Source: https://patents.justia.com/patent/20140162601
Timestamp: 2019-10-16 18:02:27
Document Index: 519447846

Matched Legal Cases: ['arty 120', 'arty 120', 'arty 120', 'arty 120', 'arty 120', 'arty 120', 'arty 120']

US Patent Application for EPHEMERAL IDENTITY FOR DEVICE AND SERVICE DISCOVERY Patent Application (Application #20140162601 issued June 12, 2014) - Justia Patents Search
Justia Patents Privacy, Lock-out, Or AuthenticationUS Patent Application for EPHEMERAL IDENTITY FOR DEVICE AND SERVICE DISCOVERY Patent Application (Application #20140162601)
Embodiments of a system and method for secure discovery and identification of devices via a wireless network are generally described herein. In some embodiments a wireless device may transmit an anonymous ephemeral identifier that may be utilized by a second device to determine, by accessing a provider or social network, whether the private identity masked by the ephemeral identifier is known to the user of the second device. In some embodiments a provider may receive user or device registrations; maintain a record of private identifiers, ephemeral identifiers, and known user data for a plurality of users; and access one or more social networks to acquire known user data. The ephemeral identifiers may be periodically updated by the provider. In some embodiments a discovery module in a plurality of devices may automatically establish a communication connection between devices in response to a previously established relationship between users of the respective devices.
Embodiments pertain to wireless communications. Some embodiments relate to the use of an ephemeral identity for device or service discovery. Some embodiments relate to secure discovery and communication between devices that are enrolled in a social network.
An issue with communicating data over a wireless network is the discovery and identification of devices. Due to the broadcast nature of wireless communication it may be possible for a malicious user or device to “eavesdrop” on the wireless communication and thereby obtain personal or identifying information. The loss of personal or identifying information may lead to undesirable identity theft or impersonation that may result in further data or financial loss.
Thus there are general needs for systems and methods that reduce exposure of personal or identifying information to unauthorized devices, while allowing associated users or devices to securely discover and communicate with each other.
FIG. 2 is a block diagram of an example communication system in accordance with some embodiments;
FIG. 3 is a flowchart illustrating an example method for establishing communication between devices in accordance with some embodiments;
FIG. 4 is a swim-lane chart illustrating the operation of a method for registration and discovery of a device in accordance with some embodiments;
FIG. 5 is flow diagram a illustrating the operation of a method for initiating communication with an unknown device;
FIG. 1 depicts an exemplary communication system 100 that may include a network 105, a first user 110, a first device 112 (e.g., user equipment, smart phone, personal digital assistant (PDA), laptop computer, tablet computer, personal computer, or other machine capable of some form of data connectivity), a second user 114, a second device 116 (e.g., user equipment or a first enhanced node B (eNodeB)), and a provider 130. The first user 110 and the second user 114 may wish to engage in wireless communications 118 via their respective devices 112, 116 (e.g., device-to-device (D2D) communications). The first user 110 and the second user 114 may wish to avoid a third-party 120 intercepting or “eavesdropping” on wireless communications 118, or obtaining information that would allow the third-party 120 to ascertain an identity of the first user 110 or the second user 114. The wireless communications 118 between devices 112, 116 may utilize a Wi-Fi or IEEE 802.11 standard protocol, or a protocol such as the current 3rd Generation Partnership Project (3GPP) long term evolution (LTE) time division duplex (TDD)-Advanced systems. In one embodiment, the communications network 105 comprises an evolved universal terrestrial radio access network (EUTRAN) using the 3rd Generation Partnership Project (3GPP) long term evolution (LTE) standard and operating in time division duplexing (TDD) mode.
The steps from discovery to final communication may be performed via direct, P2P communications, over an unencrypted wireless medium. The discovery and authentication techniques may facilitate D2D connections established using any of a variety of network protocols and standards in licensed or unlicensed spectrum bands, including Wi-Fi P2P communications performed in connection with an IEEE 802.11 standard (for example, Wi-Fi Direct communications facilitated by software access points (Soft APs)), 3GPP LTE/LTE-A communications (for example, LTE Direct (LTE-D) communications established in a portion of an uplink segment or other designated resources), machine-to-machine (M2M) communications performed in connection with an IEEE 802.16 standard, and the like.
