System and method for creating and managing a trusted constellation of personal digital devices

• US 20060294585A1
• Filed: 06/24/2005
• Published: 12/28/2006
• Est. Priority Date: 06/24/2005
• Status: Abandoned Application

• Current Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Original Assignee: Microsoft Corporation
• Inventors: Sadovsky, Vladimir, Rosenbloom, Oren
• Application Number:
  US11/166,739
• Publication Number:
  US 20060294585A1
• Time in Patent Office: Days
• US Class Current: 726/17
• CPC Class Codes: G06F 21/445 by mutual authentication, e.g. between devices or programs
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/104 Grouping of entities
• CPC Class Codes: H04W 12/062 Pre-authentication
• CPC Class Codes: H04W 12/068 using credential vaults, e.g. password manager applications or one time password [OTP] applications
• CPC Class Codes: H04W 12/069 using certificates or pre-shared keys
• CPC Class Codes: H04W 12/082 using revocation of authorisation
• CPC Class Codes: H04W 12/084 using delegated authorisation, e.g. open authorisation [OAuth] protocol

Abstract

A system comprises a PC and a plurality of personal digital devices, each device to store one of a plurality of sets of credentials in an internal secured storage area. A method of managing a constellation of trusted devices comprises coupling a device with the PC, adding the device to the constellation if the device is not a member of the constellation, and transmitting the set of credentials from the PC to the internal secured storage area if the device does not have the credentials. A method of enabling communication between devices comprises coupling a first personal digital device with a second personal digital device, validating both devices, authenticating both devices, and prompting both devices to couple with the PC to become members of the constellation and obtain new sets of credentials if both devices are not authenticated and validated.

Claims

1. A system, comprising:

a personal computer to manage a constellation of trusted devices, comprising;

a database to store a plurality of sets of credentials;

a plurality of personal digital devices in the constellation, each device comprising;

an internal secured storage area to store one of the plurality of sets of credentials;

wherein the plurality of personal digital devices are each coupled with the personal computer to receive one of the plurality of sets of credentials via secured wireless or wired coupling or via transportable storage media.

2. The system of claim 1, wherein a standardized data exchange protocol is used to transmit the plurality of sets of credentials from the personal computer to the plurality of personal digital devices.

3. The system of claim 2, wherein the standardized data exchange protocol is MTP (media transfer protocol).

4. The system of claim 1, wherein the plurality of sets of credentials are stored in each internal secured storage area through firmware operations, updating the internal secured storage areas.

5. The system of claim 1, wherein the personal computer further comprises:

a user interface to authenticate a user and to enable the user to manage the constellation.

6. The system of claim 5, wherein the user authentication comprises receiving at least a portion of each of the plurality of sets of credentials from the user.

7. The system of claim 5, wherein the user managing the constellation comprises managing privileges of the plurality of personal digital devices.

8. The system of claim 5, wherein the user managing comprises canceling the plurality of sets of credentials.

9. The system of claim 5, wherein the user managing comprises updating the plurality of sets of credentials.

10. A method, comprising:

coupling a personal digital device with a personal computer via secured wireless or wired coupling or via transportable storage media;

determining whether the personal digital device is a member of a constellation of trusted devices;

if the personal digital device is not a member of the constellation, adding the personal digital device to the constellation;

determining whether the personal digital device has a set of credentials stored in an internal secured storage area; and

if the personal digital device does not have the set of credentials stored in the internal secured storage area, transmitting the set of credentials from a database in the personal computer to the internal secured storage area on the personal digital device.

11. The method of claim 10, wherein a standardized data exchange protocol is used to transmit the set of credentials from the personal computer to the personal digital device.

12. The method of claim 11, wherein the standardized data exchange protocol is MTP (media transfer protocol).

13. The system of claim 10, further comprising:

storing the set of credentials in the internal secured storage through a firmware operation, updating the internal secured storage area.

14. The system of claim 10, further comprising:

authenticating a user on the personal computer; and

enabling the user to manage the constellation on the personal computer.

15. The system of claim 14, wherein the user authentication comprises receiving at least a portion of the set of credentials from the user.

16. The system of claim 10, further comprising:

managing privileges of the personal digital device.

17. The system of claim 10, further comprising:

canceling the set of credentials.

18. The system of claim 10, further comprising:

updating the set of credentials.

19. A method, comprising:

coupling a first personal digital device with a second personal digital device;

determining whether the second device is a member of a constellation of trusted devices of which the first device is a member;

if the second device is a member of the constellation, authenticating the second device and determining whether the second device has at least a portion of a set of credentials in an internal secured storage area;

if the second device has the at least a portion of the set of credentials, validating the second device and enabling communication between the devices; and

if the second device is not authenticated and validated, prompting the second device to couple with a personal computer to become a member of the constellation and obtain a new set of credentials via secured wireless or wired coupling or via transportable storage media.

20. The method of claim 19, wherein MTP (media transfer protocol) is used to communicate between both devices.