Wireless communication

Wireless communication technology

WIRELESS COMMUNICATION

The present invention generally relates to a wireless communication technology.

Modern electronic devices are usually equipped with wireless communication hardware, which allows these electronic devices to communicate with other devices using various communication protocols including Bluetooth®, WiFi, and ZigBee®. Another technology that has become more popular among these devices is Near Field Communication (NFC), which allows several devices to be placed in close proximity to each other (usually on the order of ten centimeters or less). Short-distance communication can be made between other devices.

The wireless communication system needs to establish a connection between two or more compatible devices on a carrier (such as Bluetooth), and may be open (that is, a device only needs to request a connection with another device when a connection is to be established). It is more common to encounter verification that requires a password or a key. There may also be different access levels, so that different features provided by the carrier can be enabled or disabled.

When viewed from a first aspect, the present invention provides a method for transferring data between a first device and a second device, which includes the following steps: Bring a first object into the actuation area of a near field communication module , So as to establish a near field communication between the module and the first object Signal link; the near-field communication module sends a control signal to at least one of the first and second devices to initiate the communication between the first and second devices through a different second channel A second communication session; transfer data between the first device and the second device in the second communication session; and if the first object is removed from the activation area, the second communication session is ended .

Therefore, a person familiar with this technology will see that the present invention advantageously uses NFC to initiate a new communication session on a different channel, such as Bluetooth, Bluetooth Low Energy, WiFi, Zigbee, etc. This will depend on the progress of the connection between a device using NFC technology and an object, which restricts the connection to the channel.

The method establishes a communication dialog on the different second channel, but the method can be used at a lower level of extraction, and therefore in some groups of embodiments, the step of initiating the second communication dialog is included in the A communication link is activated on different channels.

The step of initiating the second communication session may include initiating communication on the second channel. However, in the same way, it will include replacing or supplementing an existing communication session on the second channel. However, what the applicant has realized is that a similar approach can be used to change an existing communication dialogue. Therefore, when viewed in a second aspect, the present invention provides a method for transmitting data between a first device and a second device, which includes the following steps: Bring a first object into a near field communication module Unanimity zone In order to establish a near field communication link between the module and the first object; the near field communication module sends a control signal to at least one of the first and second devices to Change a second communication dialogue between the first and second devices via a different second channel from a first state to a second state; in the second communication dialogue, the first device and the Transferring data between the second devices; and if the first object is removed from the activation area, changing the second communication dialog from the second state to the first state.

In certain groups of embodiments of any aspect of the present invention, an output power associated with the second communication session is adjusted according to a perceived proximity between the first object and the near field communication module . This excellent configuration can depend on the proximity between the first object and the NFC module, providing an increase or decrease in the output power associated with the second communication session between the first and second devices One method. This can help ensure the use of optimal power and thus save power.

Another change associated with a communication session is the data transfer rate. In some groups of embodiments, a data transfer rate associated with the second communication session is adjusted based on a perceived proximity between the first object and the near field communication module. When the first object is brought close to the NFC module, the rate at which data is sent between the first and second devices via the second communication session can increase or decrease as required. Just as an example, if the first object is adjacent to the NFC module, this excellent configuration Let the data transmission between the first and second devices be performed at a higher rate, which can point out that the first and second devices are physically and can support a faster connection than the others. Way to configure.

Once the first object falls into the actuation area of the near field communication module, it will want to investigate the first object to verify its existence. In some groups of embodiments, a status check signal is sent on the near field communication link to confirm that the first object falls within the actuation area of the near field communication module. In some groups of embodiments, the status check signal is sent periodically. The first object may have been removed from the initial entry into the activation area, and thus the specific configuration provides a method of checking for such events, so that the second communication session can be ended or changed as needed.

In some cases, a device can be connected to another via a communication session, as long as the two devices support appropriate technologies and protocols. In some groups of embodiments, a compatibility check signal is sent by the near field communication link to confirm that the first and second objects support the different second channel.

