WO2019220222A1

WO2019220222A1 - A wifi authentication sensor to regulate file access and use of a computing device

Info

Publication number: WO2019220222A1
Application number: PCT/IB2019/052162
Authority: WO
Inventors: Terrence Keith Ashwin
Original assignee: Terrence Keith Ashwin
Priority date: 2018-05-14
Filing date: 2019-03-18
Publication date: 2019-11-21
Also published as: ZA201803144B

Abstract

A wireless communication identification sensor for regulating the access of files and use of computing device functionality comprising a wifi BSSID combined with programmable SSID data, wherein the BSSID in combination the programmable data is configurable to identify the sensor, which identification is required to access files on a data processor, in use. The sensor uses a software application enables the user to input and store personal identifying information on the user sensor as an aspect of the SSID data broadcast, alternately a user may input said information on a remote server which interacts with the software application and communicates the user information when appropriately accessed.

Description

A WIFI AUTHENTICATION SENSOR TO REGULATE FILE ACCESS AND USE OF A

COMPUTING DEVICE

The present invention relates to a wifi authentication sensor for regulating file access and the use of a computing device functionality by authenticating a user identity.

BACKGOUND

The use of wireless communication systems such as wifi and blue tooth routers are well known. Similarly, wireless communication devices which are enabled to report the occurrence of a notifiable event through the internet are well known. By example, a suitably enabled tracking device may be programmed to transmit a GPS coordinate notification to an internet server upon a vehicle being involved a collision. The event is logged, stored on the server and the event data being individually transmitted as a report at a later point to a user, again through internet and GSM communication.

Of particular relevance to the invention is the ability to detect the unique identity of a wireless communication device by other wireless communication devices regardless of whether the devices are a known or affiliated with one another. In this regard, the invention pertains to the use of a BSSID (basic service set identifier) associated with wifi communication devices as a unique device identification means. As is known to those skilled in the prior art - every wifi engine is manufactured with a unique BSSID at time of manufacture and the BSSID is fixed and non-changeable. Accordingly, when the wifi engine of a wireless communication device broadcasts its identification data - the BSSID is broadcast and readable by any suitably enabled device. As the BSSID of a wifi engine is detectable without authentication - the unique BSSID can be even be detected by unaffiliated or unpaired wifi devices thus making identification possible. It would thus be beneficial to create a method and apparatus for using the BSSID of a wifi communication device for at least one of: securely communicating data; uniquely identifying and tracking the user of such device; authenticating the identity of a device user; enabling access of a device user; regulating use of electronic devices; regulating use of software; activating device or software functionality; use for emergency purposes.

The invention seeks to provide a suitable I/O devices for use with a wireless network communication system that at least partially ameliorates the abovementioned disadvantages associated with the prior art.

The term I/O refers to devices being input-output enabled, whereby they can transmit data and process instructional data received and transmitted.

SUMMARY OF INVENTION

According to the invention there is provided a wireless communication identification sensor comprising a wifi BSSID combined with programmable SSID data, wherein the BSSID in combination with the programmable data is configurable to identify the sensor. In use, the sensor is affiliated with a user whose identity and authority to enable computing device functionality is registered on a computing device affiliated database.

Conveniently the programmable data comprises an instruction data set, wherein a computing device with enabling software for analysing and processing the data set causes an activation, alternately deactivation of a function associated with the sensor. By example, the first three programmable characters of said programmable data when using enabling software to analyse and process the SSID data - result in the initiation of a message to be transmitted by the sensor. In the case of a performing a financial transaction using the sensor to identify the user - the activation of a sensor broadcasts an authentication notification which notification is automatically detected by financial transaction software which is tasked with processing the transaction.

Conveniently the sensor information is readable using a suitably enabled software application on a wireless communication device, wherein the software, once activated, searches for wifi networks resulting in sensors within wifi range being detected. The signal strength of the sensor relative to the wireless communication device is used to determine the location of the sensor, when using the enabling software.

Conveniently the software application, which when loaded on to a suitably enabled computing device, serves as the user interface to activate the sensor functionality. In particular, the software application may either pair with an external sensor, alternately, utilise its own hardware having BSSID and SSID and thereby enabling the computing device to act as a sensor of the invention.

Preferably, the software application enables the user to input and store personal identifying information on the user device, alternately on a remote server which has enabling software and hardware to interact with the software application and communicate the user information.

