ACCESS TECHNIQUES USING A MOBILE COMMUNICATION DEVICE

• US 20120129493A1
• Filed: 11/23/2010
• Published: 05/24/2012
• Est. Priority Date: 11/23/2010
• Status: Active Grant

• Current Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Original Assignee: Microsoft Corporation
• Inventors: Vasudevan, Barathram
• Granted Patent: US 8,805,434 B2
• Time in Patent Office: Days
• US Class Current: 455/411
• CPC Class Codes: B60R 2325/205 Mobile phones
• CPC Class Codes: B60R 25/24 using electronic identifiers containing a code not memorised by the user
• CPC Class Codes: G07C 9/00571 operated by interacting with a central unit
• CPC Class Codes: H04L 2209/805 Lightweight hardware, e.g. radio-frequency identification [RFID] or sensor
• CPC Class Codes: H04L 2209/84 Vehicles
• CPC Class Codes: H04L 9/14 using a plurality of keys or algorithms
• CPC Class Codes: H04L 9/3271 using challenge-response
• CPC Class Codes: H04W 12/04 Key management, e.g. using generic bootstrapping architecture [GBA]
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 12/35 Protecting application or service provisioning, e.g. securing SIM application provisioning

Abstract

Access techniques using a mobile communication device are described. In implementations, a mobile communication device comprises a processor, hardware configured to implement multi-mode wireless communication in which at least one of the modes involves telephone communication, tamper-resistant hardware implementing a secure element as storing one or more credentials, and memory having instructions stored therein. The instructions are executable by the processor to cause the mobile communication device to perform operations comprising forming a communication having data that was generated using the one or more credentials stored in the secure element, the communication to be transmitted wirelessly using the hardware implementing the multi-mode wireless communication to initiate function of a physical lock or vehicle.

Claims

1. A mobile communication device comprising:

a processor;

hardware configured to implement multi-mode wireless communication in which at least one of the modes involves telephone communication;

tamper-resistant hardware implementing a secure element as storing one or more credentials; and

memory having instructions stored therein, the instructions being executable by the processor to cause the mobile communication device to perform operations comprising forming a communication having data that was generated using the one or more credentials stored in the secure element, the communication to be transmitted wirelessly using the hardware implementing the multi-mode wireless communication to initiate function of a physical lock or vehicle.

2. A mobile communication device as described in claim 1, wherein the function of the vehicle is to lock or unlock the vehicle, start the vehicle, open a door of the vehicle, or close a door of the vehicle.

3. A mobile communication device as described in claim 1, wherein the function of the physical lock is to permit or deny access to premises.

4. A mobile communication device as described in claim 1, wherein forming of the communication is performed responsive to receipt of an input through execution of an application on the processor of the mobile communication device.

5. A mobile communication device as described in claim 4, wherein the application is downloaded to the mobile communication device from an application marketplace via a network.

6. A mobile communication device as described in claim 1, wherein the communication includes data usable to authorize the function of the physical lock and data that describes the function to be performed by the physical lock or vehicle.

7. A mobile communication device as described in claim 1, wherein the one or more credentials are used to answer a challenge in which a correct answer to the challenge is included in the data to authorize the function of the physical lock or vehicle.

8. A mobile communication device as described in claim 7, wherein the secure element is configured to generate the answer to the challenge without exposing the one or more credentials outside of the secure element.

9. A mobile communication device as described in claim 1, further comprising provisioning the credentials on the secure element of the mobile communication device using a private key to decrypt the credentials without exposing the credentials or the private key outside of the tamper-resistant hardware of the secure element.

10. A mobile communication device as described in claim 1, wherein the communication is configured to be transmitted wirelessly and directly between a device that includes the physical lock and the hardware configured to implement the multi-mode wireless communication without communicating via an Internet.

11. A method comprising:

verifying data received wirelessly and directly from a mobile communication device having telephone functionality to determine whether function of a physical lock or vehicle is authorized, the data generated by the mobile communication device using one or more credentials stored within a secure element implemented using tamper-resistant hardware in the mobile communication device; and

responsive to verification that the function is authorized, initiating performance of the function.

12. A method as described in claim 11, wherein the data describes the function requested by the mobile communication device.

13. A method as described in claim 11, wherein the credentials on the secure element of the mobile communication device are provisioned using a public key to encrypt the credentials for communication to the mobile communication device, the secure element configured to decrypt the encrypted credentials using a private key stored within the secure element without exposing the credentials or the private key outside of the secure element.

14. A method as described in claim 11, wherein the verifying and the initiating are caused to be performed by a computing device of the vehicle.

15. A method as described in claim 11, wherein the function of the physical lock is to permit or deny access to premises.

16. A method comprising:

provisioning credentials on a secure element implemented in tamper-resistant hardware of a mobile communication device having telephone functionality using a public key to encrypt the credentials for communication to the mobile communication device, the secure element configured to decrypt the encrypted credentials using a corresponding private key stored within the secure element without exposing the credentials or the private key outside of the secure element; and

forming a communication for transmission by the mobile communication device that includes data that describes a function to be performed by a vehicle and data generated using the provisioned credentials that is usable to verify that the mobile communication device is authorized to cause the function to be performed

17. A method as described in claim 16, wherein the function is to unlock the vehicle, lock the vehicle, cause a door of the vehicle to be open, or cause the door of the vehicle to close.

18. A method as described in claim 16, wherein the communication is configured to be communicated directly between the vehicle and the mobile communication device.

19. A method as described in claim 18, wherein the direct communication does not involve an Internet.

20. A method as described in claim 16, wherein the forming of the communication is performed by the mobile communication device after verification of a PIN entered on the mobile communication device.