Method and apparatus for user centric private data management

• US 20070240226A1
• Filed: 03/28/2006
• Published: 10/11/2007
• Est. Priority Date: 03/28/2006
• Status: Abandoned Application

• Current Assignee: Samsung Electronics Co. Ltd.
• Original Assignee: Samsung Electronics Co. Ltd.
• Inventors: Messer, Alan, Song, Yu, Kunjithapatham, Anugeetha
• Application Number:
  US11/391,745
• Publication Number:
  US 20070240226A1
• Time in Patent Office: Days
• US Class Current: 726/27
• CPC Class Codes: G06Q 10/10 Office automation; Time management

Abstract

A data management method and system allows user centric, secured management and sharing of user information such as e-commerce data (including login details, credit card information etc.), policies and preferences set by a user in a networked home environment. A technique to encrypt and decrypt the user data is utilized, while physically storing the encrypted version of the data on a gateway device in the home rather than an online service/entity. It is in a user'"'"'s best interest to manage the user'"'"'s private information on the user side such that a user has absolute control over what, where the user'"'"'s information flows.

Claims

1. A method for user data management of networked devices, comprising the step of:

receiving user data via a device;

encrypting the user data using a key;

storing the encrypted user data in a designated device accessible by a plurality of devices;

whereby the user manages said user data such that the user has control over dissemination of the user data.

2. The method of claim 1 wherein the user data comprises one or more of e-commerce data, policies and preferences.

3. The method of claim 1 wherein the designated device comprises an essentially always available device.

4. The method of claim 3 wherein the designated device comprises a gateway device in a local network.

5. The method of claim 1 further comprising the steps of:

upon need to access the stored encrypted user data, accessing the stored encrypted user data in the central device, and performing decryption of the encrypted user data using said key.

6. The method of claim 1 wherein the steps of encrypting the user data further comprises the steps of performing encryption of the user data in a user device.

7. The method of claim 6 further comprising the steps of transmitting the encrypted user data to the designated device for storage therein such that encrypted user data is available to the user devices.

23. The system of claim 1 further comprising a plurality of security modules, each security module associates with a corresponding one of the plurality of user devices, wherein each of the plurality of devices includes a corresponding encryption key.

8. A method for user data management, comprising the step of:

installing a user device in the local network by;

generating an encryption key;

storing the key in the user device for use to encrypt any user data that the user may enter through the user device;

providing user data to the user device;

performing encryption on the user data using the key stored in the user device; and

transmitting the encrypted data for storage in a designated device accessible by a plurality of devices.

9. The method of claim 8 further comprising the steps of:

upon need to access the stored encrypted user data, accessing the stored encrypted user data in the designated device via said user device, and performing decryption of the encrypted user data using the key stored in the user device.

10. The method of claim 8 wherein the user data comprises one or more of e-commerce data, policies and preferences.

11. The method of claim 8 wherein the central device comprises an essentially always available device.

12. The method of claim 11 wherein the designated device comprises a gateway device in the local network.

13. The method of claim 8 wherein the steps of generating the encryption key further includes the steps of:

assigning an ID to the user device;

receiving a PIN from a user;

generating the encryption key based on the user device ID and the user PIN.

14. The method of claim 13 wherein the steps of assigning the ID further comprises the steps of using a public key infrastructure (PKI) for secret ID exchange, wherein the user device includes a device public key and device private key.

15. The method of claim 13 wherein the steps of assigning the ID further comprises the steps of assigning the ID using an authenticated Diffie-Hellman key exchange method.

16. A user data management system of connected devices, comprising:

a security module that receives user data via a device, and encrypts the user data using a corresponding encryption key, wherein each of a plurality of devices includes a corresponding encryption key;

wherein the security module stores the encrypted user data in a designated device accessible by a plurality of devices, such that the user manages said user data such that the user has control over dissemination of the user data.

17. The system of claim 16 further comprising a database in the designated device for storing encrypted user data from one or more user devices.

18. The system of claim 16 wherein the designated device comprises an essentially always available device.

19. The system of claim 18 wherein the central device comprises a gateway device in the local network.

20. The system of claim 16 wherein upon need to access the stored encrypted user data, the security module further accessing the stored encrypted user data in the central device, and performs decryption of the encrypted user data using said key.

21. The system of claim 16 wherein the security module is a component of said user device receiving user data.

22. The system of claim 21 wherein the user device transmits the encrypted user data to the designated device for storage therein such that encrypted user data is available to the user devices.