Security system for handheld wireless devices using time-variable encryption keys

• US 9,531,548 B2
• Filed: 05/20/2014
• Issued: 12/27/2016
• Est. Priority Date: 06/26/2006
• Status: Active Grant

• Current Assignee: MLR, LLC
• Original Assignee: MLR, LLC
• Inventors: Leedom, Charles M. Jr.
• Primary Examiner(s): BEHESHTI SHIRAZI, SAYED ARESH
• Application Number:
  US14/283,044
• Publication Number:
  US 20160119149A1
• Time in Patent Office: 952 Days
• Field of Search: 713173-175, 713155-157, 705/44, 705/67, 705/317, 707/705, 707/678, 726/2, 726/4, 726 17- 21, 726/26, 380/277
• US Class Current: 1/1
• CPC Class Codes: G10L 15/18 using natural language modelling
• CPC Class Codes: G10L 15/22 Procedures used during a speech recognition process, e.g. man-machine dialogue
• CPC Class Codes: G10L 2015/223 Execution procedure of a spoken command
• CPC Class Codes: H04L 2209/80 Wireless network architectures or network communication protocols for wireless network security H04W12/00
• CPC Class Codes: H04L 63/0442 wherein the sending and receiving network entities apply asymmetric encryption, i.e. different keys for encryption and decryption cryptographic mechanisms or cryptographic arrangements for public-key encryption H04L9/30
• CPC Class Codes: H04L 63/068 using time-dependent keys, e.g. periodically changing keys cryptographic mechanisms or cryptographic arrangements for controlling usage of secret information H04L9/088
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 9/006 involving public key infrastructure [PKI] trust models network architecture or network communication protocol for supporting authentication of entities using certificates in a packet data network H04L63/0823
• CPC Class Codes: H04L 9/0869 involving random numbers or seeds
• CPC Class Codes: H04L 9/3263 involving certificates, e.g. public key certificate [PKC] or attribute certificate [AC]; Public key infrastructure [PKI] arrangements network architectures or network communication protocols for supporting authentication of entities using certificates in a packet data network H04L63/0823
• CPC Class Codes: H04W 12/04 Key management, e.g. using generic bootstrapping architecture [GBA]
• CPC Class Codes: H04W 12/0431 Key distribution or pre-distribution; Key agreement
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/33 using wearable devices, e.g. using a smartwatch or smart-glasses
• CPC Class Codes: H04W 84/00 Network topologies

Abstract

In one embodiment, the invention provides a portable wireless personal communication system for cooperating with a remote certification authority to employ time variable secure key information pursuant to a predetermined encryption algorithm to facilitate convenient, secure encrypted communication. The disclosed system includes a wireless handset, such as PDA, smartphone, cellular telephone or the like, characterized by a relatively robust data processing capability and a body mounted key generating component which is adapted to be mounted on an individual'"'"'s body, in a permanent or semi-permanent manner, for wirelessly broadcasting, within the immediate proximity of the individual, a secret or private key identifying signal corresponding to a time variable secure key information under the control of the certification authority. The key identifying signal is generated in a format that facilitates secure wireless communication with the individual in accordance with a predetermined encryption algorithm including a PKI encryption algorithm. The disclosed system may be used with a console for coordinating access to a variety of different communication system and networks.

Claims

1. A certification apparatus for a secure wireless personal communication system using an encryption algorithm, the secure wireless personal communication system serving a plurality of users, each of whom has a handheld wireless component for encrypting information for broadcast over a wireless communication channel using a time variable key and a body mounted paired key generating component adapted to be mounted permanently or semi-permanently on the user for wirelessly broadcasting a time variable key signal including the time variable key required by the encryption algorithm within an immediate proximity of the user, wherein said certification apparatus comprises:

a. a memory for storing an operating program, encryption program, and user identification information uniquely associated with each of the users of the secure wireless personal communication system; and

