Image-based man-in-the-middle protection in numeric comparison association models

• US 9,398,046 B2
• Filed: 03/06/2008
• Issued: 07/19/2016
• Est. Priority Date: 03/06/2008
• Status: Active Grant

• Current Assignee: Qualcomm, Inc.
• Original Assignee: Qualcomm, Inc.
• Inventors: Linsky, Joel
• Primary Examiner(s): Bali, Vikkram
• Assistant Examiner(s): Mangialaschi, Tracy
• Application Number:
  US12/043,916
• Publication Number:
  US 20090228707A1
• Time in Patent Office: 3,057 Days
• Field of Search: 713/171, 380/270, 380/283, 707/999.004
• US Class Current: 1/1
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 2221/2129 Authenticate client device independently of the user
• CPC Class Codes: H04L 63/1466 Active attacks involving interception, injection, modification, spoofing of data unit addresses, e.g. hijacking, packet injection or TCP sequence number attacks
• CPC Class Codes: H04L 63/1475 Passive attacks, e.g. eavesdropping or listening without modification of the traffic monitored
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/12 Detection or prevention of fraud
• CPC Class Codes: H04W 12/122 Counter-measures against attacks; Protection against rogue devices
• CPC Class Codes: H04W 12/50 Secure pairing of devices
• CPC Class Codes: H04W 12/63 Location-dependent; Proximity-dependent
• CPC Class Codes: H04W 12/65 Environment-dependent, e.g. using captured environmental data
• CPC Class Codes: H04W 12/77 Graphical identity
• CPC Class Codes: H04W 88/02 Terminal devices

Abstract

An authentication scheme is provided for securely establishing an association with a second device over a wireless communication link. A cryptographic key exchange is performed between a first device and a second device, wherein cryptographic information for the first and second device is obtained. The first and second devices may independently generate a confirmation value based on the cryptographic information. Each device may obtain a confirmation image based on their respective confirmation values. A confirmation image is uniquely associated with a confirmation value so that no two confirmation values can be associated with the same confirmation image. The images for both the first and second devices are provided to an operator for authentication. If the confirmation images are identical, an association between the first and second devices may be confirmed by the operator. Comparing confirmation images may increase the reliability of operator authentication and is more efficient than comparing values.

Claims

1. A method operational on a first device for securely establishing an association with a second device over a wireless communication link, comprising:

performing a cryptographic key exchange with the second device, wherein cryptographic information for the first and second device is obtained;

receiving a first commitment value from the second device;

generating a second commitment value at the first device;

determining that the received first commitment value is equal to or a function of the generated second commitment value to secure communications between the first device and the second device;

obtaining a confirmation value for the first device based on the cryptographic information after determining that the received first commitment value is equal to or the function of the second commitment value;

obtaining a confirmation image based on the confirmation value by dynamically generating the confirmation image by one or more of (a) generating a watch face based on different portions of the confirmation value or (b) mapping the confirmation value to a longitude and latitude pair, obtaining at least one of a map or image of a location associated with the longitude and latitude pair, and using the map or image of the location as the confirmation image; and

providing the confirmation image to an operator for authentication against a corresponding confirmation image for the second device.

2. The method of claim 1, further comprising:

storing a plurality of images in the first device, wherein the confirmation value is converted into the confirmation image by mapping a first set of digits of the confirmation value to a first image and mapping a second set of digits of the confirmation value to a second different image.

3. The method of claim 1, wherein the confirmation image is uniquely associated with the confirmation value.

4. The method of claim 1, wherein the cryptographic information includes at least one of a first public key associated with the first device, a first nonce associated with the first device, a second public key associated with the second device, and a second nonce associated with the second device.

5. The method of claim 1, wherein the confirmation image is based on a first derivative hash of the confirmation value.

6. The method of claim 1, wherein obtaining the confirmation image based on the confirmation value includes applying a collision-resistant function to generate the confirmation image, wherein the collision-resistant function inhibits generating the same image using different values.

7. The method of claim 1, wherein obtaining the confirmation image based on the confirmation value further includes:

converting the confirmation value into a search string;

inputting the search string into a search engine to obtain one or more search results including a plurality of webpages; and

utilizing at least a portion of a webpage from the plurality of webpages in the search results as the confirmation image.

8. The method of claim 1, wherein obtaining the confirmation image based on the confirmation value further includes:

converting at least a portion of the confirmation value into an address reference for content on a network, wherein the content includes an image;

obtaining the image associated with the address reference; and

utilizing the image as the confirmation image.