In some embodiments, first device 112 may be part of a portable wireless communication device, such as a PDA, a laptop or portable computer with wireless communication capability, a web tablet, a wireless telephone, a wireless headset, a pager, an instant messaging device, a digital camera, an access point, a television, a medical device (e.g., a heart rate monitor, a blood pressure monitor, etc.), or other device that may receive or transmit information wirelessly.
Antennas in or on first device 112 may comprise one or more directional or omnidirectional antennas, including, for example, dipole antennas, monopole antennas, patch antennas, loop antennas, microstrip antennas or other types of antennas suitable for transmission of RF signals. In some embodiments, instead of two or more antennas, a single antenna with multiple apertures may be used. In these embodiments, each aperture may be considered a separate antenna. In some multiple-input multiple-output (MIMO) embodiments, antennas may be effectively separated to utilize spatial diversity and the different channel characteristics that may result between each of the antennas and the antennas of a transmitting station. In some MIMO embodiments, antennas may be separated by up to 1/10 of a wavelength or more.
In some embodiments, the first device 112 may include one or more of a keyboard, a display, a non-volatile memory port, multiple antennas, a graphics processor, an application processor, speakers, and other mobile device elements. The display may be an LCD screen including a touch screen. The second device 116 may be similar to first device 112, but does not need to be identical. The second device 116 may include some or all of the features, components, or functionality described with respect to first device 112.
A base station, such as enhanced or evolved node B (eNodeB), may provide wireless communication services to communication devices, such as device 112, device 116, or other UE. The network 105, may include a carrier-based network (e.g., a LTE/LTE-A cell network operating according to a standard from a 3GPP standards family) is established by network equipment (e.g., an eNodeB) communicating with mobile devices 112, 116 (e.g., user equipment (UE)).
The provider 130 may include a server 132, having one or more processors, coupled to a database 134. The provider 130 may be capable of communicating with the first user 110 and the second user 114 via network 105. For example, the server 132 may be configured to communicate with devices 112, 116 over one or more wired or wireless protocols supported by network 105. Network 105 may include a private intranet, or the Internet. In an example, the provider 130 may operate the network 105.
The database 134 may contain a record associated with each user. The record for each user may include an ephemeral identifier assigned to the user and a private identifier associated with an identity of the user. The private identifier may include a phone number, an e-mail address, a username, or other unique identifying information. The ephemeral identifier may be periodically replaced or updated with a new value. The record for each user may include an indication of an update frequency or an expiration time for the ephemeral identifier assigned to the user. In one example, the provider 130 may set a minimum expiration time (e.g., one day) or update frequency (e.g., one hour) for all ephemeral identifiers. The update frequency or expiration time may be configured by the provider 130, or individually by each user.
As an example scenario of D2D device discovery and communication, suppose the first user 110, is going to a public place such as a retail shopping mall. While at the shopping mall location, the first user 110 is interested in finding and meeting known friends and contacts in-person (e.g., second user 114). He activates a “friend-finder” software application on his device 112 to discover whether any of his friends are located in proximity to his current location. The first device 112 performs a broadcast of a discovery message or like discovery technique via a wireless communication medium (e.g., an IEEE 802.11 P2P network broadcast). The discovery message may include an ephemeral identifier that may be received by the second device 116 of second user 114. The ephemeral identifier may be utilized by the second user 114 to confirm the real identity of first user 110, and to facilitate the exchange of D2D authentication data between first device 112 and the second device 116.
While it may be possible for the third-party 120 to receive an ephemeral identifier being broadcast from either of devices 112, 116, the provider 130 may be configured to not release any private information to the third-party 120 without express user permission or input if the third-party 120 is unknown to either of the users 110, 114.
