Enhancing the security of near-field communication

• US 8,914,863 B2
• Filed: 03/29/2013
• Issued: 12/16/2014
• Est. Priority Date: 03/29/2013
• Status: Active Grant

• Current Assignee: HERE Global B.V. (Nokia Corporation)
• Original Assignee: HERE Global B.V. (Nokia Corporation)
• Inventors: Prchal, Ken A.
• Primary Examiner(s): Patel, Haresh N
• Application Number:
  US13/853,470
• Publication Number:
  US 20140298434A1
• Time in Patent Office: 627 Days
• Field of Search: 726/7, 705/42
• US Class Current: 726/7
• CPC Class Codes: G06F 1/1694 the I/O peripheral being a single or a set of motion sensors for pointer control or gesture input obtained by sensing movements of the portable computer
• CPC Class Codes: G06F 1/1698 the I/O peripheral being a sending/receiving arrangement to establish a cordless communication link, e.g. radio or infrared link, integrated cellular phone details of antennas disposed inside a computer H01Q1/2266
• CPC Class Codes: G06F 3/017 Gesture based interaction, e.g. based on a set of recognized hand gestures interaction based on gestures traced on a digitiser G06F3/04883
• CPC Class Codes: G06F 3/0346 with detection of the device orientation or free movement in a 3D space, e.g. 3D mice, 6-DOF [six degrees of freedom] pointers using gyroscopes, accelerometers or tilt-sensors
• CPC Class Codes: G06Q 20/3224 Transactions dependent on location of M-devices
• CPC Class Codes: G06Q 20/3278 RFID or NFC payments by means of M-devices
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: H04B 5/48 Transceivers
• CPC Class Codes: H04B 5/72 for local intradevice communication
• CPC Class Codes: H04L 63/0492 by using a location-limited connection, e.g. near-field communication or limited proximity of entities
• CPC Class Codes: H04M 1/72412 using two-way short-range wireless interfaces
• CPC Class Codes: H04M 2250/04 including near field communication means, e.g. RFID
• CPC Class Codes: H04W 12/069 using certificates or pre-shared keys
• CPC Class Codes: H04W 12/68 Gesture-dependent or behaviour-dependent
• CPC Class Codes: H04W 4/026 using orientation information, e.g. compass
• CPC Class Codes: H04W 4/80 Services using short range communication, e.g. near-field communication [NFC], radio-frequency identification [RFID] or low energy communication

Abstract

Security of near-field communication (NFC) may be enhanced. A user authentication may be provided via a mobile device enabled as a first NFC device. The user authentication may be specified by an end user of the mobile device for permitting NFC with a second NFC device. The user authentication may be related to an environmental object or a perspective of the mobile device specified by the end user. It may be determined whether the mobile device and the second NFC device are in proximity to one another. When the mobile device and the second NFC device are in proximity to one another and a detected action performed by a user with the mobile device is substantially similar to the provided user authentication, NFC between the mobile device and the second NFC device may be permitted.

Claims

1. A method comprising:

providing, via a mobile device enabled as a first near-field communication (NFC) device, a user authentication for permitting NFC with a second NFC device, the user authentication related to an environmental object or a perspective of the mobile device specified by an end user of the mobile device;

determining whether the mobile device and the second NFC device are in proximity to one another; and

permitting NFC between the mobile device and the second NFC device when a detected action performed by a user with the mobile device is substantially similar to the provided user authentication and the mobile device and the second NFC device are in proximity to one another.

2. The method of claim 1, wherein providing the user authentication comprises providing the user authentication, the user authentication being a perspective of the mobile device specified by the end user.

3. The method of claim 2, wherein providing the user authentication comprises providing the user authentication, the user authentication being a perspective of the mobile device relative to the second NFC device.

4. The method of claim 1, wherein providing the user authentication comprises providing the user authentication, the user authentication being a perspective of the mobile device specified by the end user, the perspective of the mobile device including a heading, tilt, and twist of the mobile device.

5. The method of claim 1, wherein providing the user authentication comprises providing the user authentication, the user authentication being a perspective of the mobile device specified by the end user, the perspective of the mobile device including two or more of a heading, tilt, twist, and bearing of the mobile device.

6. The method of claim 1, wherein permitting NFC between the mobile device and the second NFC device comprises permitting an exchange of transactional data, security access information, or contacts, photos, videos, and files between the mobile device and the second NFC device.

7. The method of claim 1, further comprising providing, via the mobile device, a second user authentication, different from the user authentication, specified by the end user of the mobile device for permitting NFC between the mobile device and a third NFC device, the third NFC device being different than the second NFC device.

8. The method of claim 1, further comprising changing the user authentication at a pre-determined frequency of time.

9. The method of claim 1, wherein providing the user authentication comprises providing the user authentication, the user authentication being the environmental object specified by the end user, the environmental object being adjacent the second NFC device.

10. A method comprising:

detecting an action performed by a user with a mobile device;

comparing, via a processor, the action performed by the user with the mobile device with a user authentication key, the user authentication key specified by an end user of the mobile device for permitting near-field communication (NFC) between the mobile device and a NFC device, the user authentication key related to an environmental object or a perspective of the mobile device specified by an end user; and

determining, based on the comparing, whether to permit the NFC when the mobile device and the NFC device are in proximity to one another.

11. The method of claim 10, wherein detecting the action performed by the user comprises detecting the action performed by the user using one or more input sensors of the mobile device.

12. The method of claim 11, wherein detecting the action performed by the user using one or more input sensors of the mobile device comprises detecting the action performed by the user using a positioning system, an accelerometer, a gyroscope, a camera, or combinations thereof, of the mobile device.

13. The method of claim 10, wherein detecting the action performed by the user comprises detecting a movement of the mobile device by the user.

14. The method of claim 10, wherein determining comprises determining to permit the NFC when the action performed by the user substantially satisfies the user authentication key.

15. The method of claim 10, wherein detecting the action performed by the user comprises detecting an image captured by the mobile device, and wherein comparing the action performed by the user with the mobile device with the user authentication key comprises comparing the image captured by the mobile device with the user authentication key, the user authentication key being related to an image of an environmental object.

16. A system comprising:

a mobile device operable as a first near-field communications (NFC) device; and

a mobile application executing on the mobile device and configured to store a user defined authentication key for permitting NFC communication with a second NFC device, the user authentication key relating to an environmental object or an orientation of the mobile device specified by the end user,

wherein the mobile application is configured to determine when the mobile device and the second NFC device are in proximity to one another, detect an action of the mobile device, and permit NFC communication between the mobile device and the second NFC device when the mobile device and the second NFC device are in proximity to one another and the detected action is substantially similar to the defined user authentication key.

17. The system of claim 16, wherein the second NFC device comprises an NFC reader used to control access to a vehicle or residence.

18. The system of claim 16, wherein the user authentication key comprises the orientation of the mobile device, the orientation of the mobile device including a heading, a tilt, and a twist of the mobile device specified by the end user.

19. The system of claim 16, wherein the user authentication key comprises an image of the environmental object, the environmental object being adjacent the second NFC device.

20. The system of claim 16, wherein the user authentication key comprises a change in the orientation of the mobile device.