Dynamic transmission of encrypted data

Patent metadata

Field	Value
Publication number	US-10397194-B2
Application number	US-201615208435-A
Country	US
Kind code	B2
Filing date	Jul 12, 2016
Priority date	Jul 12, 2016
Publication date	Aug 27, 2019
Grant date	Aug 27, 2019

Abstract

Embodiments of the present disclosure may be used to securely transmit data between multiple computing devices. Among other things, this can greatly extend the range of data transmissions in comparison to fixed-position wireless beacons and access points.

First claim

What is claimed is:

1. A system comprising:
a processor;
a communication interface coupled to the processor;
memory coupled to the processor and storing instructions that, when executed by the processor, cause the system to perform operations comprising:
receiving, via the communication interface, a data packet comprising encrypted data, the system not being located within a transmission range of a source computing device when the encrypted data packet is received by the system;
establishing, subsequent to receiving the encrypted data packet and in response to the system moving within the transmission range of the source computing device, communication with the source computing device via the communication interface;
in response to establishing communication with the source computing device, transmitting to the source computing device, via the communication interface, a request for decryption information for decrypting the encrypted data packet; and
based on receiving the decryption information from the source computing device, decrypting the encrypted data packet based on the decryption information.

2. The system of claim 1 , wherein the operations further comprise storing instructions for transmitting the encrypted data packet to a target computing device via the communication interface.

3. The system of claim 2 , wherein transmitting the encrypted data packet to the target computing device includes:
determining geolocation information of the target computing device; and
transmitting the encrypted data packet to the target computing device in response to a determination, based on the geolocation information, that the target computing device is within a predetermined distance of one or more of the system and the source computing device.

4. The system of claim 2 , wherein the data packet is transmitted to the system from a client computing device, and wherein transmitting the encrypted data packet to the target computing device includes:
receiving, via the communication interface, an identifier associated with the target computing device from the client computing device;
establishing communication with the target computing device based on the identifier; and
transmitting the encrypted data packet to the target computing device in response to establishing communication with the target computing device.

5. The system of claim 2 , wherein the operations further comprise storing instructions for transmitting the encrypted data packet to a plurality of target computing devices via the communication interface.

6. The system of claim 5 , wherein transmitting the encrypted data packet to the plurality of target computing devices includes:
transmitting the encrypted data packet to the plurality of target computing devices within a predetermined time period, and abstaining from transmitting the encrypted data packet otherwise.

7. The system of claim 6 , wherein the data packet is transmitted to the system from a client computing device, and wherein an indicator of the predetermined time period originates from the source computing device and is transmitted to the system by the client computing device.

8. The system of claim 2 , wherein transmitting the encrypted data packet to the target computing device includes:
sending to the target computing device, using the communication interface, a request for an authorization to transmit the encrypted data packet to the target computing device; and
based on receiving the authorization from the target computing device, transmitting the encrypted data packet to the target computing device in response to confirming authorization to transmit the encrypted data packet, and abstaining from transmitting the encrypted data packet to the target computing device otherwise.

9. The system of claim 2 , wherein the data packet further comprises unencrypted data, the unencrypted data including location information for locating the transmission range of the source computing device.

10. A method comprising:
receiving, by a computer system via a communication interface, a data packet comprising encrypted data, the computer system is not located within a transmission range of a source computing device when the encrypted data packet is received by the computer system;
in response to the computer system moving within the transmission range of the source computing device, establishing, by the computer system and subsequent to receiving the encrypted data packet, communication with the source computing device via the communication interface;
in response to establishing communication with the source computing device, sending to the source computing device, via the communication interface, a request for decryption information for decrypting the encrypted data packet; and
based on receiving the decryption information from the source computing device, decrypting the encrypted data packet, by the computer system, based on the decryption information.

11. The method of claim 10 , further comprising transmitting the encrypted data packet to a target computing device by the computer system via the communication interface.

12. The method of claim 11 , wherein transmitting the encrypted data packet to the target computing device includes:
determining geolocation information of the target computing device; and
transmitting the encrypted data packet to the target computing device in response to a determination, based on the geolocation information, that the target computing device is within a predetermined distance of one or more of the computer system and the source computing device.

13. The method of claim 11 , wherein the data packet is transmitted to the computer system from a client computing device, and wherein transmitting the encrypted data packet to the target computing device includes:
receiving, via the communication interface, an identifier associated with the target computing device from the client computing device;
establishing communication with the target computing device based on the identifier; and
transmitting the encrypted data packet to the target computing device in response to establishing communication with the target computing device.

14. The method of claim 11 , further comprising transmitting the encrypted data packet to a plurality of target computing devices via the communication interface.

15. The method of claim 14 , wherein transmitting the encrypted data packet to the plurality of target computing devices includes:
transmitting the encrypted data packet to the plurality of target computing devices within a predetermined time period, and abstaining from transmitting the encrypted data packet otherwise.

16. The method of claim 15 , wherein the data packet is transmitted to the computer system from a client computing device, and wherein an indicator of the predetermined time period originates from the source computing device and is transmitted to the computer system by the client computing device.

17. The method of claim 11 , wherein transmitting the encrypted data packet to the target computing device includes:
sending to the target computing device, using the communication interface, a request for an authorization to transmit the encrypted data packet to the target computing device; and
based on receiving the authorization from the target computing device, transmitting the encrypted data packet to the target computing device in response to confirming authorization to transmit the encrypted data packet, and abstaining from transmitting the encrypted data packet to the target computing device otherwise.

Assignees

• Ebay Inc

Inventors

• Dides Emil

Classifications

• H04L63/0428 Primary

  wherein the data content is protected, e.g. by encrypting or encapsulating the payload · CPC title

• H04L63/06

  for supporting key management in a packet data network (cryptographic mechanisms or cryptographic arrangements for key management H04L9/08) · CPC title

• H04W4/80

  Services using short range communication, e.g. near-field communication [NFC], radio-frequency identification [RFID] or low energy communication · CPC title

• H04W4/023 Primary

  using mutual or relative location information between multiple location based services [LBS] targets or of distance thresholds · CPC title

• H04L63/107

  wherein the security policies are location-dependent, e.g. entities privileges depend on current location or allowing specific operations only from locally connected terminals · CPC title