Headphones, headphone system and method for operating headphones
Headphones with biometric sensors and cryptographic circuits securely deliver one-time passwords acoustically, addressing vulnerabilities in existing authentication methods by ensuring secure and automatic password delivery to authenticated users.
Patent Information
- Application Number
- DE102023206385
- Authority / Receiving Office
- DE · DE
- Patent Type
- Applications
- Current Assignee / Owner
- Filing Date
- 2023-07-05
- Publication Date
- 2025-01-09
- Estimated Expiration
- Not applicable · inactive patent
AI Technical Summary
Existing password authentication methods, particularly for wireless headphones, are vulnerable to interception and overhearing, necessitating secure storage and manual entry, which compromises data security.
Headphones equipped with biometric sensors and cryptographic circuits provide one-time passwords acoustically to authenticated users, ensuring secure and automatic password delivery.
Enhances data security by preventing unauthorized access through acoustic password delivery only to authenticated users, reducing the risk of interception and enhancing user convenience.
Smart Images

Figure 00000000_0000_ABST
Abstract
Description
[0001] The invention relates to a headphone, a headphone system, a method for operating a headphone and a method for operating a headphone system.
[0002] In recent years, headphones, especially in-ear headphones, have gained significant importance, particularly due to wireless headphones.
[0003] Another topic of great importance at the moment is authentication. In many cases where biometric data is not used (e.g., because it is not usable for the intended application), passwords are still frequently used.
[0004] This means that passwords must either be memorized by the user or stored securely somewhere.
[0005] Since each user typically uses a large number of passwords, secure storage is widely used.
[0006] Regardless of the storage method, using a password typically means that the password must be provided to the user from storage (typically displayed) to allow the user to provide the password to the requesting instance, e.g., by entering it somewhere. Automatic password entry is also common.
[0007] Passing the password on to the user is sensitive in terms of data security, because it offers the possibility that an attacker could intercept or eavesdrop on the password and then use it for their own purposes.
[0008] In various embodiments, headphones are provided that are configured to provide a password, for example to generate a (e.g., one-time) password or to retrieve a stored password from a secure memory, and to provide it acoustically to an authenticated user.
[0009] Exemplary embodiments of the invention are shown in the figures and are explained in more detail below.
[0010] They show Fig. 1A and Fig. 1B each a schematic representation of a headphone according to different embodiments; Fig. 2. An illustration of the operation of headphones according to various embodiments; and Fig. 3 A flowchart of a method for operating headphones according to various embodiments.
[0011] The following detailed description refers to the accompanying drawings, which form part thereof and illustrate specific embodiments in which the invention can be implemented. In this context, directional terminology such as "top," "bottom," "front," "back," "anterior," "rear," etc., is used with reference to the orientation of the described figure(s). Since components of embodiments can be positioned in a number of different orientations, the directional terminology serves only for illustration and is in no way limiting. It is understood that other embodiments may be used and structural or logical modifications may be made without deviating from the scope of protection of the present invention.It is understood that the features of the various exemplary embodiments described herein can be combined with one another, unless specifically stated otherwise. The following detailed description is therefore not to be interpreted in a limiting sense, and the scope of protection of the present invention is defined by the appended claims.
[0012] Within the scope of this description, the terms "connected," "attached," and "coupled" are used to describe both direct and indirect connections, direct or indirect links, and direct or indirect couplings. In the figures, identical or similar elements are labeled with identical reference symbols where appropriate.
[0013] Password managers are provided on various common platforms (e.g., for Android, iOS, Windows, for web applications, etc.) for storing passwords as mentioned above.
[0014] If the password manager is installed on the same device as an application that requests the password, automatic password insertion is often enabled.
[0015] However, if the application is set to require active password entry and / or is not operated on the same device as the password manager, it is necessary to provide the password to the user in a perceptible manner.
[0016] According to various embodiments, the password is provided acoustically, using headphones, in such a way that the password is only provided to a previously authenticated user, for example a newly generated one-time password (OTP) (e.g., only after authentication).
[0017] The headphones can, for example, be designed as in-ear headphones, which offers a high level of security against eavesdropping. In other designs, the headphones can be intended for on-ear use, for example as a headset.
[0018] When using headphones, additional security measures may be in place to prevent third parties from overhearing the password.
[0019] To provide the password, for example, a one-time password generator can be provided, such as a (e.g., part of a) password generation circuit. For this purpose, a hardware security module (HSM), such as a so-called Secure Element (SE), can be used, which may be configured to provide cryptographic services, functions, and applications.
