Method and apparatus for detecting and dealing with a lost electronics device

• US 10,009,323 B2
• Filed: 06/08/2016
• Issued: 06/26/2018
• Est. Priority Date: 07/14/2011
• Status: Active Grant

• Current Assignee: Qualcomm, Inc.
• Original Assignee: Qualcomm, Inc.
• Inventors: Cai, Lukai, Menendez, Jose R, Silverstein, Roy Benjamin, Parameswaran, Rajkrishnan
• Primary Examiner(s): Desrosiers, Evans
• Application Number:
  US15/177,139
• Publication Number:
  US 20160285837A1
• Time in Patent Office: 748 Days
• Field of Search: 713155-167, 713189-193, 709229, 380 28- 30, 380 44- 47, 380277-286, 726 16
• CPC Class Codes: H04L 2209/24 Key scheduling, i.e. generating round keys or sub-keys for block encryption
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/06 for supporting key management in a packet data network cryptographic mechanisms or cryptographic arrangements for key management H04L9/08
• CPC Class Codes: H04L 9/14 using a plurality of keys or algorithms
• CPC Class Codes: H04M 1/66 with means for preventing unauthorised or fraudulent calling verifying user identity or authority in secret or secure digital communications H04L9/32
• CPC Class Codes: H04M 1/72463 to restrict the functionality of the device
• CPC Class Codes: H04M 1/724631 by limiting the access to the user interface, e.g. locking a touch-screen or a keypad
• CPC Class Codes: H04W 12/02 Protecting privacy or anonymity, e.g. protecting personally identifiable information [PII]
• CPC Class Codes: H04W 12/033 of the user plane, e.g. user's traffic
• CPC Class Codes: H04W 52/0261 managing power supply demand, e.g. depending on battery level
• CPC Class Codes: H04W 52/0264 by selectively disabling software applications
• CPC Class Codes: Y02D 30/70 in wireless communication networks

Abstract

Techniques for detecting and dealing with a lost electronics device are disclosed. In one design, the device may autonomously determine whether it is lost. The device may destroy at least one component to render it inoperable and may perform other actions in response to determining that it is lost. In another design, the device may determine available battery power of the device upon determining that it is lost, select at least one action in a list of possible actions based on the available battery power, and perform the selected action(s). In yet another design, upon determining that it is lost, the device may prevent access to information on the device based on a secondary security key, which is not used for encrypting information during normal operation. In yet another design, the device may notify at least one contact and may perform at least one additional action upon determining that it is lost.

Claims

1. A method comprising:

encrypting, at a device, a first portion of information on the device based on a primary private security key;

autonomously determining, by the device, that the device is lost; and

in response to determining that the device is lost, preventing, at the device, access to the information on the device, the preventing access to the information comprising;

encrypting the encrypted first portion of the information and a second portion of the information based on a secondary private security key not used for encrypting the information during normal operation of the device, such that the first portion of the information on the device becomes encrypted based on the secondary private security key and encrypted based on the primary private security key;

wherein the secondary private security key is inaccessible to an owner of the device and is accessible to a trusted entity for the device.

2. The method of claim 1, wherein the primary private security key is used for encrypting the first portion of the information during normal operation of the device.

3. The method of claim 1, wherein the preventing access to the information further comprises allowing access to the information when the secondary private security key is received by the device.

4. The method of claim 1, further comprising:

disabling one or more components of the device to render the device inoperable

responsive to determining that the device is lost.

5. The method of claim 1, wherein autonomously determining that the device is lost comprises:

detecting a sequence of states of motion of the device; and

determining that the device is lost based on the detected sequence.

6. The method of claim 1, wherein autonomously determining that the device is lost comprises:

obtaining, from one or more sensors, information indicating an environment in which the device is located; and

determining that the device is lost based on the information.

7. An apparatus comprising:

means for encrypting, at a device, a first portion of information on the device based on a primary private security key,

means for autonomously determining, by the device, that the device is lost; and

means for preventing access to the information on the device in response to determining that the device is lost, wherein the means for preventing access to the information comprises;

means for encrypting the encrypted first portion of the information and a second portion of the information based on a secondary private security key not used for encrypting the information during normal operation of the device, such that the first portion of the information on the device becomes encrypted based on the secondary private security key and based on the primary private security key;

wherein the secondary private security key is inaccessible to an owner of the device and is accessible to a trusted entity for the device.

8. The apparatus of claim 7, wherein the primary private security key is used for encrypting the first portion of the information during normal operation of the device.

9. The apparatus of claim 7, wherein the means for preventing access to the information further comprises means for allowing access to the information when the secondary private security key is received by the device.

10. An apparatus comprising:

at least one processor configured to;

encrypt a first portion of information on the apparatus based on a primary private security key;

determine that the apparatus is lost; and

in response to determining that the apparatus is lost, prevent access to the information on the apparatus, the prevent access to the information comprising;

encrypt the encrypted first portion of the information and a second portion of the information based on a secondary private security key not used for encrypting the information during normal

operation of the apparatus, such that the first portion of the information on the apparatus becomes encrypted based on the secondary private security key and based on the primary private security key;

wherein the secondary private security key is inaccessible to an owner of the device and is accessible to a trusted entity for the device.

11. The apparatus of claim 10, wherein the primary private security key is used for encrypting the first portion of the information during normal operation of the apparatus.

12. The apparatus of claim 10, wherein the preventing access to the information further comprises allowing access to the information when the secondary private security key is received by the apparatus.

13. A computer program product, comprising:

a non-transitory computer-readable medium comprising;

code for causing at least one computer to encrypt a first portion of information on a device based on a primary private security key;

code for causing the at least one computer to determine that the device is lost; and

code for causing the at least one computer to prevent access to the information on the device in response to determining that the device is lost, wherein the code for preventing access to the information comprises;

code for encrypting the encrypted first portion of the information and the second portion of the information based on a secondary private security key not used for encrypting the information during normal operation of the device, such that the first portion of the information on the device becomes encrypted based on the secondary private security key and based on the primary private security key;

wherein the secondary private security key is inaccessible to an owner of the device and is accessible to a trusted entity for the device.

14. The computer program product of claim 13, wherein the primary private security key is used for encrypting the first portion of the information during normal operation of the device.

15. The computer program product of claim 13, wherein the code for causing the at least one computer to prevent access to the information further comprises code for causing the at least one computer to allow access to the information when the secondary private security key is received by the device.