SYSTEM AND METHOD FOR PHYSIOLOGICAL DATA AUTHENTICATION AND BUNDLING WITH DELAYED BINDING OF INDIVIDUAL IDENTIFICATION

• US 20090070266A1
• Filed: 09/07/2007
• Published: 03/12/2009
• Est. Priority Date: 09/07/2007
• Status: Abandoned Application

• Current Assignee: Intel Corporation
• Original Assignee: Intel Corporation
• Inventors: Yarvis, Mark D., Shah, Rahul C.
• Application Number:
  US11/851,530
• Publication Number:
  US 20090070266A1
• Time in Patent Office: Days
• US Class Current: 705/51
• CPC Class Codes: A61B 5/0002 Remote monitoring of patients using telemetry, e.g. transmission of vital signals via a communication network A61B5/07 takes precedence; transmission systems for measured values G08C; transmission H04B; transmission of digital information H04L; wireless communication networks H04W
• CPC Class Codes: A61B 5/0006 ECG or EEG signals
• CPC Class Codes: G16H 10/60 for patient-specific data, e.g. for electronic patient records
• CPC Class Codes: G16H 40/67 for remote operation
• CPC Class Codes: H04L 2209/805 Lightweight hardware, e.g. radio-frequency identification [RFID] or sensor
• CPC Class Codes: H04L 9/3231 Biological data, e.g. fingerprint, voice or retina network architectures or network communication protocols for supporting authentication of entities using biometrical features in a packet data network H04L63/0861
• CPC Class Codes: H04L 9/3247 involving digital signatures
• CPC Class Codes: H04L 9/3297 involving time stamps, e.g. generation of time stamps

Abstract

A system and method for physiological data authentication and bundling with delayed binding of individual identification. In embodiments, the invention utilizes biometric data within a physiological data stream to allow for the late or delayed binding of the individual'"'"'s identity to that data stream. In addition, the source of one or more additional data streams may be identified by cryptographically binding them to an original data stream. Other embodiments are described and claimed.

Claims

1. A system, comprising:

a device to receive one or more streams of physiological data measured from an individual, wherein the device to aggregate the one or more received streams of physiological data into a data bundle and to sign the data bundle; and

a back-end server to receive the signed data bundle from the device, wherein the back-end server to validate the signed data bundle and, if valid, to determine an identity for the individual from the signed data bundle and to bind the identity of the individual to the one or more streams of physiological data.

2. The system of claim 1, wherein the signed data bundle to include a timestamp.

3. The system of claim 1, wherein the identity of the individual is determined by comparing previously stored biometric data for the individual and biometric data derived from the signed data bundle.

4. The system of claim 3, wherein the previously stored biometric data is stored at the back-end server.

5. The system of claim 1, wherein the one or more streams of physiological data are cryptographically bound together in the signed data bundle.

6. The system of claim 1, wherein the device uses a private key to sign the data bundle and wherein the back-end server to use a public key corresponding to the private key to validate the signed data bundle.

7. The system of claim 1, wherein the device uses a symmetric key to sign the data bundle and wherein the back-end server uses the symmetric key to validate the signed data bundle.

8. A method, comprising:

aggregating one or more received streams of physiological data into a data bundle;

signing the data bundle;

validating the signed data bundle at a back-end server;

if valid, determining an identity for the individual from the signed data bundle at the back-end server; and

binding the identity of the individual to the one or more streams of physiological data at the back-end server.

9. The method of claim 8, wherein the signed data bundle to include a timestamp.

10. The method of claim 8, wherein the determining the identity of the individual comprises:

comparing previously stored biometric data for the individual and biometric data derived from the signed data bundle for a match.

11. The method of claim 10, wherein the previously stored biometric data is stored at the back-end server.

12. The method of claim 8, wherein the one or more streams of physiological data are cryptographically bound together in the signed data bundle.

13. The method of claim 8, further comprising:

using a private key to sign the data bundle; and

and using a public key corresponding to the private key to validate the signed data bundle.

14. The method of claim 8, further comprising:

using a symmetric key to sign the data bundle; and

and using the symmetric key to validate the signed data bundle.

15. A machine-readable medium containing instructions which, when executed by a processing system, cause the processing system to perform a method, the method comprising:

aggregating one or more received streams of physiological data into a data bundle;

signing the data bundle;

validating the signed data bundle at a back-end server;

if valid, determining an identity for the individual from the signed data bundle at the back-end server; and

binding the identity of the individual to the one or more streams of physiological data at the back-end server.

16. The machine-readable medium of claim 15, wherein the signed data bundle to include a timestamp.

17. The machine-readable medium of claim 15, wherein the determining the identity of the individual comprises:

comparing previously stored biometric data for the individual and biometric data derived from the signed data bundle for a match.

18. The machine-readable medium of claim 17, wherein the previously stored biometric data is stored at the back-end server.

19. The machine-readable medium of claim 15, wherein the one or more streams of physiological data are cryptographically bound together in the signed data bundle.

20. The machine-readable medium of claim 15, further comprising:

using a private key to sign the data bundle; and

and using a public key corresponding to the private key to validate the signed data bundle.

21. The machine-readable medium of claim 15, further comprising:

using a symmetric key to sign the data bundle; and

and using the symmetric key to validate the signed data bundle.