Providing enhanced security for wireless telecommunications devices

A method and system for use in providing enhanced security for wireless telecommunications devices is disclosed. In at least one embodiment, the method and system comprises providing a first sensor, included in a wireless telecommunications device, for helping derive a first set of physical context data associated with the wireless telecommunications device; providing a second sensor, included in an authentication device, for helping derive a second set of physical context data associated with the wireless telecommunications device; and using the first and second set of physical context data to help determine whether the wireless telecommunications device has been moved in a gesture that is consistent with a use of the wireless telecommunications device for a specific purpose.

BACKGROUND

1. Field of the Invention

The present invention relates to providing enhanced security for wireless telecommunications devices.

2. Description of Related Art

The use of portable electronic devices and telecommunication devices has increased rapidly in recent years. Likewise, the use of such devices to conduct short-range, contactless, wireless transactions is increasing. For example, Near Field Communication (NFC) or Radiofrequency Identification (RFID) technology enables the wireless exchange of data between devices over a short distance. This technology, for instance, allows for the exchange of credit card information with a merchant terminal by tapping or waving the NFC- or RFID-enabled device within a close proximity to the merchant terminal. The merchant terminal can then read and use the information to perform a commercial transaction.

Using wireless communication technology to exchange sensitive information may present security and privacy concerns. For example, an NFC or RFID device may include several features that may present vulnerabilities, e.g., the device may use an external power supply, communicate wirelessly, communicate unknowingly, include persistent state memory that can be modified by a reader during a transaction, and perform computation. These features may be used by attackers to perform tracking, scanning, and man-in-the-middle attacks.

A tracking attack may occur when a potentially legitimate merchant uses a wireless reader to extract data from a device. A scanning attack may be performed by practically anyone at any time, such as in a crowded subway car. In this attack, an unauthorized reader may be used to extract information from a device. A man-in-the-middle attack is possible when a device is able to successfully mimic end-point devices, e.g., a purchaser's device and/or a merchant terminal. Such an attack can result in the purchaser's device and the merchant device exchanging information without knowledge of a clandestine device intercepting and replaying, or relaying, potentially private information.

Countermeasures can be taken to help protect against such attacks.

SUMMARY OF THE INVENTION

A method and system for use in providing enhanced security for wireless telecommunications devices is disclosed. In at least one embodiment, the method and system comprises providing a first sensor, included in a wireless telecommunications device, for helping derive a first set of physical context data associated with the wireless telecommunications device; providing a second sensor, included in an authentication device, for helping derive a second set of physical context data associated with the wireless telecommunications device; and using the first and second set of physical context data to help determine whether the wireless telecommunications device has been moved in a gesture that is consistent with a use of the wireless telecommunications device for a specific purpose.

DESCRIPTION OF EMBODIMENT(S)

Described below is a technique for use in providing enhanced security for a wireless telecommunications device. In at least one embodiment, the technique may be used to ensure that a telecommunications device exchanges information with another device only when the telecommunications device is moved in a gesture indicating an intent to do so. In some embodiments, detecting the motion of the telecommunications device and determining whether there is an intent to exchange information may be performed by one or more devices. This technique may provide enhanced security for a telecommunications device by helping ensure that the device is not unintentionally exchanging data with another device.

Referring toFIG. 1, illustrated is a device being used in accordance with an embodiment of the current technique. As shown, device110can be a telecommunications device wirelessly communicating with device120. In some example embodiments, device120may be a merchant terminal, a public-transportation terminal, an access control terminal, an authorization terminal, a telecommunications device, or an identification terminal. These examples of device120may all exchange information with device110to perform a specific operation. For example, a merchant terminal may obtain credit card information from device110to process a commercial transaction, or an access control terminal may obtain information from device110to determine whether a user and/or device is authorized to access a particular area or resource.

Device110can take various forms in various embodiments of the current technique, provided that the device110performs the functions required of the device110for secure authentication. The device110can be implemented in packages having a wide variety of shapes and form factors. For example, in some embodiments the device110can be, or be incorporated within, a telecommunications device such as a cellular telephone, or a cellular telephone with specialized embedded hardware adapted to interact with the cellular telephone's circuitry, such as a SIM card. In other embodiments, the device110can be an RFID-enabled credit-card sized and shaped device, or can be much smaller or much larger. One credit-card sized embodiment of the device110includes a microprocessor with on-board memory, a power source, and a small LCD display. Embodiments may optionally include a keypad or buttons for PIN entry, entry of authentication information requests, or for other entry or interaction with the device120. In another embodiment, a credit-card sized device110may include a processor with on-board memory that may be used as a “smart card,” that can be installed into another device that provides power and/or an interface. In still other embodiments, device110can be a e-passport. Other sizes, shapes, and implementations are possible without departing from the spirit of the invention.

