FR3157768A1 - Method for securing a wireless data exchange - Google Patents

Abstract

Method for securing a wireless data exchange The present description relates to a method for securing a wireless data exchange between a portable electronic device (100) and a communication device (200), comprising at least the following steps: - requesting (20) the data exchange between the portable electronic device (100) and the communication device (200); - detecting (30), by at least one vibration and/or deformation sensor (102) of the portable electronic device (100), at least one vibration and/or deformation of the portable electronic device (100) produced by a user of the portable electronic device (100); - validating (50) and implementing the data exchange (60) if the detected vibration and/or deformation corresponds to an expected vibration and/or deformation. Abstract: Fig. 1

Description

Method for securing a wireless data exchange

This description generally relates to the field of securing a wireless data exchange between a portable electronic device and communication equipment.

There are many situations where security concerns arise when exchanging wireless data between a portable electronic device and communications equipment.

A first example of such a situation is when a malicious person equipped with suitable equipment, for example a mobile phone and a specific application, attempts to retrieve confidential information from, for example, a contactless payment card. Such information retrieval is possible if the suitable equipment is placed a few centimeters from the contactless payment card.

A second example of such a situation corresponds to the case of a possible locking/unlocking by the simple presence or proximity of a key or electronic card with the locking/unlocking system (for example a connected door lock, a vehicle, etc.).

In such situations, wireless data exchange occurs without any verification or validation action by the user, which can be problematic.

There is a need to provide a method for securing a wireless data exchange between a portable electronic device and communication equipment making it possible to prevent unwanted data exchanges between the portable electronic device and the communication equipment.

One embodiment overcomes all or part of the drawbacks of known solutions and proposes a method for securing a wireless data exchange between a portable electronic device and communication equipment, comprising at least the following steps:

- request for data exchange between the portable electronic device and the communication equipment;

- detection, by at least one vibration and/or deformation sensor of the portable electronic device, of at least one vibration and/or deformation of the portable electronic device produced by a user of the portable electronic device;

- validation and implementation of data exchange if the detected vibration and/or deformation corresponds to an expected vibration and/or deformation.

According to a particular embodiment, the vibration and/or deformation sensor comprises at least one of the following components: resistive gauge, semiconductor gauge, piezoelectric gauge, force sensor, microphone, accelerometer.

According to a particular embodiment, the exchange of data between the portable electronic device and the communication equipment is carried out according to at least one of the following wireless communication protocols and/or at least one of the following wireless communication standards: NFC, Bluetooth, Z-Wave, Wifi, UWB.

According to a particular embodiment, the method further comprises, between the detection and validation steps, a step of transmission, from the vibration and/or deformation sensor to an electronic processing circuit of the portable electronic device, of a signal representative of the detected vibration and/or deformation, and the validation step comprises a comparison, by the electronic processing circuit, of the signal representative of the detected vibration and/or deformation with a signal representative of the expected vibration and/or deformation.

According to a particular embodiment, the signal representative of the expected vibration and/or deformation is stored in a memory of the portable electronic device or in a memory of the communication equipment or in a memory of other equipment configured to communicate at least with the portable electronic device and/or the communication equipment.

According to a particular embodiment, the method further comprises, before the request for data exchange between the portable electronic device and the communication equipment, a configuration step during which the signal representative of the expected vibration and/or deformation is obtained.

According to a particular embodiment, the expected vibration and/or deformation corresponds to at least one sequence of several successive vibrations and/or deformations of the portable electronic device.

According to a particular embodiment, the exchange of data between the portable electronic device and the communication equipment is validated and implemented if the detected vibration and/or deformation corresponds to the expected vibration and/or deformation and if the detected vibration and/or deformation is produced in contact with the communication equipment or near the communication equipment.

According to a particular embodiment, the portable electronic device corresponds to a mobile telephone or an electronic key or an electronic card or a connected object such as a watch, a ring, a ring or a bracelet.

According to a particular embodiment, the communication equipment corresponds to a payment terminal or a card reader or an electronic lock or a communication terminal.

