ONE-TOUCH DEVICE PERSONALIZATION

• US 20140281490A1
• Filed: 03/13/2013
• Published: 09/18/2014
• Est. Priority Date: 03/13/2013
• Status: Active Grant

• Current Assignee: Intel Corporation
• Original Assignee: Intel Corporation
• Inventors: Prakash, Gyan, Bodio, James F.
• Granted Patent: US 9,712,508 B2
• Time in Patent Office: Days
• US Class Current: 713/155
• CPC Class Codes: G06F 11/1448 Management of the data involved in backup or backup restore
• CPC Class Codes: G06F 11/1451 by selection of backup contents
• CPC Class Codes: G06F 11/1461 Backup scheduling policy
• CPC Class Codes: G06F 11/1469 Backup restoration techniques
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: H04L 63/062 for key distribution, e.g. centrally by trusted party cryptographic mechanisms or cryptographic arrangements for key distribution involving a central third party H04L9/0819
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/35 Protecting application or service provisioning, e.g. securing SIM application provisioning
• CPC Class Codes: H04W 4/50 Service provisioning or reconfiguring
• CPC Class Codes: H04W 88/02 Terminal devices

Abstract

Technologies for one-touch device personalization include at least two mobile computing devices configured to communicate with a personalization server. The first mobile computing device tracks changes to device personalization data and backs up the personalization data to the personalization server. The personalization server associates the personalization data to authenticated user credentials. The personalization server may store the personalization data in an operating-system-independent format. Later, a second mobile computing device sends a request for personalization including those user credentials. After authenticating the user credentials, the personalization server sends the personalization data to the second mobile computing device, which installs the personalization data. Installing the personalization data establishes a configuration of the second mobile computing device corresponding to a previous configuration of the first mobile computing device. For increased convenience and security, the user credentials may be stored on a smart card or other security device. Other embodiments are described and claimed.

Claims

1. A mobile computing device to personalize settings comprising:

a user credential management module to determine user credentials associated with a personalization server;

a communication module to;

send the user credentials from the mobile computing device to the personalization server; and

receive personalization data from the personalization server in response to authentication of the user credentials by the personalization server, the personalization data originated from a different mobile computing device; and

a personalization management module to install the personalization data on the mobile computing device to establish a configuration of the mobile computing device corresponding to a previous configuration of the different mobile computing device.

2. The mobile computing device of claim 1, wherein the different mobile computing device has an operating system different from an operating system of the mobile computing device.

3. The mobile computing device of claim 1, wherein to determine the user credentials comprises to retrieve the user credentials from a physical security device separate from the mobile computing device.

4. The mobile computing device of claim 3, further comprising one of a near-field communication circuit or a universal serial bus, wherein the physical security device comprises one of a smart card communicatively coupled to the mobile computing device via the near-field communication circuit, the different mobile computing device communicatively coupled to the mobile computing device via the near-field communication circuit, or a memory card coupled to the mobile computing device via the universal serial bus.

5. The mobile computing device of claim 1, wherein to receive the personalization data comprises:

to receive a decryption key from the personalization server; and

to decrypt, using the decryption key, encrypted personalization data stored on a physical security device separate from the mobile computing device.

6. The mobile computing device of claim 1, wherein:

to install the personalization data comprises to install the personalization data for a temporary time period; and

the personalization management module is further to;

determine whether the temporary time period has expired; and

clear the personalization data in response to a determination that the temporary time period has expired to revert the configuration of the mobile computing device to an earlier configuration of the mobile computing device.

7. The mobile computing device of claim 1, wherein:

the personalization management module is further to monitor user activity and determine updated personalization data based on the user activity; and

the communication module is further to send the updated personalization data to the personalization server.

8. The mobile computing device of claim 7, wherein:

the communication module is further to receive, from the personalization server, an encryption key; and

the personalization management module is further to;

encrypt the updated personalization data using the encryption key; and

store the encrypted updated personalization data on a physical security device separate from the mobile computing device.

