Trusted device

Patent metadata

Field	Value
Publication number	US-9231765-B2
Application number	US-201313920695-A
Country	US
Kind code	B2
Filing date	Jun 18, 2013
Priority date	Jun 18, 2013
Publication date	Jan 5, 2016
Grant date	Jan 5, 2016

Abstract

A trusted device, such as a wristwatch 2 , is provided with authentication circuitry 26 , used to perform an authentication operation to switch the trusted device into an authenticated state. Retention monitoring circuitry 32 monitors the physical possession of the trusted device by the user following the authentication operation and switches the trusted device out of an authenticated state if the trusted device does not remain in the physical possession of the user. While the trusted device remains in the physical possession of the user, communication triggering circuitry 38 is used to detect a request to establish communication with a target device that is one of a plurality of different target devices and communication circuitry 40 is used to communicate with that target device using an authenticated identity of the user.

First claim

We claim:

1. A trusted device comprising:
authentication circuitry configured to authenticate with an authentication operation a user having physical possession of said trusted device and thereby switch said trusted device to an authenticated state;
retention monitoring circuitry configured to monitor physical possession of said trusted device by said user following said authentication operation and to switch said trusted device out of said authenticated state if said trusted device is not in physical possession of said user;
communication triggering circuitry configured to detect a request to establish communication received from a target device that is one of a plurality of different target devices; and
communication circuitry configured to communicate with said target device if said trusted device is in said authenticated state.

2. The trusted device as claimed in claim 1 , wherein said communication with said target device includes presentation to said target device of credentials including one or more of: an application-program-interface key, a digital certificate, a user identity, a password and cryptographically signed data.

3. The trusted device as claimed in claim 2 , wherein said trusted device automatically selects which credentials to use.

4. The trusted device as claimed in claim 3 , wherein automatic selection criteria used in said automatic selection are subject to user configuration.

5. The trusted device as claim 3 , wherein said trust device permits a user to manually alter a selection that has been made automatically.

6. The trusted device as claimed in claim 1 , wherein communication with said target device includes creation of credentials usable in subsequent authentications.

7. The trusted device as claimed in claim 1 , wherein said communication with said target device includes the transfer of information including at least one of configuration data, personalisation preferences, network settings, contracts, receipts, computer programs, data logs, transaction records and credentials.

8. The trusted device as claimed in claim 7 , wherein said trusted device automatically selects which information to use.

9. The trusted device as claimed in claim 1 , wherein said retention monitoring circuitry includes one or more detection circuits comprising at least one of:
a clasp configured to hold said trusted device attached to said user when said clasp is in a closed state, said retention monitoring circuitry switching said trusted device out of said authenticated state if said clasp changes out of said closed state;
contact detecting circuitry configured to detect contact between said trusted device and said user using one of more of: electrical signals detected from said user; temperature of a contact area between said trusted device and said user;
proximity detecting circuitry configured to detect proximity said trusted device and a proximity device worn by said user;
a photo-detector shielded from light when said trusted device is physical possession of said user;
a chemical detector configured to detect a chemical characteristic of said user;
biometric detector circuitry configured to recognise one or more biometric characteristics of said user;
a motion sensor configured to detect motion of said trusted device as said user moves while said trusted device is in physical possession of said trusted device;
implant detection circuitry configured to detect proximity of an implant within said user; and
heat flux detection circuitry having a plurality of temperature sensors and configured to detect heat flux through said trusted device.

10. The trusted device as claimed in claim 9 , wherein retention monitoring circuitry comprises a plurality of detection circuits and is configured to combine detection results from said plurality of detection circuits to determine a retention probability that said trusted device is in physical possession of said user and to switch said trusted device out of said authenticated state if said retention probability falls below a threshold probability level.

11. The trusted device as claimed in claim 10 , wherein said retention monitoring circuitry is configured to reduce said retention probability as a time since said authentication operation increases.

12. The trusted device as claimed in claim 1 , wherein said authentication circuitry comprises at least one of:
biometric recognition circuitry configured to recognise one or more biometric characteristics of said user;
fingerprint recognition circuitry configured to recognise a fingerprint of said user;
face recognition circuitry configured to recognise a face of said user;
chemical recognition circuitry configured to recognise one or more chemical characteristics of said user;
ECG recognition circuitry configured to recognise ECG signals of said user;
bioimpedance circuitry configured to recognise one or more bioimpedance characteristics of said user;
gait recognition circuitry configured to recognise a gait of said user; and
implant recognition circuitry configured to recognise an implant within said user.

13. The trusted device as claimed in claim 12 , wherein said authentication circuitry is configured accept an authentication operation with an accepted probability of a false positive in identifying said user and said accepted probability increases as a time since a previous positive authentication operation decreases.

14. The trusted device as claimed in claim 12 , wherein said retention monitoring circuitry generates a retention probability to indicate a probability that said trusted device has remained in physical possession of said user since a previous positive authentication operation, said authentication circuitry is configured accept an authentication operation with an accepted probability of a false positive in identifying said user and said accepted probability decreases as a retention probability increases.

15. The trusted device as claimed in claim 1 , wherein said communication triggering circuitry is configured to trigger communication with said target device in response to at least one of:
detection of a distance of less than a threshold distance between said target device and said trusted device;
detection of said user touching said target device;
receipt of a message specifying said target device;
said user selecting said target device from a list of devices.

16. The trusted device as claimed in claim 1 , wherein said communication circuitry is configured to communicate with said target device independently of availability of communication between said trusted device and any other device.

17. The trusted device as claimed in claim 1 , wherein said communication circuitry is configured to communicate with said target device independently of availability of communication between said target device and any other device.

18. The trusted device as claimed in claim 1 , wherein said communication circuitry is configured to provide bi-directional communication between said trusted device and said target device.

19. The trusted device as claimed in claim 1 , further comprising a display configured to display information from said target device.

20. The trusted device as claimed in claim 1 , wherein said communication circuitry is configured to receive information from said target device and further comprising target authentication circuitry configured to authenticate said target device using said information received from said target device.

21. The trusted device as cl

Assignees

• Arm Ip Ltd

Inventors

• Flautner Krisztian
• Vincent Hugo John Martin
• Phillips Amyas Edward Wykes
• Taylor Robert George

Classifications

• G06F21/32 Primary

  using biometric data, e.g. fingerprints, iris scans or voiceprints · CPC title

• G06F2221/2133

  Verifying human interaction, e.g., Captcha · CPC title

• H04L63/0861

  using biometrical features, e.g. fingerprint, retina-scan (cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231) · CPC title

• H04L63/08

  for authentication of entities (cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32) · CPC title

• H04L2463/082

  applying multi-factor authentication · CPC title