Secured vital sign data group streams

• US 10,212,165 B1
• Filed: 08/25/2015
• Issued: 02/19/2019
• Est. Priority Date: 08/25/2015
• Status: Active Grant

• Current Assignee: Vital Connect, Inc.
• Original Assignee: Vital Connect, Inc.
• Inventors: Petersen, Steve, Mallela, Kesava
• Primary Examiner(s): Doan, Trang T
• Application Number:
  US14/835,341
• Time in Patent Office: 1,274 Days
• Field of Search: None
• CPC Class Codes: G06F 16/9566 URL specific, e.g. using aliases, detecting broken or misspelled links
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/0861 using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231
• CPC Class Codes: H04L 63/101 Access control lists [ACL]
• CPC Class Codes: H04L 65/61 for supporting one-way streaming services, e.g. Internet radio
• CPC Class Codes: H04L 67/01 Protocols
• CPC Class Codes: H04L 67/02 based on web technology, e.g. hypertext transfer protocol [HTTP]
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/33 using wearable devices, e.g. using a smartwatch or smart-glasses
• CPC Class Codes: H04W 4/38 for collecting sensor information

Abstract

A method and system for securely transmitting a plurality of data streams between a client device and a server that are in communication via standard Internet protocols are disclosed. The method comprises authenticating the client device by the server to create a Session ID and authorizing the client device to access the plurality of data streams by the server using at least one ACL Group, wherein a WebSocket connection is created between the client device and the server once the client device is both authenticated and authorized. The system comprises a client device and a server in communication with the client device via standard Internet protocols, wherein the server authenticates the client device to create a session, authorizes the client device to access the plurality of data streams using at least one ACL Group, wherein a WebSocket connection is created once the client device is both authenticated and authorized.

Claims

1. A method for securely transmitting a plurality of data streams between a client device and a server that are in communication via standard Internet protocols, the method comprising:

detecting the plurality of data streams using a wearable device, wherein the wearable device, attached to a user, retrieves a plurality of physiological signals via one or more sensors embedded in the wearable device, and wherein the wearable device utilizes a plurality of algorithms to process raw waveforms of the plurality of physiological signals to form the plurality of data streams;

transmitting, by the wearable device, the plurality of data streams to the server for storage;

authenticating, by the server, the client device to create a session;

authorizing, by the server, the client device to access the plurality of data streams using at least one Access Control List (ACL) Group, wherein the ACL group comprises ACL value supporting multiple enabled bits per group, wherein a WebSocket connection is created by the server once the client device is both authenticated and authorized; and

transmitting, by the server the plurality of data streams to the client device via the WebSocket connection.

2. The method of claim 1, wherein the WebSocket connection includes a unique URL that is based on the plurality of data streams.

3. The method of claim 2, wherein a path component of the unique URL comprises a Type4 Globally Unique Identifier (GUID).

4. The method of claim 3, further comprising:

maintaining, by the server, a look-up table of a plurality of GUIDs that are each associated with a specific data stream request by each client device.

5. The method of claim 1, wherein the client device is any of a web services client server and a web services client browser.

6. The method of claim 1, wherein the plurality of data streams comprises a group stream that includes a plurality of individual vital sign data streams.

7. The method of claim 1, wherein the session includes a Session ID and identity information that is used on subsequent authentication requests by the client device.

8. The method of claim 1, wherein the authenticating utilizes any of HTTP basic authentication, HTTP digest authentication, OpenID authentication, and OAuth authentication.

9. The method of claim 1, wherein the authenticating further comprises:

receiving, by the server, an authentication request from the client device, wherein the authentication request includes a username and password;

authenticating, by the server, the username and password;

creating and storing, by the server, a Session ID associated with the session; and

transmitting, by the server, the Session ID to the client device.

10. The method of claim 1, further comprising:

creating, by the client device, the at least one ACL Group, wherein the at least one ACL Group includes a member list with a client ID of the client device, a permission description, and a resource name associated with the permission description.

11. The method of claim 10, wherein the authorizing further comprises:

receiving, by the server, a WebSocket request from the client device; and

checking, by the server, whether each of the plurality of data streams associated with the WebSocket request is authorized by the at least one ACL Group.

12. A system for securely transmitting a plurality of data streams, the system comprising:

a client device;

a server; and

a wearable device attached to a user to detect a plurality of data streams,

wherein the wearable device is configured to;

communicate with the server via standard Internet protocols,

retrieve a plurality of physiological signals via one or more sensors embedded in the wearable device,

utilize a plurality of algorithms to process raw waveforms of the plurality of physiological signals to form the plurality of data streams, and

transmit the plurality of data streams to the server for storage; and

wherein the server is configured to;

communicate with the client device via standard Internet protocols,

authenticate the client device to create a session,

authorize the client device to access the plurality of data streams using at least one Access Control List (ACL) Group,

wherein the ACL group comprises ACL value supporting multiple enabled bits per group,

create a WebSocket connection once the client device is both authenticated and authorized, and

transmit the plurality of data streams to the client device via the WebSocket connection.

13. The system of claim 12, wherein the WebSocket connection includes a unique URL that is based on the plurality of data streams, further wherein a path component of the unique URL comprises a Type4 Globally Unique Identifier (GUID).

14. The system of claim 12, wherein the server includes a look-up table of a plurality of GUIDs that are each associated with a specific data stream request by each client device.

15. The system of claim 12, wherein the plurality of data streams comprises a group stream that includes a plurality of individual vital sign data streams.

16. The system of claim 12, wherein the session includes a Session ID and identity information that is used on subsequent authentication requests by the client device.

17. The system of claim 12, wherein the at least one ACL Group is created by the client device, further wherein the at least one ACL Group includes a member list with a client ID of the client device, a permission description, and a resource name associated with the permission description.

18. The system of claim 17, wherein the server authorizes the client device further comprises the server receiving a WebSocket request from the client device and checking whether each of the plurality of data streams associated with the WebSocket request is authorized by the at least one ACL Group.