Authentication method and system for device using Bluetooth technology

Patent metadata

Field	Value
Publication number	US-11012227-B2
Application number	US-201716314378-A
Country	US
Kind code	B2
Filing date	Jun 30, 2017
Priority date	Jul 1, 2016
Publication date	May 18, 2021
Grant date	May 18, 2021

Abstract

Disclosed is an authentication method and system for a device using a Bluetooth technology. A method for performing authentication by a first device, using Bluetooth low energy (LE), according to an embodiment of the present invention comprises: authenticating a user on the basis of ID information of the user; and authenticating a device by comparing information acquired from a user input with information acquired using an exchanged public key. The authentication scheme for a device is determined according to the input/output capability of the device.

First claim

What is claimed is:

1. A method of performing authentication by a first device using Bluetooth low energy (LE), the method comprising:
forming a Bluetooth LE connection with a second device;
obtaining identification information for identifying a user;
performing a user authentication procedure of authenticating the user based on the identification information;
transmitting, to the second device, a first notification message comprising an identifier corresponding to the identification information;
receiving, from the second device, a write request message comprising a first public key;
obtaining a first value for authentication of the second device using a first algorithm having the first public key as an input value;
transmitting, to the second device, a second notification message comprising a second public key; and
performing a device authentication procedure for authenticating the second device using a specific authentication method, and
wherein the specific authentication method is determined based on an input/output capability of the first device.

2. The method of claim 1 ,
wherein performing the device authentication procedure comprises:
outputting specific information corresponding to the first value using the specific authentication method; and
obtaining input information for authenticating the second device based on the output of the specific information.

3. The method of claim 2 ,
wherein performing the device authentication procedure comprises:
obtaining a second value through a second algorithm based on the input information; and
completing the authentication of the second device based on the first value and the second value.

4. The method of claim 3 ,
wherein in completing the device authentication, whether the device authentication is successful is determined based on whether the first value and the second value are identical.

5. The method of claim 1 ,
wherein the device authentication procedure uses one method of a PIN, a password, a pattern, vibration and an LED.

6. The method of claim 1 ,
wherein the identification information is one of a PIN, a gesture, a pattern, a password and bio information of the user.

7. The method of claim 1 ,
wherein the write request message comprises information related to an input/output capability of the second device, and
wherein the second notification message comprises information related to the input/output capability of the first device.

8. The method of claim 1 ,
further comprising receiving, from the second device, an authentication method determination message comprising the user authentication procedure or an execution method of the device authentication procedure, and
wherein the execution method is designated by the second device.

9. A method of performing authentication by a first device using Bluetooth low energy (LE), the method comprising:
forming a Bluetooth LE connection with a second device;
transmitting, to the second device, a write request message to request a start of an authentication procedure;
receiving, from the second device, a notification message comprising an identifier corresponding to identification information of a user;
transmitting, to the second device, a write request message comprising a first public key;
receiving, from the second device, a notification message comprising a second public key;
obtaining a first value for authentication of the second device using a first algorithm having the second public key as an input value;
performing a device authentication procedure for authenticating the second device using a specific authentication method; and
transmitting, to the second device, a write request message representing results of the device authentication procedure,
wherein the specific authentication method is determined based on an input/output capability of the first device.

10. The method of claim 9 ,
wherein in performing the device authentication procedure,
outputting specific information corresponding to the first value using the specific authentication method; and
obtaining input information for authenticating the second device based on the output of the specific information.

11. The method of claim 10 ,
wherein performing the device authentication procedure comprises:
obtaining a second value by the first device through a second algorithm based on the input information; and
completing the authentication of the second device based on the first value and the second value.

12. The method of claim 11 ,
wherein in completing the device authentication, whether the device authentication is successful is determined based on whether the first value and the second value are identical.

13. The method of claim 9 ,
wherein the device authentication procedure uses one method of a PIN, a password, a pattern, vibration and an LED.

14. A first device for performing authentication using Bluetooth low energy (LE), the first device comprising:
memory storing data; and
a processor controlling the memory,
wherein the first device is configured to:
form a Bluetooth LE connection with a second device;
obtain identification information for identifying a user;
perform a user authentication procedure of authenticating the user based on the identification information;
transmit, to the second device, a first notification message comprising an identifier corresponding to the identification information;
receive, from the second device, a write request message comprising a first public key;
obtain a first value for authentication of the second device using a first algorithm having the first public key as an input value;
transmit, to the second device, a second notification message comprising a second public key; and
perform a device authentication procedure for authenticating the second device using a specific authentication method, and
wherein the specific authentication method is determined based on an input/output capability of the first device.

15. The device of claim 14 ,
wherein the device authentication procedure is performed by outputting, by the first device, specific information corresponding to the first value using the specific authentication method and obtaining input information for authenticating the second device based on the output of the specific information.

16. The device of claim 15 ,
wherein the first device obtains a second value through a second algorithm based on the input information and completes the authentication of the second device based on the first value and the second value.

17. The device of claim 16 ,
wherein the device authentication procedure is performed based on whether the first value and the second value are identical.

18. The device of claim 14 ,
wherein the device authentication procedure uses one method of a PIN, a password, a pattern, vibration and an LED.

19. The device of claim 14 ,
wherein the identification information is one of a PIN, a gesture, a pattern, a password and bio information of the user.

20. The device of claim 14 ,
wherein when the user is a new user of the first device, the first device allocates a temporary identifier and stores the temporary identifier as an identifier of the user.

Assignees

• Lg Electronics Inc

Inventors

• Lim Jinkwon
• Choi Jingu
• Kwon Younghwan
• Song Taeyoung
• Lee Minsoo

Classifications

• H04W12/041

  Key generation or derivation · CPC title

• H04L9/3226

  using a predetermined code, e.g. password, passphrase or PIN (network architectures or network communication protocols for supporting authentication of entities using passwords in a packet data network H04L63/083) · CPC title

• G06F21/445

  by mutual authentication, e.g. between devices or programs · CPC title

• H04W4/80

  Services using short range communication, e.g. near-field communication [NFC], radio-frequency identification [RFID] or low energy communication · CPC title

• H04W12/06

  Authentication · CPC title