b. a data processor adapted to implement the operating program and the encryption program to generate time variable keys corresponding uniquely with the time variable keys generated by each of the body mounted paired key generating components, mounted on the respective users, to allow the respective users to communicate securely and to be authenticated to third parties, who communicate with the respective users over wireless communication channels,

wherein the certification apparatus can authenticate each user and facilitate encryption of information broadcast or received over wireless communication channels accessed by each user by using a corresponding time variable key,

wherein said certification apparatus implements a Public Key Infrastructure, PKI, type encryption algorithm for generating a series of public keys corresponding one to one to a sequential series of secret or private keys generated from time to time by said body mounted paired key generating component in accordance with a predetermined Public Key Infrastructure, PKI, key generation algorithm and wherein said time variable key signal broadcast by the body mounted paired key generating component is a private key corresponding to a current public key used by the certification apparatus to facilitate secure communication between third parties and the user who has been authenticated by the certification apparatus, and

wherein said predetermined PKI key generation algorithm employs a predetermined sequence of paired private keys and public keys wherein the private keys and the public keys are generated and provided, respectively, to the body mounted paired key generating component and to the certification apparatus to be used in the future in accordance with the predetermined PKI key generation algorithm to cause a current private key broadcast by said body mounted paired key generating component to properly correspond to a public key provided by the certification apparatus to facilitate third party communication with the user.

2. The certification apparatus according to claim 1, wherein the time variable key generated by said body mounted paired key generating component is an authenticating key that uniquely identifies to the certification apparatus the user upon which the body mounted paired key generating component is mounted and wherein said authenticating key and corresponding key information held by the certification apparatus change in time in accordance with said predetermined PKI key generation algorithm in a manner to permit the certification apparatus to uniquely and securely certify the identity of the user to whom the body mounted paired key generating component was provided.

3. The certification apparatus according to claim 2, wherein the predetermined PKI key generation algorithm implemented by each body mounted paired key generating component includes a pseudo random number generation function corresponding to a similar pseudo random number generation function performed by the certification apparatus to permit accurate authentication over time of the identity of the user to whom the body mounted paired key generating component has been issued despite the fact that the authenticating key is time variable and further wherein the pseudo random number generation function used by the predetermined PKI key generation algorithm operates to render each subsequent time variable key unpredictable based on previously generated time variable keys.

4. The certification apparatus according to claim 1, wherein said certification apparatus is adapted to implement the PKI type encryption algorithm that allows a user to create a cipher text from a message text using the public key provided by said certification apparatus that can only be decrypted using a private key corresponding to the public key provided by said certificate apparatus, wherein said handheld wireless component is capable of recovering a message text from a cipher text created by a third party using the public key currently being provided by the certification apparatus provided the handheld wireless component has received the corresponding private key.

5. The certification apparatus according to claim 1, wherein said certification apparatus implements the PKI type encryption algorithm including supplying sequentially a series of time variable keys corresponding one to one to a sequential series of keys generated from time to time by each body mounted paired key generating component in accordance with the PKI type encryption algorithm and wherein each time said certification apparatus generates a new time variable key, a current time variable key is changed to a next key in the sequence of time variable keys within the body mounted paired key generating component of the corresponding user.

6. The certification apparatus according to claim 1, wherein a broadcast zone of the time variable key signal is limited to the immediate proximity of the user, and encrypted communication in accordance with the encryption algorithm by the handheld wireless component is no longer possible should the handheld wireless component be lost or stolen.

7. The certification apparatus according to claim 1, wherein said body mounted paired key generating component is implantable subcutaneously in the user.

