Security system for handheld wireless devices using time-variable encryption keys

• US 10,652,734 B2
• Filed: 12/21/2016
• Issued: 05/12/2020
• Est. Priority Date: 06/26/2006
• Status: Active Grant

• Current Assignee: MLR, LLC
• Original Assignee: MLR, LLC
• Inventors: Leedom, Jr., Charles M.
• Primary Examiner(s): Dada, Beemnet W
• Assistant Examiner(s): Beheshti Shirazi, Sayed Aresh
• Application Number:
  US15/387,310
• Publication Number:
  US 20170171750A1
• Time in Patent Office: 1,238 Days
• CPC Class Codes: G10L 15/18 using natural language modelling
• CPC Class Codes: G10L 15/22 Procedures used during a speech recognition process, e.g. man-machine dialogue
• CPC Class Codes: G10L 2015/223 Execution procedure of a spoken command
• CPC Class Codes: H04L 2209/80 Wireless network architectures or network communication protocols for wireless network security H04W12/00
• CPC Class Codes: H04L 63/0442 wherein the sending and receiving network entities apply asymmetric encryption, i.e. different keys for encryption and decryption cryptographic mechanisms or cryptographic arrangements for public-key encryption H04L9/30
• CPC Class Codes: H04L 63/068 using time-dependent keys, e.g. periodically changing keys cryptographic mechanisms or cryptographic arrangements for controlling usage of secret information H04L9/088
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 9/006 involving public key infrastructure [PKI] trust models network architecture or network communication protocol for supporting authentication of entities using certificates in a packet data network H04L63/0823
• CPC Class Codes: H04L 9/0869 involving random numbers or seeds
• CPC Class Codes: H04L 9/3263 involving certificates, e.g. public key certificate [PKC] or attribute certificate [AC]; Public key infrastructure [PKI] arrangements network architectures or network communication protocols for supporting authentication of entities using certificates in a packet data network H04L63/0823
• CPC Class Codes: H04W 12/04 Key management, e.g. using generic bootstrapping architecture [GBA]
• CPC Class Codes: H04W 12/0431 Key distribution or pre-distribution; Key agreement
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/33 using wearable devices, e.g. using a smartwatch or smart-glasses
• CPC Class Codes: H04W 84/00 Network topologies

Abstract

In one embodiment, the invention provides a portable wireless personal communication system for cooperating with a remote certification authority to employ time variable secure key information pursuant to a predetermined encryption algorithm to facilitate convenient, secure encrypted communication. The disclosed system includes a wireless handset, such as PDA, smartphone, cellular telephone or the like, characterized by a relatively robust data processing capability and a body mounted key generating component which is adapted to be mounted on an individual'"'"'s body, in a permanent or semi-permanent manner, for wirelessly broadcasting, within the immediate proximity of the individual, a secret or private key identifying signal corresponding to a time variable secure key information under the control of the certification authority. The key identifying signal is generated in a format that facilitates secure wireless communication with the individual in accordance with a predetermined encryption algorithm including a PKI encryption algorithm. The disclosed system may be used with a console for coordinating access to a variety of different communication system and networks.

Claims

1. A portable wireless personal communication system for cooperating with a remote certification authority to generate time variable secure key information and to generate time variable secure key information and to employ the time variable secure key information pursuant to a predetermined encryption algorithm to facilitate secure encrypted communication, comprising:

a. a key generating component having an external configuration suitable to be mounted on an individual'"'"'s body for wirelessly transmitting a key signal within the immediate proximity of the individual'"'"'s body when the key generating component is mounted on the individual'"'"'s body, wherein the key signal comprises secret key information corresponding to the time variable secure key information to facilitate secure wireless communication in accordance with the predetermined encryption algorithm, wherein the secret key information is changed by the key generating component in coordination with changes in the time variable secure key generated by the remote certificate authority; and

b. a handheld wireless component, physically separated from the key generating component, and having an external configuration suitable to be held by a hand of a user to (a) wirelessly receive the key signal transmitted by the key generating component only when within the immediate proximity of the key generating component, (b) use the secret key information included in the key signal to encrypt a message in accordance with the predetermined encryption algorithm, and (c) transmit the encrypted message via a wireless link that forms part of a communication channel connected at one end to said handheld wireless component and connected at the other end to a third party that has communicated with the remote certification authority in accordance with the encryption algorithm, wherein the portable wireless personal communication system is adapted to operate with the remote certification authority that implements a Public Key Infrastructure (PKI) type encryption algorithm, wherein the remote certification authority authenticates the individual on whose body is mounted the key generating component, a sequential series of public keys corresponding one to one to a sequential series of secret keys generated from time to time by said key generating component in accordance with a predetermined PKI key generation algorithm and wherein the key signal broadcast by said key generating component is the secret key corresponding to the public key used by the remote certification authority to facilitate secure communication between third parties and the individual who has been authenticated by the remote certification authority.

