Data loader using location identity to provide secure communication of data to recipient devices

• US 20040078594A1
• Filed: 10/22/2002
• Published: 04/22/2004
• Est. Priority Date: 10/22/2002
• Status: Active Grant

• Current Assignee: Longbeam Technologies LLC (IP Edge LLC)
• Original Assignee: Geocodex LLC
• Inventors: Scott, Logan
• Granted Patent: US 7,512,989 B2
• Time in Patent Office: Days
• US Class Current: 713/201
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/0464 using hop-by-hop encryption, i.e. wherein an intermediate entity decrypts the information and re-encrypts it before forwarding it

Abstract

A data loader device is used to convey digital data in a secure manner to another device. The data loader may be fixed (referred to as a Class_A loader) or portable (referred to as a Class_B loader). The data loader encrypts the digital data using a location-identity that permits the digital data to be transferred only if the data loader is disposed at an appropriate location. The fixed data loader remains in a stationary location, and a device to be loaded is brought to the data loader for loading. The portable data loader can be loaded by the fixed data loader, and then transported to another location to load a recipient device. The digital data that is conveyed is unrestricted in nature, and can include keys, navigational information, watermarking parameters, or any other digital content requiring secure delivery. In an embodiment, the data loader device includes a “no-move” system that precludes compromise of data contained therein if the data loader device is moved. Upon detection of movement above a predefined threshold level, the “no-move” system produces an alarm condition that inhibits operation of the device.

Claims

1. An apparatus for distributing data, comprising:

a service profile containing customer location information and original data to be distributed to at least one customer; and

a fill data generator adapted to generate fill data based on said original data and transfer said fill data to a recipient device, said fill data being generated in accordance with said customer location information such that said original data can only be recovered from said fill data if said recipient device is located at said location of said at least one customer.

2. The apparatus of claim 1, further comprising means for identifying a current location of said apparatus, said fill data generator being inhibited from generating said fill data if said identified current location is not consistent with a predetermined location for said apparatus.

3. The apparatus of claim 2, wherein said location identifying means further comprises a GPS satellite navigation signal receiver.

4. The apparatus of claim 2, wherein said location identifying means further comprises an assisted-GPS signal receiver.

5. The apparatus of claim 2, wherein said location identifying means further comprises a motion detector adapted to detect movement of said apparatus, wherein detected movement above a predefined threshold level produces an alarm condition.

6. The apparatus of claim 5, wherein said original data is destroyed upon said alarm condition.

7. The apparatus of claim 5, wherein said location identifying means further comprises a timer adapted to permit a period of time for transport of said apparatus without producing said alarm condition.

8. The apparatus of claim 1, wherein said original data further comprises at least one random key.

9. The apparatus of claim 1, further comprising a geodetic information converter adapted to convert said customer location information into geodetic information.

10. The apparatus of claim 1, wherein said fill data further comprises an estimate of time delay of signals communicated to said customer location via a cable plant.

11. An apparatus for distributing data, comprising:

a data memory storing locked fill data received from a loader device;

a location identifying device to identify a current location for said apparatus; and

a fill data converter recovering fill data from said locked fill data and transferring said fill data to a customer recipient device, said fill data being recovered only if said current location is consistent with a predetermined customer location.

12. The apparatus of claim 11, wherein said location identifying device further comprises a GPS satellite navigation signal receiver.

13. The apparatus of claim 12, wherein said location identifying device further comprises a location memory adapted to store a last known current location for a predetermined period of time upon detecting a GPS satellite navigation signal outage condition.

14. The apparatus of claim 11, wherein said fill data further comprises an estimate of time delay of signals communicated to said customer location via a cable plant.

15. The apparatus of claim 11, wherein said fill data further comprises an accurate time hack.

16. A communication network, comprising:

a data originator device having digital data to be distributed, said data originator device adding a first level of encryption to said digital data such that said first level of encryption can only be removed at a first predetermined location;

a first data loading device disposed at said first predetermined location and adapted to receive said digital data having said first level of encryption, said first data loading device removing said first level of encryption from said digital data and adding a second level of encryption to said digital data such that said second level of encryption can only be removed at a second predetermined location; and

a recipient device adapted to receive said digital data having said second level of encryption, said recipient device removing said second level of encryption from said digital data only when disposed at said second predetermined location.

17. The communication network of claim 16, wherein said first data loading device adding a third level of encryption to said digital data such that said third level of encryption can only be removed at a third predetermined location.

18. The communication network of claim 17, further comprising a second data loading device adapted to receive from said first data loading device said digital data having said second and third levels of encryption, said second data loading device removing said third level of encryption from said digital data only when disposed at said third predetermined location, said second data loading device thereafter providing to said recipient device said digital data with said second level of encryption remaining.

