Systems and methods for preserving confidentiality of sensitive information in a point-of-care communications environment

• US 7,430,671 B2
• Filed: 03/31/2004
• Issued: 09/30/2008
• Est. Priority Date: 03/31/2004
• Status: Active Grant

• Current Assignee: Avaya Incorporated
• Original Assignee: Nortel Networks Limited (Nortel Networks Corporation)
• Inventors: Fitchett, Jeffrey, Graves, Alan Frank, Watkins, John
• Primary Examiner(s): Zand, Kambiz
• Assistant Examiner(s): POLTORAK, PIOTR
• Application Number:
  US10/813,358
• Publication Number:
  US 20050223222A1
• Time in Patent Office: 1,644 Days
• Field of Search: None
• US Class Current: 713/193
• CPC Class Codes: H04L 2209/80 Wireless network architectures or network communication protocols for wireless network security H04W12/00
• CPC Class Codes: H04L 2209/88 Medical equipments
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 9/0894 Escrow, recovery or storing of secret information, e.g. secret key escrow or cryptographic key storage

Abstract

A data processing apparatus comprises a memory store; a data bus connected to the memory store, the data bus being adapted for transporting data to and from the memory store; a processing entity operative to release read and write commands towards the memory store, the write command being accompanied by first data intended to be written to the memory store; and an encryption module communicatively coupled to the processing entity and to the data bus. Upon the processing entity releasing a write command accompanied by said first data, the encryption module encrypts, in accordance with an encryption key, said first data and send an encrypted version of said first data onto the data bus for writing into the memory store. The reverse operation is performed upon the processing entity releasing a read command.

Claims

1. An end user device for communication with a server, comprising:

a control entity operative to support a session with the server for an authenticated user;

a memory store operative to store sensitive information during the session;

a user interface for interfacing with the authenticated user; and

a network interface for interfacing with the server;

the control entity being further operative to (i) apply a policy based on stimuli received via the user interface and the network interface to determine whether confidentiality of the sensitive information stored in the memory store is to be preserved and (ii) responsive to determining that confidentiality of the sensitive information stored in the memory store is to be preserved, take an action to preserve confidentiality of the sensitive information stored in the memory store;

wherein said stimuli comprise user commands received via the user interface and wherein determining that confidentiality of the sensitive information stored in the memory store is to be preserved comprises detecting a user command to terminate the session;

wherein said stimuli comprise user commands received via the user interface and wherein determining that confidentiality of the sensitive information stored in the memory store is to be preserved comprises detecting a user command to suspend the session;

wherein said stimuli comprise user commands received via the user interface and wherein determining that confidentiality of the sensitive information stored in the memory store is to be preserved comprises detecting a user command to authenticate a new user other than the authenticated user;

wherein said stimuli comprise network commands received via the network interface and wherein determining that confidentiality of the sensitive information stored in the memory store is to be preserved comprises detecting a network command to terminate the session;

wherein said stimuli comprise network commands received via the network interface and wherein determining that confidentiality of the sensitive information stored in the memory store is to be preserved comprises detecting a network command to suspend the session;

wherein said stimuli comprise pilot messages received via the network interface and wherein determining that confidentiality of the sensitive information stored in the memory store is to be preserved comprises detecting a prolonged absence of pilot messages received from the network interface.

2. The end user device defined in claim 1, further comprising an RF-ID detector operative to detecting an identification code of a potential user proximate to the end user device, the RF-ID detector further operative to provide a detected identification code to the control entity.

3. The end user device defined in claim 2, the control entity being adapted to effect a comparison of the detected identification code to an identification code associated with the authenticated user.

4. The end user device defined in claim 3, the control entity being adapted to estimate a distance between the authenticated user and the end user device based on the comparison.

5. The end user device defined in claim 4, wherein said stimuli comprise the distance estimated by the control entity and wherein determining that confidentiality of the sensitive information stored in the memory store is to be preserved comprises detecting that said distance exceeds a predetermined threshold.

6. The end user device defined in claim 4, wherein said stimuli comprise the distance estimated by the control entity and wherein determining that confidentiality of the sensitive information stored in the memory store is to be preserved comprises detecting that said distance continuously exceeds a predetermined threshold for a predetermined amount of time.

7. The end user device defined in claim 4, wherein said stimuli comprise the distance estimated by the control entity and wherein determining that confidentiality of the sensitive information stored in the memory store is to be preserved comprises detecting that an integral of said distance over time exceeds a predetermined threshold.

8. The end user device defined in claim 7, the control entity being adapted to receive an indication of a distance between the authenticated user and the end user device.

9. The end user device defined in claim 8, wherein said stimuli comprise said distance and wherein determining that confidentiality of the sensitive information stored in the memory store is to be preserved comprises detecting that said distance exceeds a predetermined threshold.

10. The end user device defined in claim 8, wherein said stimuli comprise the distance and wherein determining that confidentiality of the sensitive information stored in the memory store is to be preserved comprises detecting that said distance continuously exceeds a predetermined threshold for a predetermined amount of time.

11. The end user device defined in claim 8, wherein said stimuli comprise the distance and wherein determining that confidentiality of the sensitive information stored in the memory store is to be preserved comprises detecting that an integral of said distance over time exceeds a predetermined threshold.

