Authenticating environmental sensor systems based on security keys in communication systems

• US 9,392,446 B1
• Filed: 08/05/2013
• Issued: 07/12/2016
• Est. Priority Date: 08/05/2013
• Status: Active Grant

• Current Assignee: T-Mobile Innovations LLC (Deutsche Telekom AG)
• Original Assignee: Sprint Communications Company LP (Deutsche Telekom AG)
• Inventors: Paczkowski, Lyle Walter, Martin, Geoffrey S., Cope, Warren B.
• Primary Examiner(s): Lanier, Benjamin
• Application Number:
  US13/958,937
• Time in Patent Office: 1,072 Days
• Field of Search: None
• US Class Current: 1/1
• CPC Class Codes: H04L 2209/805 Lightweight hardware, e.g. radio-frequency identification [RFID] or sensor
• CPC Class Codes: H04L 63/0876 based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint
• CPC Class Codes: H04L 63/12 Applying verification of the received information cryptographic mechanisms or cryptographic arrangements for data integrity or data verification H04L9/32
• CPC Class Codes: H04L 67/12 specially adapted for proprietary or special-purpose networking environments, e.g. medical networks, sensor networks, networks in vehicles or remote metering networks
• CPC Class Codes: H04L 67/125 involving control of end-device applications over a network
• CPC Class Codes: H04L 9/0872 using geo-location information, e.g. location data, time, relative position or proximity to other entities
• CPC Class Codes: H04L 9/3236 using cryptographic hash functions
• CPC Class Codes: H04L 9/3271 using challenge-response
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 12/106 Packet or message integrity
• CPC Class Codes: H04W 12/65 Environment-dependent, e.g. using captured environmental data
• CPC Class Codes: H04W 4/70 Services for machine-to-machine communication [M2M] or machine type communication [MTC]

Abstract

Systems, methods, and software for operating environmental sensor systems are provided herein. In one example, a method is provided that includes monitoring environmental conditions to detect a trigger condition and transferring an access request for delivery to a data system responsive to the trigger condition. The method also includes receiving a security challenge transferred by the data system, and in response, transferring a security answer for delivery to the data system that includes a hash result generated using one of the security keys, and receiving a security grant transferred by the data system indicating one of the hash results. The method also includes selecting an environmental sensor function based on an association with one of the security keys used to generate the hash result indicated in the security grant, performing the environmental sensor function to obtain sensor data, and transferring the sensor data for delivery to the data system.

Claims

1. A method of operating an environmental sensor system comprising a sensor portion to perform a plurality of environmental sensor functions and a communication portion that stores a plurality of security keys, the method comprising:

in the sensor portion, monitoring at least one environmental condition to detect a trigger condition related to the environmental condition;

in the communication portion, transferring an access request for delivery to a remote data system responsive to the detection of the trigger condition;

in the communication portion, receiving a security challenge transferred by the remote data system, and in response, transferring a security answer for delivery to the remote data system that includes at least one hash result generated using at least one of the security keys;

in the communication portion, receiving a security grant transferred by the remote data system indicating one of the hash results;

in the communication portion, selecting at least one of the environmental sensor functions based on an association of the environmental sensor functions with one of the security keys used to generate the hash result indicated in the security grant;

in the sensor portion, performing the selected environmental sensor function to obtain sensor data; and

in the communication portion, transferring the sensor data for delivery to the remote data system.

2. The method of claim 1, wherein the environmental condition comprises at least one of a geographic location, an atmospheric condition, and a radio frequency (RF) status.

3. The method of claim 1, wherein the sensor portion comprises ones of a gas concentration sensor, a temperature sensor, a pressure sensor, a humidity sensor, and a seismic sensor.

4. The method of claim 1, wherein the access request comprises a request to perform an environmental sensor function to obtain sensor data.

5. The method of claim 1, wherein the security challenge comprises at least one request for the at least one hash result generated using the at least one of the security keys.

6. The method of claim 1, wherein the at least one of the security keys is selected based on at least the trigger condition.

7. The method of claim 1, wherein more than one hash result is transferred in the security answer, each hash result generated using a different one of the security keys.

8. The method of claim 1, wherein the remote data system selects the indicated one of the hash results based on a successful authentication of the indicated one of the hash results.

9. The method of claim 1, wherein selecting the at least one of the environmental sensor functions based on an association of the environmental sensor functions with the one of the security keys used to generate the hash result indicated in the security grant comprises maintaining a data structure relating ones of the environmental sensor functions to ones of the security keys, and selecting the at least one of the environmental sensor functions based on at least the data structure.

10. The method of claim 1, further comprising:

in a secure processing zone of the communication portion, receiving the at least one of the security keys from an open processing zone of the communication portion in response to the trigger condition;

in the secure processing zone, processing the at least one of the security keys to determine the at least one hash result generated using at least one of the security keys;

in the secure processing zone, responsive to receiving the security grant transferred by the remote data system indicating the one of the hash results, indicating an authorized one of the security keys to the open processing zone; and

in the open processing zone, selecting at least one of the environmental sensor functions based on an association of the environmental sensor functions with the authorized one of the security keys.

11. An environmental sensor system, comprising:

a sensor portion configured to perform a plurality of environmental sensor functions and monitor environmental conditions to detect a trigger condition;

a communication portion that stores a plurality of security keys and is configured to;

transfer an access request for delivery to a remote data system responsive to the detection of the trigger condition;

receive a security challenge transferred by the remote data system, and in response, transfer a security answer for delivery to the remote data system that includes at least one hash result generated using at least one of the security keys;

receive a security grant transferred by the remote data system indicating one of the hash results;

select one of the environmental sensor functions based on an association of the environmental sensor function with one of the security keys used to generate the hash result indicated in the security grant;

the sensor portion configured to perform the selected environmental sensor function to obtain sensor data; and

the communication portion configured to transfer the sensor data for delivery to the remote data system.

12. The environmental sensor system of claim 11, wherein the environmental condition comprises at least one of a geographic location, an atmospheric condition, and a radio frequency (RF) status.

13. The environmental sensor system of claim 11, wherein the sensor portion comprises ones of a gas concentration sensor, a temperature sensor, a pressure sensor, a humidity sensor, and a seismic sensor.

14. The environmental sensor system of claim 11, wherein the access request comprises a request to perform an environmental sensor function to obtain sensor data.

15. The environmental sensor system of claim 11, wherein the security challenge comprises at least one request for the at least one hash result generated using the at least one of the security keys.

16. The environmental sensor system of claim 11, wherein the at least one of the security keys is selected based on at least the trigger condition.

17. The environmental sensor system of claim 11, wherein more than one hash result is transferred in the security answer, each hash result generated using a different one of the security keys.

18. The environmental sensor system of claim 11, wherein the remote data system selects the indicated one of the hash results based on a successful authentication of the indicated one of the hash results.

19. The environmental sensor system of claim 11, comprising:

maintaining a data structure relating ones of the environmental sensor functions to ones of the security keys, and selecting the at least one of the environmental sensor functions based on at least the data structure.

20. The environmental sensor system of claim 11, comprising:

a secure processing zone of the communication portion configured to receive the at least one of the security keys from an open processing zone of the communication portion in response to the trigger condition;

the secure processing zone of the communication portion configured to process the at least one of the security keys to determine the at least one hash result generated using at least one of the security keys;

the secure processing zone of the communication portion configured to indicate an authorized one of the security keys to the open processing zone responsive to receiving the security grant transferred by the remote data system indicating the one of the hash results; and

the open processing zone of the communication portion configured to select at least one of the environmental sensor functions based on an association of the environmental sensor functions with the authorized one of the security keys.