Multilayer access control for connected devices
US-2017105171-A1 · Apr 13, 2017 · US
US10536460B2 · US · B2
| Field | Value |
|---|---|
| Publication number | US-10536460-B2 |
| Application number | US-201715411166-A |
| Country | US |
| Kind code | B2 |
| Filing date | Jan 20, 2017 |
| Priority date | Jan 20, 2017 |
| Publication date | Jan 14, 2020 |
| Grant date | Jan 14, 2020 |
A practical reading order for non-experts. Skip the full description unless you need deep technical detail.
What the patent document calls the invention.
A short plain-language summary of the technical disclosure.
Who owns or filed the patent and who is credited as inventor.
Filing, priority, publication, and grant dates set the timeline.
The legal scope of protection — read this for what is actually claimed.
Technology tags used to group this patent with similar filings.
Prior art links and similar publications in this corpus.
Official abstract text for this publication.
In the sharing of data between connected devices over a network, a network device broadcasts an availability of a set of data collected by a data producing device coupled to the network. The network device receives a request to access the set of data from a data consuming device coupled to the network, and a cognitive computing module of the network device determines a set of terms between the data producing and the data consuming devices for access to the set of data. In response, the network device obtains the set of data and a first key from the data producing device. Upon receiving a second key from the data consuming device, the network device determines that the second key is associated with the first key. In response, the network device provides access to the set of data to the data consuming device according to the set of terms.
Opening claim text (preview).
What is claimed is: 1. A method for sharing data between connected devices over a network, comprising: receiving, by a network device from a data producing device, a message of an availability of a set of data collected by the data producing device, wherein the data producing device sends the message of the availability of the set of data in response to detecting a proximity of a data consuming device; in response to receiving the message from the data producing device, identifying, by the network device, a subscription associated with the data consuming device that matches the set of data; in response to identifying the subscription, sending, by the network device, a first notification of the availability of the set of data to a data consuming device associated with the subscription, wherein the first notification does not comprise the set of data; receiving, by the network device, a first request to access the set of data from the data consuming device coupled to the network in response to the first notification; in response to the first request, determining, by a cognitive computing module of the network device, a set of terms between the data producing device and the data consuming device for access to the set of data, the set of terms comprising one or more limitations on access or use of the set of data; in response to the determination of the set of terms, sending, by the network device, a second notification comprising the set of terms to the data producing device and the data consuming device, wherein the second notification does not comprise the set of data; receiving, by the network device, a first confirmation of agreement to the set of terms, the set of data, and a first key from the data producing device in response to the second notification; receiving, by the network device, a second confirmation of agreement to the set of terms, a second request to access the set of data, and a second key from the data consuming device in response to the second notification, wherein the data consuming device received the second key from the data producing device in response to the second notification; determining, by the network device, that the second key is associated with the first key; and in response to determining that the second key is associated with the first key, providing, by the network device, access to the set of data to the data consuming device according to the one or more limitations comprised in the set of terms. 2. The method of claim 1 , wherein the determining that the second key is associated with the first key, and the providing of the access to the set of data to the data consuming device according to the set of terms, comprises: determining, by the network device, whether the second key is associated with the first key; in response to determining that the second key is not associated with the first key, denying access to the set of data by the data consuming device; and in response to determining that the second key is associated with the first key, providing access to the set of data to the data consuming device according to the set of terms. 3. The method of claim 1 , wherein the cognitive computing module determines the set of terms using a cognitive model based on inputted data and observations specifically pertaining to the data producing device and the data consuming device. 4. A computer program product for sharing data between connected devices over a network, the computer program product comprising a computer readable storage medium having program instructions embodied therewith, the program instructions executable by a processor to cause the processor to: receive, from a data producing device, a message of an availability of a set of data collected by the data producing device, wherein the data producing device sends the message of the availability of the set of data in response to detecting a proximity of a data consuming device; in response to receiving the message from the data producing device, identify a subscription associated with the data consuming device that matches the set of data; in response to identifying the subscription, send a first notification of the availability of the set of data to a data consuming device associated with the subscription, wherein the first notification does not comprise the set of data; receive a first request to access the set of data from a data consuming device coupled to the network in response to the first notification; in response to the first request, determine, using a cognitive computing module, a set of terms between the data producing device and the data consuming device for access to the set of data, the set of terms comprising one or more limitations on access or use of the set of data; in response to the determination of the set of terms, send a second notification comprising the set of terms to the data producing device and the data consuming device, wherein the second notification does not comprise the set of data; receive a first confirmation of agreement to the set of terms, the set of data and a first key from the data producing device; receive a second confirmation of agreement to the set of terms, a second request to access the set of data, and a second key from the data consuming device in response to the second notification, wherein the data consuming device received the second key from the data producing device in response to the second notification; determine that the second key is associated with the first key; and in response to determining that the second key is associated with the first key, provide access to the set of data to the data consuming device according to the one or more limitations comprised in the set of terms. 5. The computer program product of claim 4 , wherein the determining that the second key is associated with the first key, and the providing of the access to the set of data to the data consuming device according to the set of terms, comprises: determine whether the second key is associated with the first key; in response to determining that the second key is not associated with the first key, deny access to the set of data by the data consuming device; and in response to determining that the second key is associated with the first key, provide access to the set of data to the data consuming device according to the set of terms. 6. The computer program product of claim 4 , wherein the cognitive computing module determines the set of terms using a cognitive model based on inputted data and observations specifically pertaining to the data producing device and the data consuming device. 7. A system, comprising: a processor; and a computer readable storage medium having program instructions embodied therewith, the program instructions executable by a processor to cause the processor to: receive, from a data producing device, a message of an availability of a set of data collected by the data producing device, wherein the data producing device sends the message of the availability of the set of data in response to detecting a proximity of a data consuming device; in response to receiving the message from the data producing device, identify a subscription associated with the data consuming device that matches the set of data; in response to identifying the subscription, send a first notification of the availability of the set of data to a data consuming device associated with the subscription, wherein the first notification does not comprise the set of data; receive a first request to access the set of data from a data consuming device coupled to the network in response to the first notification; in response to the first request, determine, using a cognitive computing module, a set of terms between the data producing device and th
Anonymous communication, i.e. the party's identifiers are hidden from the other party or parties, e.g. using an anonymizer · CPC title
using one-time keys (cryptographic mechanisms or cryptographic arrangements for generation of one-time passwords H04L9/0863) · CPC title
for key exchange, e.g. in peer-to-peer networks (cryptographic mechanisms or cryptographic arrangements for key agreement H04L9/0838) · CPC title
for controlling access to devices or network resources · CPC title
for group communications (cryptographic mechanisms or cryptographic arrangements for key management involving conference or group key H04L9/0833) · CPC title
Related publications grouped by family.
Answers are generated from the same data shown on this page.