In some embodiments, device110may exchange information with device120only upon indication of an intent to do so. In at least one embodiment, the requisite intent may be found when device110is moved in a gesture that is consistent with a use of device110for a specific purpose. For example, as illustrated inFIG. 1, when a wireless device such as device110is being used to initiate a transaction with a merchant terminal such as device120, a “tapping” gesture with the device is customarily performed. Alternatively, a “swiping” gesture may be performed. In accordance with an embodiment of the current technique, one of these gestures may be required before device110is activated to allow for information to be exchanged between device110and the merchant terminal. Thus, no commercial transaction may occur using device110if it has not been gestured in a way that conveys the intent to initiate a commercial transaction.

Referring now to the example embodiment ofFIG. 2, shown is a component diagram of devices110and120. As shown, device110includes sensors202aand202b, which are capable of detecting motion. In a particular embodiment, device110may also include sensor data acquisition logic204that may be used to help produce physical context data206. Physical context data analysis logic208may perform analysis of physical context data206using conformation data210. Data transmitter control212may be included to control data transmittal.

Device120, as shown inFIG. 2, includes sensors222aand222b, which are capable of detecting motion of a device such as device110. In a particular embodiment, device120may also include sensor data acquisition logic224that may be used to help produce physical context data226associated with a device such as device110. Physical context data analysis logic228may perform analysis of physical context data226using conformation data230. Data transmitter control232may be included to control data transmittal.

Although both device110and device120each include two sensors inFIG. 2, any number and/or variety of sensors may be used in accordance with the current technique. In some embodiments, sensors may also be integrated with other components internal or external to the devices.

One example sensor that is capable of detecting motion is an accelerometer. An accelerometer can measure a device's acceleration or de-acceleration in one or more dimensions and can, therefore, be used to help determine how device110is being moved.

Another example sensor is a gyroscope, which is a sensor that can measure orientation. In at least one embodiment, a gyroscope may be used to adjust measurements received from an accelerometer or other sensors. In some embodiments, an accelerometer and a gyroscope can be used to help determine, for example, how the device is being held, at what speed the device is being moved, and in which direction the device is being moved. Accordingly, in an embodiment where device120is a merchant terminal, accelerometer and/or gyroscope measurements acquired by device110may be used to help detect movement of device110and to help determine whether the device has been moved in a required tapping or swiping gesture.

Other motion-sensing or gesture recognizing sensors may be used in addition to or instead of an accelerometer and/or gyroscope. For example, devices110and120may each include a built-in camera that can be used to help detect motion. In an example embodiment, a camera may capture one or more (e.g., a series of) images that can be compared with each other to determine variations that would indicate movement. For example, the images may indicate lighting changes or changes in the location of a fixed object. In another example embodiment, the devices110and120may use a camera for computer vision (e.g., pattern recognition) to help determine whether device110is being used for an intended purpose. For instance, a camera may capture images that can be analyzed using pattern recognition to help determine that device110is being moved toward a particular wireless terminal (e.g., device120).

A microphone may also be used to help detect motion. For instance, particular sounds a microphone captures may be indicative of movement. A sensor may also be able to help determine movement by capturing vibrations. Another sensor may detect movement by recognizing a change associated with an energy wave, such as a change in microwave signal frequency. Bluetooth or other short-range wireless communication technologies may also be used to detect movement. Additionally, geographical positioning technology such as the Global Positioning System (GPS) may be used to detect motion of a device. In other words, any device that is capable of detecting motion in any way can be a sensor for use in an embodiment of the current technique.

Further explanation of the current technique and the components included inFIG. 2will be provided with reference toFIGS. 3,4and5below.FIG. 3provides a flowchart that can be used with an embodiment of the current technique. In at least one embodiment, device110, as illustrated in the example embodiment ofFIG. 2, may include sensor data acquisition logic204, which may be responsible for monitoring one or more outputs of sensors202aand202b(step310). For instance, in some embodiments, sensor data acquisition logic204may acquire and digitize analog sensor data produced by sensors202aand202b. In yet another embodiment, sensor data acquisition logic204may also be responsible for performing processing of data produced by sensors202aand202b. For example, if multiple sensors are used to determine movement of device110, sensor data acquisition logic204may be responsible for acquiring, digitizing, consolidating, and manipulating sensor data to put the data in a better form for analysis.

