Systems, methods and apparatuses for ensuring proximity of communication device

1. An apparatus for ensuring proximity of a computing device, comprising:

a communication port; and

a processor configured to:

obtain a nonce;

send a request that includes the nonce to the computing device via the communication port and start measuring a time interval;

receive a response from the computing device via the communication port and end measuring the time interval;

obtain a first parameter from the response;

receive a message from the computing device via the communication port, the message including a verification value and authenticating data to authenticate the verification value;

obtain, from the verification value, a second nonce, a second parameter, and a signed time period Td, wherein the time period Td represents a time period from the request being received at the computing device to the response being sent from the computing device;

compute a time difference ΔT between the measured time interval and the time period Td;

authenticate the verification value using the authenticating data and verify that a predefined portion of the request and a predefined portion of the response are included in the verification value;

determine that the second nonce and the nonce sent to the computing device are equal;

determine that the first parameter and the second parameter are equal; and

determine that the computing device is a trustworthy device upon the determination that the time difference ΔT is less than a predefined time threshold.

2. The apparatus of claim 1 , wherein the authenticating data is a message authentication code (MAC) and to authenticate the verification value comprises verifying the MAC using a secret key of the computing device.

3. The apparatus of claim 1 , wherein the processor is configured to send to the computing device smartcard Application Protocol Data Unit (APDU) requests and receive from the computing device APDU responses.

4. The apparatus of claim 3 , wherein one subsequent APDU response contains the time period Td representing a time period from a previous APDU request being received at the computing device to a previous APDU response being sent from the computing device.

5. The apparatus of claim 4 , wherein the previous APDU response contains a signature or message authentication code (MAC) as the authentication data.

6. The apparatus of claim 5 , wherein the signature or MAC is generated using a unique identifier of the previous APDU request.

7. A method for ensuring proximity of a computing device, comprising:

obtaining a nonce at an apparatus;

sending a request including the nonce to the computing device via a communication port of the apparatus and starting measuring a time interval;

receiving a response from the computing device via the communication port and ending measuring the time interval;

obtaining a first parameter from the response;

receiving a message from the computing device via the communication port, the message including a verification value and authenticating data to authenticate the verification value;

obtaining, from the verification value, a second nonce, a second parameter, and a signed time period Td, wherein the time period Td represents a time period from the request being received at the computing device to the response being sent from the computing device;

computing a time difference ΔT between the measured time interval and the time period Td;

authenticating the verification value using the authenticating data and verifying that a predefined portion of the request and a predefined portion of the response are included in the verification value;

determining that the second nonce and the nonce sent to the computing device are equal;

determining that the first parameter and the second parameter are equal;

determining that the computing device is a trustworthy device upon a determination that the time difference ΔT is less than a predefined time threshold.

8. The method of claim 7 , wherein the authenticating data is a message authentication code (MAC) and to authenticate the verification value comprises verifying the MAC using a secret key of the computing device.

9. The method of claim 7 , further comprising sending to the computing device smartcard Application Protocol Data Unit (APDU) requests and receiving from the computing device APDU responses.

10. The method of claim 9 , wherein one subsequent APDU response contains the time period Td representing a time period from a previous APDU request being received at the computing device to a previous APDU response being sent from the computing device.

11. The method of claim 10 , wherein the previous APDU response contains a signature or message authentication code (MAC) as the authentication data.

12. The method of claim 11 , wherein the signature or MAC is generated using a unique identifier of the previous APDU request.