In some groups of embodiments, an object identification check signal is sent on the near field communication link to confirm an identification (identity) of the first object, and the second communication channel only works if the first object It is activated only when the recognition is approved. By confirming the identification of the first object, an additional level of protection is given to the devices. It may be advantageous to check the identification at a later point in time to ensure that the object is still its claimant, and therefore in certain groups of embodiments, an object identification check signal is tied to the near field communication link Send to confirm the first object's status when the second communication channel is activated Recognition.

Similar to checking the identification of the object as discussed above, it may also be advantageous to confirm the identification of the NFC module to which the object communicates for the object. In some groups of embodiments, a near field communication module identification check signal is sent on the near field communication link to confirm the identification of the near field communication module, and the second communication channel will only be It is activated when the identification of the near field communication module is approved. It would also be advantageous to check the identification at a later point in time to ensure that the NFC module is still its claimant, and therefore in some groups of embodiments, a near field communication module identification check signal is Send in the near field communication link to confirm the identification of the near field communication module when the second communication channel is activated.

In some groups of embodiments, the second communication dialog has a higher security level than other communication links on the second channel. By ensuring that the object is close to the NFC module, functions that are available in the second communication session and require an increased level of security can be enabled because it is more difficult to obtain access to a malicious entity physically The second communication dialogue.

The near-field communication link is used to establish a connection dialog with a different second channel type in a selected communication protocol, wherein the connection dialog on the different second channel can be opened, allowing no access to a third party Restrict access. However, in certain sets of embodiments, the second communication session includes an encrypted connection between the first and second devices. The independent NFC communication session is advantageously used to securely exchange the parameters required to establish an encrypted connection between the two devices. In some groups of embodiments, the encrypted connection utilizes an Advanced Encryption Standard (AES) cipher. In some further In an embodiment of the group, the AES cipher includes a stream cipher. In some examples, the AES cipher operates in a counter mode. In some examples, the encrypted connection includes a cipher block link message verification code (CBC-MAC). Combining the counter mode operation provided by AES and a CBC-MAC in this technical field is usually expressed as a "counter with CBC-MAC" or "CCM" mode. In order to initiate encrypted communication using AES-CCM, these devices must exchange two of the following: session key diversification parameters (SKDm, SKDs) and initialization vectors (IVm, IVs).

The protocol used to achieve AES-CCM enabling communication involves first initiating a pairing request in two directions on the different second channel before performing a confirmation value exchange via the different second channel, and finally passing through NFC performs a random value exchange. The random values are exchanged via NFC, because the specific transaction key (STK) used by the different second channel typically utilizes the random values, and therefore it is not possible to transmit them via the channel in which they are to be used. safe.

Establishing an encrypted connection between these devices involves an interrogator device, which issues an interrogation to a responder device, and requests a predetermined response to be sent back by the interrogator device before any connection will be allowed. In some groups of embodiments, one or more query response parameters are automatically sent on the first communication channel or the second communication channel.

The response sent from the response device to the interrogation device will be sent on the different second channel. In some groups of embodiments, a near field communication link is used to send a response to a cross-examination in the second communication session. By sending the response on the near field communication link, the third party It will be more difficult to eavesdrop and restore responses that would lead to reduced security.

Encrypted communication between devices typically requires the devices to share a secret key in order to prevent third parties from being able to access the content of the data transmitted via the encrypted connection. In some groups of embodiments of the present invention, the method includes generating a first encryption key. Once the encryption key is generated, it can be used to encrypt and decrypt the data transmitted on the encrypted connection. Those who are familiar with this technology will realize that this encryption key is not necessarily a single key, and can include private and public key pairs for the public key encryption architecture known in the field itself. Used.

Once the encryption key(s) are generated, they can be used to encrypt and decrypt all communications between the devices from this moment on. However, in some sets of embodiments, the method includes transmitting a further encryption key over the encrypted link. In some groups of embodiments, the further encryption key is transmitted periodically. In some groups of embodiments, the further encryption key is transmitted on demand. Although further keys may be used for different purposes, changing the (e.g.) action key for a specific encrypted communication link at future intervals can be achieved by ensuring that no specific key is used for extended periods of time. Time to improve safety.

Although the first object may be an independent object such as a token or a keybag, in some groups of embodiments, the first device includes the first object. In these embodiments, the first device must be brought close to the near field communication module to establish a communication session via the second different channel based on the second device.

