Method and apparatus for authenticating a terminal device in a communication network
AssigneeRobert Bosch GmbH
InventorAndreas Mueller
Life of this patent
Estimating the term…
Abstract
A method for authenticating a terminal device in a communication network, wherein a communication connection is established between the terminal device and a network access node of the communication network; upon a sensory stimulation of the terminal device, the terminal device performs a recording of sensor data; the terminal device transmits the sensor data via the communication connection to the network access node; and the terminal device is authenticated by the network access node as a function of a confirmation or rejection of a playback of the sensor data.
Claims20
A method for authenticating a terminal device in a communication network, comprising:
- establishing a communication connection between the terminal device and a network access node of the communication network;
- upon a sensory stimulation of the terminal device by a human user, recording, by the terminal device, sensor data, the sensor data being data generated by the terminal device as a result of the sensory simulation by the human user;
- transmitting, by the terminal device, the sensor data via the communication connection to the network access node;
- transmitting, by the network access node, the sensor data to a trustworthy control device using a secure connection between the network access node and the trustworthy control device, wherein the trustworthy control device is a separate device relative to the terminal device;
- playing back to the human user, by the trustworthy control device, the sensor data transmitted by the network access node;
- and
- authenticating, by the network access node, the terminal device as a function of a confirmation or a rejection of the playback of the sensor data by the trustworthy control device, the confirmation or the rejection being accomplished by the human user actuating a control element of the trustworthy control device,
- wherein to establish an encoded but unauthenticated communication connection one of the following is satisfied:
- (i) the terminal device and the network access node generate symmetrical cryptographic keys from properties of the communication channel located between them;
- (ii) the terminal device and the network access node generate symmetrical cryptographic keys using a key exchange method including a Diffie-Hellman key exchange or elliptic curve Diffie-Hellman;
- and (iii) the terminal device and the network access node use an asymmetrical encoding method including RSA.
A non-transitory machine-readable memory medium on which is stored a computer program, which is executable by a processor, comprising:
- a program code arrangement having program code for authenticating a terminal device in a communication network, by performing the following:
- establishing a communication connection between the terminal device and a network access node of the communication network;
- upon a sensory stimulation of the terminal device by a human user, causing a recording of sensor data by the terminal device, the sensor data being data generated by the terminal device as a result of the sensory simulation by the human user;
- causing the terminal device to transmit the sensor data via the communication connection to the network access node;
- causing the network access node to transmit the sensor data to a trustworthy control device using a secure connection between the network access node and the trustworthy control device, wherein the trustworthy control device is a separate device relative to the terminal device;
- causing the trustworthy control device to play back to the human user the sensor data transmitted by the network access node;
- and
- causing the network access node to authenticate the terminal device as a function of a confirmation or a rejection of the playback of the sensor data by the trustworthy control device, the confirmation or the rejection being accomplished by the human user actuating a control element of the trustworthy control device,
- wherein to establish an encoded but unauthenticated communication connection one of the following is satisfied:
- (i) the terminal device and the network access node generate symmetrical cryptographic keys from properties of the communication channel located between them;
- (ii) the terminal device and the network access node generate symmetrical cryptographic keys using a key exchange method including a Diffie-Hellman key exchange or elliptic curve Diffie-Hellman;
- and (iii) the terminal device and the network access node use an asymmetrical encoding method including RSA.
A device, comprising:
- a non-transitory machine-readable memory medium on which is stored a computer program, which is executable by a processor, including:
- a program code arrangement having program code for authenticating a terminal device in a communication network, by performing the following:
- establishing a communication connection between a terminal device and a network access node of a communication network;
- causing, upon a sensory stimulation of the terminal device by a human user, a recording of sensor data by the terminal device, the sensor data being data generated by the terminal device as a result of the sensory simulation by the human user;
- causing the terminal device to transmit the sensor data via the communication connection to the network access node;
- causing the network access node to transmit the sensor data to a trustworthy control device using a secure connection between the network access node and the trustworthy control device, wherein the trustworthy control device is a separate device relative to the terminal device;
- causing the trustworthy control device to play back to the human user the sensor data transmitted by the network access node;
- and
- causing the network access node to authenticate the terminal device as a function of a confirmation or a rejection of the playback of the sensor data by the trustworthy control device, the confirmation or the rejection being accomplished by the human user actuating a control element of the trustworthy control device,
- wherein to establish an encoded but unauthenticated communication connection one of the following is satisfied:
- (i) the terminal device and the network access node generate symmetrical cryptographic keys from properties of the communication channel located between them;
- (ii) the terminal device and the network access node generate symmetrical cryptographic keys using a key exchange method including a Diffie-Hellman key exchange or elliptic curve Diffie-Hellman;
- and (iii) the terminal device and the network access node use an asymmetrical encoding method including RSA.
Dependencies are inferred from the claim text.