Wireless personal area network having authentication and associated methods

• US 20060165236A1
• Filed: 01/27/2005
• Published: 07/27/2006
• Est. Priority Date: 01/27/2005
• Status: Active Grant

• Current Assignee: Blackberry Limited
• Original Assignee: Blackberry Limited
• Inventors: Lazaridis, Mihal, Little, Herbert A., Rose, Scott D., Totzke, Scott W.
• Granted Patent: US 8,553,885 B2
• Time in Patent Office: Days
• US Class Current: 380/270
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04W 12/02 Protecting privacy or anonymity, e.g. protecting personally identifiable information [PII]
• CPC Class Codes: H04W 12/03 Protecting confidentiality, e.g. by encryption
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 4/80 Services using short range communication, e.g. near-field communication [NFC], radio-frequency identification [RFID] or low energy communication

Abstract

A wireless personal area network (WPAN) system includes a plurality of WPAN devices using encrypted wireless communication therebetween when in an enabled state and not wirelessly communicating when in a disabled state. At least one of the WPAN devices includes a WPAN identity reader for reading at least one identifying parameter of a user, for confirming that the user is an authorized user based upon reading the at least one identifying parameter, and for wirelessly communicating with at least one other WPAN device to switch the at least one other WPAN device from the disabled state to the enabled state based upon confirming the user is an authorized user.

Claims

1. A wireless personal area network (WPAN) system comprising:

a plurality of WPAN devices using encrypted wireless communication therebetween when in an enabled state and not wirelessly communicating when in a disabled state; and

at least one of said WPAN devices comprising a WPAN identity reader for reading at least one identifying parameter of a user, for confirming that the user is an authorized user based upon reading the at least one identifying parameter, and for wirelessly communicating with at least one other WPAN device to switch the at least one other WPAN device from the disabled state to the enabled state based upon confirming the user is an authorized user.

2. The WPAN system according to claim 1 wherein said plurality of WPAN devices have a limited communication range;

and wherein the at least one other WPAN device when in the enabled state switches back to the disabled state based upon movement beyond the limited communication range with said WPAN identity reader.

3. The WPAN system according to claim 1 further comprising an identifying token carried by a user;

and wherein said WPAN identity reader reads said identifying token when in proximity thereto.

4. The WPAN system according to claim 3 wherein said WPAN identity reader continues to wirelessly communicate with the at least one other WPAN device to maintain the at least one other WPAN device in the enabled state as long as the identifying token is in proximity to said WPAN identity reader.

5. The WPAN system according to claim 3 wherein said identifying token comprises a substrate and identifying data carried thereby.

6. The WPAN system according to claim 5 wherein said identifying token further comprises encryption data carried by said substrate.

7. The WPAN system according to claim 6 wherein said encryption data comprises at least one of a public and private encryption key.

8. The WPAN system according to claim 1 wherein the at least one other WPAN device is operable to permit user operation thereof when in the enabled state.

9. The WPAN system according to claim 1 wherein the at least one other WPAN device is operable upon user entry of a password in addition to being in the enabled state.

10. The WPAN system according to claim 1 wherein said WPAN devices wirelessly communicate using a Bluetooth protocol.

11. The WPAN system according to claim 1 wherein said WPAN devices wirelessly communicate using a Federal Information Processing Standard (FIPS) compliant encryption protocol.

12. The WPAN system according to claim 1 wherein at least one of said plurality of WPAN devices comprises a computer, a printer, a scanner, a camera, a barcode scanner, a Global Positioning System (GPS) device, a personal digital assistant, and a wireless email device.

13. The WPAN system according to claim 1 wherein said WPAN identity reader comprises:

a portable housing;

a reader carried by said portable housing for reading the at least one identifying parameter of a user;

a limited communication range WPAN transceiver carried by said portable housing; and

a processor carried by said portable housing and connected to said reader and said limited communication range WPAN transceiver.

14. The WPAN system according to claim 13 wherein said reader comprises at least one of a magnetic stripe reader, a smart card reader, and a biometric characteristic reader.

15. A wireless personal area network (WPAN) identity reader for reading identifying data and encryption data from an identifying token, the WPAN identity reader comprising:

a portable housing;

a reader carried by said portable housing for reading the identifying data;

a limited communication range WPAN transceiver carried by said portable housing; and

a processor carried by said portable housing and connected to said reader and said limited communication range WPAN transceiver for

confirming the identifying data when said identity token is in proximity to said reader, and

operating said limited communication range WPAN transceiver for encrypted wireless communication based upon the encryption data.

16. The WPAN identity reader according to claim 15 wherein said processor operates said limited communication range WPAN transceiver as long as the identifying token is in proximity to said reader.

17. The WPAN identity reader according to claim 15 wherein the encryption data comprises at least one of a public and private encryption key.

18. The WPAN identity reader according to claim 15 wherein said reader comprises at least one of a magnetic stripe reader and a smart card reader.

19. A method for operating a wireless personal area network (WPAN) system comprising a plurality of WPAN devices with at least one of the WPAN devices comprising a WPAN identity reader, the method comprising:

using the WPAN identity reader for reading at least one identifying parameter of a user,

confirming that the user is an authorized user based upon reading the at least one identifying parameter, and

wirelessly communicating with at least one other WPAN device to switch the at least one other WPAN device from a disabled state to an enabled state based upon confirming the user is an authorized user, the at least one other WPAN device using encrypted wireless communication when in the enabled state and not wirelessly communicating when in the disabled state.

20. The method according to claim 19 wherein the plurality of WPAN devices have a limited communication range;

and wherein the at least one other WPAN device when in the enabled state switches back to the disabled state based upon movement beyond the limited communication range with the WPAN identity reader.

21. The method according to claim 19 further comprising using the WPAN identity reader for reading an identifying token carried by a user when the identifying token is in proximity of the WPAN identity reader.

22. The method according to claim 21 further comprising continuing wireless communication between the WPAN identity reader and the at least one other WPAN device to maintain the at least one other WPAN device in the enabled state as long as the identifying token is in proximity to the WPAN identity reader.

23. The method according to claim 19 further comprising requiring a user to enter a password for the at least one other WPAN device to be operable in addition to the at least one other WPAN device being in the enabled state.