[0020] The password provisioning circuit, for example in the Secure Element, can store base keys and / or functions for generating the password. Alternatively or additionally, one or more passwords can be securely stored in the password provisioning circuit, for example in the Secure Element. Furthermore, authentication data for authenticating the user (or potentially multiple users) can be stored there (or in a separate authentication circuit).
[0021] The headphones can be equipped with at least one biometric sensor to authenticate the user.
[0022] The headphones can be configured, according to various implementation examples, to check, before audibly providing the password, whether the headphones are correctly positioned in or on / over the ear (optionally, whether the authenticated user has the headphones in / on / over their ear), and not lying around openly. This can be described as authenticated liveness detection.
[0023] For this purpose, the headphones can be equipped with one or more sensors, which can be the same sensor(s) as the at least one biometric sensor, or different from it, or one or more of the biometric sensors can be used in combination with one or more additional sensors.
[0024] If a one-time password is provided, the application requesting the password can be configured for so-called forward secrecy. This means that the password, provided with a short validity period, can be used to allow access and actions only that relate to the present and future, not the past.
[0025] Fig. 1A and Fig. Figure 1B shows a schematic representation of a headphone 100 according to different embodiments, and Fig. Figure 2 shows an illustration of the operation of a headphone 100 according to various embodiments.
[0026] The headphones 100 are in Fig. 1A and Fig. Figure 1B is shown as an in-ear headphone (also referred to as an earbud). According to various embodiments, the headphone 100 can alternatively be designed as a headphone 100 to be worn on or over the ear. Generally, the term "headphone 100" refers to any device that is configured to provide acoustic information to only one user at any given time during its intended use (if wireless in-ear headphones are used in pairs, this applies to the pair; if individual in-ear headphones are used, it applies to each individual headphone 100). Accordingly, for example, a hearing aid (e.g., an implanted one) designed for the electronic reception of acoustic information and / or a headphone functioning via bone conduction can also be considered the headphone 100.
[0027] The headphones 100 include a loudspeaker 102. The term "loudspeaker" is to be understood broadly as a device designed to provide acoustic information to a single user 220. The loudspeaker 102 may, for example, be designed to transmit sound to the user's ear canal or bones surrounding the ear canal 220, or electrical impulses to the user's auditory nerve 220.
[0028] The headphones 100 also have a first sensor 104, which is configured to detect at least one biometric characteristic of the user 220 of the headphones 100. The first sensor 104 is accordingly also referred to as a biometric sensor.
[0029] The biometric feature - and thus the first sensor 104 - can be set up to be used when authenticating the user 108.
[0030] The first sensor 104 can be configured in various embodiments to detect at least one general biometric feature of the user 220, for example a feature that can also be detected by other devices with biometric sensors, such as a fingerprint of the user 220 or a predetermined movement pattern or gesture or voice pattern.
[0031] Accordingly, the first sensor 104 can be, for example, a fingerprint sensor, and / or a motion sensor (e.g., accelerometer) to capture the movement pattern.
[0032] In various embodiments, the first sensor 104 can be configured to detect at least one biometric feature of the user 220 that can only be detected at / in the ear. For example, the biometric feature can be a characteristic shape of the ear canal or auricle of the user 220, which can be detected, for example, by means of one or more pressure sensors and / or at least one camera, and / or, for example, a characteristic reflection of sound waves within the ear canal (with a microphone as the associated first sensor 104) and / or a temperature distribution at / in the ear (with one or more temperature sensors as the first sensor 104).
[0033] The headphones 100 also include an authentication circuit 106. The authentication circuit 106 can be configured to authenticate the user 220 using the (at least one) biometric feature of the user 220 captured by the headphones 100.
[0034] Authentication data can be stored in the authentication circuit 106. This data may, for example, be determined during the personalization of the headphones 100 using the authentication circuit 106 (e.g., with the aid of the first sensor 104) and stored in the authentication circuit 106, for example, in protected memory. This is in Fig. 2 under 1. illustrated.
[0035] The authentication circuit 106 can, for example, be implemented by a cryptography circuit, e.g. as a Secure Element (SE), which can be configured to provide cryptographic services and applications.
[0036] To authenticate user 220, the at least one biometric characteristic detected by the first sensor 104 can be compared with the value stored in the authentication circuit 106. If the detected at least one biometric characteristic matches the stored value, user 220 can be considered authenticated. This is in Fig. 2 under 2. illustrated.