Conveniently the software application provides the user with a plurality of buttons, alternately tabs to activate a desired computing device functionality. By example, the software application display screen comprises a Accounting Files + "business name" tab; and an Online Shopping + "website name" tab. By pushing the desired tab - the sensor broadcasts an appropriate BSSID plus SSID data to enable completing the access of the relevant files or web browser functionality.

Conveniently when the computing device functionality is activated, the software application utilises the sensor GPS coordinates to transmit the appropriate notification to predetermined persons advising them of the functionality activation or transaction request.

Conveniently the sensor comprises event triggered programmable data. Accordingly, the programmable data broadcast with the BSSID comprises sensor environment information. By example, a user whose sensor comprises a biometric and GPS enabled sensor will broadcast user biometric information with a location of the sensor. Additionally, a plurality of sensors may be required within a predetermined distance of one another, alternately a wifi router processing the transaction to authenticate the transaction, whereby the wifi signal strength is used to measure proximity. Furthermore a movement behaviour pattern recordable by the sensor can be used as a trigger event for purposes of populating the SSID with sensor movement pattern authentication.

Conveniently sensors having varying functionality may be paired and their combined functionality usable by each individual sensor.

Conveniently where a plurality of sensors are connected, storage of event data may be stored on one or more of the sensors thereby enabling sharing of data storage generated from sensor activity. Alternately, data stored may be duplicated on one or more connected sensors thereby serving as a data back-up means. Alternately, in the case of multiple users authentication required for a financial transaction or access to files on a computer or server - the proximity of paired individuals to one another and the recording of group data on each paired sensor enables the tracking of each individual whilst in contact with the group. Where multiple user authentication is required - sensor movement pattern authentication relevant to participating sensors may be utilised as a trigger event for populating the SSID data broadcast. Conveniently, the hotspot sensor comprises a sensor for detection of at least one of moisture, pressure, light, impact, temperature, biometrics, altitude, chemical composition, sound, wherein a predetermined sensor reading results in the activation, alternately deactivation of a sensor communication device function.

Conveniently, the sensor additionally comprises at least one of a GPS device, a speaker, a light, a vibration generator or an electrical shock generator which are activated in accordance with programmable parameters.

Conveniently a sensor notification is generated upon function criteria being met, wherein in addition to the sensor data being broadcast, a notification is sent to at least one of a predetermined telephone number, email or other communication destination (such as a whatsapp, website, hashtag, social media profile) using a suitably enabled communication device such as a phone, tablet or PC having GSM or wifi capabilities.

Conveniently, the sensor is enabled to operate as either

- a client via a suitably enabled wifi router, pc or suitable electronic communication device, whereby data stored on the device is accessible by a suitably enabled and linked wireless communication device; or

- a Webserver wherein the device comprises RAM for storage of user data and whereby the data is accessible by using a web browser of a paired wireless communication device.

Conveniently the sensor comprises a signal strength detector thereby enabling at least one of directional and distance tracking of the device while in range of one or more wifi routers. In this way, the device can activate predetermined notifications, alternately cause the activation of predetermined functions upon the movement pattern of the device. By example, a user attempting to complete a financial transaction or access to files on a computer or server will result in the activation of a notification to the phone of a bank account listed user, alternately to an authorising server. Additionally, the notification may comprise a GPS location, visual details of the wearer being viewable on monitoring devices of the account listed user.

Conveniently the sensor comprises at least two modes of functionality, wherein the sensor "bleeps" or remains in a dormant sleep mode. The frequency of audible bleeps are variable in accordance with activation parameters.

Conveniently the sensor comprises data fields which are editable and where data is uploadable onto the sensor and accessible through a web browser. Accordingly, a third party user does not require specialised software to interrogate, alternately edit the data on the device.

Conveniently the editable data comprises at least one of text, images or audio files which data evidences actions performed on the sensor, alternately for the user associated with the sensor.

Conveniently access to data or modification thereof is limited in accordance with user access criteria, which criteria are programmable.

Conveniently the sensor is programmable whilst operative, wherein programming instructions are transmitted to the sensor from a remote communication device such as a computer or phone having enabling software. This is typically transmitted using a wireless communication protocol such as wifi, Bluetooth or gsm.

Conveniently the sensor is programmable to switch at least part of its functionality on or off; and where the functionality is enabled or restricted for a limited duration. By example, where the hotspot is turned off, alternately the signal strength is below a predetermined level - the device utilising the hotspot for function activation is restricted from such functionality such as access to computer files or performing a financial transaction. Conveniently input and output data may be communicated to and from the sensor via a sensor specific data address such as an cellular phone number, IP address, IPv6 address, MAC Address, or an equivalent address format that will identify a specific sensor or virtual address where data can be transferred via the Internet or other wireless communication protocol.

