One-touch device personalization

• US 9,712,508 B2
• Filed: 03/13/2013
• Issued: 07/18/2017
• Est. Priority Date: 03/13/2013
• Status: Active Grant

• Current Assignee: Intel Corporation
• Original Assignee: Intel Corporation
• Inventors: Bodio, James F., Prakash, Gyan
• Primary Examiner(s): Armouche, Hadi
• Assistant Examiner(s): Zarrineh, Shahriar
• Application Number:
  US13/799,301
• Publication Number:
  US 20140281490A1
• Time in Patent Office: 1,588 Days
• Field of Search: 713155
• CPC Class Codes: G06F 11/1448 Management of the data involved in backup or backup restore
• CPC Class Codes: G06F 11/1451 by selection of backup contents
• CPC Class Codes: G06F 11/1461 Backup scheduling policy
• CPC Class Codes: G06F 11/1469 Backup restoration techniques
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: H04L 63/062 for key distribution, e.g. centrally by trusted party cryptographic mechanisms or cryptographic arrangements for key distribution involving a central third party H04L9/0819
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/35 Protecting application or service provisioning, e.g. securing SIM application provisioning
• CPC Class Codes: H04W 4/50 Service provisioning or reconfiguring
• CPC Class Codes: H04W 88/02 Terminal devices

Abstract

Technologies for one-touch device personalization include at least two mobile computing devices configured to communicate with a personalization server. The first mobile computing device tracks changes to device personalization data and backs up the personalization data to the personalization server. The personalization server associates the personalization data to authenticated user credentials. The personalization server may store the personalization data in an operating-system-independent format. Later, a second mobile computing device sends a request for personalization including those user credentials. After authenticating the user credentials, the personalization server sends the personalization data to the second mobile computing device, which installs the personalization data. Installing the personalization data establishes a configuration of the second mobile computing device corresponding to a previous configuration of the first mobile computing device. For increased convenience and security, the user credentials may be stored on a smart card or other security device. Other embodiments are described and claimed.

Claims

1. A mobile computing device to perform one-touch personalization of settings comprising:

user credential management circuitry to determine user credentials associated with personalization data stored by a personalization server, wherein the user credentials are registered with the personalization server by a different mobile computing device and associated with the personalization data by the different mobile computing device;

communication circuitry to;

send the user credentials from the mobile computing device to the personalization server;

receive, at a first time, a decryption key encrypted by the personalization server and the personalization data from the personalization server in response to authentication of the user credentials by the personalization server, the personalization data originated from and was encrypted by the different mobile computing device, wherein the personalization server used the user credentials to encrypt the decryption key;

transmit, at a second time that is subsequent to the first time, only a subset of the personalization data to the personalization server, wherein the subset of the personalization data changed between the first time and the second time, while a remainder of the personalization data did not change between the first time and the second time; and

personalization management circuitry to;

decrypt, with the user credentials, the encrypted decryption key;

decrypt, with the decryption key, the personalization data received from the personalization server;

install, for a temporary time period, the personalization data on the mobile computing device to establish a configuration of the mobile computing device corresponding to a previous configuration of the different mobile computing device;

monitor user activity in one or more applications executed by the mobile computing device to identify, for transmission to the personalization server, the subset of the personalization data that changed between the first time and the second time, wherein the personalization data defines a configuration of the one or more applications and is converted to an operating system independent format for storage by the personalization server;

determine whether the temporary time period has expired; and

clear the personalization data in response to a determination that the temporary time period has expired to revert the configuration of the mobile computing device to an earlier configuration of the mobile computing device.

2. The mobile computing device of claim 1, wherein the personalization management circuitry is further to convert the personalization data between the operating system independent format and a native format associated with a vendor of the mobile computing device, wherein the operating system independent format is different from the native format.

3. The mobile computing device of claim 1, wherein to determine the user credentials comprises to retrieve the user credentials from a physical security device separate from the mobile computing device.

4. The mobile computing device of claim 3, further comprising one of a near-field communication circuit or a universal serial bus, wherein the physical security device comprises one of a smart card communicatively coupled to the mobile computing device via the near-field communication circuit, the different mobile computing device communicatively coupled to the mobile computing device via the near-field communication circuit, or a memory card coupled to the mobile computing device via the universal serial bus.

5. The mobile computing device of claim 1, wherein:

the personalization management circuitry is further to store the personalization data in a virtualization partition of the mobile computing device; and

to clear the personalization data further comprises to preserve encrypted personalization data stored in a physical security device coupled to the mobile computing device.

