Image-based man-in-the-middle protection in numeric comparison association models

Abstract

An authentication scheme is provided for securely establishing an association with a second device over a wireless communication link. A cryptographic key exchange is performed between a first device and a second device, wherein cryptographic information for the first and second device is obtained. The first and second devices may independently generate a confirmation value based on the cryptographic information. Each device may obtain a confirmation image based on their respective confirmation values. A confirmation image is uniquely associated with a confirmation value so that no two confirmation values can be associated with the same confirmation image. The images for both the first and second devices are provided to an operator for authentication. If the confirmation images are identical, an association between the first and second devices may be confirmed by the operator. Comparing confirmation images may increase the reliability of operator authentication and is more efficient than comparing values.

Description

technical field [0001] At least one feature relates to the pairing and authentication of network devices communicating in a wireless network, and more specifically to the use of images, icons and / or (optionally) sounds in a comparative association model that starts with A defense scheme against man-in-the-middle attacks is implemented for wireless device authentication. Background technique [0002] In wireless communication systems, secure communication between participating communication units may be achieved through pairing and authentication procedures. Many wireless technologies implement cryptographic key exchange mechanisms that provide participating communication units with exchanged and shared secret information that confirms that the correct device is connected. [0003] One problem that may commonly arise with such key exchange mechanisms is that they may be vulnerable to man-in-the-middle (MITM) attacks, a security breach in which a malicious user may intercept ...

AI Technical Summary

Problems solved by technology

[0006] One limitation of using PINs, numeric confirmation values, and / or other forms of numeric and / or alphanumeric sequences is that the numbers zero (0) through nine (9) do not provide much information per character

While the number comparison protocol used in some technologies has simplified the authentication process for users, some users may still feel that it is wrong to Comparing two numeric confirmation values ​​is cumbersome

Furthermore, in cases where wireless network connections involve communications in different underlying languages ​​(e.g., Chinese, Arabic, Japanese, Hebrew, Greek, etc.), numerical (or even alphanumeric) comparison protocols are not effective or efficient. Low

Images