Conveniently a plurality of sensors may be paired, wherein sensor activity or a lack thereof of a paired sensor is communicated to other paired sensors. Accordingly, non-responsiveness of a paired sensor will result in a functioning paired sensor - transmitting a fault report in accordance with the sensor's fault detection transmission criteria.

Conveniently the sensor has 'store and forward' capability, wherein transmission of sensor based data results in deleting of the storage cache on the sensor, which is typically deleted on a first in/first out basis, although deletion criteria may be modified in accordance with user preferences.

Conveniently the invention provides for a one-step authentication process comprising the steps of a computing device transmitting an authentication notification to the device associated with the sensor hotspot upon a user seeking to enable functionality of said computing device, enabling software detecting the information required to authenticate the enabling of the computing device functionality such as a SMS including a One Time Pin (OTP), whereafter the authentication information such as an OTP is included in the SSID broadcast, which broadcast is detected and communicated to the computing device, alternately a remote server for processing and enabling the required functionality of the computing device and the information is used to enable computing device functionality without further actions required by the user. Accordingly, once the sensor hotspot is activated, the OTP sent to authorise and enable functionality such as file access - is automatically supplied to the computing device, alternately a remote server tasked with managing functionality of the computing devie without the user needing to input said data into a functionality enabling interface such as a file access app.

In accordance with another aspect of the invention there is provided a method of enabling computing device functionality in the absence of data transfer between two sensors of the invention, comprising the step of activating a hotspot of a first sensor, the first sensor and a second sensor affiliated with a computing device detecting each other by virtue of their respective SSID broadcasts; the SSID information broadcast resulting in an authentication of the user whereafter the computing device enables functionality in accordance with predetermined use criteria. By example, a user having a mid-level functionality access - will only be able to access mid-level security clearance files on the computing device, alternately the server linked to the computing device.

According to a further aspect of the invention there is provided a wireless communication identification sensor comprising a unique wireless identifier combined with programmable broadcast data, wherein the programmable data is configurable to identify the sensor.

Conveniently the sensor data comprises an instruction data set, wherein said data causes the activation, alternately deactivation of a function associated with the sensor.

Conveniently the wireless communication identification sensor having a unique identifier is enabled to perform functions and employ methods of use as they pertain to the aforementioned uses of a BSSID combined with programmable SSID data to identify the sensor

Further features, variants and/or advantages of the invention will emerge from the following non-limiting description of an example of the invention. DETAILED DESCRIPTION OF THE INVENTION

A wifi router comprises a unique BSSID in conjunction with a SSID which typically has 31 bytes of programmable characters. Wifi devices simply scan for the name allocated to a wifi device and not the BSSID. Upon further interrogation, the BSSID may be revealed although the BSSID is not replicable. In accordance with the invention, the characters of the SSID are used to either transmit information, alternately control the activation a desired functionality. By example, the initial 3 characters of a SSID are allocated to sending a message type, by example "@@@" results in a request to access files notification. The remaining characters pertain to information of the device affiliated with the user or information pertaining to the user. When used with a suitably enabled software application - the information contained in the SSID broadcast is processed in accordance with pre-programmed parameters and a desired function activated. A user scanning for wifi signals and having the software application of the invention installed onto their computing device - will be able to process and analyse the information contained in the SSID broadcast. The SSID broadcast and its analysis thereof is thus achieved without data transfer, rather via SSID broadcast and wifi receiver detecting the broadcast. As will be appreciated by those skilled in the art - a lack of data availability or connectivity will still enable line-of-site communication between a sensor and a computing device having the software application of the invention installed.

In accordance with the invention, upon activation of a hotspot of mobile phone having a sensor of the invention - the sensor is paired to and utilises the phone's wifi engine and BSSID and SSID. Accordingly, the activation of the hotspot results in the sensor BSSID and SSID being broadcast for detection by relevant communicating devices. Said broadcast is detected by a second sensor affiliated with a computing device which the user intends accessing and activating functionality such as file access or retrieval. This step of sensor detection and authentication is achieved without data transfer, in particular, it achieved by simply detecting SSID broadcasts and in some instances, modification of sensor SSID broadcast in response to response to third party sensor broadcasts detected. In one embodiment of the invention, activating the hotspot of a first sensor, results in a second sensor affiliated with a computing device detecting the hot spot sensor SSID broadcast. The hot spot SSID is used by the computing device to unlock files on the computing device. This authentication is done without the need of a user to input any verification data. Although, it will be appreciated that in a further embodiment of the invention - additional authentication such as user biometric data or a PIN may be required before accessing computing device files. Said additional verification input is performed by either following input prompts on the computing device which functionality is sought, alternately on the device associated with the hot spot. By example, the user may be requested to scan his fingerprints or retina using either a suitable biometric reader associated with the hot spot device or the computing device from which files are sought.

