Device and system for facilitating communication and networking within a secure mobile environment

• US 9,253,167 B2
• Filed: 04/19/2011
• Issued: 02/02/2016
• Est. Priority Date: 04/19/2011
• Status: Active Grant

• Current Assignee: Apriva, LLC (APPSware Holdings, Inc.)
• Original Assignee: Apriva, LLC (APPSware Holdings, Inc.)
• Inventors: Best, Randolph, Spinella, Rinaldo, Morris, James
• Primary Examiner(s): Mehedi, Morshed
• Application Number:
  US13/090,086
• Publication Number:
  US 20120269346A1
• Time in Patent Office: 1,750 Days
• Field of Search: 726/6, 726/9
• US Class Current: 1/1
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/0457 wherein the sending and receiving network entities apply dynamic encryption, e.g. stream encryption cryptographic mechanisms or cryptographic arrangements for stream encryption H04L9/065
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227
• CPC Class Codes: H04W 12/02 Protecting privacy or anonymity, e.g. protecting personally identifiable information [PII]
• CPC Class Codes: H04W 12/033 of the user plane, e.g. user's traffic

Abstract

The present invention relates generally to facilitating secure voice and data communication by way of a commercially available communication device (i.e., smartphone/smartdevice). Specifically, the device and system for pairing a specialized cryptographic device with a non-specialized communication device, wherein the two devices engage in bidirectional communication to facilitate encryption of voice and data for secure transmission over a network. While providing the sensitive cryptographic features for secure communications, the cryptographic device further implements and enforces security policies for the communication device by way if an intermediary native application executed at the communication device. The encryption device is suitably designed to be carried discreetly and may be used in conjunction with a commercially available communication device.

Claims

1. A data security system for providing cryptographic services to a disparately located communication device over a communications network, said data security system comprising:

a processor for receiving a connection request from said disparately located communication device, wherein said connection request is by way of at least one of;

a wired or wireless communications network;

a validation element, in communication with said processor and positioned proximate with said processor, for performing an analysis of said connection request, wherein said analysis comprises a validation of at least one of;

said data security system, an identity of said communication device, or a user identity;

said processor for receiving a communication signal from said disparately located communication device based on said analysis by said validation element;

an encryption element, in communication with said processor, for executing a cryptographic function for manipulating said communication signal to form an encrypted communication signal;

a rules element, in communication with said processor, for compiling a communication device command based on at least one of;

a predefined rule or a type associated with said communication signal, wherein said communication device command invokes a security function at said disparately located communication device;

a sending element, in communication with said processor, for sending at least one of;

said security function or said encrypted communication signal to said disparately located communication device, wherein said disparately located communication device at least of one;

executes said device command or transmits said encrypted communication signal to a destination server; and

wherein said data security system facilitates secure commercial features in accordance with government entity certification protocols.

2. The system of claim 1, further comprising a credential, wherein said credential is at least one of:

a biometric sample, an alphanumeric code, a password, or a digital certificate.

3. The system of claim 1, wherein said request signal is invoked by at least one of:

a smartphone, smartdevice, cellular telephone, a personal digital assistant, a personal computer, an electronic fob, a computer server, an entertainment device, or an appliance.

4. The system of claim 1, wherein said data security system and said disparately located communication device are not physically coupled.

5. The system of claim 1, wherein said communication signal is at least one of:

voice communication, Short Message Service (SMS), Electronic Mail (e-mail), data communication, or data transfer.

6. The system of claim 1, wherein said disparately located communication device is at least one of:

a non-specialized or a commercial wireless mobile device configured to facilitate at least one of;

commercial or high assurance transmissions.

7. The system of claim 1, wherein said data security system further comprises an interface for facilitating secure application execution.

8. The system of claim 1, wherein said data security system further comprises a Controlled Cryptographic Item (CCI) validated by a governing entity.

9. The system of claim 1, wherein said data security system is configured to be suitably concealed in a location, which is geographically distinct from a geographic location of said disparately located communication device.

10. The system of claim 1, wherein said request signal and said communication signal are facilitated by way of at least one of:

GSM, CDMA, Bluetooth, or Wi-Fi.

11. The system of claim 1, wherein said disparately located communication device is a commercially available device configured to execute commercially available application.

12. The system of claim 1, wherein cryptography element interfaces with a security program of said disparately located communication device.

13. The system of claim 1, wherein said device command is configured to cause a security element of said disparately located communication device to at least one of:

monitor application execution, monitor user interaction, or erase stored data based on a command invoked by said cryptography module.

14. The system of claim 1, wherein said encryption comprises data-at-rest-encryption.

15. The system of claim 1, further comprising invoking, by said processor, protected execution cells in support of a plurality of application operating systems.

16. The system of claim 1, further comprising randomly validating, by said processor, a customer controlled server.

17. The system of claim 1, wherein said disparately located communication device includes an application developed by way of a Software Development Kit (SDK) for secure application development.

18. The system of claim 1, wherein said processor comprises a distributed control system to manage at least one of:

signals, transmission of signals, encryption of signals, development of encryption keys, providing current encryption keys to said receiver element, determination of schedules of times and frequencies of transmitted signals, or providing schedules of encryption keys and frequencies to said receiver element.

19. The system of claim 1, wherein said data communications system is suitably configured to be discretely positioned out of view of a person.