In this manner, the first user 110 and the second user 114 may each publicly broadcast an ephemeral identifier, initiate communication with each other upon verification that received ephemeral identifiers are associated with a known user, while preventing the third-party 120 from obtaining identifying information from either the first user 110 or the second user 114. The use of a shared encryption key may also facilitate encrypted communications between the first user 110 and the second user 114 such that the third-party 120 is prevented from effectively eavesdropping on communications 118.
While the exemplary communication system 100 of FIG. 1 depicts only two users 110, 114, any combination of multiple users, devices, servers and the like may be coupled to network 105 in various embodiments. For example, three or more users located in a venue, such as a building, campus, mall area, or other area, and may utilize any number of mobile wireless-enabled computing devices to exchange ephemeral identifiers anonymously. Upon verifying that the three users have registered with the provider 130, the provider 130 may send each of the three users a private identity for the other two. In this manner the three users may be able to simultaneously participate in a three-way communication session (e.g., three-way chat).
FIG. 2 is a block diagram of an example communication system 200. The exemplary communication system 200 may include a first device 202 and a second device 204 that are both capable of wireless communication. The devices 202, 204 may communicate directly, or through a network 206. The devices 202, 204 may also communicate with a service provider 208 through the network 206. The service provider 208 may access a social network 210 directly, or though the network 206. In an example, the first device 202 may be a mobile computing device (e.g., a smartphone, a laptop, a tablet computer, or personal digital assistant) and the second device 204 may be a base station or a fixed wireless router. The second device 204 may be configured to provide a service, such as media content streaming or coupons/deals, to a user of the first device 202 who has registered for the service with a content provider. In another example, both the first device 202 and the second device 204 are mobile computing devices.
The social network 210 may include any collection of records that indicate two or more users have a connection. For example, FACEBOOK of Palo Alto, Calif., or LINKEDIN of Mountain View, Calif., provides social networks that may be utilized by multiple users to indicate a connection (e.g., personal, business, social or other relationship) between users. In an example, not depicted, the service provider 208 may include a social network. In another example, the social network 210 may act as a service provider.
In an example, devices 202, 204 may each include a discovery module 214, 212. The discovery modules 214, 212 may be configured to transmit an ephemeral identifier from their respective devices that is assigned to the device, or to a user of the device, by service provider 208. The discovery modules 214, 212 may be configured to interact with the service provider 208 to identify a real identity of any unknown ephemeral identifiers that are received by devices 202, 204. The discovery modules 214, 212 may be implemented as a software application executing on a processor of a device (such as devices 202, 204), or as a hardware module (e.g., FPGA, chip, communication controller, or circuit) that may interact with other modules or components of the devices 202, 204. The discovery modules 214, 212 may be configured to request input from a user of the devices 202, 204 before beginning communication with an unknown or newly identified device, or the discovery modules 214, 212 may be configured to initiate communication with any user or device that is known (e.g., through registration with the service provider 208) to a user. The service provider 208 may maintain a record of the ephemeral identifier and a private identifier associated with each device 202, 204 or discovery module 214, 212, as well as a record of all users or devices that are known to a user of each device.
In an example, the discovery module 214 may communicate a request to the service provider 208 via network 206 to verify that an ephemeral identifier received from device 204 is associated with a user known to the user of device 202. Upon locating a record identifying a user associated with the ephemeral identifier, the service provider 208 may query the social network 210 to determine if the identified user is known to the requesting user.
A user may dynamically designate a group of other users that are allowed to decode the user's ephemeral identity. The user may also differentiate a degree of identity available from the same ephemeral identity based on the person or device that requests the identity behind the ephemeral identity. For example, the user may instruct a server at the service provider to provide the user's phone number and e-mail address to close friends or family, but only provide the user's e-mail address, or an alternative e-mail address, to new acquaintances or business relations.
FIG. 3 is a flowchart illustrating an example method 300 for registering a device with a service provider, such as service provider 208. In an example, the method 300 may include operations for receiving a private identifier from a device at 302, receiving known user data at 303, generating an ephemeral identifier for the device at 304, transmitting the ephemeral identifier to the device at 306, maintaining a record of identifiers for one or more devices at 308, and checking for the expiration of ephemeral identifiers at 310. These operations may also be performed on the server 132, or a combination of servers or processors in communication with database 134 of FIG. 1.
