Authenticating data units of a mobile communications device

• US 7,512,398 B2
• Filed: 08/23/2005
• Issued: 03/31/2009
• Est. Priority Date: 08/23/2005
• Status: Expired due to Fees

• Current Assignee: Avago Technologies International Sales Pte Limited (Broadcom, Inc.)
• Original Assignee: Agere Systems Incorporated (Broadcom, Inc.)
• Inventors: Chambers, Michael J., Tuchman, Kenneth A., Kiessling, Michael
• Primary Examiner(s): D AGOSTA, STEPHEN M
• Application Number:
  US11/209,583
• Publication Number:
  US 20070049250A1
• Time in Patent Office: 1,316 Days
• Field of Search: 455/410, 455/411, 455/414.1, 379/127.02, 379/142.05
• US Class Current: 455/411
• CPC Class Codes: G06F 21/64 Protecting data integrity, e.g. using checksums, certificates or signatures
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 63/123 received data contents, e.g. message integrity
• CPC Class Codes: H04L 63/126 the source of the received data
• CPC Class Codes: H04N 1/00307 with a mobile telephone apparatus constructional features of portable telephone sets H04M1/0202; mobile radio systems H04W84/00
• CPC Class Codes: H04N 1/32128 attached to the image data, e.g. file header, transmitted message header, information on the same page or in the same computer file as the image for information embedded in the image H04N1/32144
• CPC Class Codes: H04N 2201/3205 of identification information, e.g. name or ID code H04N2201/3209 takes precedence
• CPC Class Codes: H04N 2201/3214 of a date
• CPC Class Codes: H04N 2201/3215 of a time or duration
• CPC Class Codes: H04N 2201/3235 Checking or certification of the authentication information, e.g. by comparison with data stored independently
• CPC Class Codes: H04N 2201/3236 Details of authentication information generation
• CPC Class Codes: H04N 2201/3253 Position information, e.g. geographical position at time of capture, GPS data
• CPC Class Codes: H04N 2201/3264 of sound signals
• CPC Class Codes: H04W 12/069 using certificates or pre-shared keys
• CPC Class Codes: H04W 12/108 Source integrity

Abstract

The present invention provides a method for authenticating a digital data unit of a mobile communications device. In one embodiment, the invention provides for the capture of a digital data unit with a mobile communications device and generating authentication data to confirm at least one of the source or integrity of the digital data unit.

Claims

1. A method for authenticating a unit of digital data of a mobile communications device, comprising;

capturing said unit of digital data with a mobile communications device;

generating authentication data to confirm at least one of the source or integrity of said unit of digital data;

capturing biometric data identifying a person who captured said unit of digital data;

appending said biometric data to said unit of digital data to provide reference data corresponding to said unit of digital data, wherein said reference data further includes data selected from the group consisting of;

data representing the date and time said unit of digital data was captured;

data representing the location said unit of digital data was captured;

data identifying the owner of said mobile communications device;

data identifying said mobile communications device;

data identifying a network operator of a mobile communications network to which said mobile communications device is connectable; and

data representing the position or distance of an object within a visually captured scene relative to the mobile communications device or relative to another object within said visually captured scene; and

capturing at least two images of a visually captured scene from different viewpoints and determining information about the position or distance of at least one object within said scene relative to said mobile communications device or relative to another object within said scene and including said information in said reference data.

2. The method as recited in claim 1 wherein said unit of digital data at least partly comprises said reference data.

3. The method as recited in claim 1 wherein said generating authentication data comprises generating a unique identifier with respect to said unit of digital data by means of a pre-defined algorithm.

4. The method as recited in claim 1 wherein said generating authentication data comprises generating a unique identifier with respect to said reference data by means of a pre-defined algorithm.

5. The method as recited in claim 1 wherein said generating authentication data further comprises generating a hash value resulting from a hash function executed on said unit of digital data.

6. The method as recited in claim 5 wherein generating authentication data includes generating a digital signature from the hash value by means of an asymmetric cryptographic algorithm using a private key of an asymmetric key pair.

7. The method as recited in claim 1 wherein generating said authentication data includes cryptographically transforming or digitally signing said unit of digital data by means of a cryptographic algorithm.

8. The method as recited in claim 7 wherein digitally signing includes generating a digital signature from said unit of digital data by means of an asymmetric cryptographic algorithm using a private key of an asymmetric key pair.

9. The method as recited in claim 1 wherein said reference data further includes data representing the date and time the digital data unit was captured, said date and time being based on a time base provided by a network operator.

10. The method as recited in claim 9 wherein said time base is NITZ (Network Identity and Timezone) according to 3GPP TS 22.042 V6.0.0.

11. The method as recited in claim 1 wherein said mobile communications device is connectable to a cell-based mobile communications network and said reference data includes information about neighboring cells of said mobile communications device at the time said unit of digital data was captured.

12. The method as recited in claim 1 wherein said mobile communications device is associated with a GPS receiver and said reference data includes information regarding the geographical location of said mobile communications device at the time said unit of digital data was captured, said information based on GPS data received by said mobile communications device plus a time reference.

13. The method as recited in claim 1 wherein said mobile communications device has an associated SIM card and said reference data includes data from said SIM card that unequivocally identifies the owner of said mobile communications device and/or the network provider of the mobile communications network to which said mobile communications device is connectable.

