Simple protocol for tangible security

Patent metadata

Field	Value
Publication number	US-9503431-B2
Application number	US-201514936351-A
Country	US
Kind code	B2
Filing date	Nov 9, 2015
Priority date	Oct 13, 2008
Publication date	Nov 22, 2016
Grant date	Nov 22, 2016

Abstract

The claimed subject matter provides systems and/or methods that effectuate a simple protocol for tangible security on mobile devices. The system can include devices that generate sets of keys and associated secret identifiers, employs the one or more keys to encrypt a secret and utilizes the identifiers and encryptions of the secret to populate a table associated with a security token device that is used in conjunction with a mobile device to release sensitive information persisted on the mobile device for user selected purposes.

First claim

What is claimed is:

1. A security token device comprising:
one or more processors; and
memory communicatively coupled to the one or more processors and storing instructions that, when executed, configure the one or more processors to perform acts comprising:
receiving, from a mobile device, a secret while the security token device is within a predetermined proximity to the mobile device;
storing the secret;
receiving, from the mobile device, a request for use of the secret;
based at least in part on the request for use of the secret and determining that the security token device is within the predetermined proximity to the mobile device:
retrieving the secret; and
sending the secret to the mobile device.

2. The security token device of claim 1 , wherein at least one of receiving the request or sending the secret is performed over at least one of:
a personal area network (PAN);
a local area network (LAN);
a campus area network (CAN);
metropolitan area network (MAN);
an extranet;
an intranet;
the Internet; or
a wide area network (WAN).

3. The security token device of claim 1 , where at least one of receiving the request or sending the secret is performed using near-field communication.

4. The security token device of claim 1 , wherein the acts further comprise:
receiving, from the mobile device, a secret identifier associated with a key used to encrypt the secret to create an encrypted version of the secret; and
storing the secret identifier together with the encrypted version of the secret.

5. The security token device of claim 4 wherein the acts further comprise:
retrieving the secret identifier; and
sending, to the mobile device, the secret identifier to decrypt the encrypted version of the secret at the mobile device.

6. The security token device of claim 1 , wherein the secret comprises a password.

7. The security token device of claim 1 , wherein at least one of receiving the request or sending the secret is performed using at least one of:
direct electrical contact communication;
radio frequency identification communication;
acoustical communication; or
optical communication.

8. A method comprising:
receiving, by a security device and from a mobile device, a secret;
storing, in memory of the security device, the secret;
receiving, by the security device and from the mobile device, a request for use of the secret; and
based at least in part on the request for use of the secret and when the security device is within a predetermined proximity to the mobile device:
retrieving the secret from the memory; and
sending, by the security device and to the mobile device, the secret.

9. The method of claim 8 , wherein at least one of receiving the request or sending the secret is performed using near field communications.

10. The method of claim 8 , wherein the secret comprises a password.

11. The method of claim 8 , wherein the secret comprises information associated with purchasing a good or service.

12. The method of claim 8 , wherein the security device comprises at least one of a watch, a watchband, a bracelet, a necklace, a cufflink, a tie clip, a key fob, or a card.

13. A wristband comprising:
one or more processors; and
memory communicatively coupled to the one or more processors and storing instructions that, when executed, configure the one or more processors to perform acts comprising:
receiving a secret from a portable device;
storing the secret;
receiving, from the portable device, a request for use of the secret;
based at least in part on the request for use of the secret and determining that the wristband is within a predetermined proximity to the portable device:
retrieving the secret; and
sending the secret to the portable device.

14. The wristband of claim 13 , wherein the secret comprises at least one of a password or user identification information.

15. The wristband of claim 13 , wherein the secret comprises information associated with purchasing a good or service.

16. The wristband of claim 15 , wherein the information associated with purchasing a good or service comprises at least one of credit card information, debit card information, or bank account information.

17. The wristband of claim 13 , wherein at least one of receiving the request or sending the secret is performed using at least one of near-field communication or communication over a personal area network.

18. The wristband of claim 13 , wherein the acts further comprise:
receiving, from the portable device, a secret identifier associated with a key used to encrypt the secret to create an encrypted version of the secret; and
storing the secret identifier together with the encrypted version of the secret.

19. The wristband of claim 18 , wherein the acts further comprise:
retrieving the secret identifier; and
sending, to the portable device, the secret identifier for use in decrypting the encrypted version of the secret.

20. The wristband of claim 13 , wherein at least one of receiving the request or sending the secret is performed using at least one of:
direct electrical contact communication;
radio frequency identification communication;
acoustical communication; or
optical communication.

Assignees

• Microsoft Technology Licensing Llc

Inventors

• Chen Yuqun
• Sinclair Michael J
• Benaloh Josh D

Classifications

• H04W88/02

  Terminal devices · CPC title

• H04L63/0853

  using an additional device, e.g. smartcard, SIM or a different communication terminal (cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234) · CPC title

• H04L63/0428 Primary

  wherein the data content is protected, e.g. by encrypting or encapsulating the payload · CPC title

• H04L9/14

  using a plurality of keys or algorithms · CPC title

• H04L9/0869

  involving random numbers or seeds · CPC title