Method and apparatus for simplified audio authentication

• US 7,251,730 B2
• Filed: 02/15/2002
• Issued: 07/31/2007
• Est. Priority Date: 12/21/2001
• Status: Expired due to Fees

• Current Assignee: Qualcomm, Inc.
• Original Assignee: Qualcomm, Inc.
• Inventors: Quick, Roy Franklin Jr., Gantman, Alexander, Rose, Gregory G.
• Primary Examiner(s): TRUONG, THANHNGA B
• Application Number:
  US10/077,365
• Publication Number:
  US 20030120925A1
• Time in Patent Office: 1,992 Days
• Field of Search: 713185-186, 713/155, 713176-178, 713/182, 713168-170, 713/180, 380/277, 705/76, 705/57, 726/2, 726 4- 5
• US Class Current: 713/176
• CPC Class Codes: G06Q 20/341 Active cards, i.e. cards including their own processing means, e.g. including an IC or chip
• CPC Class Codes: G06Q 20/346 Cards serving only as information carrier of service
• CPC Class Codes: G06Q 20/3823 combining multiple encryption tools for a transaction
• CPC Class Codes: G06Q 20/3825 Use of electronic signatures
• CPC Class Codes: G06Q 20/4014 Identity check for transactions
• CPC Class Codes: G06Q 20/40975 using encryption therefor
• CPC Class Codes: G07F 7/1008 Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system
• CPC Class Codes: G07F 7/1016 Devices or methods for securing the PIN and other transaction-data, e.g. by encryption arrangements for secret communication, see H04L9/00
• CPC Class Codes: G07F 7/1025 Identification of user by a PIN code
• CPC Class Codes: H04L 2209/80 Wireless network architectures or network communication protocols for wireless network security H04W12/00
• CPC Class Codes: H04L 9/32 including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials
• CPC Class Codes: H04L 9/3226 using a predetermined code, e.g. password, passphrase or PIN network architectures or network communication protocols for supporting authentication of entities using passwords in a packet data network H04L63/083
• CPC Class Codes: H04L 9/3247 involving digital signatures
• CPC Class Codes: H04W 12/068 using credential vaults, e.g. password manager applications or one time password [OTP] applications
• CPC Class Codes: H04W 12/069 using certificates or pre-shared keys
• CPC Class Codes: H04W 12/65 Environment-dependent, e.g. using captured environmental data

Abstract

An apparatus and method for authentication having a processor and at least one activator coupled to the processor is claimed. A signature generator is coupled to the processor and capable of generating a secure identifier. An emitter coupled to the signal generator capable of emitting the secure identifier. A receiver receives the emitted secure identifier and verifies that the secure identifier was appropriately transmitted. The public key corresponding to the key identifier transmitted is accessed to determine the validity of the secure identifier using the accessed key and that the time indicated in the received secure identifier is verified to be within acceptable time tolerances.

Claims

1. An authentication apparatus operable to produce a secure identifier, the apparatus comprising:

a processor;

a clock coupled to the processor configurable to generate a time element;

a memory element coupled to the processor configurable to store a private key and public key information, the private key associated with a user;

at least one actuator coupled to the processor, the actuator configured to activate the private key;

a signature generator coupled to the processor operable to generate a digital signature when the actuator is activated, the digital signature being a function of the private key and the time element; and

an emitter coupled to the signature generator operable to emit the secure identifier to authenticate the user to an external authentication receiver, the secure identifier comprising the digital signature, time element, and public key information.

2. The apparatus set forth in claim 1, the signature generator further comprising:

a random number generator coupled to the processor to encrypt the digital signature.

3. The apparatus set forth in claim 1, wherein the time element comprises a predetermined number of least significant bits of the time.

4. The apparatus set forth in claim 1, further comprising an input element coupled to the processor, the input element capable of receiving a personal identification number (PIN).

5. The apparatus set forth in claim 1, further comprising an input element coupled to the processor, the input element capable of receiving a challenge.

6. The apparatus set forth in claim 1, further comprising a display coupled to the processor, the display capable of displaying key identifiers.

7. The apparatus set forth in claim 1, wherein the secure identifier emitted is emitted as an audio tone.

8. The apparatus set forth in claim 1, wherein the secure identifier emitted is emitted as an optical signal.

9. The apparatus set forth in claim 1, wherein the actuator is a push-button switch.

10. The apparatus set forth in claim 1, wherein the actuator is a voice activated switch.

11. Tile apparatus set forth in claim 1, wherein the public key information is a public key identifier.

12. The apparatus set forth in claim 11, wherein the pubic key identifier is derived from the public key information.

13. The apparatus set forth in claim 1, wherein the public key information is the public key.

14. The apparatus set forth in claim 1, wherein the digital signature is encrypted using a personal identification number (PIN).

