Method, system, and apparatus for enabling secure functionalities

• US 9,225,519 B1
• Filed: 03/02/2015
• Issued: 12/29/2015
• Est. Priority Date: 03/02/2015
• Status: Active Grant

• Current Assignee: Eventi LLC (Wagoo L.L.C.)
• Original Assignee: Wagoo L.L.C.
• Inventors: Fraccaroli, Federico
• Primary Examiner(s): Herzog, Madhuri
• Application Number:
  US14/636,138
• Time in Patent Office: 302 Days
• Field of Search: 726 1- 4, 726/17, 726/21, 726 26- 33, 713168-181, 235375-386
• US Class Current: 1/1
• CPC Class Codes: G06F 16/381 using identifiers, e.g. barcodes, RFIDs for URLs G06F16/9554
• CPC Class Codes: G06F 21/30 Authentication, i.e. establishing the identity or authorisation of security principals
• CPC Class Codes: G06F 21/6281 at program execution time, where the protection is within the operating system
• CPC Class Codes: G06F 2221/2147 Locking files
• CPC Class Codes: G06Q 30/0185 Product, service or business identity fraud
• CPC Class Codes: G06Q 30/0225 Avoiding frauds
• CPC Class Codes: G09C 1/00 Apparatus or methods whereby a given sequence of signs, e.g. an intelligible text, is transformed into an unintelligible sequence of signs by transposing the signs or groups of signs or by replacing them by others according to a predetermined system cryptographic typewriters G09C3/00
• CPC Class Codes: H04L 2209/80 Wireless network architectures or network communication protocols for wireless network security H04W12/00
• CPC Class Codes: H04L 63/12 Applying verification of the received information cryptographic mechanisms or cryptographic arrangements for data integrity or data verification H04L9/32
• CPC Class Codes: H04L 63/126 the source of the received data
• CPC Class Codes: H04L 9/0827 involving distinctive intermediate devices or communication paths network architectures or network communication protocols using different networks H04L63/18
• CPC Class Codes: H04L 9/0872 using geo-location information, e.g. location data, time, relative position or proximity to other entities
• CPC Class Codes: H04L 9/088 Usage controlling of secret information, e.g. techniques for restricting cryptographic keys to pre-authorized uses, different access levels, validity of crypto-period, different key- or password length, or different strong and weak cryptographic algorithms network architectures or network communication protocols for using time-dependent keys in a packet data network H04L63/068
• CPC Class Codes: H04L 9/32 including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials
• CPC Class Codes: H04L 9/3215 using a plurality of channels network architectures or network communication protocols using different networks H04L63/18
• CPC Class Codes: H04W 12/02 Protecting privacy or anonymity, e.g. protecting personally identifiable information [PII]
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 12/64 using geofenced areas
• CPC Class Codes: H04W 12/77 Graphical identity

Abstract

In accordance with one embodiment of the present invention, a method comprises receiving attributes data for a tagged item that are measured or recorded by sensors of a user equipment such as a smart phone. Attributes of record can be securely stored and can be controlled remotely. By comparing measured attributes with attributes of record according to a predetermined algorithm, a preset functionality, associated with said tagged item, is selectively enabled. In some implementations, the present invention is used to validate the authenticity of documents or objects. In some implementations, an optical code is used to tag said item.

Claims

1. A method comprising:

receiving indicia of a first optical scanning of a first optical code by a first user equipment via an encrypted channel;

receiving a first location indicia data associated with said first optical scanning of said first optical code from said first user equipment via an encrypted channel;

receiving indicia of a second optical scanning of said first optical code by a second user equipment via an encrypted channel;

receiving a second location indicia data associated with said second optical scanning of said first optical code from said second user equipment via an encrypted channel; and

selectively enabling in said second user equipment via an encrypted channel a predetermined and restricted functionality associated with said first optical code, upon compliance to a predetermined proximity criterion, said compliance resulting, at least in part, from proximity determined between a first location, associated with said first location indicia data, and a second location, associated with said second location indicia data, wherein said predetermined and restricted functionality is selected from the group consisting of;

a secure transfer of ownership of an asset associated with said first optical code, a secure authentication of an asset associated with said first optical code, a secure transfer of ownership of an object associated with said first optical code, a secure verification of the authenticity of an object associated with said first optical code, a secure verification of the authenticity of a document associated with said first optical code, a secure transfer of ownership of a document associated with said first optical code, and combinations thereof.