These and other features and advantages will be set forth in detail in the following description of particular embodiments given without limitation in relation to the attached figures, among which:

- there FIG. 1 represents steps of a method for securing a wireless data exchange between a portable electronic device and communication equipment according to a particular embodiment;

- there FIG. 2 schematically represents a portable electronic device and communication equipment between which a method for securing a wireless data exchange according to a particular embodiment is implemented;

- there FIG. 3 represents a first example of application of a method for securing a wireless data exchange between a portable electronic device and communication equipment according to a particular embodiment;

- there FIG. 4 represents another example of application of a method for securing a wireless data exchange between a portable electronic device and communication equipment according to a particular embodiment.

The same elements may be designated by the same references in the different figures. In particular, the structural and/or functional elements common to the different exemplary embodiments may have the same references and may have identical structural, dimensional and material properties.

For the sake of clarity, only the steps and elements useful for understanding the described embodiments and examples have been shown and are detailed. In particular, different steps of the method for securing the exchange of data and different elements of the portable electronic device and the communication equipment are not detailed. Those skilled in the art will be able to produce these elements in detail from the functional description given here.

Unless otherwise specified, when two elements are connected together, this means directly connected without intermediate elements other than conductors, and when two elements are connected (in English "coupled") together, this means that these two elements can be connected or be connected by means of one or more other elements.

Unless otherwise specified, the expressions "about", "approximately", "substantially", and "of the order of" mean to within 10% or 10°, preferably to within 5% or 5°.

An example of a method for securing a wireless data exchange between a portable electronic device 100 and a communication device 200 according to a particular embodiment is described below in connection with the FIG. 1 . Furthermore, an example of a portable electronic device 100 and communication equipment 200 between which such a method is implemented are schematically represented in the FIG. 2 .

In the example described, the portable electronic device 100 may correspond to a mobile phone or an electronic key or an electronic card or a connected object such as a watch, a ring, a ring or a bracelet. In addition, the communication equipment 200 corresponds to electronic equipment suitable for communicating and exchanging data with the portable electronic device 100, for example a payment terminal, a card reader, an electronic lock, or even a communication terminal. Other types of portable electronic device 100 and/or communication equipment 200 may implement the data exchange security method described here.

As can be seen on the FIG. 2 , the portable electronic device 100 comprises several elements used to implement the method for securing a data exchange with the communication equipment 200.

The portable electronic device 100 comprises in particular a vibration and/or deformation sensor 102 making it possible to detect at least one vibration and/or deformation of the portable electronic device 100. A vibration of the portable electronic device 100 is for example obtained by producing a shock on the portable electronic device 100. A deformation of the portable electronic device 100 is for example obtained by stretching or compressing or even by pressing at least one part or one element of the portable electronic device 100.

According to an exemplary embodiment, the vibration and/or deformation sensor 102 comprises at least one of the following components: resistive gauge, semiconductor gauge, piezoelectric gauge, force sensor, microphone, accelerometer. Alternatively, the portable electronic device 100 may comprise a vibration and/or deformation sensor 102 of a type different from those given above.

In the exemplary embodiment described, the portable electronic device 100 also comprises an electronic processing circuit 104 configured in particular to process the measurement signals delivered by the vibration and/or deformation sensor 102 and which are representative of the vibrations and/or deformations detected by the sensor 102. The signal exchanges between the electronic processing circuit 104 and the vibration and/or deformation sensor 102 are represented symbolically, on the FIG. 2 , by a double arrow extending between these two elements.

In the exemplary embodiment described, the portable electronic device 100 also comprises a wireless electronic communication circuit 106 allowing the portable electronic device 100 to carry out a wireless data exchange with the communication equipment 200. The portable electronic device 100 and the communication equipment 200 are for example configured to communicate with each other according to at least one of the following wireless communication protocols and/or at least one of the following wireless communication standards: NFC (Near-Field Communication), Bluetooth, Z-Wave, Wifi, UWB (Ultra WideBand). Other protocols and/or other communication standards may be used for the data exchanges between the portable electronic device 100 and the communication equipment 200. The protocol and/or the communication standard used for the data exchanges between the portable electronic device 100 and the communication equipment 200 may depend in particular on the applications for which they are used. The signal exchanges between the circuits 104 and 106 are represented symbolically, on the FIG. 2 , by a double arrow extending between these circuits. In addition, the data exchanged between the portable electronic device 100 and the communication equipment 200 are also symbolically represented by a double arrow on the FIG. 2 .

An example method for securing a wireless data exchange between the portable electronic device 100 and the communication equipment 200 is described below.

