Data integrity for proximity-based communication

摘要

Methods, systems, and computer programs for trusted communication among mobile devices are described. In some aspects, an authentication value is generated at a first mobile device based on a message and a shared secret value stored on the first mobile device. In response to detecting proximity of a second mobile device, the message and the authentication value are wirelessly transmitted from the first mobile device to the second mobile device. In some implementations, the message and the authentication value can be wirelessly transmitted by a proximity-activated wireless interface, such as, for example, a Near Field Communication (NFC) interface.

主权项

1. A method for trusted communication among mobile devices, the method comprising:
accessing a message at a first mobile device, the message including user data, the first mobile device including at least a first wireless communication interface, a second wireless communication interface, and a user interface, and the first wireless communication interface is a proximity-activated wireless interface; establishing a shared secret value between the first mobile device and second mobile device via a short range wireless connection, the shared secret value established based in part on data transmitted from the first mobile device using the second wireless communication interface, wherein establishing the shared secret value between the first mobile device and the second mobile device further includes:
accessing, at the first mobile device, a certificate issued by a certificate authority, wherein accessing the certificate includes user interaction with the user interface; andderiving the shared secret at the first mobile device based on the certificate; accessing the shared secret value stored at the first mobile device; generating an authentication value at the first mobile device based on the user data and the shared secret value; detecting proximity of the second mobile device at the first mobile device; and in response to detecting proximity of the second mobile device, wirelessly transmitting the message and the authentication value from the first mobile device directly to the second mobile device, wherein the message and the authentication value are wirelessly transmitted using the first wireless communication interface, and wirelessly transmitting the message and the authentication value from the first mobile device directly to the second mobile device comprises wirelessly transmitting the message and the authentication value from a mobile telecommunication device directly to a tablet device by the proximity-activated wireless interface.