Method, apparatus, and program product for securely presenting situation information

• US 20040268119A1
• Filed: 09/05/2003
• Published: 12/30/2004
• Est. Priority Date: 06/24/2003
• Status: Active Grant

• Current Assignee: Xerox Corporation (Xerox Holdings Corp.)
• Original Assignee: Palo Alto Research Center, Inc. (Xerox Holdings Corp.)
• Inventors: Smetters, Diana K., Balfanz, Dirk, Durfee, Glenn E., Wong, Hao-Chi, Stewart, Paul J., Grinter, Rebecca E.
• Granted Patent: US 7,454,619 B2
• Time in Patent Office: Days
• US Class Current: 713/155
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 63/18 using different networks or channels, e.g. using out of band channels cryptographic mechanisms or cryptographic arrangements for key distribution involving distinctive intermediate devices or communication paths H04L9/0827; cryptographic mechanisms or cryptographic arrangements for authentication using a plurality of channels H04L9/3215
• CPC Class Codes: H04L 9/00 Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols

Abstract

We present technology that allows layman computer users to simply create, provision, and maintain secured infrastructure—an instant PKI. This technology can be used in a wide variety of applications including wired and wireless networks, secure sensor networks (such as medical networks), emergency alert networks, as well as simply and automatically provisioning network devices whether secure or not.

Claims

1. A computer controlled method comprising:

establishing communication between a situation notification device and a provisioning device over a preferred channel;

providing provisioning information to said situation notification device over said preferred channel, whereby said situation notification device is automatically configured to receive subject matter information responsive to said provisioning information;

receiving said subject matter information;

verifying said subject matter information with said provisioning information; and

presenting said subject matter information responsive to the step of verifying.

2. The computer controlled method of claim 1, wherein the step of providing further comprises:

exchanging key commitment information over said preferred channel between said provisioning device and said situation notification device;

receiving a public key by said situation notification device;

verifying said public key with said key commitment information; and

receiving a credential authorized by a credential issuing authority.

3. The computer controlled method of claim 1, wherein said preferred channel is a location-limited channel.

4. The computer controlled method of claim 1, wherein said preferred channel uses a telephone switching system.

5. The computer controlled method of claim 1, wherein said preferred channel has a demonstrative identification property and an authenticity property.

6. The computer controlled method of claim 1, wherein subject matter information is received using an antenna, a telephone line, a local area network, a wide area network, a wireless network, or a broadcast network.

7. The computer controlled method of claim 1, wherein said situation notification device is a computer, a television, a radio, a telephone, a push to talk device, a pager, a clock, a thermostat, a network appliance, or a home appliance.

8. The computer controlled method of claim 1, further comprising forwarding said subject matter information.

9. The computer controlled method of claim 1, wherein said subject matter information is alarm information.

10. A computer-readable storage medium storing instructions that when executed by a computer cause the computer to present subject matter information, the method comprising steps of:

establishing communication between a situation notification device and a provisioning device over a preferred channel;

providing provisioning information to said situation notification device over said preferred channel, whereby said situation notification device is automatically configured to receive said subject matter information responsive to said provisioning information;

receiving said subject matter information;

verifying said subject matter information with said provisioning information; and

presenting said subject matter information responsive to the step of verifying.

11. The computer-readable storage medium of claim 10, wherein the step of providing further comprises:

exchanging key commitment information over said preferred channel between said provisioning device and said situation notification device;

receiving a public key by said situation notification device;

verifying said public key with said key commitment information; and

receiving a credential authorized by a credential issuing authority.

12. The computer-readable storage medium of claim 10, wherein said preferred channel is a location-limited channel.

13. The computer-readable storage medium of claim 10, wherein said preferred channel uses a telephone switching system.

14. The computer-readable storage medium of claim 10, wherein said preferred channel has a demonstrative identification property and an authenticity property.

15. The computer-readable storage medium of claim 10, wherein subject matter information is received using an antenna, a telephone line, a local area network, a wide area network, a wireless network, or a broadcast network.

16. The computer-readable storage medium of claim 10, wherein said situation notification device is a computer, a television, a radio, a telephone, a push to talk device, a pager, a clock, a thermostat, a network appliance, or a home appliance.

17. The computer-readable storage medium of claim 10, further comprising forwarding said subject matter information.

18. The computer-readable storage medium of claim 10, wherein said subject matter information is alarm information.

19. An apparatus comprising:

at least one port configured to establish a preferred channel;

a first communication mechanism configured to receive provisioning information over said preferred channel, whereby the apparatus is configured to be able to receive subject matter information responsive to said provisioning information;

a second communication mechanism configured to receive said subject matter information subsequent to operation of the first communication mechanism;

a verification mechanism configured to verify said subject matter information with said provisioning information; and

a presentation mechanism configured to present said subject matter information responsive to the verification mechanism.

20. The apparatus of claim 19, wherein the first communication mechanism further comprises:

a key commitment receiver mechanism configured to receive key commitment information through said at least one port;

a key receiver mechanism configured to receive a public key;

a pre-authentication mechanism configured to verify said public key with said key commitment information; and

a credential provisioning mechanism configured to be able to automatically provide a credential authorized by a credential issuing authority responsive to the pre-authentication mechanism.

21. The apparatus of claim 19, wherein said preferred channel is a location-limited channel.

22. The apparatus of claim 19, wherein said preferred channel uses a telephone switching system.

23. The apparatus of claim 19, wherein said preferred channel has a demonstrative identification property and an authenticity property.

24. The apparatus of claim 19, wherein subject matter information is received using an antenna, a telephone line, a local area network, a wide area network, a wireless network, or a broadcast network.

25. The apparatus of claim 19, wherein the apparatus is within a computer, a television, a radio, a telephone, a push to talk device, a pager, a clock, a thermostat, a network appliance, or a home appliance.

26. The apparatus of claim 19, further comprising a forwarding mechanism configured to forward said subject matter information.

27. The apparatus of claim 19, wherein said subject matter information is alarm information.