Method for securing a wireless data exchange
The method employs vibration and deformation sensors to validate user-specific interactions on portable electronic devices, thereby securing wireless data exchanges and preventing unauthorized access.
Patent Information
- Application Number
- FR2023014989
- Authority / Receiving Office
- FR · FR
- Patent Type
- Applications
- Current Assignee / Owner
- Filing Date
- 2023-12-22
- Publication Date
- 2025-06-27
AI Technical Summary
Wireless data exchange between portable electronic devices and communication equipment often lacks security, allowing malicious actors to intercept sensitive information through proximity-based attacks.
A method that utilizes vibration and/or deformation sensors on portable electronic devices to detect user-specific vibrations and deformations, which are then validated against pre-stored expectations before allowing wireless data exchange to proceed.
This solution effectively secures wireless data exchanges by ensuring that only authorized user interactions can initiate data transfer, thereby preventing unwanted or malicious data exchanges.
Smart Images
Figure 00000000_0000_ABST
Abstract
Description
Title of the invention: Method for securing a wireless data exchange Technical field
[0001] The present description generally relates to the field of securing a wireless data exchange between a portable electronic device and communication equipment. Prior art
[0002] There are many situations where security concerns arise when exchanging wireless data between a portable electronic device and communications equipment.
[0003] A first example of such a situation corresponds to the case where a malicious person equipped with suitable equipment, for example a mobile phone and a specific application, attempts to recover confidential information coming for example from a contactless payment card. Such recovery of information is possible if the suitable equipment is placed a few centimeters from the contactless payment card.
[0004] A second example of such a situation corresponds to the case of possible locking / unlocking by the simple presence or proximity of a key or electronic card with the locking / unlocking system (for example a connected door lock, a vehicle, etc.).
[0005] In such situations, wireless data exchange occurs without any verification or validation action by the user, which can be problematic. Summary of the Invention
[0006] There is a need to propose a method for securing a wireless data exchange between a portable electronic device and communication equipment making it possible to prevent unwanted data exchanges between the portable electronic device and the communication equipment.
[0007] One embodiment overcomes all or part of the drawbacks of known solutions and proposes a method for securing a wireless data exchange between a portable electronic device and communication equipment, comprising at least the following steps:
[0008] - request for data exchange between the portable electronic device and communications equipment;
[0009] - detection, by at least one vibration and / or deformation sensor of the device portable electronics, at least one vibration and / or deformation of the electronic device portable electronics produced by a user of the portable electronic device;
[0010] - validation and implementation of the data exchange if the vibration and / or detected formation corresponds to an expected vibration and / or deformation.
[0011] According to a particular embodiment, the vibration and / or deformation sensor comprises at least one of the following components: resistive gauge, semiconductor gauge, piezoelectric gauge, force sensor, microphone, accelerometer.
[0012] According to a particular embodiment, the exchange of data between the portable electronic device and the communication equipment is carried out according to at least one of the following wireless communication protocols and / or at least one of the following wireless communication standards: NFC, Bluetooth, Z-Wave, Wifi, UWB.
[0013] According to a particular embodiment, the method further comprises, between the detection and validation steps, a step of transmission, from the vibration and / or deformation sensor to an electronic processing circuit of the portable electronic device, of a signal representative of the detected vibration and / or deformation, and the validation step comprises a comparison, by the electronic processing circuit, of the signal representative of the detected vibration and / or deformation with a signal representative of the expected vibration and / or deformation.
[0014] According to a particular embodiment, the signal representative of the expected vibration and / or deformation is stored in a memory of the portable electronic device or in a memory of the communication equipment or in a memory of other equipment configured to communicate at least with the portable electronic device and / or the communication equipment.
[0015] According to a particular embodiment, the method further comprises, before the request for data exchange between the portable electronic device and the communication equipment, a configuration step during which the signal representative of the expected vibration and / or deformation is obtained.
[0016] According to a particular embodiment, the expected vibration and / or deformation corresponds to at least one sequence of several successive vibrations and / or deformations of the portable electronic device.
[0017] According to a particular embodiment, the exchange of data between the portable electronic device and the communication equipment is validated and implemented if the detected vibration and / or deformation corresponds to the expected vibration and / or deformation and if the detected vibration and / or deformation is produced in contact with the communication equipment or in the vicinity of the communication equipment.
[0018] According to a particular embodiment, the portable electronic device corresponds to a mobile telephone or an electronic key or an electronic card or a connected object such as a watch, a ring, a ring or a bracelet.