12. The end user device defined in claim 1, wherein the control entity being operative to take an action to preserve confidentiality of the sensitive information stored in the memory store comprises rendering the sensitive information stored in the memory store inaccessible to potential users of the end user device other than the authenticated user.

13. The end user device defined in claim 1, wherein the control entity being operative to take an action to preserve confidentiality of the sensitive information stored in the memory store comprises erasing the sensitive information from the memory store.

14. The end user device defined in claim 1, wherein the control entity being operative to take an action to preserve confidentiality of the sensitive information stored in the memory store comprises scrambling the sensitive information in the memory store.

15. The end user device defined in claim 1, wherein the control entity being operative to take an action to preserve confidentiality of the sensitive information stored in the memory store comprises disabling the user interface.

16. The end user device defined in claim1, further comprising

a data bus connected to the memory store, the data bus being adapted for transporting data to and from the memory store;

an encryption module communicatively coupled to the control entity and to the data bus;

the control entity being further operative to release read and write commands towards the memory store, the write command being accompanied by first data intended to be written to the memory store;

upon the control entity releasing a write command accompanied by said first data, the encryption module being operative to encrypt, in accordance with an encryption key, said first data and send an encrypted version of said first data onto the data bus for writing into the memory store;

upon the control entity releasing a read command, the encryption module being operative to decrypt, in accordance with a decryption key, an encrypted version of second data received from the memory store via the data bus and provide said second data to the control entity.

17. The end user device defined in claim 16, wherein the control entity being operative to take an action to preserve confidentiality of the sensitive information stored in the memory store comprises changing the decryption key.

18. The end user device defined in claim 16, wherein the control entity being operative to take an action to preserve confidentiality of the sensitive information stored in the memory store comprises deleting the decryption key.

19. The end user device defined in claim 16, wherein the control entity being operative to take an action to preserve confidentiality of the sensitive information stored in the memory store comprises causing the encryption module to use a new decryption key different from the previous decryption key.

20. The end user device defined in claim 19, wherein the control entity being operative to take an action to preserve confidentiality of the sensitive information stored in the memory store further comprises storing the previous decryption key prior to causing the encryption module to use the new decryption key.

21. The end user device defined in claim 20, the control entity further operative to (iii) determine whether confidentiality of the sensitive information stored in the memory store no longer needs to be preserved and (iv) responsive to determining that confidentiality of the sensitive information stored in the memory store no longer needs to be preserved, cause the encryption module to use said previous decryption key.

22. The end user device defined in claim 1, the control entity being further operative to (iii) determine whether confidentiality of the sensitive information stored in the memory store no longer needs to be preserved and (iv) responsive to determining that confidentiality of the sensitive information stored in the memory store no longer needs to be preserved, take an action to reverse the action previously taken to preserve confidentiality of the sensitive information stored in the memory store.

23. The end user device defined in claim 22, wherein the control entity being operative to determine whether confidentiality of the sensitive information stored in the memory store no longer needs to be preserved comprises the control entity being operative to apply a policy based on stimuli received via the user interface and the network interface.

24. The end user device defined in claim 23, wherein said stimuli comprise user commands received via the user interface arid wherein determining that confidentiality of the sensitive information stored in the memory store no longer needs to be preserved comprises detecting a host command to unsuspend a suspended session.

25. The end user device defined in claim 1 being a mobile wireless device.

26. The end user defined in claim 1, further comprising a label indicative of an inability to function outside a predetermined location.

27. A method, comprising:

establishing a healthcare session with an end user device servicing an authenticated user;

providing sensitive healthcare information to the end user device for storage thereon during the healthcare session;

detecting existence of a requirement to preserve confidentiality of the sensitive healthcare information; and

responsive to the detecting, sending a message to the end user device for causing the end user device to preserve the confidentiality of the sensitive healthcare information;

wherein detecting existence of a requirement to preserve confidentiality of the sensitive healthcare information comprises detecting a distance between the authenticated user and the end user device and determining that the distance exceeds a predetermined threshold.

28. A method, comprising:

establishing a healthcare session with an end user device servicing an authenticated user;

providing sensitive healthcare information to the end user device for storage thereon during the healthcare session;

detecting existence of a requirement to preserve confidentiality of the sensitive healthcare information; and

responsive to the detecting, sending a message to the end user device for causing the end user device to preserve the confidentiality of the sensitive healthcare information;

wherein detecting existence of a requirement to preserve confidentiality of the sensitive healthcare information comprises detecting a distance between the authenticated user and the end user device and determining that the distance continuously exceeds a predetermined threshold for a predetermined period of time.

29. A method, comprising:

establishing a healthcare session with an end user device servicing an authenticated user;

providing sensitive healthcare information to the end user device for storage thereon during the healthcare session;

detecting existence of a requirement to preserve confidentiality of the sensitive healthcare information; and

responsive to the detecting, sending a message to the end user device for causing the end user device to preserve the confidentiality of the sensitive healthcare information;

wherein detecting existence of a requirement to preserve confidentiality of the sensitive healthcare information comprises detecting a distance between the authenticated user and the end user device and determining that an integral of the distance over time exceeds a predetermined threshold.