PROTECTING USER IDENTITY BY SHARING A SECRET BETWEEN PERSONAL IOT DEVICES

• US 20170346799A1
• Filed: 08/21/2017
• Published: 11/30/2017
• Est. Priority Date: 11/21/2014
• Status: Active Grant

• Current Assignee: McAfee, LLC
• Original Assignee: McAfee, Inc. (McAfee, LLC)
• Inventors: Pogorelik, Oleg, Nayshtut, Alex, Muttik, Igor, Lipman, Justin
• Granted Patent: US 10,498,715 B2
• Time in Patent Office: Days
• CPC Class Codes: G06F 21/6245 Protecting personal data, e.g. for financial or medical purposes
• CPC Class Codes: G06F 21/6263 during internet communication, e.g. revealing personal data from cookies
• CPC Class Codes: H04B 13/005 Transmission systems in which the medium consists of the human body
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/062 for key distribution, e.g. centrally by trusted party cryptographic mechanisms or cryptographic arrangements for key distribution involving a central third party H04L9/0819
• CPC Class Codes: H04L 9/085 Secret sharing or secret splitting, e.g. threshold schemes
• CPC Class Codes: H04W 12/04 Key management, e.g. using generic bootstrapping architecture [GBA]
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/33 using wearable devices, e.g. using a smartwatch or smart-glasses
• CPC Class Codes: H04W 4/38 for collecting sensor information
• CPC Class Codes: H04W 4/80 Services using short range communication, e.g. near-field communication [NFC], radio-frequency identification [RFID] or low energy communication

Abstract

A wearable device provides protection for personal identity information by fragmenting a key needed to release the personal identity information among members of a body area network of wearable devices. A shared secret algorithm is used to allow unlocking the personal identity information with fragmental keys from less than all of the wearable devices in the body area network. The wearable devices may also provide protection for other personal user data by employing a disconnect and erase protocol that causes wearable devices to drop connections with an external personal data space and erase locally stored personal information if a life pulse from a connectivity root device is not received within a configurable predefined period.

Claims

1. A programmable wearable device for use in a body area network, comprising:

a programmable processor; and

a memory, on which are stored instructions that when executed cause the programmable processor to;

receive a request for a fragmental key;

validate the request;

encrypt the fragmental key with a session key; and

transmit the fragmental key responsive to the request.

2. The programmable wearable device of claim 1, wherein the request is a broadcast request.

3. The programmable wearable device of claim 1, wherein the instructions that when executed cause the programmable processor to validate the request and encrypt the fragmental key with a session key are performed in a trusted execution environment.

4. The programmable wearable device of claim 1, further comprising:

a protected personal data area of a trusted execution environment, and

wherein the instructions further comprise instructions that when executed cause the programmable processor to;

erase the protected personal data area unless a life pulse is received within a predetermined time period.

5. The programmable wearable device of claim 4, wherein the instructions further comprise instructions that when executed cause the programmable processor to:

receive the life pulse; and

validate the life pulse.

6. The programmable wearable device of claim 4, where the instructions further comprise instructions that when executed cause the programmable processor to:

disconnect from a personal cloud service unless the life pulse is received within the predetermined time period.

7. A method of protecting personal information in a body area network, comprising:

receiving, by a programmable wearable device, a request for a fragmental key;

validating the request by the programmable wearable device;

encrypting, by the programmable wearable device, the fragmental key with a session key; and

transmitting, by the programmable wearable device, the fragmental key responsive to the request,

wherein the fragmental key is a fragment of an encryption key used for encrypting personal identity information.

8. The method of claim 7, wherein receiving a request for the fragmental key comprises receiving a broadcast request for the fragmental key.

9. The method of claim 7, where validating the request and encrypting the fragmental key with a session key are performed in a trusted execution environment.

10. The method of claim 7, further comprising:

storing, by the programmable wearable device, protected personal data in a protected personal data area of a trusted execution environment; and

erasing, by the programmable wearable device, the protected personal data in the protected personal data area of a trusted execution environment unless a life pulse is received within a predetermined time period.

11. The method of claim 10, further comprising:

receiving, by the programmable wearable device, the life pulse; and

validating the life pulse by the programmable wearable device.

12. The method of claim 10, further comprising:

disconnecting the programmable wearable device from a personal cloud service unless the life pulse is received within the predetermined time period.

13. The method of claim 10, further comprising:

provisioning the programmable wearable device by receiving and storing the fragmental key on the programmable wearable device.

14. A machine readable medium, on which are stored instructions for protecting personal information in a body area network, comprising instructions that when executed cause a programmable wearable device to:

receive a request for a fragmental key;

validate the request;

encrypt the fragmental key with a session key; and

transmit the fragmental key responsive to the request.

15. The machine readable medium of claim 14, wherein the request is a broadcast request.

16. The machine readable medium of claim 14, wherein the instructions that when executed cause the programmable wearable device to validate the request and encrypt the fragmental key with a session key are performed in a trusted execution environment of the programmable wearable device.

17. The machine readable medium of claim 14, wherein the instructions further comprise instructions that when executed cause the programmable wearable device to:

erase a protected personal data area of a trusted execution environment of the programmable wearable device unless a life pulse is received within a predetermined time period.

18. The machine readable medium of claim 17, wherein the instructions further comprise instructions that when executed cause the programmable wearable device to:

receive the life pulse; and

validate the life pulse.

19. The machine readable medium of claim 17, wherein the instructions further comprise instructions that when executed cause the programmable wearable device to:

disconnect from a personal cloud service unless the life pulse is received within the predetermined time period.

20. The machine readable medium of claim 14,

wherein the instructions further comprise instructions that when executed cause the programmable wearable device to:

receive a public key of an identity query responding wearable device, and

wherein the instructions that when executed cause the programmable wearable device to validate the request comprise instructions that when executed cause the programmable wearable device to;

validate the request using the public key of the identity query responding wearable device.