[0037] The headphones 100 further include a password provisioning circuit 108, which is configured to provide a password (e.g., to generate a one-time password or to retrieve a securely stored password from memory) to the user 220 of the headphones 100 when the user 220 of the headphones 100 has been successfully authenticated. For example, the password provisioning circuit 108 can be configured to provide the password only in this case of successful authentication, and in particular, only in the case of successful authentication.
[0038] Password generation is in Fig. 2 under 3. illustrated.
[0039] The password provisioning circuit 108 can, for example, be implemented by a cryptography circuit which can be configured to provide cryptographic services and applications, for example as a separate Secure Element, or integrally with the authentication circuit 106, for example as a Secure Element with dual functionality for authenticating the user and providing the (e.g. one-time) password.
[0040] The headphones 100 may also have a control circuit 114, which may be configured to control the loudspeaker 102 to output the generated password to the user 220 of the headphones 100.
[0041] The control circuit 114 can also be configured for additional control functions, for example to receive and process a request to provide the password.
[0042] Such a request can be transmitted to the headphones 100, for example, via a wireless interface 112, for example from an external transmitter 222.
[0043] The wireless interface 112 can be configured for Bluetooth (e.g. BLE), WLAN, NFC, and / or other wireless communication.
[0044] The external transmitter 222 could, for example, be the device or application that requires the password (in Fig. 2 symbolized as a door opener), and / or, for example, an external control, such as a smartphone with a suitable application (app).
[0045] The external transmitter 222 can form a headphone system 200 together with the headphones 100, wherein the external transmitter 222 can be configured to transmit a request to provide the password to the wireless interface 112 of the headphones 100.
[0046] Alternatively or additionally, the user 220 can initiate the provision of the password himself, for example by means of an acoustic input (e.g. in the form of a voice command), by means of a button press or other input directly on the headphones 100.
[0047] In various embodiments, the provision of the password can be initiated by means of an external control device that can be paired with the headphones 100, for example by means of a smartphone.
[0048] If the headphones 100 do not have a dedicated control circuit 114, the control tasks can be performed by the authentication circuit 106 and / or the password provisioning circuit 108 or, if applicable, by the cryptography circuit implementing both, according to various embodiments.
[0049] The headphones 100 can also be configured to provide the password to user 220, for example in one of the ways described above in connection with the speaker 102. Fig. 2 illustrates what is shown in section 4.
[0050] To ensure that the password is only issued (via the speaker 102) when only the user 220 can hear it (for example, unlike an earbud or a headset that is lying on a table), the headphones 100 may also have a second sensor that may be configured to detect biological and / or environmental parameters, and a position detection circuit that may be configured to determine from the detected biometric features, biological parameters and / or environmental parameters whether the headphones 100 are in a usage position in or on the ear or not.
[0051] For position determination, at least one biometric characteristic can be used, if it is expedient.
[0052] For example, the characteristic sound reflection in the ear, used for authentication, can also be used to determine that the headphones 100 are actually in the ear.
[0053] If a feature independent of the position in the ear is used for authentication, for example a fingerprint, the second sensor can be at least one additional sensor that (at least in combination with one or more other sensors) is suitable to distinguish a usage position intended for the use of the headphones from all other positions, for example a temperature sensor, a brightness sensor, a pressure sensor, etc.
[0054] The password received via speaker 102 can be provided by the user 220 to application 222, for example by using a keypad, keyboard, touch display, voice command or similar. This is in Fig. 2 under 5. illustrated.
[0055] The headphones 100 can be set up to distinguish between different users 220 and, if necessary, provide them with different passwords.
[0056] Fig. Figure 3 shows a flowchart 300 of a method for operating a headphone according to various embodiments.
[0057] The procedure includes capturing at least one biometric feature of a user of the headphones (310), authenticating the user using the captured biometric feature of the user of the headphones (320), and providing a password to the user of the headphones when the user of the headphones has been successfully authenticated (330).
[0058] The following is a summary of some examples.
[0059] Exemplary embodiment 1 is a headphone. The headphone comprises a loudspeaker, a first sensor configured to detect at least one biometric feature of a headphone user, an authentication circuit configured to authenticate the user using the detected biometric feature of the headphone user, and a password provisioning circuit configured to provide a password to the headphone user when the headphone user has been successfully authenticated.
[0060] Exemplary embodiment 2 is a headphone according to exemplary embodiment 1, wherein the password provisioning circuit is configured as a password generation circuit which is configured to generate a password, optionally a one-time password.
[0061] Exemplary embodiment 3 is a headphone according to exemplary embodiment 1 or 2, which further comprises a control circuit which is configured to control the loudspeaker to output the generated password to the user of the headphone.
