# US 12,120,109 B2 · Systems, devices, and methods for authenticating millimeter wave devices > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 12,120,109 B2 - Document ID: US12120109B2 - Status: Granted - Kind: B2 - Application number: 17/596,863 - Filed: 2020-06-26 - Published: 2022-09-29 - Granted: 2024-10-15 - Earliest claimed: 2019-06-28 - Assignees: Battelle Energy Alliance, LLC - Applicants: Battelle Energy Alliance, LLC; The Research Foundation for The State University of New York - Inventors: Arupjyoti Bhuyan; Zhi Sun; Sarankumar Balakrishnan - Web page: https://patentgrep.com/patent/US12120109B2 ## CPC - H04L 63/0861: {using biometrical features, e.g. fingerprint, retina-scan (cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231)} - H04W 12/06: Authentication - H04B 7/0617: {for beam forming} - H04B 7/024: Co-operative use of antennas of several sites, e.g. in co-ordinated multipoint or co-operative multiple-input multiple-output [MIMO] systems - H04W 12/122: Counter-measures against attacks; Protection against rogue devices - H04W 12/79: Radio fingerprint - H04W 16/28: using beam steering - H04W 84/12: WLAN [Wireless Local Area Networks] - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) - H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72) - H04B: TRANSMISSION ## Abstract Systems, devices, and methods are described for millimeter wave device authentication. A system may include one or more access points. Each access point of the one or more access points is configured to extract, from one or more beam patterns generated via a client device, a beam feature associated with the client device. Each access point may also be configured to transmit the beam feature. The system may also include a server communicatively coupled to the one or more access points and including a database for storing known beam features. The server may be configured to receive the beam feature associated with the client device from at least one access point of the one or more access points. Also, the server may be configured to authenticate the client device in response to the received beam feature matching a known beam feature stored in the at least one database. ## Claims ### Claim 1 An authentication system, comprising: one or more access points, each access point of the one or more access points configured to: extract, from one or more beam patterns generated via a client device, a beam feature associated with the client device; and transmit the beam feature; and a server communicatively coupled to the one or more access points and including at least one database for storing known beam features, the server configured to: receive the beam feature associated with the client device from at least one access point of the one or more access points; and authenticate the client device in response to the received beam feature matching a known beam feature stored in the at least one database. ### Claim 2 (depends on 1) The authentication system of claim 1, wherein the server includes a classification and identification module configured to: train a classification model; and authenticate the client device based on the trained classification model. ### Claim 3 (depends on 1) The authentication system of claim 1, further comprising the client device, wherein a physical layer of the client device includes at least one RF fingerprint. ### Claim 4 (depends on 3) The authentication system of claim 3, wherein the client device is retrofitted with at least one RF fingerprint. ### Claim 5 (depends on 1) The authentication system of claim 1, wherein each access point is configured to extract the beam feature from a first beam pattern at a first angle and a second beam pattern at a second, different angle. ### Claim 6 (depends on 1) The authentication system of claim 1, wherein the client device comprises a millimeter wave device. ### Claim 7 (depends on 1) The authentication system of claim 1, wherein the client device and the one or more access points are configured to perform beam searching to establish communication. ### Claim 8 A method, comprising: receiving, at an access point, at least one beam pattern generated via a client device; extracting, from the at least one beam pattern, a beam feature associated with the client device; transmitting the beam feature associated with the client device from the access point to an authentication server; receiving, at the authentication server, the beam feature associated with the client device; comparing, via the authentication server, the beam feature associated with the client device to a number of known beam features for validated client devices; and authenticating, via the authentication server, the client device in response to the beam feature of the client device matching at least one known beam feature of the number of known beam features. ### Claim 9 (depends on 8) The method of claim 8, further comprising inserting a unique RF fingerprint into a physical layer of the client device, the client device configured to generate the at least one beam pattern based on the unique RF fingerprint. ### Claim 10 (depends on 8) The method of claim 8, further comprising training a model to determine the number of known beam features of a number of client devices including the client device. ### Claim 11 (depends on 10) The method of claim 10, wherein authenticating the client device comprises authenticating the client device via the trained model. ### Claim 12 An authentication system, comprising: one or more client devices, a physical layer of each client device of the one or more client devices having an RF signature for generating a known beam pattern feature; one or more access points, each access point of the one or more access points configured to extract a beam pattern feature of one or more beam patterns generated via a client device of the one or more client devices; and a server communicatively coupled to the one or more access points and including at least one database for storing the known beam pattern feature, the server configured to: receive the known beam pattern feature from at least one access point of the one or more access points; and authenticate the client device in response to the received known beam pattern feature matching the known beam pattern feature. ### Claim 13 (depends on 12) The authentication system of claim 12, wherein the server is further configured to perform one or more learning methods to populate the at least one database with known beam features of the one or more client devices.