Apparatus, system, and method for protecting electronic devices in a virtual perimeter

Patent metadata

Field	Value
Publication number	US-9489545-B2
Application number	US-201514731831-A
Country	US
Kind code	B2
Filing date	Jun 5, 2015
Priority date	Nov 10, 2011
Publication date	Nov 8, 2016
Grant date	Nov 8, 2016

Abstract

Described herein are apparatus, system, and method for protecting electronic devices through the creation of a virtual perimeter among the electronic devices. The virtual perimeter may be generated by the electronic devices themselves. The method performed by an electronic device comprises: identifying a current context; receiving a role, according to the current context, in a hierarchy of multiple electronic devices, and operating in accordance with the role in the hierarchy within a secure perimeter in the current context around the multiple electronic devices, wherein the hierarchy includes a system of security checks based on context information.

First claim

We claim:

1. At least one machine-readable storage medium having computer executable instructions stored thereon that, when executed, cause an electronic device to perform a method, the method comprising:
identifying a current context;
receiving a role as a primary element among multiple electronic devices for the current context;
operating in accordance with the role within a secure perimeter in the current context around the multiple electronic devices;
periodically checking conformity with one or more context rules for each of electronic device among the multiple electronic devices; and
triggering an event when a context rule is activated.

2. The at least one machine-readable storage medium of claim 1 , wherein the event comprises the primary element deactivating each of the multiple electronic devices.

3. The at least one machine-readable storage medium of claim 1 , having further computer executable instructions stored thereon that, when executed, cause the electronic device to perform a further method, the further method comprising identifying the primary element.

4. The at least one machine-readable storage medium of claim 3 , wherein identifying the primary element comprises:
receiving assignment as the primary element; and
electing, as the primary element, one or more electronic devices from among the multiple electronic devices.

5. The at least one machine-readable storage medium of claim 3 , wherein identifying the primary element comprises executing, in view of the current context, an election algorithm to identify the primary element.

6. The at least one machine-readable storage medium of claim 1 , wherein the event comprises performing one or more of:
securely shutting down itself or at least one of the electronic devices that causes triggering of the event;
synchronizing data with another machine;
shutting down all the multiple electronic devices in the hierarchy;
locking-in itself or at least one of the electronic device in the hierarchy that causes triggering of the event; and
activating anti-theft protocol for itself or for at least one of the electronic device in the hierarchy.

7. The at least one machine-readable storage medium of claim 6 , wherein the other machine is a cloud computing unit, and wherein synchronizing with the other machine comprises copying data to the cloud computing unit.

8. The at least one machine-readable storage medium of claim 2 , wherein all electronic devices, among the multiple electronic devices, are shut down when the primary element triggers an event indicating that the primary element is outside the secure perimeter.

9. The at least one machine-readable storage medium of claim 1 , wherein the context information comprises one or more of:
physical proximity between electronic devices;
logical location of the electronic devices;
movement of an electronic device relative to other electronic devices;
strength of wireless internet connectivity of an electronic device relative to other electronic devices;
an event detected by soft or hard sensors of an electronic device; and
a message received from another electronic device, the message to indicate an event in the current context.

10. An electronic device comprising:
one of more processors to execute:
a logic unit to identify a current context; and
a security agent to receive a role as a primary element among multiple electronic devices for the current context, operate in accordance with the role within a secure perimeter in the current context around the multiple electronic devices, periodically check conformity with one or more context rules for each of electronic device among the multiple electronic devices; and trigger an event when a context rule is activated.

11. The electronic device of claim 10 , wherein the security agent comprises a context awareness engine for receiving context information from other electronic devices among the multiple electronic devices.

12. The electronic device of claim 11 , wherein the context information comprises one or more of:
physical proximity between electronic devices in the hierarchy;
logical location;
movement relative to other electronic devices in the hierarchy;
strength of wireless internet connectivity relative to other electronic devices in the hierarchy;
an event detected by soft or hard sensors; and
a message received from another electronic device in the hierarchy, the message to indicate an event in the current context.

13. The electronic device of claim 11 , wherein the context awareness engine includes an agent rule to cause an event to trigger when the agent rule is activated.

14. The electronic device of claim 13 , wherein the event, triggered when the agent rule is activated, comprises one or more of:
secure shut down of itself or at least one of the electronic device from among the multiple electronic devices in the hierarchy that causes the triggering of the event;
synchronize data with another machine;
shut down all the multiple electronic devices in the hierarchy;
lock-in of itself or at least one of the electronic device from among the multiple electronic devices in the hierarchy that causes the triggering of the event; and
activate anti-theft protocol for itself or at least one of the electronic device from among the multiple electronic devices in the hierarchy.

15. A server comprising:
a processor executing a security manager module to:
register multiple electronic devices;
define one or more contexts for the registered multiple electronic devices for providing a secure perimeter in the one or more contexts around the multiple electronic devices; and
identify a primary element of the multiple electronic devices for the current context using an election algorithm.

16. The server of claim 15 , wherein the security manager module defines context rules for triggering an event by each of the electronic devices among the multiple electronic devices, defines the hierarchy by registering one or more electronic devices among the multiple electronic devices as a primary element in the hierarchy, receives data from the primary element electronic device in response to triggering of an event, and receives data for registering and administering configuration of the multiple electronic devices.

17. The server of claim 16 , wherein the security manager module is communicatively coupled to a security agent of the primary element electronic device.

18. The server of claim 16 , wherein the security manager module registers one or more electronic devices as the primary element by performing one or more of:
assigning one or more electronic devices, from among the multiple electronic device, as the top element;
receiving an input from one or more electronic devices, among the multiple electronic devices, that elected the top element from among the multiple electronic devices; and
executing, in view of the context, a leader election algorithm to identify the top element.

19. The server of claim 15 , wherein the security agent includes a context awareness engine for receiving context information from other electronic devices among the multiple electronic devices.

20. The server of claim 19 , wherein the context information comprises one or more of:
physical proximity between electronic devices in the hierarchy;
logical location of the electronic devices in the hierarchy;
movement of an electronic device relative to other electronic devices in the hierarchy;
strength of wireless internet connectivity of an electronic d

Assignees

• Intel Corp

Inventors

• Hirsch Dan F
• Bullokles Cristian F

Classifications

• G06F2221/2141

  Access rights, e.g. capability lists, access control lists, access tables, access matrices · CPC title

• G06F2221/2149

  Restricted operating environment · CPC title

• G06F2221/2145

  Inheriting rights or properties, e.g., propagation of permissions or restrictions within a hierarchy · CPC title

• G06F21/88 Primary

  Detecting or preventing theft or loss · CPC title

• H04W12/08 Primary

  Access security · CPC title