[0062] Exemplary embodiment 4 is a headphone according to one of the exemplary embodiments 1 to 3, configured as an in-ear speaker device.
[0063] Exemplary embodiment 5 is a headphone according to one of the exemplary embodiments 1 to 3, configured as a headset.
[0064] Exemplary embodiment 6 is a headphone according to one of the exemplary embodiments 1 to 5, which further comprises a cryptography circuit configured to provide cryptographic services, wherein the cryptography circuit implements the authentication circuit and optionally implements the password provisioning circuit.
[0065] Exemplary embodiment 7 is a headphone according to one of the exemplary embodiments 1 to 5, which further comprises a cryptography circuit configured to provide cryptographic services, wherein the cryptography circuit implements the password provisioning circuit and optionally implements the authentication circuit.
[0066] Exemplary embodiment 8 is a headphone according to one of the exemplary embodiments 1 to 7, which further comprises a second sensor configured to detect biological and / or environmental parameters, and a position detection circuit configured to determine from the detected biometric features, biological parameters and / or environmental parameters whether the headphone is in a usage position in or on the ear or not.
[0067] Exemplary embodiment 9 is a headphone according to exemplary embodiments 3 and 8, wherein the control circuit is further configured to control the loudspeaker only in the case that the position determined by the position detection circuit is the usage position, in order to output the generated password to the user of the headphone.
[0068] Exemplary embodiment 10 is a headphone according to one of the exemplary embodiments 1 to 9, wherein the first sensor comprises or consists of at least one of the following group: a fingerprint sensor, a microphone, a plurality of pressure sensors, a near-infrared sensor, a camera, a temperature sensor and a conductivity sensor.
[0069] Exemplary embodiment 11 is a headphone according to one of the exemplary embodiments 1 to 10, wherein the second sensor comprises or consists of at least one from the following group: a microphone configured to receive sound generated by the loudspeaker, at least one pressure sensor, a near-infrared sensor, a brightness sensor, a camera, a temperature sensor, a conductivity sensor.
[0070] Embodiment 12 is a headphone according to one of embodiments 8 to 11, wherein the first and second sensors are integrally formed or identical.
[0071] Exemplary embodiment 13 is a headphone according to one of the exemplary embodiments 1 to 12, wherein the authentication circuit and the password provisioning circuit are integrally formed or identical.
[0072] Exemplary embodiment 14 is a headphone according to one of the exemplary embodiments 2 to 13, wherein at least two of the authentication circuit, the password provisioning circuit and the control circuit are integrally formed or identical.
[0073] Exemplary embodiment 15 is a headphone according to one of the exemplary embodiments 1 to 14, which furthermore has a contactless interface that is set up for contactless communication with an external transmitter.
[0074] Exemplary embodiment 16 is a headphone according to exemplary embodiment 15, configured to receive a request to provide the password via the contactless interface.
[0075] Exemplary embodiment 17 is a headphone system comprising a headphone according to one of the exemplary embodiments 15 or 16 and an external transmitter configured to transmit a request to provide the password to the contactless interface.
[0076] Exemplary embodiment 18 is a method for operating headphones. The method comprises capturing at least one biometric characteristic of a headphone user, authenticating the user using the captured biometric characteristic of the headphone user, and providing a password to the headphone user if the headphone user has been successfully authenticated.
[0077] Embodiment 19 is a method according to embodiment 18, wherein providing the password includes generating the password, optionally a one-time password.
[0078] Exemplary embodiment 20 is a method according to exemplary embodiment 18 or 19, which further includes controlling the loudspeaker to output the generated password to the user of the headphones.
[0079] Embodiment 21 is a method according to one of embodiments 18 to 20, wherein the headphones are configured as an in-ear speaker device.
[0080] Embodiment 22 is a method according to one of embodiments 18 to 20, wherein the headphones are configured as a headset.
[0081] Exemplary embodiment 23 is a method according to one of the exemplary embodiments 18 to 22, which further comprises recording biological and / or environmental parameters and determining, from the recorded biometric characteristics, the biological parameters and / or the environmental parameters, whether the headphones are in a usage position in or on the ear or not.
[0082] Exemplary embodiment 24 is a method according to exemplary embodiments 22 and 23, which further includes controlling the loudspeaker only in the case that the determined position is the usage position, to output the generated password to the user of the headphones.
[0083] Exemplary embodiment 25 is a method according to one of the exemplary embodiments 20 to 24, wherein the acquisition of the biometric feature, the authentication of the user and the provision of the password are carried out within the headphones.