For example, at 302, a provider 130 (or service provider 208) may receive a private identifier, such as an e-mail address, telephone number, internet protocol address, or other user identifying information, from the device (e.g., mobile device 112). At 303, the provider 130 may receive known user data from the device. The known user data may include a list, or other data structure, of identifying information indicating persons or devices that the owner of the device may wish to communicate with, and who may receive personally identifying information from the provider 130. For example, a user may instruct a device, such as a mobile smartphone, to transmit a list of contact information to the provider 130. The contact information may include e-mail address or telephone numbers that are stored in the mobile smartphone. The provider 130 may also be configured to receive instructions from a user to add or revoke permissions for individual people or devices, or groups of people or devices.
At 304, the provider 130 may generate an ephemeral identifier. The ephemeral identifier may be any alpha-numeric code or sequence that the service provider may uniquely identify as being associated with the device. At 306, the service provider may transmit the ephemeral identifier to the device. At 308, the service provider may maintain a record of both the private identifier received from the device as well as the generated ephemeral identifier. The record and identifiers may be stored in a database, such as database 134 of FIG. 1.
At 310, the service provider may periodically check to determine whether or not an ephemeral identifier for the device has expired. If the ephemeral identifier has not expired the service provider may wait a specified period of time before rechecking the ephemeral identifier. If the ephemeral identifier has expired, then the service provider may generate a new ephemeral identifier at 304. The new ephemeral identifier may be transmitted to the device, as at 306. At 308, the record of the identifiers may be updated.
FIG. 4 is a swim-lane chart illustrating the operation of a method 400 for registration and discovery of wireless-capable mobile devices, such as devices 202, 204 of FIG. 2. The method 400 illustrates example interactions between a first user (e.g., mobile device 112), a service provider (e.g., provider 130), and a second user (e.g., mobile device 116) in registering, discovering, identifying, and communicating with the use of ephemeral identifiers, according to an example embodiment. These interactions may be conducted over a network, such as network 105, or any other appropriate wired or wireless network or protocol.
At 402, the method 400 may begin with the mobile device 112 registering a private identity with the provider 130. The private identity may include any uniquely identifying information such as a phone number, an e-mail address, a name, a user-id, or other personal data. The private identity may include a user-name, e-mail address, or other identifying information associated with a social network. At 420, the method 400 may continue with the service provider generating an ephemeral identifier to be associated with the mobile device 112. At 422, the provider 130 may store a record, for example in a data store, such as database 134. The service provider may also transmit the generated ephemeral identifier to the mobile device 112. At 404, the mobile device may begin broadcasting the ephemeral identifier in response to the receipt of the ephemeral identifier from the service provider, or in response to a user input at mobile device 112.
At 440, the method 400 may continue with the mobile device 116 registering a private identity with the provider 130. At 424, the method may continue with the provider 130 generating an ephemeral identifier to be associated with the mobile device 116. At 426, the provider 130 may store a record, for example in a data store, such as database 134. The provider 130 may also transmit the generated ephemeral identifier to the mobile device 116. At 442, the mobile device 112 may receive its ephemeral identifier from the provider 130, and at 444 begin broadcasting the ephemeral identifier in response to the receipt of the ephemeral identifier from the provider 130, or in response to a user input at mobile device 116.
In reference to system 100, the method 400 may continue at 406 with the receipt of an unknown identifier by mobile device 112. In this example, the unknown identifier is the ephemeral identifier assigned to mobile device 116. For example, the first user 110 and the second user 114 may have configured an application in their respective devices 112, 116, to broadcast their associated ephemeral identifiers over a wireless protocol.
