System and method for authentication via a proximate device

Patent metadata

Field	Value
Publication number	US-9264426-B2
Application number	US-201213617792-A
Country	US
Kind code	B2
Filing date	Sep 14, 2012
Priority date	Dec 20, 2004
Publication date	Feb 16, 2016
Grant date	Feb 16, 2016

Abstract

Techniques are provided to authenticate components in a system. Users may enter credentials into an input device and the credentials may be authenticated and/or securely transmitted to the components. The components may then provide the credentials to a server in the system. Strong authentication may thus be provided to the effect that credentials associated with specific users have been received from specific components in the system. The server may then enable the components to access selected services.

First claim

What is claimed is:

1. An access device comprising:
a memory;
an access module having a hardware security boundary, the access module including:
a first interface within the hardware security boundary configured to receive a credential from an input device over a secure communications channel, and
a security module coupled to the first interface and within the hardware security boundary, the security module configured to cryptographically process the received credential; and
a second interface configured to transmit the cryptographically processed credential to an access server,
wherein the cryptographically processed credential is used to authenticate the access device.

2. The access device of claim 1 , wherein the first interface is an RF interface.

3. The access device of claim 1 , wherein the first interface is physically connected to an input device.

4. The access device of claim 1 , wherein the second interface is configured to receive a set of keys from the access server.

5. The access device of claim 4 , wherein the security module is further configured to encrypt the set of keys.

6. The access device of claim 5 , wherein the memory stores, the encrypted set of keys.

7. The access device of claim 4 , wherein the second interface is further configured to connect to a network using a key in the set of keys.

8. The access device of claim 1 , wherein the first interface is a Bluetooth wireless interface.

9. The access device of claim 1 , wherein the second interface is further configured to transmit the cryptographically processed credential to an access server via a wireless medium.

10. The access device of claim 1 , wherein the second interface is further configured to transmit the cryptographically processed credential to an access server via an electromagnetic medium.

11. The access device of claim 1 , wherein the second interface is further configured to send proximity data to the access server and wherein the proximity data is used by the access server to authenticate that the input device is proximate to the access device.

12. The access device of claim 1 , wherein the second credential is the same as the first credential.

13. An input device comprising:
a data input module within a hardware security boundary of the input device, the data input module configured to receive a first credential;
a security module within the hardware security boundary configured to cryptographically process the received first credential; and
an interface configured to transmit a second credential to a secure module in an access device over a secure communications channel.

14. The input device of claim 13 , wherein the data input module comprises a keypad to enable input of the first credential.

15. The input device of claim 13 , wherein the data input module comprises a biometric sensor.

Assignees

• Buer Mark
• Frank Ed
• Broadcom Corp

Inventors

• Buer Mark
• Frank Ed

Classifications

• H04L63/0853 Primary

  using an additional device, e.g. smartcard, SIM or a different communication terminal (cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234) · CPC title

• H04L9/3234

  involving additional secure or trusted devices, e.g. TPM, smartcard, USB or software token (network architectures or network communication protocols for supporting authentication of entities using an additional device in a packet data network H04L63/0853) · CPC title

• H04L2209/805

  Lightweight hardware, e.g. radio-frequency identification [RFID] or sensor · CPC title