Method, apparatus, and program product for provisioning secure wireless sensors

• US 20040266449A1
• Filed: 09/05/2003
• Published: 12/30/2004
• Est. Priority Date: 02/06/2002
• Status: Active Grant

• Current Assignee: Xerox Corporation (Xerox Holdings Corp.)
• Original Assignee: Palo Alto Research Center, Inc. (Xerox Holdings Corp.)
• Inventors: Smetters, Diana K., Balfanz, Dirk, Durfee, Glenn E., Wong, Hao-Chi, Stewart, Paul J., Grinter, Rebecca E.
• Granted Patent: US 7,937,089 B2
• Time in Patent Office: Days
• US Class Current: 455/452.1
• CPC Class Codes: A61B 5/0002 Remote monitoring of patients using telemetry, e.g. transmission of vital signals via a communication network A61B5/07 takes precedence; transmission systems for measured values G08C; transmission H04B; transmission of digital information H04L; wireless communication networks H04W
• CPC Class Codes: G08C 17/00 Arrangements for transmitting signals characterised by the use of a wireless electrical link
• CPC Class Codes: H04L 63/0442 wherein the sending and receiving network entities apply asymmetric encryption, i.e. different keys for encryption and decryption cryptographic mechanisms or cryptographic arrangements for public-key encryption H04L9/30
• CPC Class Codes: H04L 63/0492 by using a location-limited connection, e.g. near-field communication or limited proximity of entities
• CPC Class Codes: H04L 63/062 for key distribution, e.g. centrally by trusted party cryptographic mechanisms or cryptographic arrangements for key distribution involving a central third party H04L9/0819
• CPC Class Codes: H04L 63/18 using different networks or channels, e.g. using out of band channels cryptographic mechanisms or cryptographic arrangements for key distribution involving distinctive intermediate devices or communication paths H04L9/0827; cryptographic mechanisms or cryptographic arrangements for authentication using a plurality of channels H04L9/3215
• CPC Class Codes: H04W 12/04 Key management, e.g. using generic bootstrapping architecture [GBA]
• CPC Class Codes: H04W 12/35 Protecting application or service provisioning, e.g. securing SIM application provisioning
• CPC Class Codes: H04W 76/10 Connection setup
• CPC Class Codes: H04W 84/18 Self-organising networks, e.g. ad-hoc networks or sensor networks

Abstract

We present technology that allows layman computer users to simply create, provision, and maintain secured infrastructure—an instant PKI. This technology can be used in a wide variety of applications including wired and wireless networks, secure sensor networks (such as medical networks), emergency alert networks, as well as simply and automatically provisioning network devices whether secure or not.

Claims

1. A computer controlled method comprising:

establishing communication between a wireless sensor and a provisioning device over a preferred channel;

receiving provisioning information from said provisioning device over said preferred channel; and

automatically configuring said wireless sensor for transmitting sensor information over a secure communication channel responsive to said provisioning information.

2. The computer controlled method of claim 1, wherein said provisioning information comprises a credential.

3. The computer controlled method of claim 1, wherein said provisioning information further comprises one or more of patient data, limit data, alarm data, dosage data, interval data, access data, physician data, caregiver data, nurse data, insurance data or room assignment data.

4. The computer controlled method of claim 3, further comprising transmitting said sensor information over said secure communication channel.

5. The computer controlled method of claim 1, wherein said provisioning information further comprises one or more of sensitivity data, target data, image recognition data, or noise characteristics.

6. The computer controlled method of claim 1, wherein said wireless sensor senses one or more of medical information, location information, proximity information, environmental information, or vehicle information.

7. A computer-readable storage medium storing instructions that when executed by a computer in a wireless sensor to cause the computer to perform a method comprising steps of:

establishing communication between said wireless sensor and a provisioning device over a preferred channel;

receiving provisioning information from said provisioning device over said preferred channel; and

automatically configuring said wireless sensor for transmitting sensor information over a secure communication channel responsive to said provisioning information.

8. The computer-readable storage medium of claim 7, wherein said provisioning information comprises a credential.

9. The computer-readable storage medium of claim 7, wherein said provisioning information further comprises one or more of patient data, limit data, alarm data, dosage data, interval data, access data, physician data, caregiver data, nurse data, insurance data or room assignment data.

10. The computer-readable storage medium of claim 9, further comprising transmitting said sensor information over said secure communication channel.

11. The computer-readable storage medium of claim 7, wherein said provisioning information further comprises one or more of sensitivity data, target data, image recognition data, or noise characteristics.

12. The computer-readable storage medium of claim 7, wherein said wireless sensor senses one or more of medical information, location information, proximity information, environmental information, or vehicle information.

13. A wireless apparatus comprising:

at least one port configured to establish a preferred channel;

a preferred channel communication mechanism configured to be able to establish communication with a provisioning device over said preferred channel;

a receiver mechanism configured to be able to receive provisioning information from said provisioning device over said preferred channel; and

an automatic configuration mechanism to enable said wireless sensor to transmit sensor information over a secure communication channel established responsive to said provisioning information.

14. The apparatus of claim 13, wherein said provisioning information comprises a credential.

15. The apparatus of claim 13, wherein said provisioning information further comprises one or more of patient data, limit data, alarm data, dosage data, interval data, access data, physician data, caregiver data, nurse data, insurance data, room assignment data, sensitivity data, target data, image recognition data, activation data, or noise characteristics.

16. The apparatus of claim 15, further comprising a transmission mechanism configured to transmit said sensor information over said secure communication channel.

17. The apparatus of claim 13, wherein wireless apparatus further comprises a sensor for measuring said sensor information.

18. The apparatus of claim 13, wherein said wireless sensor senses one or more of medical information, location information, proximity information, environmental information, or vehicle information.

19. The apparatus of claim 13, wherein said sensor information is status information about the apparatus.