Secure data sharing with publicly accessible computing nodes

• US 10,154,011 B2
• Filed: 11/25/2015
• Issued: 12/11/2018
• Est. Priority Date: 03/14/2013
• Status: Active Grant

• Current Assignee: Intel Corporation
• Original Assignee: Intel Corporation
• Inventors: Hochberg, Yoav, Anderson, Glen J., Ben Haim, Guy, Smith, Charles C., Johnson, Brian D.
• Primary Examiner(s): Truong, Thanhnga B
• Application Number:
  US14/952,515
• Publication Number:
  US 20160080325A1
• Time in Patent Office: 1,112 Days
• Field of Search: 726 1- 3, 713 2, 455433
• CPC Class Codes: G06F 21/6245 Protecting personal data, e.g. for financial or medical purposes
• CPC Class Codes: G06F 2221/2143 Clearing memory, e.g. to prevent the data from being stolen
• CPC Class Codes: H04L 63/04 for providing a confidential data exchange among entities communicating through data packet networks
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/105 Multiple levels of security
• CPC Class Codes: H04L 63/1408 by monitoring network traffic monitoring network traffic per se H04L43/00
• CPC Class Codes: H04W 12/069 using certificates or pre-shared keys

Abstract

An embodiment of the invention includes determining a first security status for first information and a second security status for second information, the second security status being more secure than the first security status; establishing a first communication path between the system and a first local computing node via a first wireless path; conveying the first information to the first local computing node via the first wireless path based on the first security status; and withholding the second information from the first local computing node based on the second security status; wherein the first and second information are stored on at least one of the system and a remotely located computing node. Other embodiments are described herein.

Claims

1. At least one storage medium having instructions stored thereon for causing a mobile first computing node to:

determine security states for the first computing node and first information;

in response to determining the security states, convey the first information to a local mobile second computing node via a wireless path without receiving security credentials from a user of the first computing node at any point within a first time period;

determine second information satisfies a defined setting;

in response to determining the second information satisfies the defined setting, determine a security state for the second information;

receive security credentials from the user during a second time period; and

in response to receiving the security credentials and to determining the security states for the first computing node and the second information, convey the second information to the second computing node via the wireless path;

wherein (a) the first time period extends from the determining the security state of the first computing node to the conveying the first information, and (b) the second time period extends from the determining the security state of the first computing node to the conveying the second information.

2. The at least one medium of claim 1 comprising instructions to cause the second computing node to grant the user access to the first and second information in response to receiving the security credentials and to determining the security states for the first computing node, the first information, and the second information.

3. The at least one medium of claim 2, wherein the causing the second computing node to grant the user access to the first and second information includes displaying the first and second information.

4. The at least one medium of claim 1, wherein the first information includes a member selected from the group comprising music, photos, text messages, e-mail, audio, or a visual graphic and the second information includes another member selected from the group comprising music, photos, text messages, e-mail, audio, or a visual graphic.

5. The at least one medium of claim 1, wherein the security credentials include at least one of a biometric for the user, a password, or an encryption key.

6. The at least one medium of claim 1, wherein the second computing node includes a member selected from the group comprising:

Smartphones, notebooks, tablets, laptops, personal computers, servers, or personal digital assistants.

7. The at least one medium of claim 1 comprising instructions to:

determine the security state for the first information in response to the first information satisfying an additional defined setting but not the defined setting.

8. The at least one medium of claim 1, wherein the second information is accessible to the second local computing node for only a predetermined amount of time.

9. The at least one medium of claim 1 comprising instructions to determine the security state for the first computing node based on determining at least one of (a) a proximity between the first and second computing nodes;

or (b) an encryption level to be used for conveying the first information to the second computing node.

10. An apparatus comprising:

at least one memory and at least one processor, to couple to the at least one memory, to cause a first computing node to;

determine security states for the first computing node and first information;

in response to determining the security states, convey the first information to a local mobile second computing node via a wireless path without receiving security credentials from a user of the first computing node at any point within a first time period;

determine second information satisfies a defined setting;

in response to determining the second information satisfies the defined setting, determine a security state for the second information;

receive security credentials from the user during a second time period; and

in response to receiving the security credentials and to determining the security states for the first computing node and the second information, convey the second information to the second computing node via the wireless path;

wherein (a) the first time period extends from the determining the security state of the first computing node to the conveying the first information, and (b) the second time period extends from the determining the security state of the first computing node to the conveying the second information.

11. The apparatus of claim 10, wherein the at least one processor is to cause the second computing node to grant the user access to the first and second information in response to receiving the security credentials and to determining the security states for the first computing node, the first information, and the second information.

12. The apparatus of claim 11, wherein the causing the second computing node to grant the user access to the first and second information includes displaying the first and second information.

13. The apparatus of claim 10, wherein the first information includes a member selected from the group comprising music, photos, text messages, e-mail, audio, or a visual graphic and the second information includes another member selected from the group comprising music, photos, text messages, e-mail, audio, or a visual graphic.

14. The apparatus of claim 10, wherein the security credentials include at least one of a biometric for the user, a password, or an encryption key.

15. The apparatus of claim 10, wherein the second computing node includes a member selected from the group comprising:

Smartphones, notebooks, tablets, laptops, personal computers, servers, or personal digital assistants.

16. The apparatus of claim 10 wherein the at least one processor is to:

determine the security state for the first information in response to the first information satisfying an additional defined setting but not the defined setting.

17. The apparatus of claim 10, wherein the second information is accessible to the second local computing node for only a predetermined amount of time.

18. The apparatus of claim 10 wherein the at least one processor is to determine the security state for the first computing node based on determining at least one of (a) a proximity between the first and second computing nodes;

or (b) an encryption level to be used for conveying the first information to the second computing node.