Similar to the embodiment outlined above, the near field communication module can It is an independently operated device that enables communication between the first and second devices. However, in some groups of embodiments, the second device includes the near field communication module. The first device can be, for example, a tablet computer, a smart phone, or a watch with NFC compatibility. In these embodiments, the first object must be brought close to the second device in order to establish a communication session via the second, different channel with the first device.

Those skilled in the art will appreciate that the present invention can be used to establish a communication session on any communication medium known in the art. However, in a preferred embodiment, the second channel is wireless. In a particularly preferred embodiment, the second channel is selected from one of the group consisting of Bluetooth, Bluetooth low energy, wireless local area network, and Zigbee. For example, in order to send files such as digital photos, a user who wishes to connect his Bluetooth-enabled smartphone to a similar device belonging to his friend can bring these two devices closer to the other, A near field communication link is established, which is then used to perform a Bluetooth pairing operation between the devices.

When viewed in a further aspect, the present invention extends to a system comprising a first device and a second device, which is configured to: when a first object is brought into the actuation area of a near field communication module , Establish a near field communication link between the near field communication module and the first object; send a control signal from the near field communication module to at least one of the first and second devices to Initiate a second communication session between the first and second devices via a different second channel; in the second communication session, the first device and the second device Data is transferred between; and if the first object moves away from the actuation area, the second communication session is ended.

When viewed from a further aspect, the present invention extends to a near field communication module, which is configured to create a connection with the first object when a first object is brought into the coordinated area of the near field communication module Near field communication link; sending a control signal to at least one of a first device and a second device to initiate a second communication between the first and second devices via a different second channel Dialogue; and if the first object moves away from the actuation area, the second communication dialogue is ended.

When viewed from a further aspect, the present invention extends to a device including a near field communication module, which is configured to create a connection with the first object when a first object is brought into the coordinated area of the module A near field communication link; sending a control signal to initiate a second communication dialogue between the device and a further device via a different second channel; and if the first object moves away from the actuation area , The second communication dialogue is ended.

<p>102, 104, 202, 216device</p><p>106, 110, 206, 210NFC module</p><p>108, 112, 208, 212WLAN module</p><p>114, 116, 214Control signal</p><p>118, 218, 710NFC communication link</p><p>120,220WLAN communication dialogue</p><p>204, 704NFC unit</p><p>402, 404, 806Smartphones, devices</p><p>406, 808NFC connection</p><p>408Bluetooth connection</p><p>506,606Distance</p><p>508,608Proximity threshold</p><p>510Transmission power</p><p>512, 612Initial time</p><p>514, 516Transmit power level</p><p>518, 520, 618, 620time</p><p>610, 614, 616Data rate</p><p>702, 802(desktop) computer</p><p>706AUnconnected symbol</p><p>706BConnected symbol</p><p>708NFC token</p><p>804Network storage device</p><p>810WLAN, secure communication link</p>

Some embodiments of the present invention will now be described by referring to the accompanying drawings by way of example only. In the accompanying drawings: Figure 1 shows an embodiment of the present invention, in which two devices communicate via NFC. In order to establish a second communication session through a wireless channel; Figure 2 shows an embodiment of the present invention, in which an NFC-enabled first device is brought close to an NFC unit to establish a wireless connection with a second device Communication dialogue; Figures 3A and 3B show an embodiment of the present invention, in which two NFC-enabled smart phones are brought close to the other to establish a Bluetooth connection; Figure 4 shows an embodiment of the present invention The transmission power of a proximity function; Figure 5 shows the transmission data rate of a proximity function for an embodiment of the present invention; Figures 6A and 6B show an embodiment of the present invention, in which an NFC key bracelet is used Enable a WLAN connection on a computer; and FIG. 7 shows an embodiment of the present invention, in which an NFC-enabled smart phone is used to enable secure communication with a network storage device.

FIG. 1 shows an embodiment of the present invention, in which two devices 102 and 104 communicate through NFC to establish a second communication session through a wireless channel. The first device 102 includes a first NFC module 106 and a first WLAN module 108. The second device 104 includes a second NFC module 110 and a second WLAN module 112.

