# US 12,015,442 B2 · Visible light communication for verifying a secure wireless connection > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 12,015,442 B2 - Document ID: US12015442B2 - Status: Granted - Kind: B2 - Application number: 17/952,853 - Filed: 2022-09-26 - Published: 2023-01-19 - Granted: 2024-06-18 - Earliest claimed: 2020-03-16 - Assignees: Fiserv, Inc. - Applicants: Fiserv, Inc. - Inventors: Kamlesh Kudchadkar; Brian Jeremiah Murray; Bambi Tsui - Web page: https://patentgrep.com/patent/US12015442B2 ## CPC - H04B 10/116: Visible light communication - H04L 9/0841: {involving Diffie-Hellman or related key agreement protocols} - H04L 9/085: {Secret sharing or secret splitting, e.g. threshold schemes} - H04L 9/3226: {using a predetermined code, e.g. password, passphrase or PIN (network architectures or network communication protocols for supporting authentication of entities using passwords in a packet data network H04L63/083)} - H04W 12/037: of the control plane, e.g. signalling traffic - H04W 12/041: Key generation or derivation - H04W 12/50: Secure pairing of devices - H04W 76/10: Connection setup - H04L 2209/80: Wireless - H04W 84/18: Self-organising networks, e.g. ad-hoc networks or sensor networks - H04B: TRANSMISSION - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) - H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72) ## Abstract Systems and methods for forming a verified secure wireless connection are disclosed. One system includes a first device with a first transceiver and a second device with a second transceiver. The second device does not include a display or any other means for providing high resolution visible light information. The system also includes a visible light signal source on the second device. The first and second devices store computer-readable instructions to initialize a secure wireless connection using the first transceiver and the second transceiver. The second device also stores computer-readable instructions to generate a visible light signal using the visible light source. The first device stores computer-readable instructions to verify the secure wireless connection using the visible light signal. ## Claims ### Claim 1 A system comprising: one or more memories having computer-readable instructions stored thereon; and one or more processors of a first device that execute the computer-readable instructions to establish a secure connection with a second device by: initializing a wireless connection with the second device by: generating a random number; generating a shared secret by combining the random number with a remote public value received from the second device; and encoding the shared secret or a derivative of the shared secret into a visible light signal; generating a first pattern of light emitting diode colors based on the visible light signal on the first device in response to initializing the wireless connection with the second device; and verifying that the wireless connection is secure based upon a comparison of the first pattern with a second pattern of the light emitting diode colors displayed on the second device. ### Claim 2 (depends on 1) The system of claim 1, wherein the computer-readable instructions further cause the one or more processors to: generate a public value of the first device; and send the public value of the first device to the second device. ### Claim 3 (depends on 2) The system of claim 2, wherein to generate the public value of the first device, the computer-readable instructions further cause the one or more processors to apply a transform to the random number. ### Claim 4 (depends on 1) The system of claim 1, wherein the shared secret comprises a temporary key configured to verify the wireless connection between the first device and the second device. ### Claim 5 (depends on 1) The system of claim 1, wherein the first device is a payment terminal and the second device is a mobile device. ### Claim 6 (depends on 1) The system of claim 1, wherein the computer-readable instructions further cause the one or more processors to: determine that the first pattern matches the second pattern, wherein verifying that the wireless connection is secure is based on determining that the first pattern matches the second pattern. ### Claim 7 (depends on 1) The system of claim 1, wherein the wireless connection comprises one of a radio frequency connection, an infrared connection, or an ultraviolet light connection. ### Claim 8 (depends on 1) The system of claim 1, wherein the computer-readable instructions further cause the one or more processors to generate the shared secret using a Diffie-Hellman key exchange. ### Claim 9 One or more non-transitory computer-readable media comprising computer-readable instructions stored thereon which when executed by one or more processors of a first device to establish a secure connection with a second device cause the one or more processors to: initialize a wireless connection with the second device by: generating a random number; generating a shared secret by combining the random number with a remote public value received from the second device; and encoding the shared secret or a derivative of the shared secret into a visible light signal; generate a first pattern of light emitting diode colors based on the visible light signal on the first device in response to initializing the wireless connection with the second device; and verify that the wireless connection is secure based upon a comparison of the first pattern with a second pattern of the light emitting diode colors displayed on the second device. ### Claim 10 (depends on 9) One or more non-transitory computer-readable media of claim 9, wherein the computer-readable instructions further cause the one or more processors to: generate a public value of the first device; and send the public value of the first device to the second device. ### Claim 11 (depends on 10) One or more non-transitory computer-readable media of claim 10, wherein to generate the public value of the first device, the computer-readable instructions further cause the one or more processors to apply a transform to the random number. ### Claim 12 (depends on 9) One or more non-transitory computer-readable media of claim 9, wherein the shared secret comprises a temporary key configured to verify the wireless connection between the first device and the second device. ### Claim 13 (depends on 9) One or more non-transitory computer-readable media of claim 9, wherein the first device is a payment terminal and the second device is a mobile device. ### Claim 14 (depends on 9) One or more non-transitory computer-readable media of claim 9, wherein the computer-readable instructions further cause the one or more processors to: determine that the first pattern matches the second pattern, wherein verifying that the wireless connection is secure is based on determining that the first pattern matches the second pattern. ### Claim 15 (depends on 9) One or more non-transitory computer-readable media of claim 9, wherein the wireless connection comprises one of a radio frequency connection, an infrared connection, or an ultraviolet light connection. ### Claim 16 (depends on 9) One or more non-transitory computer-readable media of claim 9, wherein the computer-readable instructions further cause the one or more processors to generate the shared secret using a Diffie-Hellman key exchange.