[0019] According to a particular embodiment, the communication equipment corresponds to a payment terminal or a card reader or an electronic lock or a communication terminal. Brief description of the drawings
[0020] These characteristics and advantages, as well as others, will be explained in detail in the following description of particular embodiments given without limitation in relation to the attached figures among which:
[0021] - [Fig.l] represents steps of a method for securing an exchange of wireless data between a portable electronic device and communication equipment according to a particular embodiment;
[0022] - [Fig.2] schematically represents a portable electronic device and a communication equipment between which a method for securing a wireless data exchange according to a particular embodiment is implemented;
[0023] - [Fig.3] represents a first example of application of a security method provision of a wireless data exchange between a portable electronic device and communication equipment according to a particular embodiment;
[0024] - [Fig.4] represents another example of application of a security method of a wireless data exchange between a portable electronic device and communication equipment according to a particular embodiment. Description of the embodiments
[0025] The same elements may be designated by the same references in the different figures. In particular, the structural and / or functional elements common to the different exemplary embodiments may have the same references and may have identical structural, dimensional and material properties.
[0026] For the sake of clarity, only the steps and elements useful for understanding the described embodiments and examples have been shown and are detailed. In particular, different steps of the method for securing the exchange of data and different elements of the portable electronic device and the communication equipment are not detailed. Those skilled in the art will be able to implement these elements in detail from the functional description given here.
[0027] Unless otherwise specified, when referring to two elements connected to each other, this means directly connected without intermediate elements other than conductors, and when referring to two elements connected (in English "coupled") to each other, this means that these two elements can be connected or be connected by means of one or more other elements.
[0028] Unless otherwise specified, the expressions "about", "approximately", "substantially", and "of the order of" mean to within 10% or 10°, preferably to within 5% or 5°.
[0029] An example of a method for securing a wireless data exchange between a portable electronic device 100 and a communication equipment 200 according to a particular embodiment is described below in connection with [Fig. 1]. Furthermore, an example of a portable electronic device 100 and a communication equipment 200 between which such a method is implemented are shown schematically in [Fig. 2].
[0030] In the example described, the portable electronic device 100 may correspond to a mobile phone or an electronic key or an electronic card or a connected object such as a watch, a ring, a ring or a bracelet. In addition, the communication equipment 200 corresponds to electronic equipment adapted to communicate and exchange data with the portable electronic device 100, for example a payment terminal, a card reader, an electronic lock, or even a communication terminal. Other types of portable electronic device 100 and / or communication equipment 200 may implement the data exchange security method described here.
[0031] As can be seen in [Fig.2], the portable electronic device 100 comprises several elements used to implement the method for securing a data exchange with the communication equipment 200.
[0032] The portable electronic device 100 comprises in particular a vibration and / or deformation sensor 102 making it possible to detect at least one vibration and / or deformation of the portable electronic device 100. A vibration of the portable electronic device 100 is for example obtained by producing a shock on the portable electronic device 100. A deformation of the portable electronic device 100 is for example obtained by stretching or compressing or even by pressing at least one part or one element of the portable electronic device 100.
[0033] According to an exemplary embodiment, the vibration and / or deformation sensor 102 comprises at least one of the following components: resistive gauge, semiconductor gauge, piezoelectric gauge, force sensor, microphone, accelerometer. Alternatively, the portable electronic device 100 may comprise a vibration and / or deformation sensor 102 of a type different from those given above.
[0034] In the exemplary embodiment described, the portable electronic device 100 also comprises an electronic processing circuit 104 configured in particular to process the measurement signals delivered by the vibration and / or deformation sensor 102 and which are representative of the vibrations and / or deformations detected by the sensor 102. The signal exchanges between the electronic processing circuit 104 and the vibration and / or deformation sensor 102 are symbolically represented, in [Fig. 2], by a double arrow extending between these two elements.
[0035] In the exemplary embodiment described, the portable electronic device 100 comprises also a wireless communication electronic circuit 106 allowing the portable electronic device 100 to carry out a wireless data exchange with the communication equipment 200. The portable electronic device 100 and the communication equipment 200 are for example configured to communicate with each other according to at least one of the following wireless communication protocols and / or at least one of the following wireless communication standards: NFC ("Near-Field Communication" in English, or near field communication), Bluetooth, Z-Wave, Wifi, UWB ("Ultra WideBand" in English, or Ultra Large Band). Other protocols and / or other communication standards may be used for the data exchanges between the portable electronic device 100 and the communication equipment 200.The protocol and / or communication standard used for the data exchanges between the portable electronic device 100 and the communication equipment 200 may depend in particular on the applications for which they are used. The signal exchanges between the circuits 104 and 106 are symbolically represented, in [Fig. 2], by a double arrow extending between these circuits. In addition, the data exchanged between the portable electronic device 100 and the communication equipment 200 are also symbolically represented by a double arrow in [Fig. 2].
