Patent ID: 8276209
Filing Date: 2012-09-25
Classification: G06F,H04L,H04W

Abstract:
1. A method for determining a level of allowed communication between a first device and a second device, comprising the acts of: performing, using a trusted first proximity check server, a communication protocol with the first device to reliably determine a first distance between the trusted first proximity check server and the first device, the first device generating and transmitting a first identity certificate to identify itself to the trusted first proximity check server, the first identity certificate comprising a random number and KIC signature, the trusted first proximity check server verifying the first identity certificate received from the first device and generating a first proximity certificate comprising the first determined distance, the identity of the first device, and a nonce; performing, using a trusted second proximity check server, a communication protocol with the second device to reliably determine a second distance between the trusted second proximity check server and the second device, the second device generating and transmitting a second identify certificate to identify itself to the trusted second proximity check server, the identity certificate comprising a random number and KIC signature, the trusted second proximity check server verifying the second identity certificate received from the second device and generating a second proximity certificate comprising the second determined distance, the identity of the second device, and a nonce, wherein the trusted first and second proximity check servers are either the same proximity check server or different proximity check server, wherein the first and second device perform an authentication and key exchange protocol; determining, using the first device, whether the first determined distance from the first proximity certificate and second determined distance from the second proximity certificate satisfy a predetermined rule, the predetermined rule being distance requirements related to the first and second devices; and determining, using the first device, the level of allowed communication in dependence on whether the predetermined rule is satisfied, wherein the first proximity certificate comprises information when the first distance was determined.