WiFi Proximity Verification via Signal Timing and Nonce Authentication
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
There is a need to ensure that communication devices remain within a predetermined proximity of each other to enhance security and prevent malicious attacks, such as relay attacks, which can compromise the physical proximity of devices using wireless communication technologies like WiFi.
Innovation Solution
A system and method that verify the proximity of communication devices by establishing a communication link, generating and verifying a nonce, and calculating the time elapsed to determine if the devices are within a predefined physical proximity, using cryptographic techniques and timers to authenticate and validate the proximity verification.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If wireless communication technologies (WiFi, NFC) are used to establish secure communication channels, then communication convenience is improved, but security is worsened due to relay attacks and man-in-the-middle attacks
Solution Approach 1:
The system performs preliminary proximity verification by measuring signal strength (RSSI) and calculating physical distance before establishing the secure communication channel. This preliminary action ensures that devices are physically close before exchanging encryption keys, preventing relay attacks where attackers would otherwise intercept communications between distant devices.
Solution Approach 2:
The patent introduces an intermediary verification mechanism that acts as a mediator between the communication parties. The system uses signal strength measurement and distance calculation as intermediary checks to validate that devices are within acceptable proximity, thereby securing the communication channel without requiring direct physical contact or trust between the communicating devices.
2Reliability
If proximity verification mechanisms are implemented to prevent relay attacks, then security is improved, but device complexity is worsened
Solution Approach 1:
The system uses self-service by leveraging the existing wireless communication infrastructure to perform proximity verification. The same WiFi or NFC hardware used for communication also provides signal strength measurements, eliminating the need for separate verification hardware. The devices verify each other's proximity autonomously through mutual authentication and distance calculation based on signal characteristics.
Solution Approach 2:
The patent applies multi-functionality by making the communication hardware serve dual purposes: both establishing the wireless connection and verifying physical proximity. The signal strength measurement function is integrated into the existing communication protocol, allowing the same device components to perform both communication and security verification tasks without adding separate dedicated verification systems.
3Measurement precision
If signal strength measurement is used to verify proximity, then proximity verification accuracy is improved, but reliability is worsened due to environmental interference
Solution Approach 1:
The system applies partial verification by using signal strength measurement as one of multiple verification factors rather than relying on it exclusively. The proximity check is performed to a sufficient degree (not necessarily with absolute precision) to establish that devices are within acceptable range, combining this partial measurement with other verification methods like cryptographic authentication to achieve overall reliable security verification.
Solution Approach 2:
The patent dynamically adjusts verification parameters based on measured signal characteristics. The system changes acceptance thresholds and verification criteria according to the observed signal strength and environmental conditions, allowing the verification mechanism to adapt to varying interference levels while maintaining security. This parameter adjustment enables reliable verification across different environments by flexibly modifying the strictness of proximity requirements.
Data Source
AI summary
The systems, methods and apparatuses described herein provide an apparatus configured for ensuring proximity of a communication partner. In one aspect, the apparatus may comprise a communication port and a processor. The processor may be configured to send a request to and receive a response from the communication partner via the communication port using modulated signals, measure a time period between sending and receiving using timings of modulated signals' symbols, and receive a secondary value from the communication partner. The secondary value may be verified to include at least a portion of the request and a portion of the response, and may have been sent with authenticating data to authenticate it. The time period may be compared with a predefined threshold calculated based on a predefined maximum allowed distance to the communication partner. In another aspect, an apparatus may be configured to ensure its proximity to a communication partner.