[0036] An example of a method for securing a wireless data exchange between the portable electronic device 100 and the communication equipment 200 is described below.
[0037] According to a particular embodiment, this method comprises a configuration or enrollment step 10, during which a signal representative of at least one expected vibration and / or deformation is obtained. This signal is for example obtained by asking the user of the portable electronic device 100 to carry out a sequence of several successive vibrations and / or deformations of the portable electronic device 100. Such a sequence may have a distinctive character corresponding for example to the frequency and / or the intensity and / or the regularity with which the vibrations and / or the deformations are carried out, and / or to the duration(s) between the successive vibrations and / or deformations.
[0038] Alternatively, it is possible that the signal representative of at least one expected vibration and / or deformation corresponds to a signal representative of a single vibration and / or deformation of the device 100.
[0039] According to a particular embodiment corresponding to the configuration visible in [Fig.2], the signal representative of at least one vibration and / or an expected deformation is stored in an internal memory 108 of the portable electronic device 100. As a variant, it is possible for this signal to be stored in a memory of the communication equipment 200, or in a memory of another equipment configured to communicate at least with the portable electronic device 100 and / or the communication equipment 200 (for example a server of a bank, in the cloud, a home network server, a terminal of a vehicle, etc.).
[0040] The method then comprises a step 20 of requesting, or initiating, the exchange of data between the portable electronic device 100 and the communication equipment 200. This exchange of data can be initiated for example by bringing the portable electronic device 100 sufficiently close to the communication equipment 200.
[0041] The method then comprises a step 30 of detection, by the vibration and / or deformation sensor 102, of at least one vibration and / or deformation of the portable electronic device 100 produced by the user of the portable electronic device 100.
[0042] In the particular embodiment described here, the signal representative of said at least one vibration and / or deformation of the device 100 (single or in the form of a sequence of several successive vibrations and / or deformations) detected by the sensor 102 is then transmitted from the sensor 102 to the electronic processing circuit 104 (step 40).
[0043] The method then comprises a step 50 validating the exchange of data between the portable electronic device 100 and the communication equipment 200 if the vibration and / or deformation detected by the sensor 102 corresponds to an expected vibration and / or deformation. In the exemplary embodiment described here, this validation or not of the exchange of data comprises a comparison, by the electronic processing circuit 104, of the signal representative of the detected vibration(s) and / or deformation(s) with the signal representative of the expected vibration(s) and / or deformation(s) stored in the memory 108. For example, if the sequence of vibrations and / or deformations carried out by the user corresponds to that expected and stored in the memory 108, the exchange of data can be validated. In the event of validation, during a following step designated by the reference 60 in [Fig.l], the data exchange is carried out between the portable electronic device 100 and the communication equipment 200.
[0044] As a variant of the method described above, it is possible for the data exchange to be validated if one or more additional conditions are met. For example, it may be required, in order to validate the data exchange between the device 100 and the equipment 200, that the vibration and / or deformation of the device 100 be produced in contact with the equipment 200 or in the vicinity thereof.
[0045] According to a first example of application of the method described above, the exchange of data to be validated may correspond to a contactless payment. In this case, the portable electronic device 100 may correspond to a mobile telephone or a payment card, and the communication equipment 200 may correspond to a payment terminal. By implementing the previously described security method, the contactless payment is carried out only if the user produces a vibration and / or a deformation of the device 100, or if the user reproduces an expected sequence of vibrations and / or deformations of the device 100. In such an application example, the confirmation of the payment by producing at least one vibration and / or deformation of the device 100 can make it possible to secure the payment and avoid payments not desired by the user. [Fig. 3] schematically represents such a first application example, in which the portable electronic device 100 corresponds to a payment card and the communication equipment 200 corresponds to a payment terminal.As can be seen in this figure, the validation of the data exchange is confirmed by the user when he deforms the payment card, for example by pinching it so that the card deforms. In [Fig.3], this deformation is symbolized by two arrows.
[0046] According to a second example of application of the method previously described, the exchange of data to be validated may correspond to a download of data from the equipment 200 to the device 100, or a transmission of data from the device 100 to the equipment 200, or an exchange of profiles or virtual business cards between the device 100 and the equipment 200, or a recovery of an encryption key such as a Wifi key, from the equipment 200 to the device 100. In this case, the device 100 may correspond to a mobile telephone or a connected object, and the equipment 200 may correspond to a communication terminal. In such an example of application, the confirmation of the exchange by carrying out at least one vibration and / or deformation of the device 100 may make it possible to secure the exchange of data and the provision of sensitive data to unwanted devices.
