Methods and apparatus for using keys conveyed via physical contact

Patent metadata

Field	Value
Publication number	US-9258304-B2
Application number	US-201414317662-A
Country	US
Kind code	B2
Filing date	Jun 27, 2014
Priority date	Jun 27, 2014
Publication date	Feb 9, 2016
Grant date	Feb 9, 2016

Abstract

An example touch key system may include a master device, one or more carrier devices and protected devices, and a server. The master device may automatically detect a predefined trigger action. In response, the master device may automatically generate a carrier device credential and a corresponding cloud credential. The master device may then automatically send the cloud credential to the server. The master device may also automatically detect the carrier device in electrical communication with the master device. In response, the master device may automatically determine whether the carrier device credential from the key pair is intended for the carrier device. If so, the master device may automatically transfer the carrier device credential to the carrier device. The carrier device may use the carrier device credential to obtain access to the protected device. Other embodiments are described and claimed.

First claim

What is claimed is:

1. A data processing system with support for touch keys, the data processing system comprising:
a processing element;
a machine accessible medium responsive to the processing element; and
data in the machine accessible medium which, when accessed by the processing element, enables the data processing system to serve as a master device to perform operations comprising:
after the master device, a protected device, and a carrier device have been registered as parts of a touch key system, automatically detecting a predefined trigger action;
in response to detecting the predefined trigger action, automatically generating a carrier device credential and a corresponding cloud credential;
after automatically generating the cloud credential, automatically sending the cloud credential to a touch key server to enable the cloud credential to be used in controlling access to the protected device;
after automatically generating the carrier device credential, automatically detecting a device in electrical communication with the master device;
in response to automatically detecting the device in electrical communication with the master device, automatically determining whether the device is the carrier device registered with the touch key system;
in response to determining that the detected device is the carrier device, automatically determining whether the carrier device credential is intended for the carrier device; and
in response to determining that the carrier device credential is intended for the carrier device, automatically transmitting the carrier device credential to the carrier device.

2. A data processing system according to claim 1 , wherein:
the data processing system further comprises an electrical sensor responsive to the processing element; and
the operation of automatically detecting the device in electrical communication with the master device comprises using the electrical sensor to determine whether a user of the master device and a user of the device are touching.

3. A data processing system according to claim 1 , wherein the operations further comprise:
receiving, from the touch key server, master device key parameters which (a) describe the predefined trigger action and (b) associate the predefined trigger action with the carrier device; and
wherein the operation of detecting the predefined trigger action is performed after receiving the master device key parameters from the touch key server.

4. A data processing system according to claim 3 , wherein:
the master device key parameters define at least one of a gesture and a sound as at least part of the predefined trigger action; and
the operation of detecting the predefined trigger action comprises automatically determining whether a user of the master device has made at least one of the gesture and the sound.

5. A touch key system comprising:
the master device of claim 1 ;
the protected device of claim 1 ; and
the carrier device of claim 1 .

6. A touch key system according to claim 5 , wherein:
the cloud credential comprises a private key;
the carrier device credential comprises a public key that corresponds to the private key; and
the carrier device comprises control logic which enables the carrier device to perform operations comprising:
receiving the public key from the master device; and
conveying the public key to the protected device.

7. A touch key system according to claim 5 , wherein the protected device comprises control logic which enables the protected device to perform operations comprising:
receiving the carrier device credential from the carrier device;
in response to receiving the carrier device credential from the carrier device, automatically contacting the touch key server to determine whether the carrier device credential is valid; and
in response to determining that the carrier device credential is valid, allowing a user of the carrier device to use the protected device.

8. A method for operating a master device of a touch key system, the method comprising:
automatically detecting a predefined trigger action at a master device of a touch key system that involves the master device, a carrier device, a touch key server, and a protected device;
in response to detecting the predefined trigger action, automatically generating a carrier device credential and a corresponding cloud credential at the master device;
after automatically generating the cloud credential, automatically sending the cloud credential from the master device to the touch key server to enable the cloud credential to be used in controlling access to the protected device;
after automatically generating the carrier device credential, automatically detecting the carrier device in electrical communication with the master device;
in response to automatically detecting the carrier device, automatically determining whether the carrier device credential is intended for the carrier device; and
in response to determining that the carrier device credential is intended for the carrier device, automatically transmitting the carrier device credential to the carrier device.

9. A method according to claim 8 , wherein the operation of automatically detecting the carrier device in electrical communication with the master device comprises using an electrical sensor of the master device to determine whether a user of the master device and a user of the device are touching.

10. A method according to claim 8 , further comprising:
receiving, from the touch key server, master device key parameters which (a) describe the predefined trigger action and (b) associate the predefined trigger action with the carrier device; and
wherein the operation of detecting the predefined trigger action is performed after receiving the master device key parameters from the touch key server.

11. A method according to claim 10 , wherein:
the master device key parameters define at least one of a gesture and a sound as at least part of the trigger action; and
the operation of detecting the predefined trigger action comprises automatically determining whether a user of the master device has made at least one of the gesture and the sound.

12. An apparatus to support touch keys, the apparatus comprising:
a non-transitory machine accessible medium; and
data in the machine accessible medium which, when accessed by a data processing system, enables the data processing system to serve as a master device of a touch key system that involves the master device, a carrier device, a touch key server, and a protected device, wherein the data enables the master device to perform operations comprising:
automatically detecting a predefined trigger action at the master device;
in response to detecting the predefined trigger action, automatically generating a carrier device credential and a corresponding cloud credential at the master device;
after generating the cloud credential, automatically sending the cloud credential from the master device to the touch key server to enable the cloud credential to be used in controlling access to the protected device;
after generating the carrier device credential, automatically detecting the carrier device in electrical communication with the master device;
in response to detecting the carrier device, automatically determining whether the carrier device credential is intended for the carrier device; and
in response to determining that the carrier device credential is intended for the carrier device, automatically transmitting the carrier device credential to the carrier device.

13. An apparatus according to claim 12 , wherein the operation of automat

Assignees

• Mcafee Inc

Inventors

• Kohlenberg Tobias M
• Li Hong
• Wouhaybi Rita H
• Tatourian Igor

Classifications

• H04L63/0807

  using tickets, e.g. Kerberos (cryptographic mechanisms or cryptographic arrangements for entity authentication using tickets or tokens H04L9/3213) · CPC title

• H04L63/062

  for key distribution, e.g. centrally by trusted party (cryptographic mechanisms or cryptographic arrangements for key distribution involving a central third party H04L9/0819) · CPC title

• H04W12/04

  Key management, e.g. using generic bootstrapping architecture [GBA] · CPC title

• H04L63/0876 Primary

  based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint · CPC title

• H04W4/80

  Services using short range communication, e.g. near-field communication [NFC], radio-frequency identification [RFID] or low energy communication · CPC title