2. The method of claim 1, wherein,

said proximity is determined by comparing said first location indicia data and said second location indicia data with a location indicia of record data for said first optical code and said location indicia of record data for said first optical code is controlled by an authority of record associated with said first optical code.

3. The method of claim 1, further comprising:

facilitating the creation of an alphanumerical code associated, at least temporarily, with said first optical code;

facilitating the transmission of said alphanumerical code to said first user equipment via an encrypted channel; and

facilitating receiving said alphanumerical code from said second user equipment via an encrypted channel.

4. The method of claim 1, further comprising:

receiving indicia of an optical scanning of a second optical code associated with said first optical code from said first user equipment via an encrypted channel within a predetermined time period from said first optical scanning of said first optical code.

5. The method of claim 1, further comprising:

facilitating the comparison of an additional secure attribute of record data for said first optical code with a measurement of said attribute in connection with said first optical scanning of said first optical code by said first user equipment, wherein said additional secure attribute is selected from the group consisting of;

a time based attribute, a digital image based attribute, a magnetic field based attribute, a spatial orientation based attribute, an altitude based attribute, an acoustic based attribute, and combinations thereof.

6. The method of claim 1, wherein, said proximity is derived through comparing said first location indicia data with said second location indicia data;

and

determining if a distance data, derived from said comparing, is below a predetermined threshold data.

7. The method of claim 1, wherein said first optical code has been encrypted with a public key whose corresponding private key is associated with a secure location indicia of record data for said first optical code.

8. At least one non-transitory computer-readable medium having a set of instructions for controlling at least one general-purpose digital computer in performing desired functions comprising:

a set of instructions formed into each of a plurality of modules, each modules comprising instructions for;

facilitating the receiving indicia of a first optical scanning of a first optical code by a first user equipment via an encrypted channel;

facilitating the receiving a first location indicia data associated with said first optical scanning of said first optical code from said first user equipment via an encrypted channel;

facilitating the receiving indicia of a second optical scanning of said first optical code by a second user equipment via an encrypted channel;

facilitating the receiving a second location indicia data associated with said second optical scanning of said first optical code from said second user equipment via an encrypted channel;

and

facilitating the selectively enabling in said second user equipment, via an encrypted channel, a predetermined and restricted functionality associated with said first optical code, upon compliance to a predetermined proximity criterion, said compliance resulting, at least in part, from proximity determined between a first location, associated with said first location indicia data, and a second location, associated with said second location indicia data, wherein said predetermined and restricted functionality is selected from the group consisting of;

a secure transfer of ownership of an asset associated with said first optical code, a secure authentication of an asset associated with said first optical code, a secure transfer of ownership of an object associated with said first optical code, a secure verification of the authenticity of an object associated with said first optical code, a secure verification of the authenticity of a document associated with said first optical code, a secure transfer of ownership of a document associated with said first optical code, and combinations thereof.

9. The non-transitory computer-readable medium of claim 8,

wherein said proximity is derived from comparing said first location indicia data and said second location indicia data with a location indicia of record data for said first optical code and said location indicia of record data for said first optical code is controlled by an authority of record associated with said first optical code.

10. The non-transitory computer-readable medium of claim 8, further comprising modules comprising instructions for:

facilitating the creation of an alphanumerical code associated, at least temporarily, with said first optical code;

facilitating the transmission of said alphanumerical code to said first user equipment via an encrypted channel; and

facilitating receiving said alphanumerical code from said second user equipment via an encrypted channel.

