Secure authentication of mobile devices using sensor transfer of keying material

A system for establishing a secure data connection, comprising:

• a host network;
• a network connection access point configured for:
• presenting or transmitting audio authentication key information to a passive sensor of a mobile device using a first communication medium, the audio authentication key information comprising a private key or information for generating the private key for a secure data connection, wherein the audio authentication key information comprises first authentication key information;
• presenting second authentication key information, wherein the second authentication key information is communicated from the network connection access point to the mobile device using a sequence of images presented on a display;
• connecting the host network with the mobile device using a second communication medium, the second communication medium being separate or distinct from the first communication medium a, wherein the separation or distinction at least comprises being configured for two-way communication;
• receiving a request for the secure data connection from the mobile device upon receipt at the mobile device of the authentication key information and upon obtaining of the private key using the mobile device, the request including the private key to connect the mobile device with the host network over the secure data connection, the receiving the request using the second communication medium;
• and
• encrypting data communicated between the network connection access point and the mobile device using the private key to establish the secure data connection,
• wherein the host network is configured to track an activity of a user through the mobile device during use of the secure data connection,
• wherein the first communication medium is configured for transmission of an audio signal, the audio authentication key information is communicated from the network connection access point to the mobile device using an encoded bit stream transmitted within the audio signal, and the audio signal has a frequency of 20 KHz or more,
• wherein the host network is an avionics network onboard an aircraft,
• wherein the mobile device is configured for passive reception, the passive reception comprising receiving the audio authentication key information using the passive sensor of the mobile device and further comprising positional-based or vicinity-based reception of the audio authentication key information within an aircraft hull, and wherein the aircraft hull and a range of the first communication medium separates the audio authentication key information from receivers outside the aircraft hull.

An apparatus for establishing a secure data connection between a mobile device and a host network, comprising:

• a network connection access point associated with an aircraft and configured for:
• presenting first and second authentication key information to a mobile device within the aircraft using a first communication medium and a second communication medium, the first authentication key information comprising a first private key or first information for generating the first private key for a secure data connection and the second authentication key information comprising a second private key or second information for generating the second private key for the secure data connection, the presenting a one way communication to the mobile device through the first communication medium using an auditory signal and through the second communication medium using a sequence of images presented on a display;
• connecting the host network with the mobile device using a third communication medium, the third communication medium being separate or distinct from the first communication medium and the second communication medium;
• receiving a first request for the secure data connection from the mobile device upon receipt of the first authentication key information at the mobile device and upon obtaining of the private key using the mobile device, the receiving the first request using the third communication medium, the first request including the first private key;
• receiving a second request for the secure data connection from the mobile device upon receipt of the second authentication key information at the mobile device and upon obtaining of the private key using the mobile device, the receiving the second request using the third communication medium, the second request including the second private key;
• and
• encrypting data communicated between the network connection access point and the mobile device over the secure data connection using at least one of the first private key and the second private key,
• wherein the host network is configured to track an activity of a user through the mobile device during use of the secure data connection,
• wherein the first communication medium is configured for transmission of an audio signal, the audio authentication key information is communicated from the network connection access point to the mobile device using an encoded bit stream transmitted within the audio signal, and the audio signal has a frequency of 20 KHz or more,
• wherein the host network is an avionics network onboard an aircraft,
• wherein the mobile device is configured for passive reception, the passive reception comprising receiving the audio authentication key information using the passive sensor of the mobile device and further comprising positional-based or vicinity-based reception of the audio authentication key information within an aircraft hull, and wherein the aircraft hull and a range of the first communication medium separates the audio authentication key information from receivers outside the aircraft hull.