System and method for verifying device security

Abstract

A method for verifying a proximity of a user device to a beacon, including broadcasting a frame comprising an encrypted payload, receiving the frame, extracting information from the frame, and verifying the proximity of the user device to the beacon based on the extracted information.

We claim: 
     
         1 . A method comprising, at a resolving system:
 determining a temporary identifier (temporary ID) associated with a time window;   receiving a frame, wherein the frame has been broadcast to a user device from a beacon and comprises:
 a broadcast time; and 
 the temporary ID, wherein the temporary ID is independently determined by the beacon; 
   extracting the temporary ID and the broadcast time from the frame;   verifying the proximity of the user device to the beacon based on the broadcast time; and   after verifying the proximity, determining a beacon identifier for the beacon based on the temporary ID, wherein the user device performs a predetermined action based on the beacon identifier.   
     
     
         2 . The method of  claim 1 , wherein determining the temporary ID at the resolving system further comprises, for each of a series of time windows, determining a temporary ID based on the respective time window; wherein the time window is within the series of time windows. 
     
     
         3 . The method of  claim 2 , wherein the broadcast time is within the time window. 
     
     
         4 . The method of  claim 1 , wherein the proximity verification is valid during the time window. 
     
     
         5 . The method of  claim 4 , wherein the proximity verification is not valid when the time window expires. 
     
     
         6 . The method of  claim 1 , wherein the resolving system comprises the user device. 
     
     
         7 . The method of  claim 1 , wherein the frame is received at the resolving system at a receipt time, wherein verifying the proximity of the user device to the beacon is further based on the receipt time. 
     
     
         8 . The method of  claim 1 , further comprising determining a geolocation of the user device; wherein determining the beacon identifier comprises receiving a set of beacon identifiers, each corresponding to a different temporary ID, for a set of beacons associated with the geolocation, wherein the beacon identifier is selected from the set based on the temporary ID. 
     
     
         9 . The method of  claim 1 , wherein the predetermined action comprises content retrieval from a client database, wherein the content is associated with the beacon identifier. 
     
     
         10 . A method comprising, at a resolving system:
 receiving an encrypted frame, wherein the frame has been broadcast to a user device from a beacon and comprises:
 a broadcast time, encrypted using an encryption key associated with a time window, wherein the encryption key is determined by the beacon; and 
 a beacon identifier (beacon ID); 
   determining a decryption key associated with the time window;   extracting the beacon ID from the frame;   extracting the broadcast time from the frame based on the decryption key;   verifying the proximity of the user device to the beacon based on the broadcast time; and   after verifying the proximity, providing an authorization based on the beacon ID to the user device.   
     
     
         11 . The method of  claim 10 , wherein the decryption key is the encryption key. 
     
     
         12 . The method of Claim ii, wherein the encryption key changes for each of a set of time windows, wherein the encryption key is independently determined at both the beacon and the resolving system based on a time associated with the respective time window within the set of time windows. 
     
     
         13 . The method of  claim 10 , wherein the decryption and encryption keys are each based on a common time window parameter associated with the time window, wherein the time window parameter is independently determined at the resolving system and the beacon. 
     
     
         14 . The method of  claim 10 , wherein the beacon ID is a temporary identifier (temporary ID) that is determined by the beacon based on the time window. 
     
     
         15 . The method of  claim 14 , wherein the encryption and decryption keys are each determined based on the temporary ID. 
     
     
         16 . The method of  claim 14 , further comprising, at the resolving system, independently determining the temporary ID based on the time window. 
     
     
         17 . The method of  claim 10 , wherein the user device uses the authorization to access a client application, wherein the user device executes the client application. 
     
     
         18 . The method of  claim 10 , the user device uses the authorization to retrieve content from a client database. 
     
     
         19 . The method of  claim 10 , wherein the authorization is valid during the time window. 
     
     
         20 . The method of  claim 19 , wherein the authorization is invalidated when the time window expires.