According to a particular embodiment, this method comprises a configuration or enrollment step 10, during which a signal representative of at least one expected vibration and/or deformation is obtained. This signal is for example obtained by asking the user of the portable electronic device 100 to carry out a sequence of several successive vibrations and/or deformations of the portable electronic device 100. Such a sequence may have a distinctive character corresponding for example to the frequency and/or the intensity and/or the regularity with which the vibrations and/or the deformations are carried out, and/or to the duration(s) between the successive vibrations and/or deformations.

Alternatively, it is possible that the signal representative of at least one expected vibration and/or deformation corresponds to a signal representative of a single vibration and/or deformation of the device 100.

According to a particular embodiment corresponding to the configuration visible on the FIG. 2 , the signal representative of at least one vibration and/or an expected deformation is stored in an internal memory 108 of the portable electronic device 100. Alternatively, it is possible for this signal to be stored in a memory of the communication equipment 200, or in a memory of another equipment configured to communicate at least with the portable electronic device 100 and/or the communication equipment 200 (for example a server of a bank, in the cloud, a home network server, a terminal of a vehicle, etc.).

The method then comprises a step 20 of requesting, or initiating, the exchange of data between the portable electronic device 100 and the communication equipment 200. This exchange of data can be initiated for example by bringing the portable electronic device 100 sufficiently close to the communication equipment 200.

The method then comprises a step 30 of detection, by the vibration and/or deformation sensor 102, of at least one vibration and/or deformation of the portable electronic device 100 produced by the user of the portable electronic device 100.

In the particular embodiment described here, the signal representative of said at least one vibration and/or deformation of the device 100 (single or in the form of a sequence of several successive vibrations and/or deformations) detected by the sensor 102 is then transmitted from the sensor 102 to the electronic processing circuit 104 (step 40).

The method then comprises a step 50 validating the exchange of data between the portable electronic device 100 and the communication equipment 200 if the vibration and/or deformation detected by the sensor 102 corresponds to an expected vibration and/or deformation. In the exemplary embodiment described here, this validation or not of the exchange of data comprises a comparison, by the electronic processing circuit 104, of the signal representative of the detected vibration(s) and/or deformation(s) with the signal representative of the expected vibration(s) and/or deformation(s) stored in the memory 108. For example, if the sequence of vibrations and/or deformations carried out by the user corresponds to that expected and stored in the memory 108, the exchange of data can be validated. In the event of validation, during a following step designated by the reference 60 on the FIG. 1 , the data exchange is carried out between the portable electronic device 100 and the communication equipment 200.

As a variant of the method described above, it is possible for the data exchange to be validated if one or more additional conditions are met. For example, it may be required, to validate the data exchange between the device 100 and the equipment 200, that the vibration and/or deformation of the device 100 be produced in contact with the equipment 200 or in proximity thereto.

According to a first example of application of the method described above, the exchange of data to be validated may correspond to a contactless payment. In this case, the portable electronic device 100 may correspond to a mobile phone or a payment card, and the communication equipment 200 may correspond to a payment terminal. By implementing the previously described security method, the contactless payment is carried out only if the user produces a vibration and/or a deformation of the device 100, or if the user reproduces an expected sequence of vibrations and/or deformations of the device 100. In such an example of application, the confirmation of the payment by carrying out at least one vibration and/or deformation of the device 100 can make it possible to secure the payment and avoid payments not desired by the user. FIG. 3 schematically represents such a first example of application, in which the portable electronic device 100 corresponds to a payment card and the communication equipment 200 corresponds to a payment terminal. As can be seen in this figure, the validation of the data exchange is confirmed by the user when the latter deforms the payment card, for example by pinching it so that the card deforms. On the FIG. 3 , this deformation is symbolized by two arrows.

According to a second example of application of the method previously described, the exchange of data to be validated may correspond to a download of data from the equipment 200 to the device 100, or a transmission of data from the device 100 to the equipment 200, or an exchange of profiles or virtual business cards between the device 100 and the equipment 200, or a recovery of an encryption key such as a Wifi key, from the equipment 200 to the device 100. In this case, the device 100 may correspond to a mobile phone or a connected object, and the equipment 200 may correspond to a communication terminal. In such an example of application, the confirmation of the exchange by carrying out at least one vibration and/or deformation of the device 100 may make it possible to secure the exchange of data and the provision of sensitive data to unwanted devices.

