DATA MANAGEMENT WITH A NETWORKED MOBILE DEVICE

• US 20130047233A1
• Filed: 08/19/2011
• Published: 02/21/2013
• Est. Priority Date: 08/19/2011
• Status: Active Grant

• Current Assignee: HCL Technologies Limited
• Original Assignee: International Business Machines Corporation
• Inventors: Ramanathan, Sri, Terry, Matthew A., Trevathan, Matthew B., Fisk, Frank C.
• Granted Patent: US 8,789,156 B2
• Time in Patent Office: Days
• US Class Current: 726/7
• CPC Class Codes: G06F 21/30 Authentication, i.e. establishing the identity or authorisation of security principals
• CPC Class Codes: G06F 21/606 by securing the transmission between two devices or processes
• CPC Class Codes: G06F 21/6245 Protecting personal data, e.g. for financial or medical purposes
• CPC Class Codes: G06F 2221/2111 Location-sensitive, e.g. geographical location, GPS
• CPC Class Codes: G06F 2221/2129 Authenticate client device independently of the user
• CPC Class Codes: G06F 2221/2141 Access rights, e.g. capability lists, access control lists, access tables, access matrices
• CPC Class Codes: G16H 10/60 for patient-specific data, e.g. for electronic patient records
• CPC Class Codes: G16H 40/20 for the management or administration of healthcare resources or facilities, e.g. managing hospital staff or surgery rooms
• CPC Class Codes: H04L 63/0492 by using a location-limited connection, e.g. near-field communication or limited proximity of entities
• CPC Class Codes: H04L 63/18 using different networks or channels, e.g. using out of band channels cryptographic mechanisms or cryptographic arrangements for key distribution involving distinctive intermediate devices or communication paths H04L9/0827; cryptographic mechanisms or cryptographic arrangements for authentication using a plurality of channels H04L9/3215
• CPC Class Codes: H04L 67/06 specially adapted for file transfer, e.g. file transfer protocol [FTP]
• CPC Class Codes: H04W 12/068 using credential vaults, e.g. password manager applications or one time password [OTP] applications
• CPC Class Codes: H04W 4/80 Services using short range communication, e.g. near-field communication [NFC], radio-frequency identification [RFID] or low energy communication
• CPC Class Codes: H04W 76/10 Connection setup
• CPC Class Codes: H04W 8/005 Discovery of network devices, e.g. terminals

Abstract

A tool for establishing a wireless connection from a mobile device to another device in proximity to the mobile device. The mobile device receives requests for data, such as a user profile, medical records, etc. from the device. The mobile device has the ability to register/preapprove the requesting device allowing the device to access the requested data. The mobile device also has the ability to give varying devices different authorization levels. The mobile device has the ability to store the data on another system, and in response to the request, validate the requesting device and the device'"'"'s authorization level, request the data from the other system through a network, and return the data to the requesting device.

Claims

1. A method for managing data with a mobile device, the method comprising the steps of:

the mobile device establishing a wireless connection with an electronic device while the mobile device is within a wireless range of the electronic device;

with the wireless connection, the mobile device receiving a request from the electronic device for one or more data files, and in response;

the mobile device wirelessly connecting to a network device via a network different than the wireless connection to the electronic device;

the mobile device sending authentication information for the mobile device to the network device;

the mobile device requesting the one or more data files from the network device;

the mobile device receiving the one or more data files from the network device; and

the mobile device sending the one or more data files to the electronic device.

2. The method of claim 1, further comprising the prior step of the mobile device scanning a surrounding area for compatible electronic devices, and in response, locating the electronic device.

3. The method of claim 1, further comprising the steps of the mobile device receiving a request from the electronic device to connect to the mobile device, and in response, the mobile device determining that the electronic device has been approved to connect to the mobile device.

4. The method of claim 1, further comprising the steps of the mobile device receiving a request from the electronic device to connect to the mobile device, and determining that the electronic device is not approved to connect to the mobile device, and in response:

the mobile device receiving authentication information for the electronic device from the electronic device;

the mobile device sending the authentication information for the electronic device to a network device; and

the mobile device receiving a positive determination of authentication from the network device to which the authentication information was sent.

5. The method of claim 1, wherein authentication information is selected from a list consisting of:

a secure token, a passphrase, cookies, an encrypted key, and combinations thereof.

6. The method of claim 1, further comprising the steps of:

subsequent to receiving the request for the one or more data files, the mobile device determining an authorization level required to access the one or more data files; and

the mobile device determining an authorization level of the electronic device meets or exceed the authorization level required to access the one or more data files.

