Secure identification method between two radiofrequency network appliances

• US 7,370,201 B2
• Filed: 07/19/2001
• Issued: 05/06/2008
• Est. Priority Date: 07/26/2000
• Status: Expired due to Term

• Current Assignee: Gemalto SA (Thales SA)
• Original Assignee: Gemplus (Thales SA)
• Inventors: Arnoux, Christophe
• Primary Examiner(s): Revak; Christopher
• Application Number:
  US10/343,030
• Publication Number:
  US 20030200434A1
• Time in Patent Office: 2,483 Days
• Field of Search: 726/2, 726/27, 713/171
• US Class Current: 713/171
• CPC Class Codes: H04L 63/0492 by using a location-limited connection, e.g. near-field communication or limited proximity of entities
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04M 1/727 Identification code transfer arrangements
• CPC Class Codes: H04M 2250/02 including a Bluetooth interface

Abstract

In a radiofrequency network, such as a Bluetooth network, two devices are securely identified to one another for a communication session. One of the devices is designated as a master apparatus, and the other is a slave apparatus. An automatic identification process is carried out by placing the two devices in close proximity with one another, and transmitting very short range signals from the master apparatus, to be exclusively received by the slave apparatus. If the two devices are able to communicate over this short range, an identification key is generated and passed to the slave apparatus for subsequent exchanges in normal, larger range communications.

Claims

1. A process for secure recognition between two units of a radiofrequency network, comprising the following steps:

(a) switching on said two units,

(b) selecting one of said two units as a master unit, and the other unit as a slave unit,

(c) moving said two units into immediate proximity with one another,

(d) launching on said master unit an automatic secure recognition process, as follows;

(d1) transmitting signals, using a first radiation pattern of limited coverage, in such a way that the signals transmitted by the masterunit are only received by said slave unit,

(d2) launching a standard connection process to said radiofrequency network and, in the case of successful connection to said radiofrequency network,

(d3) generating a recognition key in one of said units for subsequent secure exchanges between said two units, and

(d4) transmitting said recognition key from said one unit to the other of said units;

(e) moving said two units at a distance from each other for operation at a distance larger than the immediate proximity; and

(f) thereafter transmitting secure signals between said master unit and said slave unit, using said recognition key, by means of a second radiation pattern having a range of coverage larger than said first radiation pattern.

2. The process according to claim 1, wherein steps (d1) and (d2) are repeated in the event of failure to connect to the radiofrequency network at step (d2).

3. The process according to claim 2, wherein steps (d1) and (d2) are repeated at least once with a radiation pattern of greater range relative to the radiation pattern employed previously during steps (d1) and (d2).

4. The process according to claim 3, wherein the radiation pattern of greater range is obtained by increasing the power applied to an antenna of the master unit.

5. The process according to claim 3, wherein the radiation pattern of greater range is obtained by modifying the tuning of an antenna of the master unit.

6. The process according to claim 1, wherein the radiation pattern of an antenna of the master unit has a predetermined limited direction of radiation.

7. The process according to claim 1, wherein step (d3) is implemented by the slave unit.

8. The process according to claim 1, further including the step of reverting to step (b) and selecting the slave unit as the master unit, in the case of failure to connect to the radiofrequency network at step (d2).

9. A master unit comprising a transmitter-receiver connected to a transmission-reception antenna to form a transmission-reception device for use in a radiofrequency network to communicate with at least one slave unit within said radiofrequency network,

wherein said master unit comprises means for modifying the range of the radiation pattern of the antenna, so as to have a first range and at least a second range smaller than said first range to establish a connection between said master unit and only said at least one slave unit within said radiofrequency network, when said at least one slave unit is in the immediate proximity of said master unit,

wherein said master unit operates in a first mode to transmit a recognition key to said slave unit while utilizing said second, smaller range of the radiation pattern, and in a second mode to thereafter securely communicate with said slave unit using said recognition key, while utilizing said first radiation pattern for transmissions to said slave unit.

10. The master unit according to claim 9, wherein said means for modifying the range of the radiation pattern of the antenna comprises means to modify the power applied to said antenna.

11. The master unit according to claim 9, wherein said means for modifying the range of the radiation pattern of the antenna comprises means to modify the tuning of the antenna circuit.

12. The master unit according to claim 9, wherein said transmission-reception antenna has a predetermined limited direction of transmission.

13. A radiofrequency network communication device, comprising:

means for transmitting an initial signal within a first, limited range to establish a connection with a unit in the immediate proximity of said device;

means for generating a recognition key and providing said recognition key to a unit with which a connection has been established; and

means for switching the transmission range of said transmitting means from said first, limited range to a second, larger range after said recognition key has been provided to the unit, for communicating with said unit using said recognition key.

14. The communication device of claim 13, wherein said switching means varies the power of said transmitting means, so that said transmitting means transmits said initial signal at a lower power than the power with which said communicating means transmits signals.

15. The communication device of claim 14, wherein said switching means carries said transmitting means to repeatedly transmit said initial signal at successively greater power levels until a connection is established.

16. The communication device of claim 13, wherein said transmitting means transmits said initial signal within a limited direction of radiation.