Pseudonymous proximity location device

Patent metadata

Field	Value
Publication number	US-10560436-B2
Application number	US-201515522332-A
Country	US
Kind code	B2
Filing date	Nov 2, 2015
Priority date	Oct 31, 2014
Publication date	Feb 11, 2020
Grant date	Feb 11, 2020

Abstract

A pseudonymous proximity location device and methods of operating and/or interacting with the same are provided. The pseudonymous proximity location device is configured to provide meaningful information to authorized reading devices but useless information to non-authorized reading devices, thereby prohibiting the use of the pseudonymous proximity location device by unauthorized reading devices.

First claim

What is claimed is:

1. A pseudonymous proximity location device, comprising:
a communication interface that enables communications with a reading device via a communication channel;
a microprocessor; and
computer memory including the following stored thereon:
a real identifier that is substantially uniquely associated with the pseudonymous proximity location device; and
microprocessor-executable instructions configured to:
encrypt the real identifier with a symmetric key;
concatenate a nonce value after encrypting the real identifier where the nonce value is associated with the encrypted real identifier; and
generate a message that is transmitted via the communication interface to the reading device, the message comprising a transmitted identifier that reveals the real identifier to an authorized reading device while simultaneously concealing the real identifier from a non-authorized reading device, wherein the message includes the encrypted real identifier and the concatenated nonce value associated with the encrypted real identifier.

2. The pseudonymous proximity location device of claim 1 , wherein the nonce value is a first nonce value that is unique to the message.

3. The pseudonymous proximity location device of claim 2 , wherein the computer memory further comprises a nonce log that contains a plurality of nonce values previously generated by the microprocessor, wherein the instructions are further configured to receive a first response from the reading device and compare a nonce value contained within the first response with at least some of the nonce values contained in the nonce log to determine if the reading device corresponds to an authorized reading device and, if the nonce value contained within the first response is found in the nonce log, the instructions are further configured to generate a second message that is transmitted via the communication interface to the reading device, wherein the second message contains the real identifier and wherein the first message does not contain the real identifier.

4. The pseudonymous proximity location device of claim 3 , wherein the real identifier contained within the second message is encrypted using the first nonce value.

5. The pseudonymous proximity location device of claim 1 , wherein the first message comprises a temporary access ticket that enables the mobile device to prove it is authorized and in communication with a trusted entity.

6. The pseudonymous proximity location device of claim 1 , wherein the transmitted identifier comprises the real identifier that is encrypted with a public part of an ephemeral public/private keypair.

7. The pseudonymous proximity location device of claim 1 , wherein the communication interface comprises a wireless interface.

8. The pseudonymous proximity location device of claim 1 , wherein the first message is transmitted via the communication interface via at least one of a Near-Field Communications (NFC) protocol and a Bluetooth protocol.

9. A reading device, comprising:
memory; and
an application associated with the memory, the application configured to:
receive an identifier including a nonce from a proximity location device in connection with providing one or more services to a user of the reading device;
create a response based on the nonce, a hash-based message authentication code, and an encryption key;
forward the response to the proximity location device;
receive a pseudo anonymous response from the proximity location device based on the response forwarded from the reading device; and
access a Proximity Location Device (PLD) Identity Component (PIC) to determine a real identity of the proximity location device based on the pseudo anonymous response received from the proximity location device, wherein the pseudo anonymous response does not expose the real identity to applications which do not have access to the PIC.

10. The reading device of claim 9 , wherein the PIC contains a function to retrieve the real identity from the pseudo anonymous response.

11. The reading device of claim 9 , wherein the PIC is resident on the reading device.

12. The reading device of claim 9 , wherein the application accesses the PIC via an Internet connection.

13. The reading device of claim 9 , wherein the PIC computes the real identity cryptographically from information contained in the pseudo anonymous response.

Assignees

• Assa Abloy Ab

Inventors

• Hoyer Philip
• Robinton Mark

Classifications

• H04W4/029

  Location-based management or tracking services · CPC title

• H04W4/023

  using mutual or relative location information between multiple location based services [LBS] targets or of distance thresholds · CPC title

• H04L63/0407 Primary

  wherein the identity of one or more communicating identities is hidden (cryptographic mechanisms or cryptographic arrangements for anonymous credentials or for identity based cryptographic systems H04L9/00) · CPC title