Location based decryption

• US 9,330,275 B1
• Filed: 03/28/2013
• Issued: 05/03/2016
• Est. Priority Date: 03/28/2013
• Status: Active Grant

• Current Assignee: Amazon Technologies, Inc. (Amazon.com, Inc.)
• Original Assignee: Amazon Technologies, Inc. (Amazon.com, Inc.)
• Inventors: Endresen, Geoffrey Eric, Cripe, Brian Scott, Focht, John Gilbert, Kulfan, Craig Vincent, Kurakula, Bala Anirudh, Mosher, Ian Aird, Sanghvi, Viraj Vijay, Sommerfield, Daniel Arthur, Battey, Christopher Charles, Wodicka, Jason Scott
• Primary Examiner(s): Siddiqi, Mohammad A
• Application Number:
  US13/852,644
• Time in Patent Office: 1,132 Days
• Field of Search: 713/175, 713/176, 713/180, 380247-250, 455/411, 455/550, 455/558, 455/456.3
• US Class Current: 1/1
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 21/64 Protecting data integrity, e.g. using checksums, certificates or signatures
• CPC Class Codes: G06F 2221/2107 File encryption
• CPC Class Codes: G06F 2221/2111 Location-sensitive, e.g. geographical location, GPS
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/107 wherein the security policies are location-dependent, e.g. entities privileges depend on current location or allowing specific operations only from locally connected terminals

Abstract

Described herein are systems, devices and methods for decrypting content based on location. A media device may decrypt content based on determination of a location-based decryption event. The location-based decryption event may include the media device being located within a location previously defined as authorized to decrypt the content. The location-based decryption event may also include the media device being located within a predetermined distance of a designated reference object.

Claims

1. A media device comprising:

a processor;

a display device coupled to the processor;

a location sensor coupled to the processor, the location sensor being configured to generate location data indicative of the media device with respect to a designated reference object, the designated reference object being associated with triggering a location-based decryption event or encryption event by the media device; and

a memory device coupled to the processor, the memory device storing instructions, which when executed by the processor, cause the processor, in cooperation with the display device, the location sensor and the memory device, to;

enter a connected state with the designated reference object when within communication range of the designated reference object;

receive encrypted content;

determine a first location indicative of the media device being within a predetermined distance of the designated reference object using the location data;

determine an occurrence of the location-based decryption event based on the first location of the media device being within the predetermined distance of the designated reference object;

based on the occurrence of the location-based decryption event;

request a cryptographic key;

receive the cryptographic key; and

based on the cryptographic key, decrypt the encrypted content to generate decrypted content;

display at least a portion of the decrypted content with the display device;

determine a second, different location indicative of the media device being beyond the predetermined distance of the designated reference object using the location data;

determine an occurrence of the location-based encryption event based on the second, different location indicative of the media device being beyond the predetermined distance of the designated reference object; and

based on the occurrence of the location-based encryption event;

terminate the display of the content with the display device.

2. The media device of claim 1 wherein the designated reference object comprises a second media device.

3. The media device of claim 1, wherein the designated reference object comprises a radio frequency identification tag.

4. The media device of claim 1, the location-based decryption event comprising the media device located within a geofence.

5. A method comprising:

generating, by a location sensor in a media device, location data indicative of the media device with respect to a designated reference object, the designated reference object being associated with triggering a location-based decryption event or encryption event with the media device;

entering, by the media device, a connected state with the designated reference object when the media device is within communication range of the designated reference object, the media device further;

accessing encrypted content;

determining a first location indicative of the media device being within a redetermined distance of the designated reference object using the location data;

determining an occurrence of the location-based decryption event based on the first location of the media device being located within the predetermined distance from the designated reference object;

based on the occurrence of the location-based decryption event;

generating decrypted content by decrypting at least a portion of the encrypted content using a cryptographic key; and

causing the decrypted content to be presented on a display of the media device;

determining a second, different location indicative of the media device being beyond the predetermined distance of the designated reference object based on the location data;

determining an occurrence of the location-based encryption event based on the second, different location indicative of the media device being located beyond the predetermined distance from the designated reference object; and

based on the occurrence of the location-based encryption event, the media device causing the presentation of the decrypted content to be terminated.

6. The method of claim 5, wherein determining the occurrence of the location-based decryption event further comprises determining a presence of the media device at a geolocation which is determined based on a satellite-based navigation system.

7. The method of claim 5, wherein determining the occurrence of the location-based decryption event further comprises:

determining that the media device includes an authorized identification number.

8. The method of claim 5, wherein determining the occurrence of the location-based decryption event further comprises detecting a change in a connection state of the media device with the designated reference object.

9. The method of claim 5, wherein determining the occurrence of the location-based decryption event further comprises:

determining that the media device has received a password from a user input device.

10. The method of claim 5, wherein the location-based encryption event includes at least one of:

a change in a connection state of the media device with respect to the designated reference object;

an elapsed amount of time;

an

end of a time window;

a change in a location of the media device;

or

an expiration of the cryptographic key.

11. The method of claim 5, further comprising receiving the encrypted content after the occurrence of the location-based decryption event.

12. The method of claim 5, further comprising:

receiving at least one annotation associated with the decrypted content; and

after the occurrence of the location-based encryption event, encrypting the at least one annotation.

13. The method of claim 5, wherein the designated reference object includes at least one of a communication device, a server, or a near field communication tag.

14. The method of claim 5, further comprising receiving the cryptographic key from the designated reference object.

15. The method of claim 5, wherein the encrypted content includes at least one of audio data, video data, electronic book data, application data, or annotation data.

16. An information processing system comprising:

a processor; and

a memory device coupled to the processor, the memory device storing instructions, which when executed by the processor, cause the processor to;

determine location data indicative of a media device with respect to a designated reference object associated with triggering a location-based decryption event or encryption event with the media device;

enter a connected state with the media device when location data is indicative of the media device being within communication range of the designated reference object;

in response to receiving a request for encrypted content, transmit, to the media device, at least a portion of the encrypted content;

determine a first location indicative of the media device being within a predetermined distance of the designated reference object;

determine an occurrence of the location-based decryption event based on the first location of the media device being within the predetermined distance from the designated reference object;

based on the occurrence of the location-based decryption event, transmit, to the media device, a cryptographic key which is used by the media device to generate decrypted content based on the encrypted content;

determine a second, different location indicative of the media device being beyond the predetermined distance of the designated reference object;

determine an occurrence of the location-based encryption event based on the second, different location indicative of the media device being located beyond the predetermined distance from the designated reference object; and

based on the occurrence of the location-based encryption event, transmit to the media device data indicative of termination of a presentation of the decrypted content.

17. The information processing system of claim 16, wherein the instructions, when executed by the processor, cause the processor to operate with an input device to enable a user to designate the designated reference object.

18. The information processing system of claim 16, wherein determining the occurrence of the location-based decryption event further comprises:

determining that the media device includes an authorized identification number.

19. The information processing system of claim 16, the location-based decryption event further including:

the media device located within a predetermined geolocation based on a satellite-based navigation system.

20. The information processing system of claim 16, wherein:

the designated reference object comprises a second media device; and

the data indicative of termination of the presentation of the decrypted content includes at least one of;

data that causes the media device to re-encrypt the decrypted content;

or

data that causes the media device to revoke the cryptographic key.