In some embodiments, applying logic204to data produced by sensors202aand202bmay result in physical context data206(step320). In at least one embodiment, physical context data analysis logic208may compare physical context data206to conformation data210(step330). Conformation data210may contain data that can be used to help determine whether device110was moved in a gesture that is consistent with a use of device110for a specific purpose. For example, in some embodiments, conformation data210may include data values that represent a predetermined acceptable range of acceleration or orientation for device110when used for commercial transactions. In an example embodiment, conformation data210may also include data to be used to help analyze images of a merchant terminal captured by a camera of device110. Accordingly, if device110comes within a close proximity to a merchant terminal, device110may nevertheless remain unactivated for the purpose of conducting a commercial transaction unless the device is held and moved in such a way as to produce physical context data206that physical context data analysis logic208determines to be in accordance with conformation data210.

In some embodiments, conformation data210may include movement data that is associated with one or more purposes. For example, in at least one embodiment, device110may also be enabled to transmit data for the purpose of enabling access to a resource or a physical location. In an example embodiment, conformation data210may contain data that can be used to determine whether device110was moved in a gesture that is consistent with how such a device is typically moved when seeking door entry. In another example embodiment, conformation data210may contain data that can be used to determine whether device110was moved in a gesture that is consistent with how such a device is typically moved when seeking to complete a commercial transaction. Any number of other purposes for which device110may be moved may also contain respective conformation data.

Once physical context data analysis logic208determines that a device has been moved in such a way as to produce physical context data206that is in accordance with conformation data210, data transmitter control212may permit the transfer of data to device120(step340). It should be noted that in some embodiments the comparison and determination steps may be performed partially or completely by a different device. For instance, physical context data206may be transferred to device120, which can then perform the comparison and determination steps discussed above. What data can be transferred may depend on the specific embodiment. In some embodiments, data may be private access or transaction data needed to complete a desired action such as, for example, unique identification numbers, credit card information, birth date, location, name, and address. In at least one embodiment, data may include a description of the gesture in which device110was moved.

In some embodiments, data transmitter control212may also require that a specific signal be received at device110from device120before the transfer of data is permitted. For instance, a merchant terminal may emit a short-range signal that can be detected by device110. In these embodiments, the signal may indicate that device110is at a location from which data may be transferred with device120.

In some embodiments in accordance with the current technique, if device110has been moved in a gesture that is consistent with a use of device110for a specific purpose, device110and/or device120may display information to a user of device110and/or device120. In at least one embodiment, the devices110and120may use a display screen to request confirmation from a user that a particular data exchange is desired, or the display screen may be used to convey information to the user in regards to an exchange of information. For instance, in a case where device110is a telecommunications device with a display screen and key pad and device120is a wireless merchant device, the display screen can be used to request confirmation for a commercial transaction and/or display information about the commercial transaction when the device is, for example, moved in a swiping gesture in relation to the merchant device indicating that a transaction may be desired. Alternatively, or in addition, the merchant device may display the same or different information to the user.

In some embodiments, device110may transmit information to one or more other devices in addition to or in place of device120. In at least one example embodiment, device110may detect and communicate to another device that it is being used for an unauthorized purpose or an attempt to use device110for an unauthorized purpose has occurred. Device110may communicate this information, for example, to a merchant, the owner of device110, or public authorities, by transmitting the information to another device. For example, if device110detects that an unauthorized terminal has attempted to obtain information from device110when device110was not activated by a specific movement to exchange information with the terminal, device110may communicate information about the attempt to the appropriate authorities, for example, via a wireless or cellular connection.

Referring now toFIG. 4, shown is a flowchart illustrating processes that may be used with an example embodiment of the current technique where a telecommunications device is being used to perform a commercial transaction. The telecommunications device may receive a signal from a merchant terminal device indicating that the devices are within range to successfully complete a wireless commercial transaction (step410). Sensors of the telecommunications device may then be used to detect whether the device has been moved (step420). Modern telecommunications devices often have several built-in sensors that can be used to help detect motion such as, for example, an accelerometer, gyroscope, and a camera. Next, data provided by these sensors can be used to determine the device's orientation, acceleration, and direction of movement (step430). The data can be analyzed to determine whether the telecommunications device was moved in a gesture that is consistent with conducting a commercial transaction (step440). For instance, the device may analyze the motion data to determine whether it was moved in a tapping or swiping gesture. Moreover, it may analyze the data to determine whether the speed at which the device was moved is within a predetermined range of speeds that are typical of a commercial transaction gesture. If it is determined that the telecommunications device was moved in a gesture that is consistent with such a transaction, the device may exchange information with the merchant device to complete the transaction (step450).