6. A method for one-touch personalization of a mobile computing device, the method comprising:

determining, on the mobile computing device, user credentials associated with personalization data stored by a personalization server, wherein the user credentials are registered with the personalization server by a different mobile computing device and associated with the personalization data by the different mobile computing device;

sending the user credentials from the mobile computing device to the personalization server;

receiving, on the mobile computing device at a first time, a decryption key encrypted by the personalization server and the personalization data from the personalization server in response to the user credentials being authenticated by the personalization server, the personalization data including personalization data originating from the different mobile computing device, wherein the personalization server used the user credentials to encrypt the decryption key;

decrypting, by the mobile computing device and with the user credentials, the encrypted decryption key;

decrypting, by the mobile computing device, with the decryption key, the personalization data received from the personalization server;

converting, by the mobile computing device, the personalization data from an operating system independent format to a native format associated with a vendor of the mobile computing device, wherein the operating system independent format is different from the native format;

installing, for a temporary time period, the personalization data on the mobile computing device to establish a configuration of the mobile computing device corresponding to a previous configuration of the different mobile computing device;

monitoring user activity in one or more applications executed by the mobile computing device to identify, for transmission to the personalization server, a subset of the personalization data that changed between the first time and a second time that is subsequent to the first time, wherein the personalization data defines a configuration of the one or more applications;

transmitting, at the second time, the subset of the personalization data to the personalization server without transmitting a remainder of the personalization data that did not change between the first time and the second time;

determining, by the mobile computing device, whether the temporary time period has expired; and

clearing, by the mobile computing device, the personalization data in response to a determination that the temporary time period has expired to revert the configuration of the mobile computing device to an earlier configuration of the mobile computing device.

7. The method of claim 6, wherein receiving the personalization data comprises receiving personalization data originating from the different mobile computing device having an operating system and vendor different from the operating system and vendor of the mobile computing device.

8. The method of claim 6, wherein determining the user credentials comprises retrieving the user credentials from a physical security device separate from the mobile computing device.

9. The method of claim 6, further comprising:

storing, by the mobile computing device, the personalization data in a virtualization partition.

10. One or more non-transitory, machine readable storage media to enable one-touch personalization, the one or more non-transitory, machine readable storage media comprising a plurality of instructions that in response to being executed cause a mobile computing device to:

determine user credentials associated with personalization data stored by a personalization server, wherein the user credentials are registered with the personalization server by a different mobile computing device and associated with the personalization data by the different mobile computing device;

send the user credentials from the mobile computing device to the personalization server;

receive a decryption key encrypted by the personalization server and the personalization data from the personalization server at a first time, in response to authentication of the user credentials by the personalization server, the personalization data including personalization data originating from the different mobile computing device having a different operating system and vendor than the mobile computing device, wherein the personalization server used the user credentials to encrypt the decryption key;

decrypt, with the user credentials, the encrypted decryption key;

decrypt, with the decryption key, the personalization data received from the personalization server;

convert the personalization data from an operating system independent format to a native format associated with the mobile computing device, wherein the operating system independent format is different from the native format;

install, for a temporary time period, the personalization data on the mobile computing device to establish a configuration of the mobile computing device corresponding to a previous configuration of the different mobile computing device;

monitor user activity in one or more applications executed by the mobile computing device to identify, for transmission to the personalization server, a subset of the personalization data that changed between the first time and a second time that is subsequent to the first time, wherein the personalization data defines a configuration of the one or more applications;

transmit, at the second time, the subset of the personalization data to the personalization server without a remainder of the personalization data that did not change between the first time and the second time; and

determine whether the temporary time period has expired; and

clear the personalization data in response to a determination that the temporary time period has expired to revert the configuration of the mobile computing device to an earlier configuration of the mobile computing device.

11. The non-transitory, machine readable media of claim 10, wherein to determine the user credentials comprises to retrieve the user credentials from a physical security device separate from the mobile computing device.

12. The non-transitory, machine readable media of claim 11, wherein to retrieve the user credentials comprises one of to:

receive the user credentials from a smart card via a near-field communication capability of the mobile computing device;

receive the user credentials from the different mobile computing device via a near-field communication capability of the mobile computing device;

or

receive the user credentials from a memory card via a universal serial bus of the mobile computing device.

13. The non-transitory, machine readable media of claim 10, further comprising a plurality of instructions that in response to being executed cause the mobile computing device to:

store the personalization data in a virtualization partition of the mobile computing device.