[0047] According to a third example of application of the method previously described, the exchange of data to be validated may correspond to a locking or unlocking of a door, or a control of access to premises. In this case, the device 100 may correspond to an electronic key or an electronic card, and the equipment 200 may correspond to an electronic lock or a contactless reader. In such an example of application, the confirmation of access or locking / unlocking by performing at least one vibration and / or deformation of the device 100 may make it possible, for example, to prevent access to a person in possession of the device 100 but not knowing the sequence of vibrations and / or deformations required to validate this access. [Fig. 4] schematically represents such an example of application, in which the portable electronic device 100 corresponds to a ring or a ring and the communication equipment 200 corresponds to an electronic lock. As can be seen in this figure, the validation of the data exchange is confirmed by the user when he or she performs one or more vibrations of the ring (for example, an expected sequence of vibrations) by tapping the finger on which the ring is located on the lock.
[0048] According to a fourth example of application of the method previously described, the exchange of data to be validated may correspond to a starting or stopping of a vehicle. In this case, the device 100 may correspond to an electronic key or an electronic card, and the equipment 200 may correspond to an electronic lock or a contactless reader. In such an example of application, the confirmation of the starting or stopping of the vehicle by the execution of at least one vibration and / or deformation of the device 100 may make it possible to limit the risks of theft of the vehicle.
[0049] According to a fifth example of application of the method previously described, the exchange of data to be validated may correspond to access to the home automation functionalities of a building.
[0050] Various embodiments and variations have been described. Those skilled in the art will understand that certain features of these various embodiments and variations could be combined, and other variations will occur to those skilled in the art.
[0051] Finally, the practical implementation of the embodiments and variants described is within the reach of those skilled in the art from the functional indications given above.
Claims
Claims
1. Method for securing a wireless data exchange between a portable electronic device (100) and a communication device (200), comprising at least the following steps: - request (20) for the data exchange between the portable electronic device (100) and the communication device (200); - detection (30), by at least one vibration and / or deformation sensor (102) of the portable electronic device (100), of at least one vibration and / or deformation of the portable electronic device (100) produced by a user of the portable electronic device (100); - validation (50) and implementation of the data exchange (60) if the detected vibration and / or deformation corresponds to an expected vibration and / or deformation.
2. Method according to claim 1, in which the vibration and / or deformation sensor (102) comprises at least one of the following components: resistive gauge, semiconductor gauge, piezoelectric gauge, force sensor, microphone, accelerometer.
3. Method according to one of the preceding claims, wherein the exchange of data between the portable electronic device (100) and the communication equipment (200) is carried out according to at least one of the following wireless communication protocols and / or at least one of the following wireless communication standards: NFC, Bluetooth, Z-Wave, Wifi, UWB.
4. Method according to one of the preceding claims, further comprising, between the detection (30) and validation (50) steps, a transmission step (40), from the vibration and / or deformation sensor (102) to an electronic processing circuit (104) of the portable electronic device (100), of a signal representative of the detected vibration and / or deformation, and in which the validation step (50) comprises a comparison, by the electronic processing circuit (104), of the signal representative of the detected vibration and / or deformation with a signal representative of the expected vibration and / or deformation.
5. The method of claim 4, wherein the signal representative of the expected vibration and / or deformation is stored in a memory (108) of the portable electronic device (100) or in a memory of the communication equipment (200) or in a memory of other equipment configured to communicate at least with the portable electronic device (100) and / or the communication equipment (200).
6. Method according to one of claims 4 or 5, further comprising, before the request (20) for data exchange between the portable electronic device (100) and the communication equipment (200), a configuration step (10) during which the signal representative of the expected vibration and / or deformation is obtained.
7. Method according to one of the preceding claims, in which the expected vibration and / or deformation corresponds to at least one sequence of several successive vibrations and / or deformations of the portable electronic device (100).
8. Method according to one of the preceding claims, wherein the exchange of data between the portable electronic device (100) and the communication equipment (200) is validated and implemented if the detected vibration and / or deformation corresponds to the expected vibration and / or deformation and if the detected vibration and / or deformation is produced in contact with the communication equipment (200) or in the vicinity of the communication equipment (200).
9. Method according to one of the preceding claims, in which the portable electronic device (100) corresponds to a mobile telephone or an electronic key or an electronic card or a connected object such as a watch, a ring, a ring or a bracelet.
10. Method according to one of the preceding claims, in which the communication equipment (200) corresponds to a payment terminal or a card reader or an electronic lock or a communication terminal.
Citation Information
Patent Citations
Card for interaction with a computer
US20140026213A1
Services associated with wearable electronic device
US20150332031A1