.

15. An electronic device as claimed in claim 12, arranged to perform an authentication procedure with the handheld electronic device based upon the secret.

16. An electronic device as claimed in claim 15, wherein the authentication procedure is based upon a challenge-response mechanism in which the response created is dependent upon at least the secret and a random number.

17. An electronic device as claimed in claim 16, further comprising a low power radio frequency transceiver for communicating with a low power radio frequency transceiver of the handheld electronic device.

18. An electronic device as claimed in claim 17, arranged to provide its device address during an inquiry procedure, wherein the authentication procedure is based upon a challenge-response mechanism in which the response is dependent upon at least the secret, a random number and the device address.

19. An electronic device as claimed in claim 18, wherein the random number used in the authentication procedure is received from the handheld electronic device via the low power radio transceiver.

20. An electronic device as claimed in claim 19, wherein the low power radio frequency transceiver sends the response create during the authentication procedure to the handheld electronic device.

21. An electronic device as claimed in claim 12, without a user input mechanism.

22. An electronic device as claimed in claim 12, further comprising a detector for detecting the connection of the memory device at the interface.

23. An electronic device as claimed in claim 22, wherein the processor in response to the detection of the connection of the memory device at the interface by the detector, automatically queries the database with the predetermined identifier.

24. A method of transferring a secret from a first device to a second device using a memory device, that is temporarily removable from the first device for connection with the second device, the memory device including:

a data base structure in which a secret is associated with a predetermined identifier, such that querying the database structure using the predetermined identifier returns the secret, the method comprising the steps of;

transferring the memory device from the first device to the second device; and

in the second device, automatically querying the transferred memory device with the predetermined identifier to obtain the secret from the memory device.