Providing multi-factor security for electronic devices through body area network and radiofrequency network communications

Patent metadata

Field	Value
Publication number	US-10275588-B2
Application number	US-201615064448-A
Country	US
Kind code	B2
Filing date	Mar 8, 2016
Priority date	Mar 8, 2016
Publication date	Apr 30, 2019
Grant date	Apr 30, 2019

Abstract

A method performed by a processor of a first electronic device includes transmitting first authentication information through a Body Area Network (BAN) interface circuit that communicates with a second electronic device using electrical signals conducted through electrodes contacting a body of a user extending between the first and second electronic devices. Second authentication information is received through a radiofrequency transceiver circuit that communicates via an antenna through an air-interface with the second electronic device. A command to control an operation of the second electronic device is communicated responsive to determining that a combination of the first authentication information and the second authentication information satisfies an authentication rule.

First claim

The invention claimed is:

1. A method, comprising:
performing by a processor of a first electronic device:
transmitting first authentication information through a Body Area Network (BAN) interface circuit that communicates with a second electronic device using electrical signals conducted through electrodes contacting a body of a user extending between the first and second electronic devices;
receiving second authentication information that is generated by the second electronic device based on the first authentication information through a radiofrequency transceiver circuit that communicates via an antenna through an air-interface with the second electronic device;
determining, based on the first authentication information and the second authentication information, that the first authentication information and the second authentication information satisfies an authentication rule, wherein the determining comprises determining that the second authentication information was generated based on the first authentication information; and
communicating a command to control an operation of the second electronic device responsive to determining that a combination of the first authentication information and the second authentication information satisfies the authentication rule.

2. The method of claim 1 , wherein the communicating the command to control the operation of the second electronic device responsive to determining that the combination of the first authentication information and the second authentication information satisfies the authentication rule, comprises:
transmitting a command through the radiofrequency transceiver circuit to unlock a display screen of the second electronic device.

3. The method of claim 1 , further comprising:
detecting failure of the BAN interface circuit to continue to communicate with the second electronic device through the body of the user; and
responsive to detecting the failure, ceasing communication through the radiofrequency transceiver circuit with the second electronic device.

4. The method of claim 3 , wherein:
the receiving the second authentication information through the radiofrequency transceiver circuit comprises:
receiving a persistence timing value through the radiofrequency transceiver circuit; and

the detecting failure of the BAN interface circuit to continue to communicate with the second electronic device through the body of the user, comprises:
detecting expiration of the persistence timing value since a last time the BAN interface circuit received a defined signal from the second electronic device.

5. The method of claim 1 , wherein:
the transmitting the first authentication information through the BAN interface circuit, comprises:
transmitting a Bluetooth device name and a Bluetooth pairing code for the first electronic device through the BAN interface circuit; and

the receiving the second authentication information through the radiofrequency transceiver circuit, comprises:
controlling a Bluetooth transceiver circuit of the first electronic device to use the Bluetooth device name and the Bluetooth pairing code to establish a Bluetooth network link with the second electronic device; and
receiving the second authentication information through the Bluetooth transceiver circuit and the Bluetooth network link from the second electronic device; and

the determining that the combination of the first authentication information and the second authentication information satisfies the authentication rule, comprises
determining that the second authentication information contains an authentication token that satisfies a defined authentication rule and that the authentication token was received through the Bluetooth transceiver circuit.

6. The method of claim 5 , wherein:
the transmitting the first authentication information through the BAN interface circuit, further comprises:
transmitting a timing delay value through the BAN interface circuit; and

the determining that the combination of the first authentication information and the second authentication information satisfies the authentication rule, further comprises
determining an elapsed time between the transmission of the timing delay value through the BAN interface circuit and the receipt of the authentication token through the Bluetooth transceiver circuit; and
determining whether the elapsed time is within a threshold range of the timing delay value.

7. The method of claim 5 , further comprising:
detecting failure of the BAN interface circuit to continue to communicate with the second electronic device through the body of the user; and
responsive to detecting the failure, flushing Bluetooth connection parameters of the Bluetooth network link from memory of the first electronic device to permanently terminate the Bluetooth network link with the second electronic device.

8. The method of claim 7 , wherein:
the receiving the second authentication information through the Bluetooth transceiver circuit and the Bluetooth network link from the second electronic device comprises:
receiving a persistence timing value through the Bluetooth transceiver circuit; and

the detecting failure of the BAN interface circuit to continue to communicate with the second electronic device through the body of the user, comprises:
detecting expiration of the persistence timing value since a last time the BAN interface circuit received a defined signal from the second electronic device.

9. The method of claim 5 , further comprising:
detecting failure of the BAN interface circuit to continue to communicate with the second electronic device through the body of the user; and
responsive to detecting the failure, communicating another command through the Bluetooth transceiver circuit to lock a display screen of the second electronic device.

10. The method of claim 1 , wherein:
one of the first and second electronic devices comprises a mobile telephone; and
the other one of the first and second electronic devices comprises a wearable electronic device configured to be worn on an arm of the user.

11. The method of claim 1 , further comprising:
measuring a round-trip delay between transmitting a ping signal through the BAN interface circuit toward the second electronic device and receiving a response ping signal through the BAN interface circuit from the second electronic device,
wherein the communicating the command to control the operation of the second electronic device responsive to determining that the combination of the first authentication information and the second authentication information satisfies an authentication rule, comprises:
retrieving an authentication round-trip delay from a memory of the first electronic device; and
determining whether the round-trip delay is within a threshold range of the authentication round-trip delay.

12. A method, comprising:
performing by a processor of a first electronic device:
transmitting first authentication information through a radiofrequency transceiver circuit communicating via an antenna through an air-interface with a second electronic device;
receiving second authentication information that is generated by the second electronic device based on the first authentication information through a Body Area Network (BAN) interface circuit that communicates with the second electronic device using electrical signals conducted through electrodes contacting a body of a user extending between the first and second electronic devices;
determining, based on the first authentication information and the second authentication information, that the first authentication information and the second authentication inf

Assignees

• Ca Inc

Inventors

• Abrams Howard

Classifications

• G06F21/32

  using biometric data, e.g. fingerprints, iris scans or voiceprints · CPC title

• G06F21/35 Primary

  communicating wirelessly · CPC title