High security display of private data

• US 8,775,803 B2
• Filed: 12/21/2010
• Issued: 07/08/2014
• Est. Priority Date: 12/21/2010
• Status: Active Grant

• Current Assignee: Care Innovations LLC
• Original Assignee: Intel-GE Care Innovations, LLC (Intel Corporation)
• Inventors: Poisner, David I.
• Primary Examiner(s): Hoffman, Brandon
• Assistant Examiner(s): Woldemariam, Nega
• Application Number:
  US12/974,994
• Publication Number:
  US 20120159160A1
• Time in Patent Office: 1,295 Days
• Field of Search: 713/153, 713/168, 713/176, 382/100
• US Class Current: 713/168
• CPC Class Codes: G06F 21/606 by securing the transmission between two devices or processes
• CPC Class Codes: G06F 21/6245 Protecting personal data, e.g. for financial or medical purposes
• CPC Class Codes: G09C 5/00 Ciphering apparatus or methods not provided for in the preceding groups, e.g. involving the concealment or deformation of graphic data such as designs, written or printed messages
• CPC Class Codes: H04L 2209/16 Obfuscation or hiding, e.g. involving white box
• CPC Class Codes: H04L 2209/88 Medical equipments
• CPC Class Codes: H04L 63/0471 applying encryption by an intermediary, e.g. receiving clear information at the intermediary and encrypting the received information at the intermediary before forwarding
• CPC Class Codes: H04L 63/0492 by using a location-limited connection, e.g. near-field communication or limited proximity of entities

Abstract

A device, method, and computer-readable medium are disclosed. In one embodiment, the device includes an inbound port to receive information from an information retrieval peripheral. The device also includes an outbound port to send information to a local computing device. The device includes masking logic to cause the local computing device to recognize the portable security device as at least one of a plurality of endpoint devices. The device also includes data obfuscation logic that is capable of obfuscating simple data format data, received from the information retrieval peripheral, obfuscating that data into a non-simple data format, and sending the obfuscated data to the local computing device. The non-simple data format includes at least one frame of video.

Claims

1. A portable security device, comprising:

at least one inbound port to communicatively couple the portable security device to at least one information retrieval peripheral;

at least one outbound port to communicatively couple the portable security device to a local computing device;

device masking logic to cause the local computing device to recognize the portable security device as an endpoint device that is different from the portable security device; and

data obfuscation logic to;

retrieve a first amount of simple data format data from the at least one information retrieval peripheral;

obfuscating the first amount of simple data format data into a non-simple data format, wherein the non-simple data format includes at least one frame of video; and

send the obfuscated non-simple data format data to the local computing device.

2. The portable security device of claim 1, further comprising:

wherein the at least one information retrieval peripheral includes a medical device to retrieve vital sign information from a patient.

3. The portable security device of claim 1, wherein the device masking logic is operable to cause the local computing device to recognize the portable security device as a video player endpoint device.

4. The portable security device of claim 3, wherein the at least one information retrieval peripheral comprises a keyboard;

and the data securing logic is further operable to;

intercept one or more keystrokes of simple data format data sent from the keyboard;

encode the keystrokes of simple data format data into the at least one frame of video; and

send the at least one frame of video to the local computing device in lieu of sending the keystrokes of simple data format data.

5. The portable security device of claim 1, wherein the at least one frame of video is encoded using a content-protected digital video disc (DVD) format.

6. The portable security device of claim 1, wherein the data securing logic is further operable to:

cause the local computing device to recognize the portable security device as a network endpoint device;

retrieve a second amount of simple data format data from the at least one information retrieval peripheral;

encrypt and authenticate the second amount of simple data format data; and

send the encrypted and authenticated second amount of simple data format data to a remote computing device, wherein the local computing device is capable of routing information from the portable security device to the remote computing device.

7. A method, comprising:

causing a local computing device to recognize a portable security device as an endpoint device that is different from the portable security device, wherein the portable security device is communicatively coupled to the local computing device through a first port;

retrieving a first amount of simple data format data from an information retrieval peripheral, wherein the information retrieval peripheral is communicatively coupled to the portable security device through a second port;

obfuscating the first amount of simple data format data into a non-simple data format, wherein the non-simple data format includes at least one frame of video; and

sending the obfuscated non-simple data format data to the local computing device.

8. The method of claim 7, wherein the information retrieval peripheral comprises a medical device to retrieve vital sign information from a patient.

9. The method of claim 7, further comprising:

causing the local computing device to recognize the portable security device as a video player endpoint device.

10. The method of claim 9, wherein the at least one information retrieval peripheral comprises a keyboard, the method further comprises:

intercepting one or more keystrokes of simple data format data sent from the keyboard;

encoding the keystrokes of simple data format data into the at least one frame of video; and

sending the at least one frame of video to the local computing device in lieu of sending the keystrokes of simple data format data.

11. The method of claim 7, wherein the at least one frame of video is encoded using a content-protected digital video disc (DVD) format.

12. The method of claim 7, further comprising:

causing the local computing device to recognize the portable security device as a network endpoint device;

retrieving a second amount of simple data format data from the at least one information retrieval peripheral;

encrypting and authenticating the second amount of simple data format data; and

sending the encrypted and authenticated second amount of simple data format data to a remote computing device, wherein the local computing device is capable of routing information from the portable security device to the remote computing device.

13. A non-transitory computer readable medium having stored thereon instructions, which if executed by a computer causes the computer to perform a method comprising, comprising:

causing a local computing device to recognize a portable security device as an endpoint device that is different from the portable security device, wherein the portable security device is communicatively coupled to the local computing device through a first port;

retrieving a first amount of simple data format data from an information retrieval peripheral, wherein the information retrieval peripheral is communicatively coupled to the portable security device through a second port;

obfuscating the first amount of simple data format data into a non-simple data format, wherein the non-simple data format includes at least one frame of video; and

sending the obfuscated non-simple data format data to the local computing device.

14. The computer readable medium of claim 13, wherein the information retrieval peripheral comprises a medical device to retrieve vital sign information from a patient.

15. The computer readable medium of claim 13, wherein the performed method further comprises:

causing the local computing device to recognize the portable security device as a video player endpoint device.

16. The computer readable medium of claim 15, wherein the at least one information retrieval peripheral comprises a keyboard, the performed method further comprising:

intercepting one or more keystrokes of simple data format data sent from the keyboard;

encoding the keystrokes of simple data format data into the at least one frame of video; and

sending the at least one frame of video to the local computing device in lieu of sending the keystrokes of simple data format data.

17. The computer readable medium of claim 13, wherein the performed method further comprises:

causing the local computing device to recognize the portable security device as a network endpoint device;

retrieving a second amount of simple data format data from the at least one information retrieval peripheral;

encrypting and authenticating the second amount of simple data format data; and

sending the encrypted and authenticated second amount of simple data format data to a remote computing device, wherein the local computing device is capable of routing information from the portable security device to the remote computing device.