8. A certification apparatus for a secure wireless personal communication system using an encryption algorithm, the secure wireless personal communication system serving a plurality of users, each of whom has a handheld wireless component for encrypting information for broadcast over a wireless communication channel using a time variable key and a body mounted paired key generating component adapted to be mounted permanently or semi-permanently on the user for wirelessly broadcasting a time variable key signal including the time variable key required by the encryption algorithm within an immediate proximity of the user, wherein said certification apparatus comprises:

a. a memory for storing an operating program, encryption program, and user identification information uniquely associated with each of the users of the secure wireless personal communication system; and

b. a data processor adapted to implement the operating program and the encryption program to generate time variable keys corresponding uniquely with the time variable keys generated by each of the body mounted paired key generating components, mounted on the respective users, to allow the respective users to communicate securely and to be authenticated to third parties, who communicate with the respective users over wireless communication channels,

wherein the certification apparatus can authenticate each user and facilitate encryption of information broadcast or received over wireless communication channels accessed by each user by using a corresponding time variable key,

wherein the time variable key generated by said body mounted paired key generating component is an authenticating key that uniquely identifies to the certification apparatus the user upon which the body mounted paired key generating component is mounted and wherein said authenticating key and corresponding key information held by the certification apparatus change in time in accordance with a predetermined Public Key Infrastructure, PKI, key generation algorithm in a manner to permit the certification apparatus to uniquely and securely certify the identity of the user to whom the body mounted paired key generating component was provided, and

wherein the predetermined PKI key generation algorithm implemented by each body mounted paired key generating component includes a pseudo random number generation function corresponding to a similar pseudo random number generation function performed by the certification apparatus to permit accurate authentication over time of the identity of the user to whom the body mounted paired key generating component has been issued despite the fact that the authenticating key is time variable and further wherein the pseudo random number generation function used by the predetermined PKI key generation algorithm operates to render each subsequent time variable key unpredictable based on previously generated time variable keys.

9. The certification apparatus according to claim 8, wherein said certification apparatus implements a Public Key Infrastructure, PKI, type encryption algorithm for generating a series of public keys corresponding one to one to a sequential series of secret or private keys generated from time to time by said body mounted paired key generating component in accordance with the predetermined PKI key generation algorithm and wherein said time variable key signal broadcast by the body mounted paired key generating component is a private key corresponding to a current public key used by the certification apparatus to facilitate secure communication between third parties and the user who has been authenticated by the certification apparatus.

10. The certification apparatus according to claim 9, wherein said predetermined PKI key generation algorithm employs a predetermined sequence of paired private keys and public keys wherein the private keys and the public keys are generated and provided, respectively, to the body mounted paired key generating component and to the certification apparatus to be used in the future in accordance with the predetermined PKI key generation algorithm to cause a current private key broadcast by said body mounted paired key generating component to properly correspond to a public key provided by the certification apparatus to facilitate third party communication with the user.

11. The certification apparatus according to claim 8, wherein said certification apparatus is adapted to implement a Public Key Infrastructure, PKI, type encryption algorithm that allows a user to create a cipher text from a message text using a public key provided by said certification apparatus that can only be decrypted using a private key corresponding to the public key provided by said certification apparatus, wherein said handheld wireless component is capable of recovering a message text from a cipher text created by a third party using the public key currently being provided by the certification apparatus provided the handheld wireless component has received the corresponding private key.

12. The certification apparatus according to claim 8, wherein said certification apparatus implements a Public Key Infrastructure, PKI, type encryption algorithm including supplying sequentially a series of time variable keys corresponding one to one to a sequential series of keys generated from time to time by each body mounted paired key generating component in accordance with the PKI type encryption algorithm and wherein each time said certification apparatus generates a new time variable key, a current time variable key is changed to a next key in the sequence of time variable keys within the body mounted paired key generating component of the corresponding user.

13. The certification apparatus according to claim 8, wherein a broadcast zone of the time variable key signal is limited to the immediate proximity of the user, and encrypted communication in accordance with the encryption algorithm by the handheld wireless component is no longer possible should the handheld wireless component be lost or stolen.

14. The certification apparatus according to claim 8, wherein said body mounted paired key generating component is implantable subcutaneously in the user.

