Providing security for edge computing using location data

Patent metadata

Field	Value
Publication number	US-12328385-B2
Application number	US-202318183488-A
Country	US
Kind code	B2
Filing date	Mar 14, 2023
Priority date	Mar 14, 2023
Publication date	Jun 10, 2025
Grant date	Jun 10, 2025

Abstract

Provided are techniques for providing security for edge computing using location data. A command base location of an entity, an application identifier of the entity, and an expire date for the application identifier are determined. A message generated from the command base location and the application identifier is sent to a location authority. A signed command base location is received based on the command base location being within a jurisdiction of the location authority and a current date being before the expire date. A common key for the command base location is generated using the application identifier and the signed command base location. A public key is generated using the common key. A message is encrypted using the public key to create a cryptographic message. The cryptographic message is sent.

First claim

What is claimed is:

1. A computer program product, the computer program product comprising a computer readable storage medium having program instructions embodied therewith, the program instructions executable by a processor to cause the processor to perform operations for:
determining a command base location of an entity, an application identifier of the entity, and an expire date for the application identifier;
sending a message generated from the command base location and the application identifier to a location authority;
receiving a signed command base location based on the command base location being within a jurisdiction of the location authority and a current date being before the expire date;
generating a common key for the command base location using the application identifier and the signed command base location;
generating a public key using the common key;
encrypting a message using the public key to create a cryptographic message; and
sending the cryptographic message.

2. The computer program product of claim 1 , wherein the command base location comprises a latitude and a longitude, wherein the entity comprises a first edge device, and wherein the cryptographic message is sent to a second edge device.

3. A computer program product of claim 1 , wherein the program code is executable by at least one processor to perform further operations for:
generating a command base location-public key infrastructure, wherein the public key is retrieved from the command base location-public key infrastructure using the command base location.

4. The computer program product of claim 1 , wherein the program code is executable by at least one processor to perform further operations for:
receiving the cryptographic message;
generating the common key for the command base location;
generating a pair with the public key and a private key using the common key; and
decrypting the cryptographic message using the private key.

5. The computer program product of claim 1 , wherein the program code is executable by at least one processor to perform further operations for:
generating a master secret key and the public key using an identity based encryption technique, wherein the message is encrypted using the public key and the command base location.

6. The computer program product of claim 5 , wherein the program code is executable by at least one processor to perform further operations for:
receiving the cryptographic message;
generating the common key for the command base location;
generating the master secret key and the public key using the common key;
retrieving a private key using the master secret key and the command base location; and
decrypting the cryptographic message using the private key and the public key.

7. The computer program product of claim 1 , wherein the entity comprises a first edge device, and wherein the common key is used to exchange messages with a second edge device.

8. A computer-implemented method, comprising operations for:
determining a command base location of an entity, an application identifier of the entity, and an expire date for the application identifier;
sending a message generated from the command base location and the application identifier to a location authority;
receiving a signed command base location based on the command base location being within a jurisdiction of the location authority and a current date being before the expire date;
generating a common key for the command base location using the application identifier and the signed command base location;
generating a public key using the common key;
encrypting a message using the public key to create a cryptographic message; and
sending the cryptographic message.

9. The computer-implemented method of claim 8 , wherein the command base location comprises a latitude and a longitude, wherein the entity comprises a first edge device, and wherein the cryptographic message is sent to a second edge device.

10. A computer-implemented method of claim 8 , further comprising operations for:
generating a command base location-public key infrastructure, wherein the public key is retrieved from the command base location-public key infrastructure using the command base location.

11. The computer-implemented method of claim 8 , further comprising operations for:
receiving the cryptographic message;
generating the common key for the command base location;
generating a pair with the public key and a private key using the common key; and
decrypting the cryptographic message using the private key.

12. The computer-implemented method of claim 8 , further comprising operations for:
generating a master secret key and the public key using an identity based encryption technique, wherein the message is encrypted using the public key and the command base location.

13. The computer-implemented method of claim 8 , further comprising operations for:
receiving the cryptographic message;
generating the common key for the command base location;
generating the master secret key and the public key using the common key;
retrieving a private key using the master secret key and the command base location; and
decrypting the cryptographic message using the private key and the public key.

14. The computer-implemented method of claim 8 , wherein the entity comprises a first edge device, and wherein the common key is used to exchange messages with a second edge device.

15. A computer system, comprising:
one or more processors, one or more computer-readable memories and one or more computer-readable, tangible storage devices; and
program instructions, stored on at least one of the one or more computer-readable, tangible storage devices for execution by at least one of the one or more processors via at least one of the one or more computer-readable memories, to perform operations comprising:
determining a command base location of an entity, an application identifier of the entity, and an expire date for the application identifier;
sending a message generated from the command base location and the application identifier to a location authority;
receiving a signed command base location based on the command base location being within a jurisdiction of the location authority and a current date being before the expire date;
generating a common key for the command base location using the application identifier and the signed command base location;
generating a public key using the common key;
encrypting a message using the public key to create a cryptographic message; and
sending the cryptographic message.

16. The computer system of claim 15 , wherein the command base location comprises a latitude and a longitude, wherein the entity comprises a first edge device, and wherein the cryptographic message is sent to a second edge device.

17. The computer system of claim 15 , wherein the operations further comprise:
generating a command base location-public key infrastructure, wherein the public key is retrieved from the command base location-public key infrastructure using the command base location.

18. The computer system of claim 15 , wherein the operations further comprise:
receiving the cryptographic message;
generating the common key for the command base location;
generating a pair with the public key and a private key using the common key; and
decrypting the cryptographic message using the private key.

19. The computer system of claim 15 , wherein the operations further comprise:
generating a master secret key and the

Assignees

• IBM

Inventors

• Shimada Junichi
• Maruyama Daisuke
• Takiguchi Ichiro
• Tahara Yoshinori
• Zhu Jiayun

Classifications

• H04W12/043 Primary

  using a trusted network node as an anchor · CPC title

• H04L63/0492

  by using a location-limited connection, e.g. near-field communication or limited proximity of entities · CPC title

• H04W12/63

  Location-dependent; Proximity-dependent · CPC title

• H04L9/3247

  involving digital signatures · CPC title

• H04L9/0872

  using geo-location information, e.g. location data, time, relative position or proximity to other entities · CPC title