According to a third example of application of the method previously described, the exchange of data to be validated may correspond to a locking or unlocking of a door, or a control of access to premises. In this case, the device 100 may correspond to an electronic key or an electronic card, and the equipment 200 may correspond to an electronic lock or a contactless reader. In such an example of application, the confirmation of access or locking/unlocking by performing at least one vibration and/or deformation of the device 100 may make it possible, for example, to prevent access to a person in possession of the device 100 but not knowing the sequence of vibrations and/or deformations required to validate this access. FIG. 4 schematically represents such an example of application, in which the portable electronic device 100 corresponds to a ring or a ring and the communication equipment 200 corresponds to an electronic lock. As can be seen in this figure, the validation of the data exchange is confirmed by the user when the latter carries out one or more vibrations of the ring (for example an expected sequence of vibrations) by tapping the finger on which the ring is located on the lock.

According to a fourth example of application of the method previously described, the exchange of data to be validated may correspond to a starting or stopping of a vehicle. In this case, the device 100 may correspond to an electronic key or an electronic card, and the equipment 200 may correspond to an electronic lock or a contactless reader. In such an example of application, the confirmation of the starting or stopping of the vehicle by the execution of at least one vibration and/or deformation of the device 100 may make it possible to limit the risks of theft of the vehicle.

According to a fifth example of application of the method previously described, the exchange of data to be validated may correspond to access to the home automation functions of a building.

Various embodiments and variations have been described. Those skilled in the art will understand that certain features of these various embodiments and variations could be combined, and other variations will occur to those skilled in the art.

Finally, the practical implementation of the embodiments and variants described is within the reach of the person skilled in the art from the functional indications given above.

Claims (10)

Method for securing a wireless data exchange between a portable electronic device (100) and communication equipment (200), comprising at least the following steps:

• request (20) for the exchange of data between the portable electronic device (100) and the communication equipment (200);
• detection (30), by at least one vibration and/or deformation sensor (102) of the portable electronic device (100), of at least one vibration and/or deformation of the portable electronic device (100) produced by a user of the portable electronic device (100);
• validation (50) and implementation of the data exchange (60) if the detected vibration and/or deformation corresponds to an expected vibration and/or deformation.

Method according to claim 1, wherein the vibration and/or deformation sensor (102) comprises at least one of the following components: resistive gauge, semiconductor gauge, piezoelectric gauge, force sensor, microphone, accelerometer. Method according to one of the preceding claims, in which the exchange of data between the portable electronic device (100) and the communication equipment (200) is carried out according to at least one of the following wireless communication protocols and/or at least one of the following wireless communication standards: NFC, Bluetooth, Z-Wave, Wifi, UWB. Method according to one of the preceding claims, further comprising, between the detection (30) and validation (50) steps, a transmission step (40), from the vibration and/or deformation sensor (102) to an electronic processing circuit (104) of the portable electronic device (100), of a signal representative of the detected vibration and/or deformation, and in which the validation step (50) comprises a comparison, by the electronic processing circuit (104), of the signal representative of the detected vibration and/or deformation with a signal representative of the expected vibration and/or deformation. Method according to claim 4, in which the signal representative of the expected vibration and/or deformation is stored in a memory (108) of the portable electronic device (100) or in a memory of the communication equipment (200) or in a memory of other equipment configured to communicate at least with the portable electronic device (100) and/or the communication equipment (200). Method according to one of claims 4 or 5, further comprising, before the request (20) for data exchange between the portable electronic device (100) and the communication equipment (200), a configuration step (10) during which the signal representative of the expected vibration and/or deformation is obtained. Method according to one of the preceding claims, in which the expected vibration and/or deformation corresponds to at least one sequence of several successive vibrations and/or deformations of the portable electronic device (100). Method according to one of the preceding claims, in which the exchange of data between the portable electronic device (100) and the communication equipment (200) is validated and implemented if the detected vibration and/or deformation corresponds to the expected vibration and/or deformation and if the detected vibration and/or deformation is produced in contact with the communication equipment (200) or in the vicinity of the communication equipment (200). Method according to one of the preceding claims, in which the portable electronic device (100) corresponds to a mobile telephone or an electronic key or an electronic card or a connected object such as a watch, a ring, a ring or a bracelet. Method according to one of the preceding claims, in which the communication equipment (200) corresponds to a payment terminal or a card reader or an electronic lock or a communication terminal.