DE10104409B4 - Connection selection via an optical code - Google Patents

Abstract

method for establishing a wireless connection between a cash dispenser and a mobile telephone, characterized in that the cash dispenser by means of a reading device an outside optical code visible on the mobile phone reads that the code or a value uniquely assigned to the code in the mobile telephone stored electronically, and when establishing the connection using this code is the identity the subscriber of the connection is secured, being for the wireless Connecting a near-field wireless network according to the Bluetooth standard, used becomes.

Description

The The invention relates to a device with which when building a wireless Connect the identity the participant is secured.

It it has been proposed to at least one in a cash dispenser Part of the interaction with the user via a mobile device. The data connection to the mobile device is preferably via a under the name 'Bluetooth' known interface for wireless radio transmission. The following is representative of a mobile device with processing capabilities and an interface for wireless data transmission a mobile phone with Bluetooth transceiver accepted.

in the Contrary to the wireless connection according to the IrDA standard, which with Infrared light works, a radio transmission is practically undirected. Therefore the Bluetooth interface provides a device identification so that targeted a connection to a device the desired Class can be done. By this method is in a workplace or in the domestic Area the problem of device identification as solved to watch.

at several similar devices however, there are other measures necessary.

From the DE 692 22 911 T2 is a method between a mobile telephone station and. a permanently connected telephone station, in which the telephone stations are provided with a bar code. When a user of the mobile station desires to redirect an incoming call to a nearby dedicated telephone station, the user reads the bar code of the telephone by activating a bar code reader located on the mobile telephone station. As a result, an identification of the telephone station is possible, but no data exchange between the mobile telephone station and the stationary telephone station.

In the DE 100 25 017 A1 a mobile phone is described, which is equipped with a bar code reader. This allows characters and texts that are encrypted as barcodes to be read by the mobile phone.

Searched However, this is a way for a data connection between a cash dispenser and a Mobile phone quickly and clearly an association between mobile and stationary Device too cause

The For this purpose, the invention uses an externally visible on the mobile device or displayed optical marking, preferably a bar code, which are read by a reader at an ATM can.

Further Features and advantages of the invention will become apparent from the following Description, which in conjunction with the accompanying drawings Invention explained with reference to an embodiment.

Summary the drawings

It shows

1 symbolically an arrangement in which the invention is used.

description an embodiment the invention

In 1 an arrangement is symbolized in which the invention is used.

A mobile device, here as a mobile phone 10 has an interface for a wireless connection, in particular a near-field radio network such as Bluetooth. This device is through an antenna 12 symbolizes. In a mobile phone therefore two wireless connections and two antennas are available; an unillustrated connection for mobile phones and those shown for the wireless network. Moreover, in modern radio telephones, neither antenna is designed as a rod antenna, so that this symbolization appears appropriate.

Furthermore, an optical code is attached to the mobile device, here as a barcode 14 shown on the side.

Furthermore, a stationary device 20 which also has an interface for a wireless connection that corresponds to that used by the mobile device and also by an antenna 22 is symbolized.

Furthermore, the stationary device has 20 via a scanning device 24 , with that, here through a ray of light 34 symbolizes the barcode 14 on the mobile device 10 is scanned.

In one embodiment of the invention, the code on the mobile device represents the network address of the mobile device. In network systems, it is common for each transceiver to have a unique address at the lowest level of the communication protocols, the 'media access' layer, which is therefore also known as the MAC address. Therefore, suitable software in the stationary device will establish a connection to this exact address after reading the optical code, thus ensuring the identity of the mobile device. To secure the identity of the stationary device, the mobile device may restrict connection establishment to being made directly to the MAC address without prior address discovery.

The Using the MAC address has the particular advantage that this is globally unique and therefore collisions are virtually completely excluded are. Alternatively, a network address can also be made up of other layers used, in particular an IP address, what with introduction of Version 6 of Internet protocols becomes practicable again.

If However, the encoding of the network address is not appropriate, You can also use any other code. The coding the network address may be particularly inappropriate then if either the network software is not or badly used supported or the barcode of the network address too much space on a small Mobile phone would claim or a passing on of this code for other reasons is not desired. For this purpose, a code can be used by means of a database is converted to the network address.

A Another alternative is the phone number of the owner to code. Also this code is sufficiently clear and less long. With a mobile phone, it can be useful anyway make the relatively long numbers machine-readable by sticker.