At 408, the mobile device 112 may query the provider 130 with the unknown identifier. At 428, the service provider may receive the query from the mobile device 112 and attempt to identify the unknown identifier. At 428, the provider 130 may attempt to look up, or otherwise retrieve a record of an identity, phone number, or other private identifier associated with the unknown identifier. In an example, the provider 130, may be an embodiment of service provider 208 that is configured to access social network 210 (FIG. 2). If the unknown identifier is determined to match the ephemeral identifier assigned to mobile device 116, then at 432, the private identifier (e.g., the phone number) of mobile device 116 is transmitted to mobile device 112 if user 110 has established with the provider 130 that user 114 is known. Similarly, if mobile device 112 is broadcasting its assigned ephemeral identifier and within a wireless communication range of device 116, then device 116 may receive the broadcast identifier and query provider 130 as to whether or not the private identity is known to user 114.
Also, at 432, the service provider may transmit the private identifier (e.g., the phone number) of mobile device 112 to the mobile device 116 if user 114 has established with the provider 130 that user 110 is known. For example, the service provider 208 may query the social network 210 with the private identifier associated with the unknown identifier, and the private identity registered by mobile device 112. If the private identifier is associated with the unknown identifier, and the private identity registered by mobile device 112 has a known relationship within the social network 210, then the provider 130 may facilitate that communication between the two users 110, 114.
At 410, first device 112 receives the private identifier assigned to mobile device 116. Similarly, at 446, device 116 may receive the private identifier assigned to mobile device 112. The devices 112, 116 may utilize the ephemeral identifier of the other device to initiate communications, or throughout a communication session, in order to hide their identities from potential third parties or other devices.
The method 400 is complete at 414, when the first device 112 begins communication with the second device 116. Similarly, at 450, the second device 116 may begin communication with the first device 112. In this manner mobile device 112 and mobile device 116 are able to anonymously broadcast unique identifiers that are not publically associated with the private identities of user 110 or user 114, and thereby reduce the risk of a third party identifying either user 110 or user 114 based on their broadcasts.
Optionally, method 400 may include the generation and distribution of a private key that may be used to encrypt communication between users. For example, at 430, the provider 130 may generate a private key to facilitate encrypted communication between the devices 112, 116. At 434, the provider 130 may transmit the private key to the devices 112, 116. At 412, device 112 may receive the private key, and similarly, at 448, device 116 may receive the private identifier assigned to mobile device 112.
FIG. 5 illustrates the operation of a method 500 for initiating communication with an unknown device. At 502, a first device may receive an identifier from a second device. The identifier may be an ephemeral identifier that was publicly broadcast by the second device. In an example, at 504, the first device may check to determine if the identifier received from the second device is known. For example, if the users of the first and second devices had previously established a communication session, then the first device may have retained a record of a known private identity associated with the identifier. If it is determined that the identifier is known, at 506, the first device and the second device may automatically begin communications without an input from a user. If it is determined that the identifier is not known to the first device, then, at 508, the first device may transmit the unknown identifier to a service provider. In an example, the first device may also transmit a private identifier associated with the first device or a user of the first device to the service provider along with the unknown identifier.
In response to receiving an identifier, the service provider may check to determine if the unknown identifier broadcast by the second device is registered with the service provider and if a known identity is associated with the unknown identifier (e.g., method 400 of FIG. 4). If a known identity is associated with the unknown identifier, then a relationship check is made to determine if the known identity is associated with a user that is known to the user of the first device. The relationship check may be performed by accessing a social network with the private identifier provided by the first device to determine if a relationship exists between the user of the first device and the user of the second device.
At 510, the first device receives a response from the service provider. At 512, a check is made to determine if the response included the private identifier, or any other indication of identity, associated with the unknown identifier. If the response indicated that the unknown identifier could not be associated with anyone known to the service provider to be known to the user of the first device, then at 514, the first device may end or ignore any further communications from the second device. If the check, at 512, determined that a known identity is associated with the unknown identifier, then, at 516, an optional check may be made to determine if an encryption key was provided with the response from the service provider. If no encryption key was provided, then at 506, the first device and the second device may automatically begin communications. Communications may begin with, or without, an input from a user on either the first device or the second device. If an encryption key was provided in the response from the service provider, then, at 518, the first device and the second device may begin encrypted communications. A negotiation may be performed between the first device and the second device to verify that both the first device and the second device received a compatible or identical encryption key.
