Digital authentication over acoustic channel

• US 8,391,480 B2
• Filed: 02/03/2009
• Issued: 03/05/2013
• Est. Priority Date: 02/15/2002
• Status: Expired due to Term

• Current Assignee: Qualcomm, Inc.
• Original Assignee: Qualcomm, Inc.
• Inventors: Steenstra, Jack, Gantman, Alexander, Noerenberg, John W. II, Jalali, Ahmad, Rose, Gregory
• Primary Examiner(s): Parthasarathy, Pramila
• Application Number:
  US12/365,126
• Publication Number:
  US 20090141890A1
• Time in Patent Office: 1,491 Days
• Field of Search: None
• US Class Current: 380/44
• CPC Class Codes: G06Q 20/3272 using an audio code
• CPC Class Codes: G06Q 20/341 Active cards, i.e. cards including their own processing means, e.g. including an IC or chip
• CPC Class Codes: G06Q 20/346 Cards serving only as information carrier of service
• CPC Class Codes: G06Q 20/367 involving electronic purses or money safes
• CPC Class Codes: G06Q 20/3672 initialising or reloading thereof
• CPC Class Codes: G06Q 20/3674 involving authentication
• CPC Class Codes: G06Q 20/3821 Electronic credentials
• CPC Class Codes: G06Q 20/3829 involving key management
• CPC Class Codes: G06Q 20/4014 Identity check for transactions
• CPC Class Codes: G06Q 20/40975 using encryption therefor
• CPC Class Codes: G07F 19/20 Automatic teller machines [ATMs]
• CPC Class Codes: G07F 7/1008 Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system
• CPC Class Codes: G07F 7/1016 Devices or methods for securing the PIN and other transaction-data, e.g. by encryption arrangements for secret communication, see H04L9/00
• CPC Class Codes: G07F 7/1025 Identification of user by a PIN code
• CPC Class Codes: H04L 2209/80 Wireless network architectures or network communication protocols for wireless network security H04W12/00
• CPC Class Codes: H04L 2463/082 applying multi-factor authentication cryptographic mechanisms or cryptographic arrangements including means for verifying the identity or authority of a user of the system or for message authentication H04L9/32
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 9/3226 using a predetermined code, e.g. password, passphrase or PIN network architectures or network communication protocols for supporting authentication of entities using passwords in a packet data network H04L63/083
• CPC Class Codes: H04L 9/3234 involving additional secure or trusted devices, e.g. TPM, smartcard, USB or software token network architectures or network communication protocols for supporting authentication of entities using an additional device in a packet data network H04L63/0853
• CPC Class Codes: H04W 12/069 using certificates or pre-shared keys
• CPC Class Codes: H04W 12/65 : Environment-dependent, e.g. using captured environmental data

Abstract

Apparatus and method are disclosed for digital authentication and verification. In one embodiment, authentication involves storing a cryptographic key and a look up table (LUT), generating an access code using the cryptographic key; generating multiple parallel BPSK symbols based upon the access code; converting the BPSK symbols into multiple tones encoded with the access code using the LUT; and outputting the multiple tones encoded with the access code for authentication. In another embodiment, verification involves receiving multiple tones encoded with an access code; generating multiple parallel BPSK symbols from the multiple tones; converting the BPSK symbols into an encoded interleaved bit stream of the access code; de-interleaving the encoded interleaved bit stream; and recovering the access code from the encoded de-interleaved bit stream.

Claims

1. A non-transitory machine readable medium having one or more instructions that, in response to execution, cause a computing device to perform operations, comprising:

storing a cryptographic key and a look up table (LUT);

generating an access code using the cryptographic key;

generating multiple parallel binary phase shift keying (BPSK) symbols based on the access code;

converting the multiple parallel BPSK symbols into multiple tones encoded with the access code using the LUT;

outputting the multiple tones;

receiving a personal identification number (PIN);

creating other multiple tones based on the PIN; and

outputting the other multiple tones.

2. The non-transitory machine-readable medium of claim 1, the operations further comprising:

repeating the multiple parallel BPSK symbols a selected number of times before the converting the multiple parallel BPSK symbols.

3. The non-transitory machine-readable medium of claim 2, wherein the repeating the multiple parallel BPSK symbols comprises repeating a set of three BPSK symbols the selected number of times;

and wherein the converting the multiple parallel BPSK symbols comprises converting the set of three BPSK symbols into the multiple tones using the LUT.

4. The non-transitory machine-readable medium of claim 1, the operations further comprising adding reference tones with reference phases to the multiple tones.

5. The non-transitory machine-readable medium of claim 1, the operations further comprising:

generating time elements,

wherein the generating the access code comprises generating the access code using the cryptographic key and a time element of the time elements.

