Digital handshake for authentication of devices

Patent metadata

Field	Value
Publication number	US-9319402-B2
Application number	US-201414483081-A
Country	US
Kind code	B2
Filing date	Sep 10, 2014
Priority date	May 26, 2010
Publication date	Apr 19, 2016
Grant date	Apr 19, 2016

Abstract

This is directed to a digital handshake for establishing a secure communications path between two electronic devices. Each device can capture an image of the other device using a camera (e.g., a front facing camera or a back facing camera) and extract, from the captured image, a key or seed associated with the other device. For example, each device can display a seed to be identified from an image taken by the other device. Using the extracted keys or seeds, each device can generate, using a same process, an identical digital handshake key. The digital handshake key can then be used to define a secure communications path between the two devices and share information securely. In some embodiments, a digital handshake key can be shared among several devices to create a multi-device secure communications path. Once a communications path has been established, the devices in the path can be identified and authenticated from the digital handshake key to receive access to secured goods, services or information.

First claim

What is claimed is:

1. A method for authenticating a first device using a second device, comprising:
at the second device:
capturing, by a camera of the second device, a first image displayed at the first device, the first image corresponding to a first value stored on the first device;
extracting the first value from the first image;
displaying, at a display of the second device, a second image corresponding to a second value that is based on the first value extracted from the first image;
receiving a handshake key from the first device, wherein the handshake key is based on the first value and the second value, and the second value is extracted from the second image by the first device; and
establishing a connection with the first device using the handshake key.

2. The method of claim 1 , further comprising:
determining whether a camera of the first device is oriented toward the second device.

3. The method of claim 2 , wherein determining whether the camera of the first device is oriented toward the second device includes determining a field of view of the camera of the second device.

4. The method of claim 1 , wherein the second value is generated by the second device in response to determining the camera of the first device is oriented toward the second device.

5. The method of claim 1 , wherein the first value is extracted from the first image using a time dependent algorithm.

6. The method of claim 1 , further comprising:
authenticating the first device based on the handshake key.

7. The method of claim 1 , further comprising: receiving, from a third device, an authorization to release an asset managed by the second device.

8. The method of claim 1 , wherein the connection is established in response to receiving, from the first device, a request to access the asset.

9. The method of claim 1 , wherein the first device includes a social networking application, and the method further comprises interacting with the first device via a social network associated with the social networking application.

10. A first electronic device for authenticating with a service provider, the first electronic device comprising:
a display;
a processor; and
a memory storing instructions that when executed by the processor cause the first electronic device to perform the steps of:
displaying, at the display, a first image corresponding to a first value stored on the first electronic device, wherein the image is detected by a second electronic device that is associated with a service provider;
capturing a second image generated by the second electronic device and corresponding to a second value, wherein the second value is based on the first value extracted from the first image by the second electronic device;
extracting the second value from the second image;
generating a handshake key using the stored first value and the extracted second value; and
establishing a connection with the second electronic device using the handshake key.

11. The first electronic device of claim 10 , wherein the steps further include:
authenticating with the second electronic device based on the second value.

12. The first electronic device of claim 11 , wherein the second value is uniquely associated with and displayed by the first electronic device.

13. The first electronic device of claim 10 , wherein the steps further include:
determining whether a camera of the second electronic device is oriented toward the display of the first electronic device.

14. The first electronic device of claim 13 , wherein the first image is displayed in response to determining that the camera of the second electronic device is oriented toward the display of the first electronic device.

15. The first electronic device of claim 14 , wherein determining whether the camera of the second electronic device is oriented toward the first electronic device includes determining a field of view of the camera of the second electronic device.

16. A machine-readable non-transitory storage medium storing instructions that, when executed by a processor included in a first device having a display, cause the first device to carry out steps that include:
displaying, at the display, a first image corresponding to a first value stored on the first device, wherein the image is detected by a second device that is associated with a service provider;
capturing a second image generated by the second device and corresponding to a second value, wherein the second value is based on the first value extracted from the first image by the second device;
extracting the second value from the second image;
generating a handshake key using the stored first value and the extracted second value; and
establishing a connection with the second device using the handshake key.

17. The machine-readable non-transitory storage medium of claim 16 , wherein the first device is associated with a store selling goods.

18. The machine-readable non-transitory storage medium of claim 17 , wherein the second device includes a social networking application and the first device communicates with the second device via a social network associated with the social networking application.

19. The machine-readable non-transitory storage medium of claim 16 , wherein the steps further include:
determining whether a camera of the second device is oriented toward the display of the first device.

20. The machine-readable non-transitory storage medium of claim 19 , wherein the first image is displayed in response to determining the camera of the first device is oriented toward the display of the second device.

Assignees

• Apple Inc

Inventors

• Os Marcel Van
• Cranfill Caroline

Classifications

• G06Q30/06 Primary

  Buying, selling or leasing transactions · CPC title

• H04L63/0876

  based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint · CPC title

• G06F21/445

  by mutual authentication, e.g. between devices or programs · CPC title

• H04L63/0853 Primary

  using an additional device, e.g. smartcard, SIM or a different communication terminal (cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234) · CPC title

• H04L63/10

  for controlling access to devices or network resources · CPC title