9. A personalization server to support mobile computing device personalization, the personalization server comprising:

a communication module to;

receive a first request to back up personalization data from a first mobile computing device, the first request comprises user credentials and the personalization data;

receive a second request for personalization data from a second mobile computing device, the second request comprises the user credentials; and

a personalization management module to;

store, on the personalization server, the personalization data in association with the user credentials in response to receipt of the first request; and

retrieve the personalization data based on the user credentials in response to receipt of the second request;

wherein the communication module is further to send the personalization data to the second mobile computing device in response to receipt of the second request.

10. The personalization server of claim 9, wherein to store the personalization data comprises to store the personalization data in an operating-system-independent data format.

11. The personalization server of claim 9, wherein the second mobile computing device has an operating system different from an operating system of the first mobile computing device.

12. The personalization server of claim 9, wherein:

the personalization management module is further to securely package an encryption key using the user credentials; and

the communication module is further to send the packaged encryption key to the first mobile computing device in response to receipt of the first request, the encryption key usable to encrypt the personalization data on the first mobile computing device.

13. The personalization server of claim 9, wherein:

the personalization management module is further to securely package a decryption key using the user credentials; and

the communication module is further to send the decryption key from the personalization server to the second mobile computing device in response to receiving the second request, the decryption key usable to decrypt the personalization data on the second mobile computing device.

14. A method for personalization of a mobile computing device, the method comprising:

determining, on the mobile computing device, user credentials associated with a personalization server;

sending the user credentials from the mobile computing device to the personalization server;

receiving, on the mobile computing device, personalization data from the personalization server in response to the user credentials being authenticated by the personalization server, the personalization data including personalization data originating from a different mobile computing device; and

installing the personalization data on the mobile computing device to establish a configuration of the mobile computing device corresponding to a previous configuration of the different mobile computing device.

15. The method of claim 14, wherein receiving the personalization data comprises receiving personalization data originating from the different mobile computing device having an operating system different from the operating system of the mobile computing device.

16. The method of claim 14, wherein determining the user credentials comprises retrieving the user credentials from a physical security device separate from the mobile computing device.

17. The method of claim 14, wherein installing the personalization data comprises installing the personalization data for a temporary time period, the method further comprising:

determining, on the mobile computing device, whether the temporary time period has expired; and

clearing, on the mobile computing device, the personalization data in response to determining the temporary time period has expired to revert the configuration of the mobile computing device to an earlier configuration of the mobile computing device.

18. The method of claim 14, further comprising:

monitoring, on the mobile computing device, user activity;

determining, on the mobile computing device, updated personalization data based on the user activity; and

sending the updated personalization data to the personalization server.

19. One or more machine readable storage media comprising a plurality of instructions that in response to being executed cause the mobile computing device to:

determine user credentials associated with a personalization server;

send the user credentials from the mobile computing device to the personalization server;

receive personalization data from the personalization server in response to authentication of the user credentials by the personalization server, the personalization data including personalization data originating from a different mobile computing device; and

install the personalization data on the mobile computing device to establish a configuration of the mobile computing device corresponding to a previous configuration of the different mobile computing device.

20. The machine readable media of claim 19, wherein to receive the personalization data comprises to receive personalization data originating from the different mobile computing device having an operating system different from the operating system of the mobile computing device.

21. The machine readable media of claim 19, wherein to determine the user credentials comprises to retrieve the user credentials from a physical security device separate from the mobile computing device.

22. The machine readable media of claim 21, wherein to retrieve the user credentials comprises one of to:

receive the user credentials from a smart card via a near-field communication capability of the mobile computing device;

receive the user credentials from the different mobile computing device via a near-field communication capability of the mobile computing device;

or

receive the user credentials from a memory card via a universal serial bus of the mobile computing device.

23. The machine readable media of claim 19, wherein to receive the personalization data comprises to:

receive a decryption key from the personalization server; and

decrypt, using the decryption key, encrypted personalization data stored on a physical security device separate from the mobile computing device.

24. The machine readable media of claim 19, further comprising a plurality of instructions that in response to being executed cause the mobile computing device to:

monitor user activity;

determine updated personalization data based on the user activity; and

send the updated personalization data to the personalization server.

25. The machine readable media of claim 24, further comprising a plurality of instructions that in response to being executed cause the mobile computing device to:

receive, from the personalization server, an encryption key;

encrypt the updated personalization data using the encryption key; and

store the encrypted updated personalization data on a physical security device separate from the mobile computing device.