Systems, methods and apparatuses for determining proximity of communication device

Patent metadata

Field	Value
Publication number	US-10587600-B2
Application number	US-201815989335-A
Country	US
Kind code	B2
Filing date	May 25, 2018
Priority date	Mar 15, 2013
Publication date	Mar 10, 2020
Grant date	Mar 10, 2020

Abstract

The systems, methods and apparatuses described herein provide a computing device configured for ensuring its proximity to a communication partner. In one aspect, the computing device may comprise a communication port and a processor. The processor may be configured to receive a request from the communication partner via the communication port, send a response to the request to the communication partner, generate a secondary value that includes a selected portion of the request and a selected portion of the response, generate authenticating data to authenticate the secondary value and send the generated secondary value and authenticating data to the communication partner via the communication port. In another aspect, the communication partner is configured to ensure proximity of the computing device.

First claim

What is claimed is:

1. An apparatus for ensuring proximity of a computing device, comprising:
a communication port; and
a processor configured to:
obtain a first nonce;
send a request that includes the first nonce to the computing device via the communication port, and start measuring a time interval;
receive a response comprising a first parameter from the computing device via the communication port, and end measuring the time interval;
receive a message from the computing device via the communication port, the message including a second value;
obtain, from the second value, a second nonce, a second parameter, and a time period Td, wherein the time period Td represents a time period from the request being received at the computing device to the response being sent from the computing device;
compute a time difference ΔT between the measured time interval and the time period Td;
determine that the first nonce and the second nonce are equal;
determine that the first parameter and the second parameter are equal; and
determine that the computing device is a trustworthy device upon the determination that the time difference ΔT is less than a predefined time threshold.

2. The apparatus of claim 1 , wherein the message further includes authentication data that authenticates the second value and wherein the processor is further configured to authenticate the second value using the authentication data.

3. The apparatus of claim 2 , wherein the authentication data is a message authentication code (MAC) and to authenticate the second value comprises to verify the MAC using a secret key of the computing device.

4. The apparatus of claim 2 , wherein the processor is further configured to send to the computing device smartcard Application Protocol Data Unit (APDU) requests and receive from the computing device APDU responses.

5. The apparatus of claim 4 , wherein one subsequent APDU response contains the time period Td representing a time period from a previous APDU request being received at the computing device to a previous APDU response being sent from the computing device.

6. The apparatus of claim 5 , wherein the previous APDU response contains a signature or message authentication code (MAC) as the authentication data.

7. The apparatus of claim 6 , wherein the signature or MAC is generated using a unique identifier of the previous APDU request.

8. The apparatus of claim 1 , wherein the first parameter is a first verification value and the second parameter is a second verification value.

9. A method for ensuring proximity of a computing device, comprising:
obtaining a first nonce at an apparatus;
sending a request including the first nonce to the computing device via a communication port of the apparatus, and starting measuring a time interval;
receiving a response comprising a first parameter from the computing device via the communication port, and ending measuring the time interval;
receiving a message from the computing device via the communication port, the message including a second value;
obtaining, from the second value, a second nonce, a second parameter, and a time period Td, wherein the time period Td represents a time period from the request being received at the computing device to the response being sent from the computing device;
computing a time difference ΔT between the measured time interval and the time period Td;
determining that the first nonce and the second nonce are equal;
determining that the first parameter and the second parameter are equal; and
determining that the computing device is a trustworthy device upon a determination that the time difference ΔT is less than a predefined time threshold.

10. The method of claim 9 , wherein the message further includes authentication data that authenticates the second value and wherein the method further comprises authenticating the second value using the authentication data.

11. The method of claim 10 , wherein the authentication data is a message authentication code (MAC) and to authenticating the second value comprises verifying the MAC using a secret key of the computing device.

12. The method of claim 10 , further comprising sending to the computing device smartcard Application Protocol Data Unit (APDU) requests and receiving from the computing device APDU responses.

13. The method of claim 12 , wherein one subsequent APDU response contains the time period Td representing a time period from a previous APDU request being received at the computing device to a previous APDU response being sent from the computing device.

14. The method of claim 13 , wherein the previous APDU response contains a signature or message authentication code (MAC) as the authentication data.

15. The method of claim 14 , wherein the signature or MAC is generated using a unique identifier of the previous APDU request.

16. The method of claim 9 , wherein the first parameter is a first verification value and the second parameter is a second verification value.

Assignees

• Ologn Technologies Ag

Inventors

• Ignatchenko Sergey
• Ivanchykhin Dmytro

Classifications

• H04L2463/102

  applying security measure for e-commerce · CPC title

• H04W12/06 Primary

  Authentication · CPC title

• G06F2221/2111

  Location-sensitive, e.g. geographical location, GPS · CPC title

• H04L63/1466

  Active attacks involving interception, injection, modification, spoofing of data unit addresses, e.g. hijacking, packet injection or TCP sequence number attacks · CPC title

• H04L63/08 Primary

  for authentication of entities (cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32) · CPC title