The first NFC module 106 and the first WLAN module 108 communicate with each other through a series of control signals 114. Similarly, the second NFC module 110 and the second WLAN module 112 communicate with each other through a series of control signals 116.

When the devices 102, 104 are brought close enough to each other so that they are in the NFC activation area (not shown), an NFC communication link 118 is established between them. The NFC modules 106, 110 send control signals 114, 116 to their individual WLAN modules 108, 112 in order to instruct them to initiate a WLAN communication session between the two devices 102, 104. Then, the data 120 is transmitted between the devices 102 and 104 through the WLAN communication system.

If the devices 102 and 104 are separated so that they are no longer within the range of the NFC activation zone, the NFC 118 and WLAN 120 communication session is terminated.

2 shows an embodiment of the present invention, in which an NFC-enabled first device 202 is brought close to an NFC unit 204 to establish a wireless communication session with a second device.

In this particular embodiment, the first device 202 again includes an NFC module 206 and a WLAN module 208. The first NFC module 106 and the first WLAN module 108 communicate with each other through a series of control signals 114.

The second device 216 includes a WLAN module 212. An independently operated NFC unit 204 includes an NFC module 210. Note that there is no control signal sent between the second device and the NFC unit here because they are independent devices.

When the first device 202 and the NFC unit 204 are brought into each other's NFC activation area, an NFC communication link 218 is established between the first device 202 and the NFC unit 204. Once the link 218 is established, the NFC module 206 sends a control signal 214 to the WLAN module of the first device 208 to instruct it to start establishing a WLAN communication session with one of the second devices 216. Then, data is transmitted between the first and second devices 202, 216 through a WLAN communication session 220.

If the first device 202 and the NFC unit 204 are separated, the NFC 218 and the WLAN 220 communication session is terminated, so the connection between the first and second devices 202 and 216 is cut off.

Figures 3A and 3B show an embodiment of the present invention, in which two NFC-enabled smart phones are brought close to the other to establish a Bluetooth connection.

3A, the two smart phones 402, 404 are equipped with NFC and Bluetooth modules (not shown). The smart phones 402 and 404 are separated far enough so that they do not currently affect each other.

Referring to FIG. 3B, after some time, the two smart phones 402, 404 are brought close enough to each other to establish an NFC connection 406 between them. The NFC connection 406 is then used to exchange authentication data necessary to establish a Bluetooth connection between the devices. Such verification data may include a challenge-response structure, in which a first of the two devices issues an issue and a "cross-examination" to the other device. The interrogation usually includes a series of randomly generated Bit. Then, the second device sends the randomly generated bit containing the string and one of its addresses in plaintext through a hash function known in the field itself, and then sends the resulting hash value back to the first device . Because the key used to generate the hash values is shared among trusted devices, and the first device knows the address of the second device, it also generates a hash function in the same way. The first device can then check its area Whether the domain hash value matches the value received from the second device, and if so, allow the connection. Of course, the second device can also verify the first device to achieve manual verification as usual in the encryption field.

Once the devices have authenticated another device, a Bluetooth connection 408 is established between the first and second devices 402,404. The NFC connection 406 can then be used for Secure Simple Pairing (SSP) as defined in the Bluetooth specification to exchange a new key between the devices to provide an encrypted communication link. Bluetooth version 4.0 supports Advanced Encryption Standard (AES), which typically operates in the AES-CCM mode, which is a symmetric encryption protocol (that is, the same key is used for both encryption and decryption). This Bluetooth connection 408 will then provide encrypted communication between the first and second devices 402, 404. As long as the Bluetooth connection 408 is still active, the first and second devices 402, 404 can periodically exchange encryption keys for future use. In order to establish encrypted communication using AES-CCM, these devices exchange: master and slave dialogue key diversification (SKDm, SKDs) parameters and master and slave initialization vectors (IVm, IVs).

Then, this configuration uses the existing key or alternatively a new key to allow the encrypted conversation to be updated. When a new key is used, the verification or pairing procedure using NFC is repeatedly executed.

