# US 12,003,273 B2 · Secure element authentication using over the air optical communication > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 12,003,273 B2 - Document ID: US12003273B2 - Status: Granted - Kind: B2 - Application number: 17/556,807 - Filed: 2021-12-20 - Published: 2023-06-22 - Granted: 2024-06-04 - Earliest claimed: 2021-12-20 - Assignees: Microsoft Technology Licensing, LLC - Applicants: Microsoft Technology Licensing, LLC - Inventors: Jouya Jadidian; Mohit Narang; Rubén Caballero - Web page: https://patentgrep.com/patent/US12003273B2 ## CPC - H04B 10/116: Visible light communication - G06F 3/011: {Arrangements for interaction with the human body, e.g. for user immersion in virtual reality (blind teaching G09B21/00)} - G06F 21/32: using biometric data, e.g. fingerprints, iris scans or voiceprints - G06V 40/161: {Detection; Localisation; Normalisation} - G06V 40/19: Sensors therefor - G06V 40/197: {Matching; Classification} - H04B 10/11: Arrangements specific to free-space transmission, i.e. transmission through air or vacuum - H04B 10/114: Indoor or close-range type systems - H04L 63/0428: {wherein the data content is protected, e.g. by encrypting or encapsulating the payload} - H04L 63/0861: {using biometrical features, e.g. fingerprint, retina-scan (cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231)} - G02B 27/017: {Head mounted} - H04B: TRANSMISSION - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) - G06V: IMAGE OR VIDEO RECOGNITION OR UNDERSTANDING - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) - G02B: OPTICAL ELEMENTS, SYSTEMS OR APPARATUS ## Abstract A system for facilitating secure communications accesses a secure element in response to determining that an authorized user operates the system. The system causes a light emitter to emit an output light signal for detection by a second system. The output light signal is emitted according to a predefined field of view, which operates as a constraint to prevent devices outside of the field of view from detecting the output light signal. The system also configures the light detector to detect a second output light signal emitted by a second light emitter of the second system. In response to (i) detection of the output light signal by a second light detector of the second system and (ii) detection of the second output light signal by the light detector, the system enables secure communication between the system and the second system. ## Claims ### Claim 1 A system configured to facilitate secure communications, the system comprising: a light emitter; a light detector; a secure element configured for storage of sensitive data; one or more processors; and one or more hardware storage devices storing instructions that are executable by the one or more processors to configure the system to: determine whether an authorized user operates the system; access the sensitive data via the secure element of the system in response to the system determining that the authorized user operates the system; cause the light emitter to emit an output light signal for detection by a second system, the output light signal being emitted according to a predefined field of view, the predefined field of view operating as a constraint to prevent devices outside of the field of view from detecting the output light signal; configure the light detector to detect a second output light signal emitted by a second light emitter of the second system; and in response to (i) detection of the output light signal by a second light detector of the second system and (ii) detection of the second output light signal by the light detector, enable secure communication between the system and the second system that uses the sensitive data accessed via the secure element. ### Claim 2 (depends on 1) The system of claim 1, wherein determining that an authorized user operates the system comprises performing iris recognition to verify that the authorized user is operating the system. ### Claim 3 (depends on 1) The system of claim 1, wherein the system is configured to refrain from enabling secure communication between the system and the second system in response to detecting that (i) the second light detector of the second system fails to detect the output light signal or (ii) the light detector fails to detect the second output light signal. ### Claim 4 (depends on 1) The system of claim 1, wherein the second output light signal is emitted by the second device according to a second predefined field of view, the second predefined field of view operating as a second constraint to prevent devices outside of the second field of view from detecting the second output light signal. ### Claim 5 (depends on 1) The system of claim 1, wherein the output light signal comprises 850 nm infrared light. ### Claim 6 (depends on 1) The system of claim 1, wherein the instructions are executable by the one or more processors to further configure the system to: display a guidance presentation configured to direct the authorized user to modify a positioning of the light detector and/or the light emitter to cause light detector to detect the second output light signal and to cause the second light detector to detect the output light signal. ### Claim 7 (depends on 6) The system of claim 6, wherein the guidance presentation is updated based on sensor data associated with the system. ### Claim 8 (depends on 1) The system of claim 1, wherein the secure communication between the system and the second system is enabled utilizing 802.11bb standards. ### Claim 9 (depends on 1) The system of claim 1, wherein enabling secure communication between the system and the second system comprises: configuring the system to detect user intent input; and performing an action based on the user intent input. ### Claim 10 (depends on 9) The system of claim 9, wherein the user intent input comprises one or more face tracking signals. ### Claim 11 (depends on 9) The system of claim 9, wherein the action utilizes the sensitive data stored via the secure element. ### Claim 12 (depends on 9) The system of claim 9, wherein the secure communication comprises storing an action record on the one or more hardware storage devices, the action record comprising one or more details related to the action performed based on the user intent input. ### Claim 13 (depends on 1) The system of claim 1, wherein: the instructions are executable by the one or more processors to configure the system to detect communication initiation input, and the system causes the light emitter to emit the output light signal and configures the light detector to detect the second output signal in response to detecting the communication initiation input. ### Claim 14 (depends on 1) The system of claim 1, wherein the system comprises an HMD, and wherein the second system is not an HMD. ### Claim 15 A system configured to facilitate secure communications, the system comprising: a light emitter; a light detector; one or more processors; and one or more hardware storage devices storing instructions that are executable by the one or more processors to configure the system to: access a secure element in response to determining that an authorized user operates the system; cause the light emitter to emit an output light signal for detection by a second system, the output light signal being emitted according to a predefined field of view, the predefined field of view operating as a constraint to prevent devices outside of the field of view from detecting the output light signal; configure the light detector to detect a second output light signal emitted by a second light emitter of the second system; and in response to (i) detection of the output light signal by a second light detector of the second system and (ii) detection of the second output light signal by the light detector, enable secure communication between the system and the second system, wherein enabling secure communication between the system and the second system comprises: configuring the system to detect user intent input; and performing an action based on the user intent input.