Motion-Based Device Pairing via Cryptographic Commitment

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing device authentication methods lack efficient and secure ways to verify simultaneous user possession of multiple devices, particularly in scenarios where wearable computing devices and smartphones are used, as they often rely on pre-existing relationships or static passwords, which are insecure and inconvenient.

Innovation Solution

Implementing a motion-based authentication system that uses cryptographic commitments and pairing protocols based on motion values measured by motion sensors, allowing devices to securely pair and authenticate through correlated motion, such as shaking or simultaneous holding, without the need for pre-shared secrets.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If pre-existing relationships or static passwords are used for device authentication, then the pairing process is simplified, but security is weakened and convenience is reduced

Engineering Contradiction:
Improveauthentication securityVSAvoidpairing convenience
Core Design Contradiction:
ReliabilityVSEase of operation

Solution Approach 1:

The patent transforms static authentication (passwords, pre-existing relationships) into dynamic authentication using motion data. Motion values captured by sensors during device pairing are transient and change with each pairing event, providing both security through unpredictability and convenience through intuitive user actions like shaking or moving devices together

Inventive Principle:
Principle #15Dynamics

Solution Approach 2:

The patent changes the authentication parameter from static secrets (passwords, pre-shared keys) to dynamic motion parameters. By using motion values captured during the pairing process and applying cryptographic commitments, the system achieves both high security through entropy-rich motion data and ease of operation through natural user gestures

Inventive Principle:
Principle #35Parameter changes

2Reliability

If motion-based authentication with cryptographic commitments is implemented, then security and convenience are enhanced, but device complexity increases

Engineering Contradiction:
Improveauthentication securityVSAvoidpairing protocol complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent introduces cryptographic commitments as an intermediary mechanism that simplifies the overall protocol. By committing to motion values before comparison, the system avoids complex trust establishment and state management, reducing operational complexity while maintaining high security through the mathematical properties of cryptographic commitments

Inventive Principle:
Principle #24Intermediary (Mediator)

Solution Approach 2:

Each device independently captures its own motion data and performs local cryptographic operations. The devices self-verify pairing success by comparing committed motion values without requiring complex coordination or centralized authentication, reducing device complexity while enhancing security through distributed verification

Inventive Principle:
Principle #25Self-service

Data Source

PatentUS9185100B1Device pairing using a cryptographic commitment process involving measured motion values
Publication Date: 2015.11.10 EMC IP HLDG CO LLC
  • US9185100B1 patent drawing
  • US9185100B1 patent drawing
  • US9185100B1 patent drawing

AI summary

A method includes receiving, in a first device, an access request. The method further includes measuring a motion of the first device to determine a first motion value, performing a pairing protocol with a second device, and granting the access request responsive to a successful pairing in accordance with the pairing protocol. The pairing protocol comprises a cryptographic commitment process. The successful pairing is based at least in part on a determination that a second motion value supplied by the second device substantially matches the first motion value. The cryptographic commitment process comprises sending a committed first motion value to the second device prior to receiving the second motion value from the second device.