14. The method as recited in claim 1 wherein said capturing of said biometric data identifying a person who captured said unit of digital data includes capturing fingerprint data of the person who operated said mobile communications device while capturing said unit of digital data.

15. The method as recited in claim 1 wherein said reference data includes a certificate that unequivocally identifies said mobile communications device.

16. The method as recited in claim 1 wherein data is transmitted to a database server, said data transmitted selected from the group consisting of:

a unit of digital data;

reference data;

a unique identifier generated on the basis of said unit of digital data and/or said reference data;

a hash value generated by executing a hash function on said unit of digital data; and

a digital signature generated from said unit of digital data by means of an asymmetric cryptographic algorithm using a private key of an asymmetric key pair.

17. The method as recited in claim 1 further comprising authenticating said unit of digital data by means of said authentication data.

18. A mobile communications device, comprising:

a means for capturing a unit of digital data;

a means for generating authentication data to confirm at least one of the source or integrity of said unit of digital data;

a means for capturing biometric data identifying a person who captures said unit of digital data;

a means for providing reference data appended to said unit of digital data, said reference data including said biometric data, and wherein said reference data further includes data selected from the group consisting of;

data representing a date and time said unit of digital data was captured;

data representing a location said unit of digital data was captured;

data identifying an owner of said mobile communications device;

data identifying said mobile communications device;

data identifying a network operator of a mobile communications network to which said mobile communications device is connectable; and

data representing the position or distance of an object within a visually captured scene relative to the mobile communications device or relative to another object within said visually captured scene; and

a means for capturing at least two images of a visually captured scene from different viewpoints and determining information about the position or distance of at least one object within said scene relative to said mobile communications device or relative to another object within said scene and including said information in said reference data.

19. The mobile communications device as recited in claim 18 wherein said means for capturing a unit of digital data is selected from the group consisting of:

a camera module adapted to capture digital images;

a camera module adapted to capture digital video sequences; and

an audio recording module adapted to capture digital audio sequences.

20. The mobile communications device as recited in claim 18 wherein said means for capturing a unit of digital data includes a first camera module and a second camera module arranged to respectively capture a first digital image and a second digital image, said first digital image having a viewpoint that differs from said second digital image.

21. The mobile communications device as recited in claim 18 further comprising a means for generating a unique identifier from said unit of digital data and/or from said reference data with a pre-defined algorithm stored in a memory of said mobile communications device.

22. The mobile communications device as recited in claim 18 further comprising an encryption means for cryptographically transforming said unit of digital data adapted to at least one selected from the group consisting of:

generating a hash value by executing a pre-defined hash function on said unit of digital data;

generating a digital signature from said unit of digital data by means of an asymmetric cryptographic algorithm using a private key of an asymmetric key pair; and

generating a digital signature from a hash value by means of an asymmetric cryptographic algorithm using a private key of an asymmetric key pair.

23. The mobile communications device as recited in claim 18 further comprising a means for providing the current date and time.

24. The mobile communications device as recited in claim 18 wherein mobile communications device is adapted to receive and utilize NITZ messages (Network Identity and Timezone) according to 3GPP TS 22.042 V6.0.0 sent by a network provider.

25. The mobile communications device as recited in claim 18 further comprising a means for determining cell information of a cellular network.

26. The mobile communications device as recited in claim 18 further comprising a GPS (Global Positioning System) receiver for determining a geographical position of said mobile communications device.

27. The mobile communications device as recited in claim 18 further comprising a SIM card with information stored thereon identifying the owner of said mobile communications device and/or a network provider for said mobile communications device.

28. The mobile communications device as recited in claim 18 wherein said means for capturing biometric data identifying a person who captures said unit of digital data further comprises a fingerprint detector integrated in a shutter release means of a camera module associated with said mobile communications device.

29. The mobile communications device as recited in claim 18 further comprising a means for providing a digital certificate that unequivocally identifies said mobile communications device.

30. The mobile communications device as recited in claim 29 wherein said digital certificate is issued by a manufacturer of said mobile communications device.

31. The mobile communications device as recited in claim 29 wherein said digital certificate includes a public key of an asymmetric key pair.

32. A communications system, comprising:

a communications network connectable to a mobile communications device and a database server;

said mobile communications device including;

a means for capturing a unit of digital data;

a means for generating authentication data to confirm at least one of the source or integrity of said unit of digital data;

a means for capturing biometric data identifying a person who captures said unit of digital data; and

a means for providing reference data appended to said unit of digital data, said reference data including said biometric data and wherein said reference data further includes data selected from the group consisting of;

data representing a date and time said unit of digital data was captured;

data representing a location said unit of digital data was captured;

data identifying an owner of said mobile communications device;

data identifying said mobile communications device;

data identifying a network operator of a mobile communications network to which said mobile communications device is connectable; and

data representing the position or distance of an object within a visually captured scene relative to the mobile communications device or relative to another object within said visually captured scene; and

said database server including a means for receiving and storing data regarding an item selected from the group consisting of;

said unit of digital data including visual and/or audio data captured by means of said mobile communications device, said unit of digital data having optionally appended thereto said reference data corresponding to said visual and/or audio data;

said reference data corresponding to said visual and/or audio data;

a unique identifier generated on the basis of said unit of digital data and/or said reference data;

a hash value generated by executing a hash function on said unit of digital data; and

a digital signature generated by said unit of digital data by means of an asymmetric cryptographic algorithm using a private key of an asymmetric key pair.