UWB Ranging and Secure Channel for Transaction Security
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing communication technologies, such as Bluetooth low energy and Wi-Fi, lack sufficient security and reliability for transactions due to their larger range, which can result in unintended transactions when the user's intention is unclear, as they do not implicitly require close proximity like NFC.
Innovation Solution
A communication device with an ultra-wideband (UWB) communication unit executes a ranging session to verify user intention by performing a series of ranging operations and uses a secure communication channel, such as BLE or Wi-Fi, to wrap transactions within a secure communication channel, employing a UWB ranging session key agreement process and mutual authentication with a predetermined AES master key.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Area of stationary object
If Bluetooth low energy or Wi-Fi is used for transactions, then communication range is extended, but transaction security deteriorates due to unintended transactions when user intention is unclear
Solution Approach 1:
The patent introduces UWB ranging as an intermediary verification mechanism between the user and the transaction system. The UWB ranging session acts as a mediator that objectively verifies user proximity and intention, separating the communication function (BLE/Wi-Fi) from the security verification function (UWB ranging). This resolves the contradiction by allowing extended communication range while maintaining transaction security through independent proximity verification.
Solution Approach 2:
The patent segments the transaction system into two independent components: communication establishment (handled by BLE/Wi-Fi with extended range) and security verification (handled by UWB ranging with precise proximity measurement). This segmentation allows each component to optimize its specific function without compromising the other, enabling both extended range and high security.
2Reliability
If UWB ranging session is executed to verify user intention, then transaction security is improved, but device complexity increases due to multiple communication protocols
Solution Approach 1:
The patent implements a universal transaction framework that can work with multiple communication protocols (BLE, Wi-Fi, UWB) through a standardized interface. The processing unit handles different protocol types uniformly, managing the UWB ranging session and secure channel setup in a protocol-agnostic manner. This multi-functionality approach reduces the perceived complexity by providing a unified control layer that manages diverse protocols through consistent procedures.
3Reliability
If secure communication channel is implemented with wrapping, then data protection is enhanced, but processing time increases due to encryption and authentication steps
Solution Approach 1:
The patent performs preliminary key establishment and authentication during the UWB ranging session setup phase, before the actual transaction data needs to be protected. The secure communication channel is pre-configured with cryptographic parameters and authentication credentials during the initial ranging operations. This preliminary action ensures that when transactions occur, the data protection mechanisms are already in place, minimizing the time overhead during actual data processing.
Data Source
Figure 1~2
Figure 3
AI summary
In accordance with a first aspect of the present disclosure, a communication device is provided, comprising: an ultra-wideband (UWB) communication unit configured to execute a UWB ranging session with an external communication device; a further communication unit configured to set up a secure communication channel with the external communication device; a processing unit configured to carry out a transaction through the further communication unit in dependence on a result of the UWB ranging session; wherein the processing unit is further configured to wrap said transaction within the secure communication channel. In accordance with a second aspect of the present disclosure, a corresponding method of operating a communication device is conceived. In accordance with a third aspect of the present disclosure, a computer program is provided for carrying out said method.