In these cases, where the code does not directly represent a network address as part of the connection setup this code transmitted and checked. there it does not matter which device sends the code and which compares it. This can both the the connection initiating device as well as the called device, the remote station, his. The code can be transmitted ready with the call or in the answer of the called device be included.

in the Bluetooth network are cryptographic measures for securing the traffic contain; the key management however, it is up to the application layers. Here is the code in the key management to get integrated. Becomes a random one Code used, this can easily be used to encrypt the Communication can be used and so on without further action already a high level Security against eavesdropping, Distort and pretension of false identity. Although this one session key not to be considered as secret, requires a more targeted Abuse a considerable effort, usually considered prohibitive high is. Of course Such a code should not be used to authenticate a payment serve.

Instead of from a random one Code can also be public key a key pair at asymmetric encryption encoded, even if this is associated with e.g. 1024 bits or 128 bytes longer than a V6 internet address is. Its use is justified if necessary from the added benefit that a conversation partner in a simple way so the public key for confidential hand over electronic communication can be. One variant uses a checksum, commonly called a 'fingerprint', of a public key, or a part of it and allows so the verification of a public key as an added benefit.

Becomes waived the added benefit, so may because of low exposure and the relatively low risk also a specially for this Case chosen key pair with low bit length from e.g. 64 bits corresponding to 22 decimal digits are selected, whose private part is stored in the mobile device. The stationary device wraps one new session key with the code read as public key and sends the result to the mobile device, which decodes the session key with it. These hints are only intended as an example for the integration of the read Codes in the key management serve.

The Length of the Codes and their degree of randomness is based on pragmatic criteria or normative specifications to choose be. Only four digits, especially the date of birth without Year, probably because of the likelihood of a collision occurring at the date of birth about 1:30, not be enough. Preference is therefore given to an already clear or quasi-unique label such as the phone number or passport number used become.

The invention has been illustrated by an example in which a mobile device carries the optical tag and a stationary device comprises the reader for the tag. This is usually useful if the number of mobile devices is much larger than the number of stationary devices. In addition, the power supply in a stationary device is easier. However, the invention also includes the reverse case where the tag is mounted on the stationary device and the optical reader is provided in the mobile device. Since, for example, self-service devices, eg ATMs, usually do not have a barcode scanner, the mobile device will include the reader here. A barcode can be easily attached to a machine of this type and possibly renewed.

Also can it for the acceptance be meaningful that the mobile device reads the address and establishes the connection on its own. In the event of Payment at a cash register is thus left to the shopkeeper, that the caused by this code Pay the right recipient reached. Here the code can also be particularly short, since only one small number of stationary devices must be distinguished.

at the case described above, one provided specifically for this case key for asymmetrical Verschüsslung, its public part on the mobile device The security of the identity lies in the fact that the stationary device is secure that can be mobile device is the one whose code was read. In the case of an ATM and from the perspective of its operators, this variant is preferable. In the last case shown, in which the reading device on the provided mobile device Inversely, therefore, the identity of the stationary device is secured. this could for cash registers the preferred expression be.

Suitable Low power bar code readers are well known especially remote controls for video recorders.

Of the For the sake of clarity, the invention was based on barcodes described as a preferred optical encoding. Of course they are other codes, e.g. OCR characters, also usable.

Claims (9)

A method for establishing a wireless connection between a cash dispenser and a mobile telephone, characterized in that the cash dispenser reads by means of a reading device visible on the outside of the optical cell optical code that the code or a code uniquely assigned value in the mobile phone is stored electronically, and when establishing the connection by means of this code, the identity of the subscribers of the connection is secured, using a near-field wireless network according to the Bluetooth standard for the wireless connection. The method of claim 1, wherein the read code the network address of the mobile phone is or the latter via a Database is determined from the read code. Method according to claim 2, wherein as code one of a Person assigned number, such as a telephone number, a passport number or date of birth, or part thereof. Method according to one of the preceding claims, wherein the code for the key management an encrypted Connection is used. The method of claim 4, wherein the on the mobile phone visible code the public Part of a key pair for asymmetrical encryption and whose secret part is stored in the cash dispenser is. The method of claim 5, wherein the cash dispenser a random one Session key with the code read, sends to the mobile phone and this the session key means reconstructed the stored secret part. Method according to one of the preceding claims, wherein the code is shown as a barcode. Cash dispenser with an interface for a wireless Connection, characterized in that the ATM is an optical Reading device includes and contains agents, in order to read a code with the optical reading device and by means of this code is the identity to secure a remote site of the connection, being for the wireless Connect a near field radio network is used according to the Bluetooth standard. Automatic cash dispenser according to claim 8, characterized in that that the read code is the network address of the remote station or the latter via a Database is determined from the read code.