FIG. 6 is a block diagram illustrating a mobile device 600, upon which any one or more of the techniques (e.g., methodologies) discussed herein may be performed. The mobile device 600 may include a processor 610. The processor 610 may be any of a variety of different types of commercially available processors suitable for mobile devices, for example, an XScale architecture microprocessor, a Microprocessor without Interlocked Pipeline Stages (MIPS) architecture processor, or another type of processor. A memory 620, such as a Random Access Memory (RAM), a Flash memory, or other type of memory, is typically accessible to the processor 610. The memory 620 may be adapted to store an operating system (OS) 630, as well as application programs 640. The processor 610 may be coupled, either directly or via appropriate intermediary hardware, to a display 650 and to one or more input/output (I/O) devices 660, such as a keypad, a touch panel sensor, a microphone, etc. Similarly, in an example embodiment, the processor 610 may be coupled to a transceiver 670 that interfaces with an antenna 690. The transceiver 670 may be configured to both transmit and receive cellular network signals, wireless data signals, or other types of signals via the antenna 690, depending on the nature of the mobile device 600. Further, in some configurations, a GPS receiver 680 may also make use of the antenna 690 to receive GPS signals.
1. A method performed by user equipment (UE) for establishing a device-to-device wireless connection comprising:
receiving, at a first device, an ephemeral identifier over the network from a service provider;
broadcasting, from the first device, the ephemeral identifier over an unencrypted wireless medium;
receiving, at the first device, an unknown identifier from a second device;
communicating with a service provider to verify an identity of the unknown identifier; and
in response to verification from the service provider, establishing a device-to-device connection between the first device and the second device utilizing the ephemeral identifier and the unknown identifier.
periodically receiving an updated ephemeral identifier from the service provider at the first device; and broadcasting, from the first device, the updated ephemeral identifier in place of the ephemeral identifier.
3. The method of claim 1, wherein communicating with the service provider includes transmitting the unknown identifier and the ephemeral identifier to the service provider.
4. The method of claim 1, wherein the network includes an evolved NodeB (eNB) of a Long Term Evolution/Long Term Evolution-Advanced (LTE/LTE-A) network; and wherein communicating with the service provider includes transmitting the unknown identifier and the private identifier to the service provider over the network.
receiving, at the first device, a shared encryption key from the service provider in response to verifying with the service provider; wherein establishing the wireless connection is performed using the shared encryption key to create a secure wireless connection.
6. The method of claim 1, wherein the device-to-device connection is established between the first device and the second device to create a direct wireless network connection, the direct wireless network connection performing wireless communications in accordance with a standard from: a 3GPP Long Term Evolution or Long Term Evolution-Advanced standards family, a standard from an IEEE 802.11 standards family, a standard from an IEEE 802.16 standards family, or a standard from a Bluetooth Special Interest Group standards family.
7. The method of claim 1, wherein the first device includes a UE comprising processing circuitry arranged to communicate with an evolved NodeB (eNB);
where in the first device is configured to establish a device-to-device wireless connection for direct device-to-device communications independent of the LTE/LTE-A network with a second wireless communications device, by performing operations to communicate with the service provider over the LTE/LTE-A network to verify the identity of the unknown identifier.
receiving, at a processor over a network, a private identifier from a first user equipment (UE) device;
generating, at the processor, an ephemeral identifier in response to receiving the private identifier;
transmitting the ephemeral identifier to the first device over the network;
storing, on a tangible computer readable medium coupled to the processor, a record including: the private identifier, the ephemeral identifier, and user relationship data; and
periodically updating the ephemeral identifier in the record with a new value and transmitting the new value to the first device over a network.
receiving an unknown identifier from the first device;
determining, utilizing the user relationship data, that the unknown identifier corresponds with a record of a known user associated with the private identifier; and
transmitting the record of the known user to the first device;
wherein the unknown identifier was received by the first device from a second device.
receiving the private identifier from the first device contemporaneously with the unknown identifier.
generating a shared encryption key;
providing the shared encryption key to the first device; and
providing the shared encryption key to the second device.
accessing a social network utilizing the user relationship data to determine whether the user has a relationship in the social network with the known user.
