# US 12,113,784 B2 · Modifying security state with secured range detection > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 12,113,784 B2 - Document ID: US12113784B2 - Status: Granted - Kind: B2 - Application number: 18/107,982 - Filed: 2023-02-09 - Published: 2023-09-21 - Granted: 2024-10-08 - Earliest claimed: 2016-06-12 - Assignees: Apple Inc. - Applicants: Apple Inc. - Inventors: Wade Benson; Marc J. Krochmal; Alexander R. Ledwith; John Iarocci; Jerrold V. Hauck; Michael Brouwer; Mitchell D. Adler; Yannick L Sierra - Web page: https://patentgrep.com/patent/US12113784B2 ## CPC - H04L 63/08: {for authentication of entities (cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32)} - G06F 9/44505: {Configuring for program initiating, e.g. using registry, configuration files} - H04L 9/0822: {using key encryption key} - H04L 9/085: {Secret sharing or secret splitting, e.g. threshold schemes} - H04L 9/0894: {Escrow, recovery or storing of secret information, e.g. secret key escrow or cryptographic key storage} - H04L 9/14: using a plurality of keys or algorithms - H04L 9/3226: {using a predetermined code, e.g. password, passphrase or PIN (network architectures or network communication protocols for supporting authentication of entities using passwords in a packet data network H04L63/083)} - H04L 63/0428: {wherein the data content is protected, e.g. by encrypting or encapsulating the payload} - H04L 63/06: {for supporting key management in a packet data network (cryptographic mechanisms or cryptographic arrangements for key management H04L9/08)} - H04L 63/083: {using passwords (cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226)} - H04L 63/107: {wherein the security policies are location-dependent, e.g. entities privileges depend on current location or allowing specific operations only from locally connected terminals} - H04L 63/108: {when the policy decisions are valid for a limited amount of time} - H04L 63/1466: {Active attacks involving interception, injection, modification, spoofing of data unit addresses, e.g. hijacking, packet injection or TCP sequence number attacks} - H04W 12/041: Key generation or derivation - H04W 12/0431: Key distribution or pre-distribution; Key agreement - H04W 12/06: Authentication - H04W 12/086: using security domains - H04L 2209/80: Wireless - H04W 8/005: {Discovery of network devices, e.g. terminals} - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) - H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72) ## Abstract Some embodiments of the invention provide a method for a trusted (or originator) device to modify the security state of a target device (e.g., unlocking the device) based on a securing ranging operation (e.g., determining a distance, proximity, etc.). The method of some embodiments exchanges messages as a part of a ranging operation in order to determine whether the trusted and target devices are within a specified range of each other before allowing the trusted device to modify the security state of the target device. In some embodiments, the messages are derived by both devices based on a shared secret and are used to verify the source of ranging signals used for the ranging operation. In some embodiments, the method is performed using multiple different frequency bands. ## Claims ### Claim 1 A method comprising: detecting, by a first device, an announced availability of a second device for modifying a security state at the first device; exchanging, by the first device and using a first wireless protocol, ranging connection information with the second device; performing, by the first device, using a second wireless protocol and based on the ranging connection information, a ranging operation with the second device to estimate a distance between the first and second devices; and in response to determining that the distance satisfies a distance threshold, establishing, by the first device and using the first wireless protocol, a connection with the second device for modifying the security state at the first device. ### Claim 2 (depends on 1) The method of claim 1, wherein modifying the security state comprises putting the second device into an unlocked state from a locked state. ### Claim 3 (depends on 1) The method of claim 1, wherein modifying the security state comprises authorizing a set of restricted operations to be performed at the second device. ### Claim 4 (depends on 1) The method of claim 1, wherein performing the ranging operation comprises: exchanging codes between the first and second devices; identifying timestamps for sending and receiving of the codes; and computing a sample distance measurement from the identified timestamps. ### Claim 5 (depends on 1) The method of claim 1 further comprising receiving, from the second device, a request to modify the security state at the second device. ### Claim 6 (depends on 5) The method of claim 5, wherein the second device sends the request upon receiving a user input at the second device. ### Claim 7 (depends on 5) The method of claim 5, wherein the second device sends the request upon detecting that the first device is within a particular distance of the second device. ### Claim 8 (depends on 1) The method of claim 1, wherein the first device is established as a trusted device through an authorization process with the second device, wherein the first device receives a security token from the second device during the authorization process. ### Claim 9 (depends on 1) The method of claim 1, wherein the first wireless protocol is a Bluetooth protocol and the second wireless protocol is a Wi-Fi protocol. ### Claim 10 A device comprising: a memory; and at least one processor configured to: detect an announced availability of a second device for modifying a security state at the device; exchange, using a first wireless protocol, ranging connection information with the second device; perform, using a second wireless protocol and based on the ranging connection information, a ranging operation with the second device to estimate a distance between the device and the second device; and in response to a determination that the distance satisfies a distance threshold, establish, using the first wireless protocol, a connection with the second device for modifying the security state at the device. ### Claim 11 (depends on 10) The device of claim 10, wherein modifying the security state comprises putting the second device into an unlocked state from a locked state. ### Claim 12 (depends on 10) The device of claim 10, wherein modifying the security state comprises authorizing a set of restricted operations to be performed at the second device. ### Claim 13 (depends on 10) The device of claim 10, wherein the at least one processor is configured to perform the ranging operation by: exchanging codes between the device and the second device; identifying timestamps for sending and receiving of the codes; and computing a sample distance measurement from the identified timestamps. ### Claim 14 (depends on 10) The device of claim 10, wherein the at least one processor is further configured to: receive, from the second device, a request to modify the security state at the second device. ### Claim 15 (depends on 10) The device of claim 10, wherein the first wireless protocol is a Bluetooth protocol and the second wireless protocol is a Wi-Fi protocol. ### Claim 16 A non-transitory machine-readable medium comprising instructions that, when executed by one or more processors, cause the one or more processors to perform operations comprising: detecting an announced availability of a second device for modifying a security state at a first device; exchanging, using a first wireless protocol, ranging connection information with the second device; performing, using a second wireless protocol and based on the ranging connection information, a ranging operation with the second device to estimate a distance between the first and second devices; and in response to a determination that the distance satisfies a distance threshold, establishing, using the first wireless protocol, a connection with the second device for modifying the security state at the first device. ### Claim 17 (depends on 16) The non-transitory machine-readable medium of claim 16, wherein modifying the security state comprises putting the second device into an unlocked state from a locked state. ### Claim 18 (depends on 16) The non-transitory machine-readable medium of claim 16, wherein modifying the security state comprises authorizing a set of restricted operations to be performed at the second device. ### Claim 19 (depends on 16) The non-transitory machine-readable medium of claim 16, wherein the operations further comprise: receiving, from the second device, a request to modify the security state at the second device. ### Claim 20 (depends on 16) The non-transitory machine-readable medium of claim 16, wherein the first wireless protocol is a Bluetooth protocol and the second wireless protocol is a Wi-Fi protocol.