Digital lanyard for securing data on portable devices

• US 9,201,456 B2
• Filed: 09/03/2013
• Issued: 12/01/2015
• Est. Priority Date: 09/03/2013
• Status: Active Grant

• Current Assignee: Xerox Corporation (Xerox Holdings Corp.)
• Original Assignee: Palo Alto Research Center, Inc. (Xerox Holdings Corp.)
• Inventors: Eldershaw, Craig, Jarvis, Peter A.
• Primary Examiner(s): PYZOCHA, MICHAEL J
• Application Number:
  US14/016,762
• Publication Number:
  US 20150062790A1
• Time in Patent Office: 819 Days
• US Class Current: 1/1
• CPC Class Codes: G06F 1/163 Wearable computers, e.g. on a belt
• CPC Class Codes: G06F 21/00 Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 63/0861 using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/082 using revocation of authorisation
• CPC Class Codes: H04W 12/33 using wearable devices, e.g. using a smartwatch or smart-glasses

Abstract

A data securing system includes a digital lanyard having a first end portion connected with a first line, having a first connector portion, and a second line having a second connector portion. A second end portion of the digital lanyard includes an electronic data generating device interface. The first connector portion of the first line and the second connector portion of the second line, when in operative connection, form a complete electrical connection between the first end portion and the second end portion. The system further includes an electronic data generating device having an electronic data generating device connector portion configured to operatively connect to the electronic data generating device interface of the second end portion, and an authentication portion of the electronic data generating device provides a capability to authenticate a user to permit the user to obtain access to secured and/or restricted data via the electronic data generating device.

Claims

1. A data securing system comprising:

a digital lanyard including;

a first end portion configured with a first line having a first connector portion, and a second line having a second connector portion, and

a second end portion including an electronic data generating device interface,

wherein with the first connector portion of the first line and the second connector portion of the second line in operative connection a complete electrical connection is made between the first end portion and the second end portion; and

an electronic data generating device having a restricted access to data including;

an electronic data generating device connector portion configured to mechanically and electrically connect to the electronic data generating device interlace of the second end portion, and

an authentication portion configured to authenticate a user to permit the user to obtain access to secured and/or restricted data on or via the electronic data generating device.

2. A data securing system according to claim 1, wherein when the first connector portion in the first line and the second connector portion in the second line are in operative connection, the first line and the second line form a loop around a human body part, wherein the loop is sized so it cannot be removed from the user'"'"'s body part without disconnection of the first connector portion and the second connector portion from each other.

3. A data securing system according to claim 1, wherein the authentication portion is one of:

a password accepting location configured to accept a password to authenticate the user and a biometrics accepting location configured to accept biometrics data to authenticate the user.

4. A data securing system according to claim 1, further including a sensing arrangement including memory storage and at least an electronic processor device, configured to store software code operably configured to sense (i) connection between the first end portion and the second end portion when the first connector portion of the first line and the second connector portion of the second line are in the operative connection and (ii) connection between the electronic data generating device interface and the electronic data generating device connection portion, and the sensing arrangement further configured to sense a break in (i) the complete electrical connection when the operative connection between the first connector portion of the first line and the second connector portion of the second line is broken or (ii) the connection between the electronic data generating interface and the electronic data generating device connection portion is broken.

5. A data securing system according to claim 4 wherein the sensing arrangement includes the memory storage and the at least an electronic processor device, configured to store software code operable to end access to secured and/or restricted data upon sensing of the break in (i) the operative connection between the first connector portion of the first line and the second connector portion of the second line or (ii) the operative connection between the electronic data generating device interface and the electronic data generating device connection portion.

6. A data securing system according to claim 1 further including a third party validation location configured to permit a third party to enter a confirmation code that the first connector portion of the first line and the second connector portion of the second line are in the operative connection around the body part of the user, wherein the third party validation location and the authentication portion are part of a same device.

7. A data securing system according to claim 1 wherein the electronic data generating device interface is an interface plug which makes a mechanical connection between the interface plug and the electronic data generating device.