15. A method of authenticating, comprising;

generating a time element;

identifying a key identifier, the key identifier associated with a user;

generating a digital signature;

generating a secure identifier as a function of the time element, the key identifier, the digital signature; and

emitting the secure identifier to authenticate the user to an external authentication receiver.

16. The method set forth in claim 15, further comprising identifying a PIN, and wherein generating a digital signature is further a function of the PIN.

17. The method set forth in claim 15, wherein the secure identifier emitted is emitted as an audible tone.

18. The method set forth in claim 15, wherein the time element, digital signature, and secure identifier are generated on a mobile user device.

19. The method set forth in claim 15, wherein the digital signature is derived from a private key.

20. An authentication receiver, comprising:

a receiver configurable to receive a secure identifier for authentication of a sender, the secure identifier comprising;

a digital signature, the digital signature comprising information derived from a private key,

a public key identifier corresponding to a public key associated with the sender being authenticated; and

a time identifier; and

a verifier configurable to verify the secure identifier, the verifier comprising;

memory comprising information corresponding to the public key information received and time tolerance information;

a key retriever coupled to the memory and configurable to retrieve the pubic key corresponding to the public key identifier; and

a time verifier coupled to the memory and configurable to verify that the received time identifier falls within acceptable time tolerances.

21. The apparatus set forth in claim 20, die secure identifier further comprises a PIN, and wherein the receiver is configurable to decrypt the digital signature using the PIN.

22. The apparatus set forth in claim 20, wherein the key retriever compares the public key identifier received to public key information stored in memory.

23. The apparatus set forth in claim 20, wherein the time tolerance information comprises information regarding clock drift.

24. The apparatus set forth in claim 20, wherein the secure identifier is emitted as an audible tone.

25. The apparatus set forth in claim 20, wherein the secure identifier is emitted as an optical signal.

26. A method of authenticating, comprising:

receiving a secure identifier for authentication of a sender, the secure identifier comprising a digital signature, a public key identifier, and a time identifier, wherein the public key identifier corresponds to a public key associated with the sender being authenticated; and

verifying the secure identifier, verifying comprising;

verifying that the public key identifier received corresponds to known information regarding the public key identifier received; and

verifying the time identifier such that the time identifier received is within predetermined time tolerances.

27. The method set forth in claim 26, the digital signature further comprises a PIN, and where receiving further comprises decrypting at least a portion of the digital signature using the PIN.

28. The method set forth in claim 26, wherein the secure identifier received is received as an audible tone.

29. The method set forth in claim 26, wherein the secure identifier received is received as an optical signal.

30. Apparatus for authenticating, comprising:

means for generating a tune element;

means for identifying a key identifier, the key identifier associated with a user;

means for generating a digital signature;

means for generating a secure identifier as a function of the time element, the key identifier, the digital signature; and

means toy emitting the secure identifier to authenticate the user to an external authentication means.

31. The apparatus set forth in claim 30, further comprising means for identifying a PIN, and wherein means for generating a digital signature is further a function of the PIN.

32. The apparatus set forth in claim 30, wherein the secure identifier emitted is emitted as an audible tone.

33. The apparatus set forth in claim 30, wherein the secure identifier emitted is emitted as an optical signal.

34. The apparatus set font in claim 30, wherein the digital signature is derived from a private key.

35. Apparatus for authenticating, comprising:

means for receiving a secure identifier for authentication of a sender, the secure identifier comprising a digital signature, a public key identifier, and a time identifier, wherein the public key identifier corresponds to a public key associated with the sender being authenticated; and

means for verifying the secure identifier, the means for verifying comprising;

means for verifying that the public key identifier received corresponds to known information regarding the public key identifier received; and

means for verifying the time identifier such that the time identifier received is within predetermined time tolerances.

36. The apparatus set forth in claim 35, the digital signature further comprises a PEN, and where means for receiving further comprises decrypting the digital signature using the PIN.

37. The apparatus set forth in claim 35, wherein the secure identifier received is received as an audible tone.

38. The apparatus set forth in claim 35, wherein the secure identifier received is received as an optical signal.