9. The method of claim 1, wherein performing the cryptographic key exchange with the second device includes:

obtaining a first public key based on a function of a first nonce associated with the first device;

transmitting the first public key to the second device;

receiving a second public key from the second device, the second public key based on a function of a second nonce associated with the second device; and

receiving the second nonce and the second commitment value from the second device.

10. The method of claim 1, wherein the first commitment value is a first nonce and the second commitment value is a second nonce.

11. The method of claim 1, wherein obtaining the confirmation image further comprises dynamically generating an avatar based on different portions of the confirmation value by mapping different portions of the confirmation value to different images.

12. The method of claim 11, wherein the avatar is dynamically generating by using different portions of the confirmation value to select one or more features for combining to form the avatar.

13. The method of claim 12, wherein the one or more features include facial features, clothing features and background features.

14. The method of claim 1, wherein obtaining the confirmation image further comprises combining distinct images of related subject matter into one or more pairs of related images by mapping different portions of the confirmation value to different images.

15. The method of claim 1, wherein obtaining the confirmation image further comprises mapping a first set of digits of the confirmation value to a plurality of colors and mapping a second set of digits of the confirmation value to a plurality of images by mapping different portions of the confirmation value to different images.

16. A first device to securely establish an association with a second device over a wireless communication link, the first device comprising:

a wireless communication interface for communicating with the second device; and

an authentication module configured to

perform a cryptographic key exchange with the second device, wherein cryptographic information for the first device and second device is obtained,

receive a first commitment value from the second device,

generate a second commitment value at the first device,

determine that the received first commitment value is equal to or a function of the generated second commitment value to secure communications between the first device and the second device,

obtain a confirmation value based on the cryptographic information after determining that the received first commitment value is equal to or the function of the second commitment value,

obtain a confirmation image based on the confirmation value by dynamically generating the confirmation image by one or more of (a) generating a watch face based on different portions of the confirmation value or (b) mapping the confirmation value to a longitude and latitude pair, obtaining at least one of a map or image of a location associated with the longitude and latitude pair, and using the map or image of the location as the confirmation image, and

provide the confirmation image to an operator over an output interface for authentication against a corresponding confirmation image for the second device.

17. The first device of claim 16, further comprising:

a storage device coupled to the authentication module, the storage device configured to store a plurality of images, wherein the confirmation value is converted into the confirmation image by mapping a first set of digits of the confirmation value to a first image and mapping a second set of digits of the confirmation value to a second different image.

18. The first device of claim 16, wherein the confirmation image is uniquely associated with the confirmation value.

19. The first device of claim 16, wherein the cryptographic information includes at least one of a first public key associated with the first device, a first nonce associated with the first device, a second public key associated with the second device, and a second nonce associated with the second device.

20. The first device of claim 16, wherein the confirmation image is based on a first derivative hash of the confirmation value.

21. The first device of claim 16, wherein the authentication module is further configured to:

convert the confirmation value into a search string;

input the search string into a search engine to obtain one or more search results including a plurality of webpages; and

utilize at least a portion of a webpage from the plurality of webpages in the search results as the confirmation image.

22. The first device of claim 16, wherein the authentication module is further configured to:

convert the confirmation value into an address reference for content on a network, wherein the content includes an image;

obtain the image associated with the address reference; and

utilize the image as the confirmation image.

23. The first device of claim 16, wherein the authentication module for performing the cryptographic key exchange with the second device is further configured to:

obtain a first public key based on a function of a first nonce associated with the first device;

transmit the first public key to the second device;

receive a second public key from the second device, the second public key based on a function of a second nonce associated with the second device; and

receive the second nonce and the second commitment value from the second device.

24. The first device of claim 16, wherein the first commitment value is a first nonce and the second commitment value is a second nonce.

25. The first device of claim 16, wherein the authentication module is further configured to obtain the confirmation image by dynamically generating an avatar based on different portions of the confirmation value by mapping different portions of the confirmation value to different images.

26. The first device of claim 25, wherein the authentication module dynamically generates the avatar by using different portions of the confirmation value to select one or more features for combining to form the avatar.

27. The first device of claim 26, wherein the one or more features include facial features, clothing features and background features.

28. The first device of claim 16, wherein the authentication module is further configured to obtain the confirmation image by combining distinct images of related subject matter into one or more pairs of related images by mapping different portions of the confirmation value to different images.

29. The first device of claim 16, wherein the authentication module is further configured to obtain the confirmation image by mapping a first set of digits of the confirmation value to a plurality of colors and mapping a second set of digits of the confirmation value to a plurality of images by mapping different portions of the confirmation value to different images.