8. A data securing system according to claim 1 wherein at least a portion of the sensing arrangement is part of the digital lanyard.

9. A data securing system according to claim 1 further including an electroencephalography sensing device configured for connection to a user.

10. A data securing system according to claim 1 wherein the digital lanyard further includes a battery source.

11. A data securing system according to claim 1 further including an auxiliary connector at the second end portion of the digital lanyard wherein the second end portion includes the electronic data generating device interface and the auxiliary connector, the auxiliary connector replacing a connector of the electronic data generating device consumed by the lanyard.

12. A data securing system according to claim 1 wherein the electronic data generating device is at least one of a portable electronic device, a smartphone, a desk top computer, a tablet computer, a laptop computer, and a personal digital assistant.

13. A data securing system according to claim 1, further including a carrying case having connections to the digital lanyard.

14. A data securing system according to claim 1, further including a self-winding mechanism within the second end portion of the digital lanyard.

15. A data securing system according to claim 1, further including a battery source within the digital lanyard.

16. A data securing system according to claim 1, further including a splitter within the second end of the digital lanyard and at least an auxiliary connector extending from the splitter portion, the auxiliary connector replacing a connector of the electronic data generating device consumed by the lanyard.

17. A method of securing data by use of a digital lanyard including (i) a first end portion with a first line having a first connector portion and a second line having a second connector portion, and (ii) a second end portion having an electronic data generating device interface, the method comprising:

positioning the first line having the connector and the second line having the connector around a body part of a user;

connecting the connector of the first line to the connector of the second line, wherein the first line and the second line are secured together around the body part, creating a complete electrical path between the first end portion and the second end portion;

connecting the electronic data generating device interface of the second end and an electronic data generating device, wherein a complete electrical path is formed between the digital lanyard and the electronic data generating device;

confirming the user identity to the electronic data generating device while the digital lanyard is in a secured position around the body part of the user, thereby maintaining the complete electrical path between the digital lanyard and the electronic data generating device;

permitting the user with access to secure data from the electronic data generating device;

sensing the complete electrical path between the electronic data generating device and the digital lanyard while (i) the operative connection between the first line connector and the second line connector is maintained and (ii) the operative connection between the electronic data generating device interface and the electronic data generating device is maintained;

sensing a break in the complete electrical path between the electronic data generating device and the digital lanyard when (i) the operative connection between the first line connector and the second line connector is disconnected or (ii) the operative connection between the electronic data generating device interface and the electronic data generating device is disconnected;

blocking access by the user to the secure data, once the break in the complete electrical path has been sensed; and

restarting the method of securing data by use of the digital lanyard by reconfirming the user identity.

18. A method according to claim 17 wherein the confirming requires the user to enter at least one of a password and biometric data.

19. A method according to claim 17 wherein the confirming requires a third party to enter a confirmation code, and wherein the third party enters the confirmation code on the electronic data generating device, which is connected to the lanyard worn by the user.

20. A method according to claim 17 wherein the connecting of the electronic data generating device interface and the electronic data generating device is a wired connection.

21. A method according to claim 17 wherein the connecting of the electronic data generating device and the electronic data generating device is a wireless connection.

22. The method of claim 17 wherein, prior to the re-confirming the user identity, the restarting further includes:

re-positioning the first line having the connector and the second line having the connector around a body part of the user;

re-connecting the connector of the first line to the connector of the second line, wherein the first line and the second line are secured together around the body part, creating a complete electrical path between the first end portion and the second end portion; and

re-connecting the electronic data generating device interface of the second end and an electronic data generating device, wherein a complete electrical path is formed between the digital lanyard and the electronic data generating device.

23. The method of claim 17 wherein the blocking of access to the user includes locking the electronic data generating device when the device is owned by an organization to which the user is employed, and denying access to the data when the device is owned by the user, allowing the user to employ the electronic data generating device for actions other than accessing the secured data.