News for hackers. Stuff that matters.
Re:Face ID, Touch ID, No ID, PINs and Pragmatic Security by dredmorbius on Thursday September 14, 2017 @07:03PM (#15253199)
A watch or bracelet could also work, of course. Even a neck pendant if that's your thing. The point is physical, on your person, and crypto based on near field.

The problem with longer ranges, even just a few cm, is the prospect for snooping or triggerring unintended authentications. My preference would be mm range.

Re:Face ID, Touch ID, No ID, PINs and Pragmatic Security by Ajedi32 on Thursday September 14, 2017 @10:33PM (#15254145)
> The problem with longer ranges, even just a few cm, is the prospect for snooping or triggerring unintended authentications.

The advantage of using a watch (or another device with a built-in screen) is that it avoids exactly that problem. When you authenticate, you have to physically press a button on the device, and the screen tells you precisely what it is you're authorizing.

Using capacitive coupling as the initial communication channel would also help with that, since you'd have to actually touch the object you want to authenticate to with your bare skin.

Re:Face ID, Touch ID, No ID, PINs and Pragmatic Security by dredmorbius on Thursday September 14, 2017 @10:53PM (#15254209)
Both good points. I've been thinking of some contact / button interaction as well, though that's a toss between keeping the device as physically and electrically simple as possible, vs. some level of interaction. A circuit-completion button on a ring might work, which wouldn't require, say, an additional battery. Though battery life would quite likely be years.

Do you have any refs on capacitive coupling? Is that essentially touchscreen devices? How does that fare in exposed / outdoor environments? I'm thinking of wide applications, and something which wouldn't operate at, say, Tokyo Subway levels of use and demand aren't particularly amenable.

(That's tabling the discussion of whether or not you'd want to have per-use charges for transit use or want to offer that as a public service, or only filter based on individuals, etc.)

Field range might be set by speed-of-light delays. Roughly a nanosecond per 30cm (about 10 foot).

Given a 4 GHz clockspeed, your time resolution is about 0.25 nanosecond, or 7.5 cm -- call it 3 inches.