15. A certification apparatus for a secure wireless personal communication system using an encryption algorithm, the secure wireless personal communication system serving a plurality of users, each of whom has a handheld wireless component for encrypting information for broadcast over a wireless communication channel using a time variable key and a body mounted paired key generating component adapted to be mounted permanently or semi-permanently on the user for wirelessly broadcasting a time variable key signal including the time variable key required by the encryption algorithm within an immediate proximity of the user, wherein said certification apparatus comprises:

a. a memory for storing an operating program, encryption program, and user identification information uniquely associated with each of the users of the secure wireless personal communication system; and

b. a data processor adapted to implement the operating program and the encryption program to generate time variable keys corresponding uniquely with the time variable keys generated by each of the body mounted paired key generating components, mounted on the respective users, to allow the respective users to communicate securely and to be authenticated to third parties, who communicate with the respective users over wireless communication channels,

wherein the certification apparatus can authenticate each user and facilitate encryption of information broadcast or received over wireless communication channels accessed by each user by using a corresponding time variable key,

wherein said certification apparatus implements a Public Key Infrastructure, PKI, type encryption algorithm for generating a series of public keys corresponding one to one to a sequential series of secret or private keys generated from time to time by said body mounted paired key generating component in accordance with a predetermined Public Key Infrastructure, PKI, key generation algorithm and wherein said time variable key signal broadcast by the body mounted paired key generating component is a private key corresponding to a current public key used by the certification apparatus to facilitate secure communication between third parties and the user who has been authenticated by the certification apparatus, and

wherein said certification apparatus is adapted to implement the PKI type encryption algorithm that allows a user to create a cipher text from a message text using a public key provided by said certification apparatus that can only be decrypted using a private key corresponding to the public key provided by said certification apparatus, wherein said handheld wireless component is capable of recovering a message text from a cipher text created by a third party using the public key currently being provided by the certification apparatus provided the handheld wireless component has received the corresponding private key.

16. The certification apparatus according to claim 15, wherein said predetermined PKI key generation algorithm employs a predetermined sequence of paired private keys and public keys wherein the private keys and the public keys are generated and provided, respectively, to the body mounted paired key generating component and to the certification apparatus to be used in the future in accordance with the predetermined PKI key generation algorithm to cause a current private key broadcast by said body mounted paired key generating component to properly correspond to a public key provided by the certification apparatus to facilitate third party communication with the user.

17. The certification apparatus according to claim 15, wherein the time variable key generated by said body mounted paired key generating component is an authenticating key that uniquely identifies to the certification apparatus the user upon which the body mounted paired key generating component is mounted and wherein said authenticating key and corresponding key information held by the certification apparatus change in time in accordance with said predetermined PKI key generation algorithm in a manner to permit the certification apparatus to uniquely and securely certify the identity of the user to whom the body mounted paired key generating component was provided.

18. The certification apparatus according to claim 17, wherein the predetermined PKI key generation algorithm implemented by each body mounted paired key generating component includes a pseudo random number generation function corresponding to a similar pseudo random number generation function performed by the certification apparatus to permit accurate authentication over time of the identity of the user to whom the body mounted paired key generating component has been issued despite the fact that the authenticating key is time variable and further wherein the pseudo random number generation function used by the predetermined PKI key generation algorithm operates to render each subsequent time variable key unpredictable based on previously generated time variable keys.

19. The certification apparatus according to claim 15, wherein said certification apparatus implements the PKI type encryption algorithm including supplying sequentially a series of time variable keys corresponding one to one to a sequential series of keys generated from time to time by each body mounted paired key generating component in accordance with the PKI type encryption algorithm and wherein each time said certification apparatus generates a new time variable key, a current time variable key is changed to a next key in the sequence of time variable keys within the body mounted paired key generating component of the corresponding user.

20. The certification apparatus according to claim 15, wherein a broadcast zone of the time variable key signal is limited to the immediate proximity of the user, and encrypted communication in accordance with the encryption algorithm by the handheld wireless component is no longer possible should the handheld wireless component be lost or stolen.

21. The certification apparatus according to claim 15, wherein said body mounted paired key generating component is implantable subcutaneously in the user.