11. The non-transitory computer-readable medium of claim 8, further comprising modules comprising instructions for:

facilitating receiving indicia of an optical scanning of a second optical code associated with said first optical code from said first user equipment via an encrypted channel within a predetermined time period from said first optical scanning of said first optical code.

12. The non-transitory computer-readable medium of claim 8, further comprising modules comprising instructions for:

facilitating the comparison of an additional secure attribute of record data for said first optical code with a measurement of said attribute in connection with said first optical scanning of said first optical code by said first user equipment, wherein said additional secure attribute is selected from the group consisting of;

a time based attribute, a digital image based attribute, a magnetic field based attribute, a spatial orientation based attribute, an altitude based attribute, an acoustic based attribute, and combinations thereof.

13. The non-transitory computer-readable medium of claim 8, wherein said proximity is derived by comparing said first location indicia data with said second location indicia data;

and

by determining if a distance related data, derived from said comparing, is below a predetermined threshold data.

14. The non-transitory computer-readable medium of claim 8, wherein said proximity is derived by comparing wireless local area network data associated with said first location indicia data with wireless local area network data associated with said second location indicia data.

15. An apparatus, comprising:

at least one processor; and

at least one non-transitory computer-readable medium including a computer program code;

the at least one non-transitory computer-readable medium and the computer program code configured to, with the at least one processor, cause the apparatus to perform at least the following;

facilitating the receiving of indicia of a first optical scanning of a first optical code by a first user equipment via an encrypted channel;

facilitating the receiving of a first location indicia data associated with said first optical scanning of said first optical code from said first user equipment via an encrypted channel;

facilitating the receiving of indicia of a second optical scanning of said first optical code by a second user equipment via an encrypted channel;

facilitating the receiving of a second location indicia data associated with said second optical scanning of said first optical code from said second user equipment via an encrypted channel;

facilitating selectively enabling in said second user equipment, via an encrypted channel, a predetermined and restricted functionality associated with said first optical code, upon compliance to a predetermined proximity criterion, said compliance resulting, at least in part, from proximity determined between a first location, associated with said first location indicia data, and a second location, associated with said second location indicia data, wherein said predetermined and restricted functionality is selected from the group consisting of;

a secure transfer of ownership of an asset associated with said first optical code, a secure authentication of an asset associated with said first optical code, a secure transfer of ownership of an object associated with said first optical code, a secure verification of the authenticity of an object associated with said first optical code, a secure verification of the authenticity of a document associated with said first optical code, a secure transfer of ownership of a document associated with said first optical code, and combinations thereof.

16. The apparatus of claim 15, wherein said proximity criterion is derived from comparing said first location indicia data and said second location indicia data with a location indicia of record data for said first optical code wherein said location indicia of record data for said first optical code is controlled by an authority of record associated with said first optical code.

17. The apparatus of claim 15, further causing to perform at least the following:

facilitating the creation of an alphanumerical code associated, at least temporarily, with said first optical code;

facilitating the transmission of said alphanumerical code to said first user equipment via an encrypted channel; and

facilitating the receiving of said alphanumerical code from said second user equipment via an encrypted channel.

18. The apparatus of claim 15, further causing to perform at least the following:

facilitating the receiving of indicia of an optical scanning of a second optical code associated with said first optical code from said first user equipment via an encrypted channel within a predetermined time period from said first optical scanning of said first optical code.

19. The apparatus of claim 15, further causing to perform at least the following:

facilitating the comparison of an additional secure attribute of record data for said first optical code with a measurement of said attribute in connection with said first optical scanning of said first optical code by said first user equipment, wherein said additional secure attribute is selected from the group consisting of;

a time based attribute, a digital image based attribute, a magnetic field based attribute, a spatial orientation based attribute, an altitude based attribute, an acoustic based attribute, and combinations thereof.

20. The apparatus of claim 15, wherein said proximity is derived from comparing said first location indicia data with said second location indicia data;

and

determining if a distance data, derived from said comparing, is below a predetermined threshold.