# US 2014/0195806 A1 · Secure communication method

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 2014/0195806 A1
- Document ID: US20140195806A1
- Status: Published application
- Kind: A1
- Application number: 14/176,196
- Filed: 2014-02-10
- Published: 2014-07-10
- Earliest claimed: 2012-11-13
- Assignees: International Business Machines Corporation
- Applicants: International Business Machines Corporation
- Inventors: Barry A. Kritt; Sarbajit K. Rakshit
- Web page: https://patentgrep.com/patent/US20140195806A1

## CPC

- H04W 12/033: of the user plane, e.g. user's traffic
- H04L 9/3215: {using a plurality of channels (network architectures or network communication protocols using different networks H04L63/18)}
- H04W 4/029: Location-based management or tracking services
- H04L 63/0492: {by using a location-limited connection, e.g. near-field communication or limited proximity of entities}
- H04L 63/18: {using different networks or channels, e.g. using out of band channels (cryptographic mechanisms or cryptographic arrangements for key distribution involving distinctive intermediate devices or communication paths H04L9/0827; cryptographic mechanisms or cryptographic arrangements for authentication using a plurality of channels H04L9/3215)}
- H04W 4/02: Services making use of location information
- H04W 84/12: WLAN [Wireless Local Area Networks]
- H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72)
- H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M)

## Abstract

A first computing device receives over a telecommunications network from a second computing device a verification message encrypted using a public key. The verification message is generated by the second computing device when initiating a call to the first computing device. The first computing device transmits to a wireless router via a wireless local area network (WLAN) created by the wireless router, the encrypted verification message. The first computing device receives from the wireless router over the WLAN, a decrypted verification message decrypted from the encrypted message by the wireless device using a private key associated with the public key. The first computing device transmits over the telecommunications network to the second computing device, the decrypted verification message. If the second computing device determines that the decrypted verification message corresponds to the encrypted verification message, the second computing device allows the call to the first computing device to proceed.

## Claims

### Claim 1

A method for providing secure communication, the method comprising:
a first computing device to receive, over a network from a second computing device, a verification message generated by the second computing device in association with initiating a communication to the first computing device over the network, wherein the verification message is encrypted by the second computing device using a first cryptographic key;
the first computing device transmitting to a wireless device via a wireless channel between the first computing device and the wireless device, the encrypted verification message, wherein the first computing device is located within a geographical area that is fixed by a location of the wireless device and defined by a signaling range of the wireless device;
the first computing device receiving, from the wireless device over the wireless channel, a decrypted verification message decrypted from the encrypted verification message by the wireless device using a second cryptographic key associated with the first cryptographic key; and
the first computing device transmitting over the network to the second computing device, the decrypted verification message, wherein if the second computing device determines that the decrypted verification message matches the verification message, the second computing device allows the communication to the first computing device to proceed.

### Claim 2 (depends on 1)

The method in accordance with claim 1, wherein the first and second computing devices are smartphones.

### Claim 3 (depends on 1)

The method in accordance with claim 1, wherein the first computing device transmitting the decrypted verification message to the second computing device over the network, includes transmitting the decrypted verification message to the second computing device as Short Message Service (SMS) messages.

### Claim 4 (depends on 1)

The method in accordance with claim 1, wherein the first cryptographic key is a public key of an asymmetric cryptographic key pair, and the second cryptographic key is a private key of the asymmetric cryptographic key pair.

### Claim 5 (depends on 1)

The method in accordance with claim 1, wherein the wireless device is a wireless router, the wireless channel between the first computing device and the wireless router is established as part of a wireless local area network (WLAN) created by the wireless router, and wherein the first computing device receives the decrypted verification message over the WLAN further comprises the first computing device receiving the decrypted verification message over the WLAN in accordance with a User Datagram Protocol (UDP) over a specified port.

### Claim 6 (depends on 1)

The method in accordance with claim 1, wherein initiating the communication includes initiating a phone call.

### Claim 7 (depends on 1)

The method in accordance with claim 1, wherein initiating the communication includes initiating a document transfer.

### Claim 8 (depends on 1)

The method in accordance with claim 1, wherein the first computing device transmitting over the network to the second computing device, includes creating a hash of the decrypted verification message to compare to a hash of the verification message.

### Claim 9 (depends on 1)

The method in accordance with claim 1, further comprising:
the first computing device transmitting an encrypted document associated with the communication, received from the second computing device, to the wireless device; and
the first computing device receiving a decrypted version of the encrypted document from the wireless device.

### Claim 10 (depends on 1)

The method in accordance with claim 1, wherein the second encryption key used by the wireless device to decrypt the encrypted verification message is securely maintained in a central store and requested by the wireless device as needed.
