Data integrity for proximity-based communication

Patent metadata

Field	Value
Publication number	US-9615257-B2
Application number	US-201114131067-A
Country	US
Kind code	B2
Filing date	Jul 11, 2011
Priority date	Jul 11, 2011
Publication date	Apr 4, 2017
Grant date	Apr 4, 2017

Abstract

Methods, systems, and computer programs for trusted communication among mobile devices are described. In some aspects, an authentication value is generated at a first mobile device based on a message and a shared secret value stored on the first mobile device. In response to detecting proximity of a second mobile device, the message and the authentication value are wirelessly transmitted from the first mobile device to the second mobile device. In some implementations, the message and the authentication value can be wirelessly transmitted by a proximity-activated wireless interface, such as, for example, a Near Field Communication (NFC) interface.

First claim

What is claimed is:

1. A method for trusted communication among mobile devices, the method comprising:
accessing a message at a first mobile device, the message including user data, the first mobile device including at least a first wireless communication interface, a second wireless communication interface, and a user interface, and the first wireless communication interface is a proximity-activated wireless interface;
establishing a shared secret value between the first mobile device and second mobile device via a short range wireless connection, the shared secret value established based in part on data transmitted from the first mobile device using the second wireless communication interface, wherein establishing the shared secret value between the first mobile device and the second mobile device further includes:
accessing, at the first mobile device, a certificate issued by a certificate authority, wherein accessing the certificate includes user interaction with the user interface; and
deriving the shared secret at the first mobile device based on the certificate;

accessing the shared secret value stored at the first mobile device;
generating an authentication value at the first mobile device based on the user data and the shared secret value;
detecting proximity of the second mobile device at the first mobile device; and
in response to detecting proximity of the second mobile device, wirelessly transmitting the message and the authentication value from the first mobile device directly to the second mobile device, wherein the message and the authentication value are wirelessly transmitted using the first wireless communication interface, and wirelessly transmitting the message and the authentication value from the first mobile device directly to the second mobile device comprises wirelessly transmitting the message and the authentication value from a mobile telecommunication device directly to a tablet device by the proximity-activated wireless interface.

2. The method of claim 1 , wherein detecting proximity of the second mobile device comprises detecting proximity of the second mobile device by a proximity-activated wireless interface of the first mobile device.

3. The method of claim 2 , wherein the proximity-activated wireless interface comprises a Near Field Communication (NFC) interface.

4. The method of claim 2 , wherein the proximity-activated wireless interface is the first wireless communication interface, and the message and the authentication value are wirelessly transmitted by the proximity-activated wireless interface.

5. The method of claim 1 , wherein the first wireless communication interface transmits wireless signals at a frequency of 13.56 MHz, and the second wireless communication interface transmits wireless signals at a second frequency in a range of 2400 MHz to 2480 MHz.

6. The method of claim 1 , wherein the first wireless communication interface transmits wireless signals at a frequency of 13.56 MHz, and the second wireless communication interface transmits wireless signals at a second frequency greater than 1 GHz.

7. The method of claim 1 , wherein the authentication value is generated by evaluating a keyed hashing algorithm based on the user data and the shared secret value.

8. The method of claim 1 , wherein generating the authentication value comprises generating a Message Authentication Code (MAC) by evaluating a keyed Hash-based Message Authentication Code (HMAC) algorithm based on the user data and the shared secret value, and the method further comprises appending the MAC to the message at the first mobile device.

9. The method of claim 1 , further comprising:
generating a timestamp value associated with the authentication value; and
wirelessly transmitting the timestamp value from the first mobile device directly to the second mobile device.

10. The method of claim 9 , further comprising appending the timestamp value and the authentication value to the message at the first mobile device.

11. A mobile device comprising:
memory operable to store a shared secret value;
data processing apparatus operable to perform operations comprising:
accessing a message, the message including user data;
establishing the shared secret value between the mobile device and a second mobile device via a short range wireless connection, the mobile device including a first wireless communication interface, a second wireless communication interface, and a user interface, the first wireless communication interface is a proximity-activated wireless interface, the shared secret value established based in part on data transmitted from the mobile device by the second wireless communication interface, wherein establishing the shared secret value between the first mobile device and the second mobile device further includes:
accessing, at the first mobile device, a certificate issued by a certificate authority, wherein accessing the certificate includes user interaction with the user interface; and
deriving the shared secret at the first mobile device based on the certificate;
detecting proximity of a second mobile device;
generating an authentication value based on the user data and the shared secret value; and
in response to detecting proximity of the second mobile device, wirelessly transmitting, by the first wireless communication interface, the message and the authentication value directly to the second mobile device, and wirelessly transmitting the message and the authentication value from the first mobile device directly to the second mobile device comprises wirelessly transmitting the message and the authentication value from a mobile telecommunication device directly to a tablet device by the proximity-activated wireless interface.

12. The mobile device of claim 11 , wherein the first wireless communication interface includes a Near Field Communication (NFC) interface.

13. The mobile device of claim 12 , wherein the message and the authentication value are wirelessly transmitted by the NFC interface.

14. The mobile device of claim 11 , wherein the first wireless communication interface is operable to communicate with the second mobile device by wireless signals in a first frequency range, and the second wireless communication interface is operable to communicate with the second mobile device by wireless signals in a second frequency range.

15. The mobile device of claim 11 , wherein the authentication value is generated by evaluating a keyed hashing algorithm based on the user data and the shared secret value.

16. The mobile device of claim 11 , wherein generating the authentication value comprises generating a Message Authentication Code (MAC) by evaluating a keyed Hash-based Message Authentication Code (HMAC) algorithm based on the user data and the shared secret value.

17. The mobile device of claim 11 , the operations further comprising:
generating a timestamp value associated with the authentication value; and
wirelessly transmitting the timestamp value directly to the second mobile device.

18. The mobile device of claim 11 , wherein the mobile device comprises a mobile telecommunication handset.

19. The mobile device of claim 11 , wherein the mobile device comprises a tablet device.

20. A non-transitory computer-readable medium storing instructions that are operable when executed by data processing apparatus to perform operations for trusted communication among mobile devices, the operations comprising:
accessing a message at a first mobile device, the message including user d

Assignees

• Lazaridis Mihal
• Pecen Mark E
• Vanstone Scott Alexander
• Campagna Matthew John
• Rosati Anthony
• Blackberry Ltd
• Certicom Corp

Inventors

• Lazaridis Mihal
• Pecen Mark E
• Vanstone Scott Alexander
• Campagna Matthew John
• Rosati Anthony

Classifications

• H04L63/0823

  using certificates (cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263) · CPC title

• H04W12/10 Primary

  Integrity · CPC title

• H04W92/18

  between terminal devices · CPC title

• H04L63/0492

  by using a location-limited connection, e.g. near-field communication or limited proximity of entities · CPC title

• H04W12/06

  Authentication · CPC title