In some embodiments, device120may perform steps that are the same as or similar to the steps described with reference toFIGS. 3 and 4. For example, device120, as illustrated in the example embodiment ofFIG. 2, may include sensor data acquisition logic224, which may be responsible for monitoring one or more outputs of sensors222aand222b. As with the sensor data acquisition logic204of device110, data acquisition logic224of device120may be responsible in some embodiments for acquiring, digitizing, consolidating, and manipulating sensor data to produce physical context data226. Furthermore, physical context data analysis logic228may compare the produced physical context data226to conformation data230. Depending on the result of the comparison, the physical context data analysis logic228of device120can determine whether device110has been moved in a way that is consistent with a use of device110for a specific purpose. Alternatively, the comparison and determination steps may be partially or completely performed by a different device such as, for example, device110.

Based on the determination made by context data analysis logic228, data transmitter control232may, in some embodiments, permit or deny the transfer of data to device110from device120and/or from device110to device120. For example, in an embodiment where device110only transmits data when a particular signal is received from a device such as device120, whether device120emits the signal may depend on the determination made by context data analysis logic228. This may be the case regardless of whether context data analysis logic208of device110has determined that device110has been moved in a gesture that is consistent with a use of device110. In an alternative embodiment, device120may permit the transfer of data regardless of the determination, but may, for example, prevent the initiation of a transaction using the transferred data if it is determined that the device was not moved in a way that is consistent with a use of device110for a specific purpose. Also, in some embodiments, device120may transmit information to one or more other devices in addition to or in place of device110based on the determination. For example, device120may detect and communicate to another device that device110being used for an unauthorized purpose or an attempt to use device110for an unauthorized purpose has occurred. Device120may then communicate this information, for example, to a merchant, the owner of device110, or public authorities, by transmitting the information to another device via, e.g., a wireless or cellular connection.

In another embodiment, physical context data206collected by device110and physical context data226collected by device120may be compared to determine whether both device110and device120detected a same or different motion of device110. Where the comparison is performed and how the results of a comparison are responded to may vary across different embodiments. For example, the comparison may be performed on device110or instead on device120, or in some embodiments, both devices may perform all or part of the comparison. In some embodiments, the devices may not be enabled to exchange data unless both devices detected the same or a similar motion

Referring now toFIG. 5, shown is a flowchart illustrating steps that may be used in an embodiment of the current technique as described above. In this embodiment, device110may compare context data collected by device110sensors to conformation data to determine whether device110has been moved in a way that is consistent with a use of device110(step510). Similarly, device120may compare context data collected by device120sensors to conformation data to determine whether device110has been moved in a way that is consistent with a use of device110(step520). Additionally, the context data collected by device110may be compared to the context data collected by device120(step530). If both devices110and120determine that device110has been moved in a way that is consistent with a use of device110and it is determined that the context data collected by both devices110and120is the same, the specific use for which device110was moved may proceed (step540).

It should be noted that any one or more of the steps ofFIG. 5may be performed partially or completely by other devices depending on the particular embodiment. Also, the order in which the steps are performed or whether a step is performed at all may vary depending on the embodiment. For example, steps510and520may be performed simultaneously in some embodiments. Alternatively, step520may only be performed if it is determined in step510that device110was moved in a way that is consistent with a use of device110.

Also, steps in addition to the steps inFIG. 5may also be included in an embodiment. For instance, device110and/or device120may determine whether the times at which motion of device110was detected by device110and device120are the same before exchanging information. In yet another embodiment, device110and/or device120may determine whether both devices where moved in a similar and synchronous motion towards one another before exchanging information.

Embodiments may implement the technique herein using code executed by a processor. For example, an embodiment may implement the techniques herein using code which is executed by a processor of the device on any one of a computer-readable medium having any one of a variety of different forms including volatile and nonvolatile, removable and non-removable media implemented in any method or technology for storage of information such as computer readable instructions, data structures, program modules or other data. Computer storage media includes, but is not limited to, RAM, ROM, EEPROM, flash memory or other memory technology, CD-ROM, DVD or other optical storage, magnetic cassettes, magnetic tape, magnetic disk storage or other magnetic storage devices, or any other medium which can be used to store the desired information and which can be accessed by a processor.