Methods and apparatus for conveying a nonce via a human body communication conduit

1. A data processing system with support for secure communications, the data processing system comprising:

a processing element;

a machine accessible medium responsive to the processing element; and

data in the machine accessible medium which, when accessed by the processing element, implements a human body nonce (HBN) module that enables the data processing system to perform operations as a first device, the operations comprising:

dynamically generating a human body nonce (HBN);

sending the HBN from the first device to a second device via a human body communication conduit (HBCC); and

after sending the HBN to the second device, using the HBN to establish security for an over-the-air (OTA) communication session between the first device and the second device.

2. A data processing system according to claim 1 , wherein the operation of using the HBN to establish security for an OTA communication session between the first device and the second device comprises:

deriving a key, based at least in part on the HBN; and

using the key to encrypt communications to be sent OTA between the first device and the second device.

3. A data processing system according to claim 1 , wherein the operation of dynamically generating the HBN at the first device comprises using a random number generator to generate the HBN.

4. A data processing system according to claim 1 , wherein:

the HBN comprises a first HBN;

the first device operates as a slave device;

the second device operates as a master device; and

the HBN module further enables the slave device to perform operations comprising:

after sending the first HBN from the slave device to the master device, receiving a second HBN from the master device at the slave device via the HBCC; and

after receiving the second HBN from the master device at the slave device, using the second HBN at the slave device to authenticate the master device.

5. A data processing system according to claim 1 , wherein:

the HBN comprises a first HBN;

the first device operates as a slave device;

the second device operates as a master device;

the HBN module further enables the slave device to receive a second HBN from the master device at the slave device via the HBCC, after sending the first HBN from the slave device to the master device; and

the operation of using the HBN to establish security for an OTA communication session between the slave device and the master device comprises using the first HBN and the second HBN to establish security for the OTA communication session.

6. A data processing system according to claim 5 , wherein the HBN module further enables the slave device to perform operations comprising:

after receiving the second HBN from the master device at the slave device via the HBCC, automatically determining whether the second HBN matches any prior HBN received by the slave device; and

in response to a determination that the second HBN matches any prior HBN, automatically performing at least one operation from the group consisting of:

aborting the pairing process; and

reverting to an OTA pairing protocol.

7. A data processing system according to claim 1 , wherein the HBN module further enables the first device to perform operations comprising:

receiving a connection invitation at the first device from the second device via the HBCC;

in response to receiving the connection invitation, prompting a user of the first device to indicate whether the first device should receive data from the second device; and

receiving user input indicating that the first device should receive data from the second device; and

wherein the first device performs the operations of dynamically generating the HBN and sending the HBN from the first device to a second device via the HBCC in response to receiving the user input indicating that the first device should receive data from the second device.

8. An apparatus with support for secure communications, the apparatus comprising:

a non-transitory machine accessible medium; and

data in the machine accessible medium which, when accessed by a processor of a first device, implements a human body nonce (HBN) module that enables the first device to perform operations comprising:

dynamically generating a human body nonce (HBN);

sending the HBN from the first device to a second device via a human body communication conduit (HBCC); and

after sending the HBN to the second device, using the HBN to establish security for an over-the-air (OTA) communication session between the first device and the second device.

9. An apparatus according to claim 8 , wherein the operation of using the HBN to establish security for an OTA communication session between the first device and the second device comprises:

deriving a key, based at least in part on the HBN; and

using the key to encrypt communications to be sent OTA between the first device and the second device.

10. An apparatus according to claim 8 , wherein the operation of dynamically generating the HBN at the first device comprises using a random number generator to generate the HBN.

11. An apparatus according to claim 8 , wherein

the HBN comprises a first HBN;

the first device operates as a slave device;

the second device operates as a master device; and

the HBN module further enables the slave device to perform operations comprising:

after sending the first HBN from the slave device to the master device, receiving a second HBN from the master device at the slave device via the HBCC; and

after receiving the second HBN from the master device at the slave device, using the second HBN at the slave device to authenticate the master device.

12. An apparatus according to claim 8 , wherein

the HBN comprises a first HBN;

the first device operates as a slave device;

the second device operates as a master device;

the HBN module further enables the slave device to receive a second HBN from the master device at the slave device via the HBCC, after sending the first HBN from the slave device to the master device; and

the operation of using the HBN to establish security for an OTA communication session between the slave device and the master device comprises using the first HBN and the second HBN to establish security for the OTA communication session.

13. An apparatus according to claim 12 , wherein the HBN module further enables the slave device to perform operations comprising:

after receiving the second HBN from the master device at the slave device via the HBCC, automatically determining whether the second HBN matches any prior HBN received by the slave device; and

in response to a determination that the second HBN matches any prior HBN, automatically performing at least one operation from the group consisting of:

aborting the pairing process; and

reverting to an OTA pairing protocol.

14. An apparatus according to claim 8 , wherein the HBN module further enables the first device to perform operations comprising:

receiving a connection invitation at the first device from the second device via the HBCC;

in response to receiving the connection invitation, prompting a user of the first device to indicate whether the first device should receive data from the second device; and

receiving user input indicating that the first device should receive data from the second device; and

wherein the first device performs the operations of dynamically generating the HBN and sending the HBN from the first device to a second device via the HBCC in response to receiving the user input indicating that the first device should receive data from the second device.

15. A method for enabling devices to communicate securely, the method comprising:

dynamically generating a human body nonce (HBN) at a first device;

sending the HBN from the first device to a second device via a human body communication conduit (HBCC); and

after sending the HBN from the first device to the second device, using the HBN to establish security for an over-the-air (OTA) communication session between the first device and the second device.

16. A method according to claim 15 , wherein the operation of using the HBN to establish security for an OTA communication session between the first device and the second device comprises:

deriving a key, based at least in part on the HBN; and

using the key to encrypt communications to be sent OTA between the first device and the second device.

17. A method according to claim 15 , wherein the operation of dynamically generating the HBN at the first device comprises using a random number generator to generate the HBN.

18. A method according to claim 15 , wherein:

the HBN comprises a first HBN;

the first device operates as a slave device;

the second device operates as a master device; and

the method further comprises:

after sending the first HBN from the slave device to the master device, receiving a second HBN from the master device at the slave device via the HBCC; and

after receiving the second HBN from the master device at the slave device, using the second HBN at the slave device to authenticate the master device.

19. A method according to claim 15 , wherein:

the HBN comprises a first HBN;

the first device operates as a slave device;

the second device operates as a master device;

the method further comprises, after sending the first HBN from the slave device to the master device, receiving a second HBN from the master device at the slave device via the HBCC; and

the operation of using the HBN to establish security for an OTA communication session between the slave device and the master device comprises using the first HBN and the second HBN to establish security for the OTA communication session.

20. A method according to claim 19 , further comprising:

after receiving the second HBN from the master device at the slave device via the HBCC, automatically determining whether the second HBN matches any prior HBN received by the slave device; and

in response to a determination that the second HBN matches any prior HBN, automatically performing at least one operation from the group consisting of:

aborting the pairing process; and

reverting to an OTA pairing protocol.

21. A method according to claim 15 , further comprising:

receiving a connection invitation at the first device from the second device via the HBCC;

in response to receiving the connection invitation, prompting a user of the first device to indicate whether the first device should receive data from the second device; and

receiving user input indicating that the first device should receive data from the second device; and

wherein the first device performs the operations of dynamically generating the HBN and sending the HBN from the first device to a second device via the HBCC in response to receiving the user input indicating that the first device should receive data from the second device.