Systems, methods and apparatuses for determining proximity of communication device
The systems, methods and apparatuses described herein provide a computing device configured for ensuring its proximity to a communication partner. In one aspect, the computing device may comprise a communication port and a processor. The processor may be configured to receive a request from the communication partner via the communication port, send a response to the request to the communication partner, generate a secondary value that includes a selected portion of the request and a selected portion of the response, generate authenticating data to authenticate the secondary value and send the generated secondary value and authenticating data to the communication partner via the communication port. In another aspect, the communication partner is configured to ensure proximity of the computing device.
1. A computing device for ensuring its proximity to a communication partner, comprising:
a communication port; and
a processor configured to:
receive a request from the communication partner via the communication port, wherein the request includes a nonce received from the communication partner;
send a response comprising a first value to the request to the communication partner;
determine a time period T d , wherein the time period T d represents a time period from the request being received at the computing device to the response being sent from the computing device;
generate a second value using an encryption algorithm and based upon the nonce received in the request, the first value sent in the response, and the time period T d determined by the computing device; and
send the second value to the communication partner;
wherein the proximity of the computing device to the communication partner is established after a determination by the communication partner that a time difference ΔT is less than a predefined time threshold, wherein ΔT is a time difference between a measured time interval and the time period T d sent by the computing device to the communication partner, and wherein the measured time interval represents the time interval from the message being sent from the communication partner to the response being received at the communication partner.
2. The computing device of claim 1 , wherein the second value includes a message authentication code (MAC) generated using a secret key of the computing device according to the encryption algorithm.
3. The computing device of claim 1 , wherein the time period from the request being received at the computing device to the response being sent from the computing device comprises a period from when the last bit of the request is received until when the first bit of the response is sent.
4. The computing device of claim 1 , wherein the request is a smartcard Application Protocol Data Unit (APDU) request and the response is an APDU response.
5. The computing device of claim 4 , wherein one subsequent APDU response contains a time period value representing a time period from a previous APDU request being received at the computing device to a previous APDU response being sent from the computing device.
6. The computing device of claim 5 , wherein the previous APDU response contains a signature or message authentication code (MAC).
7. The computing device of claim 6 , wherein the signature or MAC is generated using a unique identifier of the previous APDU request.
8. A method for ensuring proximity of a computing device to a communication partner, comprising:
receiving a request from the communication partner via a communication port of the computing device, wherein the request includes a nonce received from the communication partner;
sending a response comprising a first value to the request to the communication partner;
determining a time period T d , wherein the time period T d represents a time period from the request being received at the computing device to the response being sent from the computing device;
generating at the computing device a second value using an encryption algorithm and based upon the nonce received in the request, the first value sent in the response, and the time period T d determined by the computing device; and
sending the second value to the communication partner;
wherein the proximity of the computing device to the communication partner is established after a determination by the communication partner that a time difference ΔT is less than a predefined time threshold, wherein ΔT is a time difference between a measured time interval and the time period T d sent by the computing device to the communication partner, and wherein the measured time interval represents the time interval from the message being sent from the communication partner to the response being received at the communication partner.
9. The method of claim 8 , wherein the second value comprises a message authentication code (MAC) generated using a secret key of the computing device according to the encryption algorithm.
10. The method of claim 8 , wherein the time period from the request being received at the computing device to the response being sent from the computing device comprises a period from when the last bit of the request is received until when the first bit of the response is sent.
11. The method of claim 8 , wherein the request is a smartcard Application Protocol Data Unit (APDU) request and the response is a APDU response.
12. The method of claim 11 , wherein one subsequent APDU response contains a time period value representing a previous APDU request being received at the computing device to a previous APDU response being sent from the computing device.
13. The method of claim 12 , wherein the previous APDU response contains a signature or message authentication code (MAC).
14. The method of claim 13 , wherein the signature or MAC is generated using a unique identifier of the previous APDU request.