MOBILE ELECTRONIC SECURITY APPARATUS AND METHOD

• US 20090203355A1
• Filed: 02/05/2009
• Published: 08/13/2009
• Est. Priority Date: 02/07/2008
• Status: Active Grant

• Current Assignee: Inflexis, LLC
• Original Assignee: Icloak, Inc.
• Inventors: Clark, Garrett
• Granted Patent: US 8,244,211 B2
• Time in Patent Office: Days
• US Class Current: 455/411
• CPC Class Codes: G06F 21/32 using biometric data, e.g. fingerprints, iris scans or voiceprints
• CPC Class Codes: G06F 21/34 involving the use of external additional devices, e.g. dongles or smart cards
• CPC Class Codes: G06F 21/81 by operating on the power supply, e.g. enabling or disabling power-on, sleep or resume operations
• CPC Class Codes: G06V 40/12 Fingerprints or palmprints
• CPC Class Codes: H04M 1/66 with means for preventing unauthorised or fraudulent calling verifying user identity or authority in secret or secure digital communications H04L9/32
• CPC Class Codes: H04M 1/72409 by interfacing with external accessories hands-free H04M1/60
• CPC Class Codes: H04M 2250/12 including a sensor for measuring a physical value, e.g. temperature or motion telephones including GPS signal receivers H04M2250/10

Abstract

A mobile electronic security device may include a biometric sensor to measure a physical characteristic of a user, an interface component to operatively couple the electronic security device with another device, and a control circuit that are assembled as a single portable unit. Other components, such as a battery, a display, and a memory may be included in the security device. The security device authenticates the identity of a user using output data from the biometric sensor and, in some embodiments, using data from an environmental sensor. Once validated, an encrypted authentication certificate may be output to another device. The security device provides a trusted platform that enables a user to verify his or her identity, show proof of presence of the user, control access to data, etc., and may operate in a standalone manner and/or in conjunction with another device.

Claims

1. A mobile electronic security device, comprising:

a biometric sensor to measure a physical characteristic of a user;

an interface component to operatively couple the electronic security device with another device;

a control circuit; and

a housing to retain the biometric sensor, the interface component, and the control circuit together as a single portable unit, wherein;

when the biometric sensor measures the characteristics of the user, the control circuit authenticates the identity of the user; and

when operatively coupled to the other device, the mobile electronic security device virtually emulates characteristics of a third device and outputs authentication data to validate the user so that the other device interacts with the mobile electronic security device as if the mobile electronic security device is the third device.

2. The device of claim 1, wherein the emulated third device is one of a mass storage device, a communication device, a printer, a smart card reader and smart card, a hardware key, a one time password generator, or a USB token.

3. The device of claim 1, wherein the mobile electronic security device is dynamically reconfigured from one operational profile to another operational profile so as to virtually emulate the characteristics of the third device by one of a user input or an authorized command sent by the operatively coupled other device.

4. The device of claim 1, wherein the mobile electronic security device does not rely on non-native executable routines of the other device to emulate the third device so as to be a zero software footprint device relative to the other device.

5. The device of claim 1, further comprising a battery to supply operating power the mobile electronic security device to operate in a standalone manner.

6. The device of claim 5, wherein the mobile electronic security device is coupled to the other device after authentication of the identity of the user.

7. The device of claim 1, further comprising a display to display information to the user, the display retained by the housing as part of the portable unit.

8. The device of claim 1, wherein the mobile electronic security device emulates a first type of device in a first operational context and emulates a second type of device in a second operational context.

9. The device of claim 1, wherein the mobile electronic security device carries out a first function in a first operational context and carries out a second function in a second operational context.

10. The device of claim 1, wherein the authentication is performed by the mobile electronic security device by comparing template data stored by the mobile electronic security device against data from the biometric sensor and, following authentication, the mobile electronic security device outputs an encrypted certificate indicating user authentication to the other device.

11. The device of claim 1, wherein the control circuit will not carry out a non-validated logic routine.

12. The device of claim 1, wherein the other device is a peer device and the mobile electronic security device asserts administrative control over the peer device.

13. The device of claim 1, wherein the other device is a second mobile electronic security device.

14. The device of claim 1, wherein the other device is a computer.

15. The device of claim 1, wherein the mobile electronic security device and the other device are remotely coupled through a network.

16. The device of claim 1, wherein the interface component is an electrical connector.

17. The device of claim 1, wherein the interface component is a wireless adapter.

18. A mobile electronic security device, comprising:

a biometric sensor to measure a physical characteristic of a user;

an environmental sensor;

an interface component to operatively couple the electronic security device with another device;

a control circuit; and

a housing to retain the biometric sensor, the environmental sensor, the interface component, and the control circuit together as a single portable unit, wherein;

the control circuit authenticates the identity of the user based on a combination of measurements made by the biometric sensor and the environmental sensor; and

when operatively coupled to the other device, the mobile electronic security device outputs authentication data to validate the user.

19. The device of claim 18, wherein the environmental sensor measures one of spatial orientation, geographic location, a gesture made by the user, movement of the device, elapsed time, or button actuation.

20. The device of claim 18, wherein the environmental sensor is one of an accelerometer, a gyroscope, a position determining assembly, a microphone, a camera, or a push-button.

21. The device of claim 18, wherein the mobile electronic security device carries out a first function in a first operational context and carries out a second function in a second operational context.

22. The device of claim 18, wherein the authentication is performed by the mobile electronic security device by comparing template data stored by the mobile electronic security device against data from the biometric sensor and the environmental sensor and, following authentication, the mobile electronic security device outputs an encrypted certificate indicating user authentication to the other device.

23. The device of claim 18, wherein the control circuit will not carry out a non-validated logic routine.

24. A method of establishing security authorization using mobile electronic security devices, comprising:

defining a level of authority that a mobile electronic security device must possess to access another electronic device, the level of authority being a joint authorization established by a predetermined number of mobile electronic security devices;

exchanging identification and logical access data between mobile electronic security devices and creating an associated authentication certificate;

operatively coupling at least one of the mobile electronic security devices to the other device; and

presenting the authentication certificate to the other device and granting access to the other device if the authority certificate is valid.