The SSID information broadcast thereby results in an authentication of the user whereafter the computing device enables functionality in accordance with predetermined use criteria. By example, a user having a mid-level functionality access - will only be able to access mid-level security clearance files on the computing device, alternately the server linked to the computing device.

As will be appreciated - the sensors of the invention enable computing device functionality to be enabled without data transfer. This is enabled due to the BSSID and SSID being broadcast whilst the wifi engine is operational. Any suitably enabled wifi reader is able to detect the presence and potentially the proximity of the wifi engine based on signal strength. The invention thus enables computing device functionality even when network connection problems are experienced by a computing device and a remote authentication server. As will be appreciated, the invention ameliorates the problems associated with data transfer, which is dependent on a data availability and internet connectivity; and wifi devices without access to data usage, which are unable to transfer data. In a another embodiment of the invention where multiple users are required for enabling computing device functionality - the proximity of paired individuals to one another and the recording of group data on each paired sensor enables the partial tracking of each individual whilst in contact with the group. By extension, alert notifications can be transmitted when a paired individual is no longer detectable, alternately when the individual sensor moves beyond an acceptable distance from the group of sensors which are required to enable computing device functionality. Accordingly, by interrogating one device - all participants in the area with device are recorded including when the devices were within range - this allows for confirmation whether all persons required to authorise the computing device functionality are accounted for.

In a preferred embodiment of the invention, the sensor has a unique wifi tag which is programmable to correspond with an object or person. In doing so, the object or person status is monitorable in accordance with the sensor capabilities. Sensor events may be transmitted to local server, alternately a cloud based server or a combination thereof. A MySQL database would typically be used to track and record sensor events. The sensor selects the destination to where specific event data must be transmitted thereby maintaining data confidentiality and preventing unauthorised interception by a non-authorised reader. Accordingly, the sensor may broadcast both restricted and unrestricted data in addition to being able to transmitted restricted confidential data to a server.

Input and output data may be communicated to and from the sensor via a sensor specific data address such as an IP address, IPv6 address, MAC Address, or an equivalent address format that will identify a specific device or virtual address where data can be transferred to on the Internet. Accordingly, it is possible to dial into the closed-loop wifi network server and provide output instructions to a specific sensor which in turn will result in the object functioning.

In accordance with another aspect of the invention, dormant wifi engines may be activated for a limited period of time as and when the sensor data is needed. Activation can be in response to a physical event which event is determined by a suitable sensor, such as an impact sensor, a time based event, proximity to a RFID type device resulting in the activation of the wifi engine from a sleep condition. This results in a prolonged battery life where the wifi engine does not utilise an external power supply.

The sensor comprises at least one environmental variation sensor for detecting environmental changes. These may include at least one of a thermostat sensor, impact sensor, light sensor, audio sensor, chemical composition sensor, electrical magnetic sensor, GPS sensor, altitude sensor or humidity sensor.

The sensor can itself directly communicate with a remote server data address and does not require a sensor login prior to receiving or transmitting data to and from the sensor.

The data transmitted by the sensor includes the sensor identification which may additionally include user information such as contact details, thereby allowing the recipient of the data transmitted from the sensor to contact the user.

The invention is not limited to the precise details described above. Modifications may be made and other embodiments developed without departing from the spirit of the invention. For example, data generated from sensor activity may be stored at least partially on the sensor itself - the sensor having data storage capacity. Further, where a plurality of sensors are connected, storage of event data may be stored on one or more of the sensors thereby enabling sharing of data storage generated from sensor activity. Alternately, data stored may be duplicated on one or more connected sensors thereby serving as a data back-up means. Still further, where a plurality of sensors are connected, input and output data may be jointly processed by the sensors to improve data processing abilities.

In this invention, the term BSSID may extend to any unique identifier whose unique identifier can be broadcast and wirelessly detected by a suitably enabled device. Additionally, a wireless communication device having a unique identifier in addition to a BSSID - interacts with one or more electronic communication devices by virtue of the unique identifier and/or the interaction of the unique identifier with the BSSID of the wireless communication device. By example, the unique identifier may be a mobile phone number, or IMEA number affiliated with a mobile phone or GSM modem. The method of broadcast may be any wireless protocol including wifi, gsm, Bluetooth.

