DEVICE AUTHENTICATION IN AD-HOC NETWORKS

• US 20150237040A1
• Filed: 02/20/2014
• Published: 08/20/2015
• Est. Priority Date: 02/20/2014
• Status: Active Grant

• Current Assignee: Empire Technology Development LLC (Allied Inventors Management, LLC)
• Original Assignee: Empire Technology Development LLC (Allied Inventors Management, LLC)
• Inventors: Levin, Pavel
• Granted Patent: US 9,813,406 B2
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 63/18 using different networks or channels, e.g. using out of band channels cryptographic mechanisms or cryptographic arrangements for key distribution involving distinctive intermediate devices or communication paths H04L9/0827; cryptographic mechanisms or cryptographic arrangements for authentication using a plurality of channels H04L9/3215

Abstract

Technologies are generally described for methods and systems effective to authenticate an invited device. In some examples, a method for authenticating an invited device may include receiving, by an evaluating device, a first message from the invited device. The evaluating device may receive the first message at a first receiving time. The method may also include receiving, by the evaluating device, a second message from the inviting device. The evaluating device may receive the second message at a second receiving time. A first sending time, of the first message, and a second sending time, of the second message, may be mutually synchronized. The method may also include determining a receiving time difference between the first receiving time and the second receiving time. The method may also include, by the evaluating device, authenticating the invited device based on the receiving time difference, the first message and the second message.

Claims

1. A method to authenticate an invited device, the method comprising, by an evaluating device:

receiving, at a first receiving time, a first message from the invited device;

receiving, at a second receiving time, a second message from an inviting device;

determining a receiving time difference between the first receiving time and the second receiving time; and

authenticating the invited device based on the receiving time difference, the first message and the second message.

2. The method of claim 1, further comprising, prior to receiving the first and the second message, by the inviting device:

establishing a communication link with the invited device;

determining a start time;

sending an indication of the start time to the invited device through the communication link; and

sending the second message to the evaluating device at the start time.

3. The method of claim 2, further comprising prior to sending the indication of the start time, encrypting the indication of the start time by the inviting device.

4. The method of claim 2, further comprising, by the invited device:

receiving the indication of the start time from the inviting device through the communication link; and

sending the first message to the evaluating device at the start time.

5. The method of claim 4, wherein the first message includes an identification associated with the inviting device.

6. The method of claim 2, wherein the communication link is a first communication link, and the method further comprises, by the evaluating device:

in response to the authentication of the invited device, establishing a second communication link with the invited device;

sending a digital certificate to the invited device through the second communication link; and

determining an expiration time of the digital certificate.

7. The method of claim 6, further comprising, by the inviting device:

sending an indication of a time interval to the invited device through the first communication link; and

repeatedly sending the second message to the evaluating device at a period that corresponds to the time interval.

8. The method of claim 7, further comprising, by the invited device:

receiving the indication of the time interval from the inviting device through the first communication link; and

repeatedly sending the first message to the evaluating device at a period that corresponds to the time interval.

9. The method of claim 1, further comprising, by the inviting device:

establishing a first communication link with the invited device;

determining a start time;

sending an indication of the start time to the invited device through the first communication link; and

sending the second message to the evaluating device at the start time; and

thereafter

receiving the first message by the evaluating device through a second communication link;

wherein

the first communication link has a higher level of security than the second communication link.

10. The method of claim 1, wherein at least one of the invited and the inviting devices are disposed in a vehicle that includes a relative positioning system sensor and a monitoring unit.

11. A system configured to authenticate an invited device, the system comprising:

an evaluating device; and

an inviting device configured to be in communication with the evaluating device;

the evaluating device being configured to;

receive, at a first receiving time, a first message from the invited device;

receive, at a second receiving time, a second message from an inviting device;

determine a receiving time difference between the first receiving time and the second receiving time; and

authenticate the invited device based on the receiving time difference, the first message, and the second message.

12. The system of claim 11, wherein the inviting device is further configured to:

establish a communication link with the invited device prior to the receipt of the first and second message at the evaluating device;

determine a start time;

send an indication of the start time to the invited device through the communication link; and

send the second message to the evaluating device at the start time.

13. The system of claim 12, wherein the inviting device is further configured to encrypt the indication of the start time.

14. The system of claim 13, wherein the invited device is further configured to:

receive the indication of the start time from the inviting device through the communication link; and

send the first message to the evaluating device at the start time.

15. The system of claim 11, wherein the inviting device is further configured to:

send an indication of a time interval to the invited device through the first communication link; and

repeatedly send the second message to the evaluating device at a period that corresponds to the time interval.

16. The system of claim 13, wherein at least one of the invited and the inviting devices are disposed in a vehicle that includes a relative positioning system sensor and a monitoring unit.

17. A method for authenticating an invited device, the method comprising,

by an inviting device:

establishing a first communication link with the invited device;

determining a start time;

sending an indication of the start time to the invited device through the first communication link; and

sending a first message to an evaluating device at the start time;

by the invited device;

receiving the indication of the start time from the inviting device through the first communication link; and

sending a second message to the evaluating device through a second communication link at the start time;

by the evaluating device;

receiving, at a first receiving time, the first message from the invited device;

receiving, at a second receiving time, the second message from the inviting device;

determining a receiving time difference between the first receiving time and the second receiving time; and

authenticating the invited device based on the receiving time difference, the first message and the second message.

18. The method of claim 17, further comprising, by the inviting device, prior to sending the indication of the start time, encrypting the indication of the start time.

19. The method of claim 18, wherein the first message includes an identification associated with the inviting device.

20. The method of claim 17, wherein the first communication link has a higher level of security than the second communication link.