6. The non-transitory machine-readable medium of claim 1, the operations further comprising:

receiving a user command,

wherein the generating the access code comprises generating the access code in response to receiving the user command.

7. The non-transitory machine-readable medium of claim 1, the operations further comprising:

amplifying the multiple tones before the outputting the multiple tones.

8. A non-transitory machine readable medium having one or more instructions that, in response to execution, cause a computing device to perform operations, comprising:

storing a cryptographic key;

generating an access code using the cryptographic key;

generating multiple parallel binary phase shift keying (BPSK) symbols based on the access code;

repeating the multiple parallel BPSK symbols a selected number of times to obtain repeated BPSK symbols;

performing an inverse fast fourier transform (IFFT) on the repeated BPSK symbols to generate IFFT symbols;

modulating the IFFT symbols into multiple tones encoded with the access code and a personal identification number (PIN);

outputting the multiple tones; and

in response to the outputting the multiple tones, receiving a grant of access associated with at least one of an application, a system, or a network.

9. The non-transitory machine-readable medium of claim 8, wherein the repeating the multiple parallel BPSK symbols comprises repeating a set of three BPSK symbols the selected number of times and converting the set of three BPSK symbols into the multiple tones using a look up table (LUT).

10. A non-transitory machine readable medium having one or more instructions that, in response to execution, cause a computing device to perform operations, comprising:

receiving multiple tones encoded with an access code and a personal identification number (PIN);

generating multiple parallel binary phase shift keying (BPSK) symbols from the multiple tones;

converting the multiple parallel BPSK symbols into an encoded interleaved bit stream;

de-interleaving the encoded interleaved bit stream to obtain a de-interleaved bit stream;

recovering the access code and the PIN from the de-interleaved bit stream; and

in response to verifying the access code and the PIN, granting access to at least one of an application, a system, or a network.

11. The non-transitory machine-readable medium of claim 10, the operations further comprising:

generating repeated BPSK symbols based on the multiple tones;

generating a selected set of BPSK symbols from the repeated BPSK symbols; and

converting the selected set of BPSK symbols into the encoded interleaved bit stream.

12. The non-transitory machine-readable medium of claim 11, the operations further comprising:

converting inverse fast fourier transform (IFFT) symbols into repeated sets of three BPSK symbols, wherein the generating the selected set of BPSK symbols further comprises selecting three BPSK symbols from the repeated sets of three BPSK symbols.

13. The non-transitory machine-readable medium of claim 11, the operations further comprising:

converting inverse fast fourier transform (IFFT) symbols into repeated sets of three BPSK symbols, wherein the generating the selected set of BPSK symbols further comprises selecting one of the repeated sets of three BPSK symbols.

14. The non-transitory machine-readable medium of claim 10, the operations further:

storing a cryptographic key, wherein the verifying the access code further includes verifying the access code using the cryptographic key.

15. The non-transitory machine-readable medium of claim 10, the operations further comprising:

generating a time element, wherein the verifying the access code comprises verifying the access code using the time element.

16. An apparatus, comprising:

an audio input unit configured to receive multiple tones encoded with an access code and a personal identification number (PIN);

a binary phase shift keying (BPSK) module configured to generate multiple parallel BPSK symbols from the multiple tones and convert the multiple parallel BPSK symbols into an encoded interleaved bit stream;

a de-interleaving component configured to de-interleave the encoded interleaved bit stream to obtain a de-interleaved bit stream;

a decoding module configured to recover the access code and the PIN from the deinterleaved bit stream; and

a processing module configured to, in response to the access code and the PIN being verified, grant access to at least one of an application, a system, or a network.

17. An apparatus, comprising:

means for storing a cryptographic key;

means for generating an access code using the cryptographic key;

means for generating multiple parallel binary phase shift keying (BPSK) symbols based on the access code;

means for repeating the multiple parallel BPSK symbols a selected number of times to obtain repeated BPSK symbols;

means for performing an inverse fast fourier transform (IFFT) on the repeated BPSK symbols to generate IFFT symbols;

means for modulating the IFFT symbols into multiple tones encoded with the access code and a personal identification number (PIN);

means for outputting the multiple tones; and

means for receiving a grant of access associated with at least one of an application, a system, or a network based on the multiple tones.

18. A method, comprising:

storing a cryptographic key and a look up table (LUT);

generating an access code using the cryptographic key;

generating multiple parallel binary phase shift keying (BPSK) symbols based on the access code;

converting the multiple parallel BPSK symbols into multiple tones encoded with the access code using the LUT;

outputting the multiple tones;

receiving a personal identification number (PIN);

creating other multiple tones based on the PIN; and

outputting the other multiple tones.