This connection will continue until the NFC connection 406 is terminated by physically separating the devices beyond the NFC activation zone (not shown), or until the Bluetooth connection 408 is manually terminated by the user.

Figure 4 shows Bluetooth transmission power and distance versus time for an embodiment of the present invention. The distance between two NFC-enabled devices is shown as The solid line 506, a proximity threshold is shown as a dotted dashed line 508, and the transmission power is shown as a dashed line 510.

At an initial time 512, the devices are far enough apart, and the distance 506 between them is greater than the proximity threshold 508. The devices transmit data to each other at a higher transmit power level 514.

Then, the two devices are brought close to each other until the time 518 at which the distance 506 between the two devices is brought below the proximity threshold 508. At this point 518, the devices are determined to be close enough to require less power to successfully send data via the Bluetooth communication link, and thus the transmission power 510 is reduced from a higher transmission power level 514 to a lower transmission The power level is 516. Then the devices will remain fixed from time 520 forward and fall within the NFC activation range.

Figure 5 shows Bluetooth data rate and distance versus time for an embodiment of the invention. The distance between two NFC-enabled devices is shown as a solid line 606, a proximity threshold is shown as a dotted dashed line 608, and the data rate is shown as a dashed line 610.

At an initial time 612, the devices are separated far enough, and the distance between them is greater than the proximity threshold 608. The devices transmit data to each other at a lower data rate 614.

Then, the two devices are brought close to each other until the time 618 when the distance between the two devices is brought below the proximity threshold 608. At this point, the devices are determined to be close enough, the data is sent via the Bluetooth communication link at a higher rate without unacceptable errors, and thus the data rate 610 increases from the lower data rate 614 to a lower data rate. high The data rate is 616. Then the devices will remain fixed from time 620 forward and fall within the NFC activation range.

FIG. 6A shows an embodiment of the present invention, in which an NFC key bracelet is used to enable a WLAN connection on a computer. A desktop computer 702 is connected to an NFC unit 704, which is used to selectively enable or disable the WLAN function of the computer 702.

This system is particularly useful for providing parental control to prevent children from accessing the Internet without supervision. In order to access the Internet via the WLAN network, an NFC token is required, which can only be owned by a responsible adult. In FIG. 6A, the token will not be presented and therefore the NFC unit 704 prevents the computer 702 from using the WLAN, as illustrated by the unconnected symbol 706A displayed on the screen.

Referring to FIG. 6B, the individual who owns the NFC token 708 has decided to enable the Internet capabilities of the computer 702. The NFC token 708 is located on the NFC unit 704 and falls within its activation area, thereby enabling an NFC communication link 710. Once the NFC unit 704 has verified the NFC token 708, a control signal is sent to the computer 702 to enable the WLAN capability and thereby allow the user to access the Internet for display on the screen The connected symbol 706B is exemplified. Once the NFC token 708 is removed from the activation area of the NFC unit 704, the WLAN capability will be disabled again, and the state of the computer will be restored to the state described above with reference to FIG. 6A.

FIG. 7 shows an embodiment of the present invention, in which an NFC-enabled smart phone is used to enable secure communication with a network storage device. A desktop computer 802 series is configured to transfer data via WLAN810 Send to and from a network storage device 804. In order to avoid unauthorized access to sensitive data stored on the network storage device 804, an authenticated users NFC-enabled smartphone 806 must be brought to the activation area of an NFC module in the computer 802 Inside.

Once the smart phone 806 is in the activation area of the computer 802, a verification procedure is implemented via the NFC connection 808 in order to establish a secure communication link 810 with the network storage device 804. All data transmitted through the secure communication link 810 will be encrypted to ensure that the content is not usable by unauthenticated third parties. The secure communication link 810 only exists when the NFC connection 808 continues to operate, and therefore moving the smart phone 806 from the NFC activation zone causes the secure communication link 810 to be terminated immediately.

Therefore, it can be seen that a wireless communication system has been described in which NFC can be used to enable or modify the nature of the wireless communication. Although the specific embodiments have been described in detail, those skilled in the art will appreciate that many changes and modifications are possible using the principles of the present invention presented herein.