19. The communication network of claim 18, wherein said second data loading device is portable.

20. The communication network of claim 16, wherein said digital data further comprises a random key used by said data owner device to encrypt data content prior to distribution to said recipient device, wherein said recipient device uses said random key to decrypt said data content.

21. The communication network of claim 16, wherein said first data loading device adding auxiliary data to said digital data prior to adding said second level of encryption, said recipient device recovering both said auxiliary data and said digital data upon removal of said second level of encryption.

22. The communication network of claim 18, wherein said second data loading device providing a corresponding device identification (ID) to said first data loading device, said first data loading device using said device ID to verify that said second data loading device is authorized to receive said digital data having said second and third levels of encryption.

23. The communication network of claim 22, wherein said recipient device providing a corresponding device identification (ID) to said second data loading device, said second data loading device using said device ID to verify that said recipient device is authorized to receive said digital data having said second level of encryption.

24. A method for communicating data, comprising the steps of:

originating digital data to be distributed;

adding a first level of encryption to said digital data such that said first level of encryption can only be removed at a first predetermined location;

loading said digital data having said first level of encryption into a first loading device;

removing said first level of encryption from said digital data only if said first loading device is disposed at said first predetermined location, and adding a second level of encryption to said digital data such that said second level of encryption can only be removed at a second predetermined location;

loading said digital data having said second level of encryption into a recipient device; and

removing said second level of encryption from said digital data only if said recipient device is disposed at said second predetermined location.

25. The method of claim 24, further comprising the step of adding a third level of encryption to said digital data such that said third level of encryption can only be removed at a third predetermined location.

26. The method of claim 25, further comprising the steps of loading said digital data having said second and third levels of encryption from said first loading device into a second loading device, and removing said third level of encryption from said digital data only if said second loading device is disposed at said third predetermined location.

27. The method of claim 26, further comprising the step of transporting said second loading device from said first predetermined location to said second predetermined location.

28. The method of claim 24, wherein said digital data further comprises a random key used to encrypt data content prior to distribution to said recipient device, further comprising the step of decrypting said data content using said random key.

29. The method of claim 24, further comprising the step of adding auxiliary data to said digital data prior to adding said second level of encryption.

30. The method of claim 26, further comprising the steps of providing a device identification (ID) from said recipient device to said second data loading device, and using said device ID to verify that said recipient device is authorized to receive said digital data having said second level of encryption.

31. A data-handling apparatus, comprising:

a cipher device to perform cipher functions on digital data in accordance with a location identity such that said cipher functions are only performed if a current physical location of said apparatus corresponds to predetermined location parameters;

means for identifying said current physical location of said apparatus; and

a motion detector adapted to detect movement of said apparatus from said current physical location, wherein upon detection of movement above a predefined threshold level said motion detector produces an alarm condition that inhibits operation of said cipher device.

32. The data-handling apparatus of claim 31, wherein said cipher device destroys said digital data upon said alarm condition.

33. The data-handling apparatus of claim 32, wherein said digital data further comprises at least one key used by said cipher device.

34. The data-handling apparatus of claim 31, further comprising a timer coupled to said motion detector to define a period of time for transport of said apparatus without producing said alarm condition.

35. The data-handling apparatus of claim 31, wherein said location identifying means further comprises a GPS satellite navigation signal receiver.

36. The data-handling apparatus of claim 31, wherein said location identifying means further comprises an assisted-GPS system.

37. The data-handling apparatus of claim 31, wherein a last known physical location of said apparatus is utilized during conditions in which said identifying means is unable to identify said current physical location.

38. The data-handling apparatus of claim 31, wherein said location identifying means further comprises a memory adapted to store location information loaded by an external device.

39. A method for handling data, comprising the steps of:

performing cipher functions on digital data in accordance with a location identity such that said cipher functions are only performed if a current physical location corresponds to predetermined location parameters;

identifying said current physical location; and

detecting movement from said current physical location beyond a predefined threshold level and producing an alarm condition that inhibits performance of said cipher functions.

40. The method of claim 39, further comprising destroying said digital data upon said alarm condition.

41. The method of claim 40, wherein said digital data further comprises at least one key used in performance of said cipher functions.

42. The method of claim 39, further comprising precluding said alarm condition for a predetermined period of time.

43. The method of claim 39, wherein said identifying step further comprises identifying location using GPS satellite navigation signals.

44. The method of claim 39, wherein said identifying step further comprises identifying location using assisted-GPS signals.

45. The method of claim 39, further comprising utilizing a last known physical location during conditions in which said current physical location cannot be identified.

46. The method of claim 39, wherein said identifying step further comprises loading location information from an external device.