30. A first device to securely establish an association with a second device over a wireless communication link, the first device comprising:

means for communicating with the second device;

means for performing a cryptographic key exchange with the second device, wherein cryptographic information for the first device and second device is obtained;

means for receiving a first commitment value from the second device;

means for generating a second commitment value at the first device;

means for determining that the received first commitment value is equal to or a function of the generated second commitment value to secure communications between the first device and the second device;

means for obtaining a confirmation value based on the cryptographic information after determining that the received first commitment value is equal to or the function of the second commitment value;

means for obtaining a confirmation image based on the confirmation value by dynamically generating the confirmation image by one or more of (a) generating a watch face based on different portions of the confirmation value or (b) mapping the confirmation value to a longitude and latitude pair, obtaining at least one of a map or image of a location associated with the longitude and latitude pair, and using the map or image of the location as the confirmation image; and

means for providing the confirmation image to an operator over an output interface for authentication against a corresponding confirmation image for the second device.

31. The first device of claim 30, further comprising:

means for storing a plurality of images, wherein the confirmation value is converted into the confirmation image by mapping a first set of digits of the confirmation value to a first image and mapping a second set of digits of the confirmation value to a second different image.

32. The first device of claim 30, wherein the confirmation image is uniquely associated with the confirmation value.

33. The first device of claim 30, wherein the means for obtaining the confirmation image further comprises means for dynamically generating an avatar based on different portions of the confirmation value by mapping different portions of the confirmation value to different images.

34. The first device of claim 33, wherein the means for dynamically generating the avatar uses different portions of the confirmation value to select one or more features for combining to form the avatar.

35. The first device of claim 34, wherein the one or more features include facial features, clothing features and background features.

36. The first device of claim 30, wherein the means for obtaining the confirmation image further comprises the means for combining distinct images of related subject matter into one or more pairs of related images by mapping different portions of the confirmation value to different images.

37. A computer program embodied in a non-transitory computer-readable medium operational on a first device for securely establishing an association with a second device over a wireless communication link, which when executed by a processor causes the processor to:

perform a cryptographic key exchange with the second device, wherein cryptographic information for the first device and second device is obtained;

receive a first commitment value from the second device;

generate a second commitment value at the first device;

determine that the received first commitment value is equal to or a function of the generated second commitment value to secure communications between the first device and the second device;

obtain a confirmation value based on the cryptographic information after determining that the received first commitment value is equal to or the function of the second commitment value;

obtain a confirmation image based on the confirmation value by dynamically generating the confirmation image by one or more of (a) generating a watch face based on different portions of the confirmation value or (b) mapping the confirmation value to a longitude and latitude pair, obtaining at least one of a map or image of a location associated with the longitude and latitude pair, and using the map or image of the location as the confirmation image; and

provide the confirmation image to an operator over an output interface for authentication against a corresponding confirmation image for the second device.

38. The computer program of claim 37, which when executed by the processor causes the processor to further:

store a plurality of images, wherein the confirmation value is converted into the confirmation image by mapping a first set of digits of the confirmation value to a first image and mapping a second set of digits of the confirmation value to a second different image.

39. The computer program of claim 37, wherein the confirmation image is uniquely associated with the confirmation value.

40. The computer program of claim 37, wherein the computer program causes the processor to further obtain the confirmation image by dynamically generating an avatar based on different portions of the confirmation value by mapping different portions of the confirmation value to different images.

41. A processing circuit for securely establishing an association with a second device over a wireless communication link, the processing circuit configured to:

perform a cryptographic key exchange with the second device, wherein cryptographic information for the processing circuit and second device is obtained;

receive a first commitment value from the second device;

generate a second commitment value at the processing circuit;

determine that the received first commitment value is equal to or a function of the generated second commitment value to secure communications between the processing circuit and the second device;

obtain a confirmation value based on the cryptographic information after determining that the received first commitment value is equal to or the function of the second commitment value;

obtain a confirmation image by dynamically generating the confirmation image by one or more of (a) generating a watch face based on different portions of the confirmation value or (b) mapping the confirmation value to a longitude and latitude pair, obtaining at least one of a map or image of a location associated with the longitude and latitude pair, and using the map or image of the location as the confirmation image; and

provide the confirmation image to an operator over an output interface for authentication against a corresponding confirmation image for the second device.

42. The processing circuit of claim 41 further configured to:

store a plurality of images, wherein the confirmation value is converted into the confirmation image by mapping a first set of digits of the confirmation value to a first image and mapping a second set of digits of the confirmation value to a second different image.

43. The processing circuit of claim 41, wherein the confirmation image is uniquely associated with the confirmation value.

44. The processing circuit of claim 41, wherein the processing circuit is further configured to obtain the confirmation image by dynamically generating an avatar based on different portions of the confirmation value by mapping different portions of the confirmation value to different images.