Surveillance-based relay attack prevention

Patent metadata

Field	Value
Publication number	US-11228601-B2
Application number	US-201815926982-A
Country	US
Kind code	B2
Filing date	Mar 20, 2018
Priority date	Mar 20, 2018
Publication date	Jan 18, 2022
Grant date	Jan 18, 2022

Abstract

In one embodiment, an apparatus comprises an antenna to receive one or more radio signals, wherein the antenna is associated with a proximity-based access portal. The apparatus further comprises a processor to: detect, based on the one or more radio signals, an access request from a first device, wherein the access request comprises a request to access the proximity-based access portal using an access token associated with an authorized device; determine, based on the one or more radio signals, that the first device is within a particular proximity of the proximity-based access portal; obtain a first motion history associated with movement detected near the proximity-based access portal; obtain a second motion history associated with movement detected by the authorized device; and determine, based on the first motion history and the second motion history, whether the movement detected near the proximity-based access portal matches the movement detected by the authorized device.

First claim

What is claimed is:

1. An apparatus for providing a proximity-based access portal, comprising:
an antenna; and
a processor to:
receive, via the antenna, an access request for the proximity-based access portal, wherein the access request comprises an access token associated with an authorized device;
obtain a first motion history representing movement detected near the proximity-based access portal during a particular timeframe, wherein the first motion history is generated based at least in part on one or more radio signals received by the antenna;
obtain a second motion history representing movement of the authorized device during the particular timeframe, wherein the second motion history is generated by the authorized device;
determine, based on comparing the first motion history and the second motion history, whether the movement detected near the proximity-based access portal matches the movement of the authorized device;
detect a relay attack associated with the access request, wherein the relay attack is detected based at least in part on determining that the movement detected near the proximity-based access portal does not match the movement of the authorized device; and
deny the access request based on detecting the relay attack.

2. The apparatus of claim 1 , wherein:
the processor to obtain the first motion history representing movement detected near the proximity-based access portal during the particular timeframe is further to:
generate the first motion history based at least in part on analyzing the one or more radio signals received by the antenna; and

the processor to obtain the second motion history representing movement of the authorized device during the particular timeframe is further to:
receive, via the antenna, the second motion history, wherein the second motion history is generated by the authorized device based at least in part on data captured by one or more sensors associated with the authorized device.

3. The apparatus of claim 1 , wherein the processor is further to:
obtain first biometric data associated with a first user detected near the proximity-based access portal; and
determine, based on the first biometric data, whether the first user is an authorized user of the authorized device.

4. The apparatus of claim 3 , wherein the processor to determine, based on the first biometric data, whether the first user is the authorized user of the authorized device is further to:
obtain second biometric data associated with the authorized user; and
determine, based on the first biometric data and the second biometric data, whether the first user and the authorized user are a same user.

5. The apparatus of claim 3 , wherein the processor to determine, based on the first biometric data, whether the first user is the authorized user of the authorized device is further to:
send the first biometric data associated with the first user to the authorized device; and
receive an indication from the authorized device of whether the first user is the authorized user.

6. The apparatus of claim 3 , wherein the processor to detect the relay attack associated with the access request is further to:
detect the relay attack associated with the access request based at least in part on determining that the first user is not the authorized user of the authorized device.

7. The apparatus of claim 3 , wherein the processor is further to:
determine, based on the second motion history, that the movement of the authorized device is below a threshold level of movement; and
obtain the first biometric data based at least in part on determining that the movement of the authorized device is below the threshold level of movement.

8. The apparatus of claim 3 , wherein the first biometric data comprises a visual representation of the first user.

9. At least one non-transitory machine accessible storage medium having instructions stored thereon, wherein the instructions, when executed on a machine, cause the machine to:
receive, via an antenna, an access request for a proximity-based access portal, wherein the access request comprises an access token associated with an authorized device;
obtain a first motion history representing movement detected near the proximity-based access portal during a particular timeframe, wherein the first motion history is generated based at least in part on one or more radio signals received by the antenna;
obtain a second motion history representing movement of the authorized device during the particular timeframe, wherein the second motion history is generated by the authorized device;
determine, based on comparing the first motion history and the second motion history, whether the movement detected near the proximity-based access portal matches the movement of the authorized device;
detect a relay attack associated with the access request, wherein the relay attack is detected based at least in part on determining that the movement detected near the proximity-based access portal does not match the movement of the authorized device; and
deny the access request based on detecting the relay attack.

10. The storage medium of claim 9 , wherein the instructions further cause the machine to:
obtain first biometric data associated with a first user detected near the proximity-based access portal; and
determine, based on the first biometric data, whether the first user is an authorized user of the authorized device.

11. The storage medium of claim 10 , wherein the instructions that cause the machine to detect the relay attack associated with the access request further cause the machine to:
detect the relay attack associated with the access request based at least in part on determining that the first user is not the authorized user of the authorized device.

12. A system for providing a proximity-based access portal, comprising:
an antenna;
one or more sensors to capture sensor data associated with an environment near the proximity-based access portal; and
a processor to:
receive, via the antenna, an access request for the proximity-based access portal, wherein the access request comprises an access token associated with an authorized device;
obtain a first motion history representing movement detected near the proximity-based access portal during a particular timeframe, wherein the first motion history is generated based at least in part on the sensor data captured by the one or more sensors;
obtain a second motion history representing movement of the authorized device during the particular timeframe, wherein the second motion history is generated by the authorized device;
determine, based on comparing the first motion history and the second motion history, whether the movement detected near the proximity-based access portal matches the movement of the authorized device;
detect a relay attack associated with the access request, wherein the relay attack is detected based at least in part on determining that the movement detected near the proximity-based access portal does not match the movement of the authorized device; and

deny the access request based on detecting the relay attack.

13. The system of claim 12 , wherein the one or more sensors comprise a camera.

14. The system of claim 13 , wherein the processor to obtain the first motion history representing movement detected near the proximity-based access portal during the particular timeframe is further to:
obtain visual data associated with the environment near the proximity-based access portal, wherein the visual data is captured by the camera;
detect movement near the proximity-based access portal based on the

Assignees

• Intel Corp

Inventors

• Zivkovic Zoran
• Kounavis Michael E

Classifications

• H04L67/535

  Tracking the activity of the user (network monitoring arrangements H04L43/00; recording of computer activity G06F11/34) · CPC title

• H04W12/64

  using geofenced areas · CPC title

• H04W4/02

  Services making use of location information · CPC title

• G07C2209/64

  using a proximity sensor · CPC title

• H04W12/08

  Access security · CPC title