Proximity access and alarm apparatus

• US 8,750,797 B2
• Filed: 07/22/2008
• Issued: 06/10/2014
• Est. Priority Date: 07/22/2008
• Status: Active Grant

• Current Assignee: Optima Direct, LLC (2S Ventures, LLC), Mourad Ben Ayed
• Original Assignee: Nissaf Ketari
• Inventors: Ketari, Nissaf
• Primary Examiner(s): Brandt, Christopher M
• Application Number:
  US12/177,495
• Publication Number:
  US 20100019920A1
• Time in Patent Office: 2,149 Days
• Field of Search: 455/411, 455/41.2, 455/41.3, 455/410, 340/686.6
• US Class Current: 455/41.2
• CPC Class Codes: G08B 13/1427 with transmitter-receiver for distance detection
• CPC Class Codes: G08B 21/0213 System disabling if a separation threshold is exceeded disabling electrical appliances in case of unplugging G08B13/1409
• CPC Class Codes: G08B 21/0238 adding new units to the system
• CPC Class Codes: G08B 21/0277 Communication between units on a local network, e.g. Bluetooth, piconet, zigbee, Wireless Personal Area Networks [WPAN]
• CPC Class Codes: G08B 21/24 Reminder alarms, e.g. anti-loss alarms
• CPC Class Codes: H04L 63/0442 wherein the sending and receiving network entities apply asymmetric encryption, i.e. different keys for encryption and decryption cryptographic mechanisms or cryptographic arrangements for public-key encryption H04L9/30
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04W 12/033 of the user plane, e.g. user's traffic
• CPC Class Codes: H04W 12/04 Key management, e.g. using generic bootstrapping architecture [GBA]
• CPC Class Codes: H04W 12/068 using credential vaults, e.g. password manager applications or one time password [OTP] applications
• CPC Class Codes: H04W 12/33 using wearable devices, e.g. using a smartwatch or smart-glasses
• CPC Class Codes: H04W 84/18 Self-organising networks, e.g. ad-hoc networks or sensor networks

Abstract

A method and system for securing portable electronic devices as well as data stored on them are described.

A framework for implementing such method is described.

Claims

1. A method for real-time decryption of encrypted data onboard a personal electronic device using a user-defined digital code stored on a unitary mobile apparatus comprising the steps of:

connecting a remote computer to an external port means onboard the unitary mobile apparatus;

writing at least one user password corresponding to a user account to a flash memory onboard the unitary mobile apparatus using a flashing program,

wherein the flashing program runs onboard the remote computer;

writing at least one decryption key to a flash memory onboard the unitary mobile apparatus;

whereby after obtaining a request for access to encrypted data onboard the personal electronic device,

the personal electronic device sends a request for a digital key to the unitary mobile apparatus using Bluetooth communication;

whereby after receipt of at least one decryption key from the unitary mobile apparatus,

the personal electronic device can generate a second decryption key using said at least one decryption key,

the personal electronic device decrypts the encrypted data from the first storage device using said second decryption key or the at least one decryption key, and

the personal electronic device presents the decrypted data to the user.

2. The method of claim 1 further comprising the step of:

decrypting the at least one decryption key to form a public key, and using the public key to decrypt the encrypted data.

3. The method of claim 1 further comprising the step of:

obtaining a password from the user, and using the password to decrypt the at least one decryption key.

4. The method of claim 1 whereby:

if the sensitive data size exceeds a predetermined size, a first part of the sensitive data of the predetermined size is decrypted and presented to the user.

5. The method of claim 4 whereby:

upon receipt of a user request for next sensitive data, the next part of next sensitive data of the predetermined size is decrypted and presented to the user.

6. The method of claim 1 whereby:

the decrypted data is only written to rapid access memory, and the decrypted data is never written to a storage device selected from the group consisting of a long term storage, a solid state memory, and a disk drive.

7. The method of claim 1 whereby:

the decryption key is never written to a storage device selected from the group consisting of a long term storage, a solid state memory, and a disk drive.

8. The method of claim 1 whereby the decrypted data is presented to the user in a user interface.

9. The method of claim 1 comprising:

upon receiving a user request to update data,

a short wireless request for a digital code is transmitted wirelessly to the unitary mobile apparatus,

wherein after receipt of the digital code from the unitary mobile apparatus,

the data is encrypted using the digital code,

the encrypted data is stored on the first storage device.

10. The method of claim 1 comprising:

periodically requesting a validation code,

if the validation code is not received within a predetermined period of time, the personal electronic device clears the decrypted data from memory.

11. A method for managing data comprising:

generating at least one first private key and a corresponding at least one first public key,

connecting a remote computer to an external port onboard a unitary mobile apparatus;

writing the at least one first private key to a flash memory onboard the unitary mobile apparatus using a flashing program,

wherein the unitary mobile apparatus comprises a Bluetooth transceiver,

wherein said flashing program runs onboard said remote computer;

sending the at least one first public key to a remote device,

whereby the remote device can use the at least one first public key to encrypt data,

whereby the remote device can write the encrypted data to a storage device,

whereby said third remote device can obtain the at least one first private key from the unitary mobile apparatus using Bluetooth communication

whereby the third remote device decrypts data using the at least one first private key.

12. The method of claim 11 comprising:

decrypting the encrypted data using the private key,

encrypting the decrypted data using the public key.

13. A unitary mobile first apparatus, comprising:

a power input;

a single BLUETOOTH transceiver,

a flash memory, and

an external port, said external port selected from the group consisting of;

a USB connector, a mini USB connector, and a data port,

wherein said external port can operatively connect to a remote computer,

wherein a flashing program can run on the remote computer when operatively connected to said unitary mobile first apparatus to write at least one user password corresponding to a user account to said flash memory onboard said unitary mobile apparatus,

wherein said unitary mobile first apparatus can send to a second apparatus via said BLUETOOTH transceiver a password that corresponds to a user account and that is received from the operatively connected remote computer.

14. The unitary mobile first apparatus of claim 13, further comprising a remote

computer operatively connectable to said unitary mobile apparatus, wherein when operatively connected to said unitary mobile first apparatus a flashing program can run on said remote computer to write at least one user password corresponding to a user account to a flash memory onboard said unitary mobile first apparatus.

15. The unitary mobile first apparatus of claim 14, wherein said remote computer flashing program can further write at least one first digital key to said flash memory onboard said unitary mobile apparatus, wherein said first digital key is selected from the group consisting of a public key, a private key, an encryption key, a decryption key, and an encrypted key.

16. The unitary mobile first apparatus of claim 13, further comprising an alarm;

wherein said alarm output will be at least 85 decibels,

wherein said alarm is activated within a predetermined time after detection of a connection drop between said BLUETOOTH transceiver and a second apparatus to which it is paired.