The Summary of Invention and Claims forms an integral aspect of the description of the invention.

Claims

CLAIMS:

1. A wifi authentication sensor for regulating the use of the functionality of a computing device, the sensor comprising a wifi BSSID combined with programmable SSID data, wherein the BSSID in combination the programmable data is configurable to identify the sensor, which SSID is broadcast upon activation of the hotspot or enabling sensor wifi engine, in use.

2. The sensor as claimed in claim 1, having sensor data comprising an instruction data set, wherein a computing device with an enabling software application for analysing and processing the data set causes an activation, alternately deactivation of a function associated with the sensor upon predetermined sensor activation parameters being reached, in use.

3. The sensor as claimed in claim 2, wherein the software application enables the user to input and store personal identifying information on the user sensor as an aspect of the SSID data broadcast, alternately a user may input said information on a remote server which interacts with the software application and communicates the user information to when appropriately accessed.

4. The sensor as claimed in any one of claims 1 to 3 comprising a sensor for detection of at least one of moisture, pressure, light, impact, temperature, biometrics, altitude, chemical composition, sound, wherein a predetermined sensor reading results in the activation, alternately deactivation of a sensor communication device function.

5. The sensor as claimed in any one of claims 1 to 4 comprising at least one of a GPS device, a speaker, a light, a vibration generator, or an electrical shock generator, which functionality is activated upon predetermined activation criteria being met.

6. The sensor as claimed in any one of claims 1 to 5, wherein a sensor notification is generated upon function activation criteria being met, a notification being transmitted to at least one of a predetermined telephone number, email or other communication destination in addition to the sensor data being broadcast.

7. The sensor as claimed in any one of claims 1 to 6, wherein the sensor is enabled to operate as either:

- a Webserver wherein the device comprises RAM for storage of user data and whereby the data is accessible by using a web browser of an interrogating wireless communication device.

8. The sensor as claimed in any one of claims 1 to 7, wherein the sensor comprises a signal strength detector thereby enabling at least one of directional or distance tracking of the sensor while in range of one or more wifi routers, and in conjunction with utilising suitably enabled software and hardware.

9. The sensor as claimed in any one of claims 1 to 9, wherein the sensor or software application, as the case may be, provides the user with a plurality of buttons, alternately tabs to enable a desired functionality.

10. The sensor as claimed in any one of claims 1 to 10, wherein the sensor comprises event triggered programmable data, the programmable data broadcast with the SSID comprises sensor environment information.

11. The sensor as claimed in any one of claims 1 to 11, wherein a plurality of sensors are required within a predetermined distance of one another, alternately a wifi router processing the function activation to authenticate the computing device functionality, whereby the wifi signal strength is used to measure proximity.

12. The sensor as claimed in any one of claims 1 to 11, wherein a movement behaviour pattern recordable by the sensor can be used as a trigger event for purposes of populating the SSID with sensor movement pattern authentication.

IB. A method of enabling computing device functionality using a sensor as claimed in any one of claims 1 to 12 comprising the steps of activating a hotspot of a first sensor, the first sensor and a second sensor affiliated with a computing device detecting each other by virtue of their respective SSID broadcasts; the SSID information broadcast resulting in an authentication of the user whereafter the computing device enables functionality in accordance with predetermined use criteria.

14. The method of enabling computing device functionality as claimed in claim 13, wherein an authentication notification is transmitted to at least one of the hotspot sensor device; the computing device from which functionality access is required; or a remote server affiliated with the computing device and which authorisation is required before the computing device functionality is enabled; enabling software detecting the information required to authenticate the computing device functionality requested, whereafter the authentication information is included in the SSID broadcast, which broadcast is detected and used to authorise the enabling of functionality.

15. The method of enabling computing device functionality as claimed in claim 14, wherein additional user verification is required prior enabling computing device functionality.

16. A wireless communication identification sensor comprising a unique wireless identifier combined with programmable broadcast data, wherein the programmable data is configurable to identify the sensor in accordance with user identification criteria, in use.

17. The sensor as claimed in claim 16 comprising an instruction data set, wherein said data causes the activation, alternately deactivation of a function associated with the sensor.

18. The sensor as claimed in claim 16 or 17, wherein the wireless communication identification sensor having a unique identifier is enabled to perform functions as they pertain to the aforementioned sensors in claims 3 to 12.