2. The portable wireless personal communication system as defined in claim 1, wherein said predetermined PKI key generation algorithm employs a predetermined sequence of paired secret keys and public keys wherein the secret keys and the public keys are generated and provided, respectively, to the key generating component and to the remote certification authority to be used in the future in accordance with the predetermined PKI key generating algorithm to cause the current secret key broadcast by said key generating component to properly correspond to the public key provided by the remote certification authority to facilitate third party communication with the individual.

3. The portable wireless personal communication system as defined in claim 2, wherein the key signal generated by said key generating component is an authenticating key that identifies to the remote certification authority the individual upon which said key generating component is mounted and wherein changes in said authenticating key and changes in the corresponding secure key information held by the remote certification authority are coordinated in time in accordance with said key generating algorithm in a manner to permit the remote certification authority to certify the identity of the individual to whom the key generating component was provided.

4. The portable wireless personal communication system as defined in claim 3, wherein the predetermined PKI key generating algorithm implemented by said key generating component includes a pseudo random number generator for creating the authenticating key corresponding to a pseudo random number generated by a pseudo random number generator operated by the remote certification authority to permit authentication over time of the identity of the individual to whom the key generating component has been issued wherein the authenticating key is time variable and further wherein the pseudo random number generator used by the key generating component operates to render subsequently created authenticating keys unpredictable.

5. The portable wireless personal communication system as defined in claim 1, wherein said key generating component includes a body mount allowing for semi-permanent mounting on the individual'"'"'s body.

6. The portable wireless personal communication system as defined in claim 5, wherein said body mount includes means for mounting said key generating component in a wrist watch, ring, necklace, or bracelet.

7. The portable wireless personal communication system as defined in claim 1, wherein said key generating component is an integrated circuit within a housing adapted to be permanently mounted on the individual subcutaneously.

8. The portable wireless personal communication system as defined in claim 1, wherein said handheld wireless component is a cellular telephone.

9. The portable wireless personal communication system as defined in claim 2, wherein the portable wireless personal communication system is adapted to operate within a Public Key Infrastructure (PKI) encryption/key generation algorithm that allows a sender to create a cipher text from a message text using the public key provided by the remote certification authority for a participating party that can only be decrypted using the secret key corresponding to that party'"'"'s public key, wherein said handheld wireless component is capable of recovering a message text from a cipher text created by a third party using the public key currently being provided by the remote certification authority provided the handheld wireless component has received the corresponding secret key and provided the remote certification authority, third party and handheld wireless component operate in accordance with the PKI type encryption algorithm.

10. The portable wireless personal communication system as defined in claim 1, wherein said key generating component includes a processor adapted to generate a time variable key that corresponds to the time variable secure key information held by the remote certification authority.

14. The portable wireless personal communication system as defined in claim 10, wherein said key generating component includes a pseudo random number generator that is coordinated with a pseudo random number generator operated by said certification authority such that corresponding keys can be generated by said remote certification authority and by said key generating component.

11. A portable wireless personal communication system for cooperating with a remote certification authority to generate time variable secure key information and to employ the time variable secure key information pursuant to a predetermined encryption algorithm to facilitate secure encrypted communication, comprising:

a. a key generating component having an external configuration suitable to be mounted on an individual'"'"'s body for wirelessly transmitting a key signal within the immediate proximity of the individual'"'"'s body when the key generating component is mounted on the individual'"'"'s body, wherein the key signal comprises secret key information corresponding to the time variable secure key information to facilitate secure wireless communication in accordance with the predetermined encryption algorithm, wherein the secret key information is changed by the key generating component in coordination with changes in the time variable secure key generated by the remote certificate authority; and

b. a handheld wireless component, physically separated from the key generating component, and having an external configuration suitable to be held by a hand of a user to (a) wirelessly receive the key signal transmitted by the key generating component only when within the immediate proximity of the key generating component, (b) use the secret key information included in the key signal to encrypt a message in accordance with the predetermined encryption algorithm, and (c) transmit the encrypted message via a wireless link that forms part of a communication channel connected at one end to said handheld wireless component and connected at the other end to a third party that has communicated with the remote certification authority in accordance with the encryption algorithm, wherein said key generating component includes a processor adapted to generate a time variable key that corresponds to the time variable secure key information held by the remote certification authority;

wherein said key generating component includes a radio transmitter for broadcasting the time variable key within a zone in close proximity to the individual on whose body said key generating component is mounted and said key generating component includes encrypting means for broadcasting the time variable key in an encrypted form and further wherein said hand held wireless component includes decrypting means for recovering the time variable key from the signal broadcasted by said key generating component.

12. The portable wireless personal communication system as defined in claim 11, wherein said key generating component includes a transponder circuit adapted to cause said key generating component to broadcast the time variable key only upon receipt of a wireless signal requesting the time variable key created and broadcast by said handheld wireless component that has been encrypted in a manner to cause it to be decrypted only by said transponder circuit.

13. The portable wireless personal communication system as defined in claim 12, wherein each time said transponder circuit is activated, a current time variable key is changed to a next key in a sequence of time variable keys and the remote certification authority is notified of a need to change to a corresponding time variable key information.