13. A user equipment (UE), comprising a memory coupled to processing circuitry, the processing circuitry arranged to communicate with an evolved NodeB (eNB) of a Long Term Evolution/Long Term Evolution-Advanced (LTE/LTE-A) network and to authenticate a device-to-device wireless connection for direct device-to-device communications independent of the LTE/LTE-A network between a first wireless communications device and a second wireless communications device, by performing operations to:
receive a private identifier from the first wireless communications device;
generate an ephemeral identifier in response to receiving the private identifier;
transmit the ephemeral identifier to the first wireless communications device;
storing, on the memory, a record including: the private identifier, the ephemeral identifier, and user relationship data; and
periodically update the ephemeral identifier in the record with a new value.
14. The UE of claim 13, further comprising circuitry arranged to perform operations to:
receive an unknown identifier from the first wireless communications device;
determine, utilizing the user relationship data, that the unknown identifier corresponds with a record of a known user associated with the private identifier; and
transmit the record of the known user to the first wireless communications device;
wherein the unknown identifier was received by the first wireless communications device from the second wireless communications device.
15. The UE of claim 14, comprising circuitry arranged to:
receive the private identifier from the first wireless communications device contemporaneously with the unknown identifier.
16. The UE of claim 13, comprising circuitry arranged to:
generate a shared encryption key from the service provider in response to verifying with the service provider;
transmit the shared encryption key to the first device; and
transmit the shared encryption key to the second device.
17. The UE of claim 14, comprising circuitry arranged to:
access a social network utilizing the user relationship data to determine whether the user has a relationship in the social network with the known user.
18. The UE of claim 13, wherein the device-to-device wireless connection is established between the first device and the second device to create a direct wireless network connection, the direct wireless network connection performing wireless communications in accordance with a standard from: a 3GPP Long Term Evolution or Long Term Evolution-Advanced standards family, a standard from an IEEE 802.11 standards family, a standard from an IEEE 802.16 standards family, or a standard from a Bluetooth Special Interest Group standards family.
a transceiver coupled to the processing circuitry and the antenna, the transceiver configured to receive an ephemeral identifier, and broadcast the ephemeral identifier in response to receiving the ephemeral identifier;
wherein the processing circuitry is arranged to receive an unknown identifier from a wireless device, transmit a request to determine an identity associated with the unknown identifier, to receive a private identity record corresponding to the identity associated with the unknown identifier, and in response to receiving the private identity record, initiate a device-to-device wireless connection with the wireless device.
20. The UE of claim 19, wherein the transceiver is further configured to receive a new value at a periodic time interval to replace the ephemeral identifier.
21. The UE of claim 19, wherein the processing circuitry is further arranged to query a social network system with the unknown identifier and a private identifier.
22. The UE of claim 19, wherein the device-to-device wireless connection is established between the UE and the wireless device to create a direct wireless network connection, the direct wireless network connection performing wireless communications in accordance with a standard from: a 3GPP Long Term Evolution or Long Term Evolution-Advanced standards family, a standard from an IEEE 802.11 standards family, a standard from an IEEE 802.16 standards family, or a standard from a Bluetooth Special Interest Group standards family.
23. The UE of claim 19, wherein the processor is further arranged to receive a shared encryption key in response to receiving known the private identity record, and the device-to-device wireless connection is established as an encrypted device-to-device wireless connection with the shared encryption key.
Publication number: 20140162601
Patent Grant number: 9883388
Inventors: Sanghoon Kim (Ann Arbor, MI), Minyoung Park (Portland, OR)
Application Number: 13/712,304
Current U.S. Class: Privacy, Lock-out, Or Authentication (455/411); Registration (455/435.1)
International Classification: H04W 12/06 (20060101); H04W 76/02 (20060101);