[0084] Embodiment 26 is a method for operating a headphone system. The method comprises transmitting a request to provide a password from an external transmitter to a headphone according to one of embodiments 1 to 16, and providing the password by means of a method according to one of embodiments 18 to 25.
[0085] Further advantageous embodiments of the device will result from the description of the method and vice versa.
Claims
[1] Headphones (100), comprising: • a loudspeaker (102); • a first sensor (104) configured to detect at least one biometric feature of a user (220) of the headset (100); • an authentication circuit (106) configured to authenticate the user (220) using the captured biometric feature of the user (220) of the headset (100); • a password provision circuit (108) configured to provide a password to the user of the headset when the user of the headset (100) has been successfully authenticated. [2] Headphones (100) according to claim 1, wherein the password providing circuit is configured as a password generating circuit configured to generate a password, optionally a one-time password. [3] Headphones (100) according to claim 1 or 2, further comprising: a control circuit configured to control the loudspeaker (102) to output the generated password to the user of the headset (100). [4] Headphones (100) according to one of claims 1 to 3, arranged as an in-ear loudspeaker device. [5] Headphones (100) according to one of claims 1 to 3, arranged as a headset. [6] Headphones (100) according to one of claims 1 to 5, further comprising: a cryptography circuit configured to provide cryptographic services, wherein the cryptography circuit implements the authentication circuit (106) and optionally implements the password provision circuit as a password generation circuit (108). [7] Headphones (100) according to one of claims 1 to 5, further comprising: a cryptography circuit configured to provide cryptographic services, wherein the cryptography circuit implements the password providing circuit as a password generating circuit (108) and optionally implements the authentication circuit (106). [8] Headphones (100) according to one of claims 1 to 7, further comprising: a second sensor configured to detect biological and / or environmental parameters; and a position detection circuit configured to determine from the detected biometric features, the biological parameters and / or the environmental parameters whether or not the headset (100) is in a usage position in or on the ear. [9] Headphones (100) according to claims 3 and 8, wherein the control circuit is further configured to control the loudspeaker (102) to output the generated password to the user of the headphones (100) only in a case that the position detected by the position detection circuit is the use position. [10] Headphones (100) according to one of claims 1 to 9, wherein the first sensor (104) comprises or consists of at least one of the following group: a fingerprint sensor; a microphone; a plurality of pressure sensors; a near-infrared sensor; a camera; a temperature sensor; a conductivity sensor. [11] Headphones (100) according to one of claims 1 to 10, wherein the second sensor comprises or consists of at least one of the following group: a microphone configured to receive sound generated by the loudspeaker (102); at least one pressure sensor; a near-infrared sensor; a brightness sensor; a camera; a temperature sensor; a conductivity sensor. [12] The headset (100) according to any one of claims 1 to 11, wherein the authentication circuit (106) and the password providing circuit (108) are integrally formed or identical. [13] The headset (100) according to any one of claims 3 to 12, wherein at least two of the authentication circuit (106), the password providing circuit (108) and the control circuit are integrally formed or identical. [14] Headphones (100) according to one of claims 1 to 13, further comprising: a contactless interface configured for contactless communication with an external transmitter. [15] Headphones (100) according to claim 14, set up to receive a request to provide the password via the contactless interface. [16] Headphone system (200), comprising: a headphone (100) according to one of claims 14 or 15; and an external transmitter (222) which is arranged to transmit a request to provide the password to the contactless interface. [17] A method for operating a headset, the method comprising: • Capturing at least one biometric feature of a user of the headset (310); • Authenticating the user using the captured biometric feature of the user of the headset (320); • Providing a password to the headset user if the headset user has been successfully authenticated (330). [18] The method of claim 17, further comprising: Control the loudspeaker to output the generated password to the user of the headphones. [19] The method according to claim 17 or 18, further comprising: Recording biological and / or environmental parameters; and Determine, from the recorded biometric characteristics, the biological parameters and / or the environmental parameters, whether the headphones are in a usage position in or on the ear or not. [20] Method according to claims 18 and 19, further comprising: Controlling the loudspeaker only in the case that the determined position is the usage position, to output the generated password to the user of the headphones.
Citation Information
Patent Citations
device and method for the personalized provision of a key
DE102015225778A1
Biometric Authentication Substitute For Passwords On A Wearable Computing Device
US20140337634A1
MULTI-FACTOR AUTHENTICATION IN VIRTUAL, AUGMENTED, AND MIXED REALITY (xR) APPLICATIONS
US20180375660A1
Ear-based biometric identification
US20220261468A1