Deleting confidential information used to secure a communication link

• US 8,442,232 B2
• Filed: 09/10/2011
• Issued: 05/14/2013
• Est. Priority Date: 04/04/2005
• Status: Active Grant

• Current Assignee: Malikie Innovations Limited (Key Patent Innovations Limited)
• Original Assignee: Research In Motion Limited (Blackberry Limited)
• Inventors: Adams, Neil Patrick, Brown, Michael Stephen, Brown, Michael Kenneth, Little, Herbert Anthony, Totzke, Scott William
• Primary Examiner(s): PERUNGAVOOR, VENKATANARAY
• Application Number:
  US13/229,682
• Publication Number:
  US 20110321171A1
• Time in Patent Office: 612 Days
• Field of Search: None
• US Class Current: 380/270
• CPC Class Codes: G06F 21/60 Protecting data
• CPC Class Codes: H04W 12/02 Protecting privacy or anonymity, e.g. protecting personally identifiable information [PII]
• CPC Class Codes: H04W 12/30 Security of mobile devices; Security of mobile applications
• CPC Class Codes: H04W 12/61 Time-dependent
• CPC Class Codes: H04W 12/63 Location-dependent; Proximity-dependent
• CPC Class Codes: H04W 88/02 Terminal devices

Abstract

A system includes a first wireless-enabled device that transparently stores confidential information and a second wireless-enabled device that stores the same confidential information. The confidential information is to be used to secure a wireless communication link between the first device and the second device. One or both of the first device and the second device is to delete the confidential information upon fulfillment of one or more conditions related to the communication link. The conditions include general timeout, device inactivity, loss of connection over the communication link, a decline in signal strength, and a predefined number of transactions having occurred between the first device and the second device.

Claims

1. A first device comprising:

a communication interface compatible with a wireless communication protocol; and

a processor,

wherein in the event that a wireless communication link between the first device and a second device has been established via the communication interface and the wireless communication link has been secured using confidential information stored at the first device, the processor is operative to delete the confidential information from the first device in response to a lack of communication between the first device and the second device over the wireless communication link for at least a predefined period of time while the wireless communication link remains enabled.

2. The first device as recited in claim 1, wherein the confidential information is to be stored transparently at the first device.

3. The first device as recited in claim 1, wherein the wireless communication protocol comprises a wireless personal area network protocol.

4. A first device comprising:

a communication interface compatible with a wireless communication protocol;

a processor,

the first device including smart card reader functionality,

wherein in the event that a wireless communication link between the first device and a second device has been established via the communication interface and the wireless communication link has been secured using confidential information stored at the first device, the processor is operative to delete the confidential information from the first device responsive to removal of a smart card from the first device for at least a predefined period of time.

5. The first device as recited in claim 4, wherein the confidential information is to be stored transparently at the first device.

6. The first device as recited in claim 4, wherein the wireless communication protocol comprises a wireless personal area network protocol.

7. The first device as recited in claim 4, wherein the processor is operative to delete the confidential information from the first device responsive to removal of a smart card from the first device.

8. A method at a first device, the method comprising:

using confidential information stored at the first device to secure a wireless communication link between the first device and a second device;

detecting, while the wireless communication link remains enabled, a lack of communication between the first device and the second device over the wireless communication link for at least a predefined period of time; and

deleting the confidential information from the first device responsive to detecting the lack of communication for at least the predefined period of time.

9. The method as recited in claim 8, wherein the confidential information is stored transparently at the first device.

10. A method at a first device, the method comprising:

using confidential information stored at the first device to secure a wireless communication link between the first device and a second device, the first device including smart card reader functionality;

detecting removal of a smart card from the first device; and

deleting the confidential information from the first device responsive to detecting the removal.

11. The method as recited in claim 10, wherein the confidential information is stored transparently at the first device.

12. A method at a first device, the method comprising:

using confidential information stored at the first device to secure a wireless communication link between the first device and a second device, the first device including smart card reader functionality;

detecting removal of a smart card from the first device for at least a predefined period of time; and

deleting the confidential information from the first device responsive to detecting the removal for at least the predefined period of time.

13. The method as recited in claim 12, wherein the confidential information is stored transparently at the first device.

14. A first device comprising:

a communication interface compatible with a wireless communication protocol; and

a processor,

wherein in the event that a wireless communication link between the first device and a second device has been established via the communication interface and the wireless communication link has been secured using confidential information stored at the first device, the processor is operative to delete the confidential information from the first device responsive to a predefined number of transactions between the first device and the second device over the wireless communication link having occurred.

15. The first device as recited in claim 14, wherein the transactions include unlocking one of the first device and the second device.

16. The first device as recited in claim 14, wherein the transactions include decrypting an encrypted e-mail received at one of the first device and the second device.

17. The first device as recited in claim 14, wherein the transactions include signing a message to be sent by one of the first device and the second device.

18. A method at a first device, the method comprising:

using confidential information stored at the first device to secure a wireless communication link between the first device and a second device, the second device also storing the confidential information;

performing transactions with the second device over the wireless communication link; and

deleting the confidential information from the first device responsive to a predefined number of transactions between the first device and the second device over the wireless communication link having occurred.

19. The method as recited in claim 18, wherein the transactions include unlocking one of the first device and the second device.

20. The method as recited in claim 18, wherein the transactions include decrypting an encrypted e-mail received at one of the first device and the second device.

21. The method as recited in claim 18, wherein the transactions include signing a message to be sent by one of the first device and the second device.

22. A first device comprising:

a communication interface compatible with a wireless communication protocol; and

a processor,

wherein in the event that a wireless communication link between the first device and a second device has been established via the communication interface and the wireless communication link has been secured using confidential information stored at the first device, the processor is operative to delete the confidential information from the first device responsive to a strength of signals received at the first device from the second device over the wireless communication link having dropped below a predefined threshold.

23. A method at a first device, the method comprising:

using confidential information stored at the first device to secure a wireless communication link between the first device and a second device, the second device also storing the confidential information;

detecting at the first device that a strength of signals received at the first device from the second device over the wireless communication link has dropped below a predefined threshold; and

deleting the confidential information from the first device responsive to detecting that the strength has dropped below the predefined threshold.