Acoustic security code transmission

Patent metadata

Field	Value
Publication number	US-10509892-B2
Application number	US-201715645111-A
Country	US
Kind code	B2
Filing date	Jul 10, 2017
Priority date	Jul 10, 2016
Publication date	Dec 17, 2019
Grant date	Dec 17, 2019

Abstract

A system and methods of computer security are provided wherein a first mobile computing device drives an acoustic transducer to emit an acoustic signal encoding a time-based, one time password (TOTP) code, and a second mobile computing device measures output of a MEMS gyroscope that senses the emitted acoustic signal. The second mobile computing device decodes the TOTP code from the gyroscope output, validates the TOTP code and responsively permits a user to access a secure application.

First claim

The invention claimed is:

1. A method of computer security comprising:
driving an acoustic transducer in a first mobile computing device to emit an acoustic signal that encodes a time-based, one time password (TOTP) by varying the amplitude of the acoustic signal, wherein the acoustic signal has a frequency approximately equal to a resonant frequency of a microelectromechanical system (MEMS) gyroscope of a second mobile computing device;
measuring output of a the MEMS gyroscope sensing the emitted acoustic signal in the second mobile computing device;
decoding the TOTP from the MEMS gyroscope output;
validating the TOTP; and
responsively permitting a user to access a secure application.

2. The method of claim 1 , wherein measuring the output of the MEMS gyroscope comprises measuring noise variations in the output.

3. The method of claim 1 , wherein validating the TOTP comprises transmitting the TOTP to a TOTP validation server and receiving an authorization from the validation server.

4. The method of claim 1 , wherein the secure application runs on the second mobile device.

5. The method of claim 1 , wherein the secure application runs on a server communicatively coupled by wireless means to the second mobile device and wherein the measurement of the output of the MEMS gyroscope is performed by a front-end application running on the second mobile device.

6. The method of claim 1 , wherein the frequency of the emitted acoustic signal is set to optimize the level of noise in the MEMS gyroscope that is caused by the acoustic signal.

7. A computer system comprising:
a first mobile computing device configured to generate a time-based, one time password (TOTP) and to emit an acoustic signal that encodes the TOTP by varying the amplitude of the acoustic signal, wherein the acoustic signal has a frequency approximately equal to a resonant frequency of a microelectromechanical system (MEMS) gyroscope of a second mobile computing device; and
the second mobile computing device including the MEMS gyroscope configured as a motion sensor, the second mobile computing device further configured to measure output of the MEMS gyroscope, to decode the TOTP from the gyroscope output, to validate the TOTP, and responsively to permit a user to access a secure application.

Assignees

• B G Negev Technologies And Applications Ltd At Ben Gurion Univ

Inventors

• OREN Yossi
• Grosz Asaf
• Hasidim Nir
• Farshteindiker Benyamin

Classifications

• G06F21/35

  communicating wirelessly · CPC title

• G10L19/018

  Audio watermarking, i.e. embedding inaudible data in the audio signal · CPC title

• G08C23/02 Primary

  using infrasonic, sonic or ultrasonic waves · CPC title

• G06F21/305 Primary

  by remotely controlling device operation · CPC title

• G06F21/42

  using separate channels for security data · CPC title