7. The method of claim 1, the method further comprising the steps of:

subsequent to receiving the request for the one or more data files, the mobile device determining an authorization level required to access the one or more data files;

in response to a determination that an authorization level of the electronic device does not meet or exceed the authorization level required to access the one or more data files, the mobile device prompting a user of the mobile device for authorization; and

the mobile device receiving the authorization from the user.

8. The method of claim 4, the method further comprising the step of notifying a user of the mobile device that the one or more data files have been requested.

9. The method of claim 1, the method further comprising the step of the mobile device removing the one or more data files from the mobile device subsequent to sending the one or more data files to the electronic device.

10. The method of claim 1 wherein the wireless connection between the mobile device and the electronic device is a short range wireless connection.

11. The method of claim 1, further comprising the step of the mobile device receiving an approval from a user of the mobile device allowing a connection with the electronic device.

12. The method of claim 11, further comprising the step of, after the step of receiving the approval, the mobile device allocating storage space specific to the electronic device.

13. The method of claim 12, further comprising the steps of:

the mobile device receiving one or more data files from the electronic device; and

the mobile device storing the one or more data files in the allocated storage space specific to the electronic device.

14. The method of claim 12, wherein the allocated storage space specific to the electronic device comprises storage space on a separate computer accessible through a network.

15. A computer system comprising one or more processors, one or more computer-readable memories, one or more computer-readable, tangible storage devices and program instructions which are stored on the one or more storage devices for execution by the one or more processors via the one or more memories and when executed by the one or more processors perform the method of claim 1.

16. A computer program product for managing data with a mobile device, the computer program product comprising:

one or more computer-readable tangible storage devices and program instructions stored on at least one of the one or more storage devices, the program instructions comprising;

program instructions to establish a wireless connection with an electronic device while the mobile device is within a wireless range of the electronic device;

program instructions, with the wireless connection, to receive a request from the electronic device for one or more data files;

program instructions to wirelessly connect to a network device via a network different than the wireless connection to the electronic device;

program instructions to send authentication information for the mobile device to the network device;

program instructions to request the one or more data files from the network device;

program instructions to receive the one or more data files from the network device; and

program instructions to send the one or more data files to the electronic device.

17. The computer program product of claim 16, further comprising program instructions, stored on at least one of the one or more storage devices, to scan a surrounding area for compatible electronic devices, and in response, locate the electronic device.

18. The computer program product of claim 16, further comprising program instructions, stored on at least one of the one or more storage devices, to receive a request from the electronic device to connect to the mobile device, and in response, determine that the electronic device has been approved to connect to the mobile device.

19. The computer program product of claim 16, further comprising program instructions, stored on at least one of the one or more storage devices, to:

receive a request from the electronic device to connect to the mobile device, and determine that the electronic device is not approved to connect to the mobile device, and in response;

receive authentication information for the electronic device from the electronic device;

send the authentication information for the electronic device to a network device; and

receive a positive determination of authentication from the network device to which the authentication information was sent.

20. The computer program product of claim 16, wherein authentication information is selected from a list consisting of:

a secure token, a passphrase, cookies, an encrypted key, and combinations thereof.

21. The computer program product of claim 16, further comprising program instructions, stored on at least one of the one or more storage devices, to:

subsequent to receiving the request for the one or more data files, determine an authorization level required to access the one or more data files; and

determine an authorization level of the electronic device meets or exceed the authorization level required to access the one or more data files.

22. The computer program product of claim 16, further comprising program instructions, stored on at least one of the one or more storage devices, to:

subsequent to receiving the request for the one or more data files, determine an authorization level required to access the one or more data files;

in response to a determination that an authorization level of the electronic device does not meet or exceed the authorization level required to access the one or more data files, program instructions to prompt a user of the mobile device for authorization; and

program instructions to receive the authorization from the user.

23. The computer program product of claim 19, further comprising program instructions, stored on at least one of the one or more storage devices, to notify a user of the mobile device that the one or more data files have been requested.

24. The computer program product of claim 16, further comprising program instructions, stored on at least one of the one or more storage devices, to remove the one or more data files from the mobile device subsequent to sending the one or more data files to the electronic device.

25. The computer program product of claim 16 wherein the wireless connection between the mobile device and the electronic device is a short range wireless connection.

26. The computer program product of claim 16, further comprising program instructions, stored on at least one of the one or more storage devices, to receive an approval from a user of the mobile device allowing a connection with the electronic device.

27. The computer program product of claim 26, further comprising program instructions, stored on at least one of the one or more storage devices, to, after receiving the approval, allocate storage space specific to the electronic device.

28. The computer program product of claim 27, further comprising program instructions, stored on at least one of the one or more storage devices, to:

receive one or more data files from the electronic device; and

store the one or more data files in the allocated storage space specific to the electronic device.

29. The computer program product of claim 27, wherein the allocated storage space specific to the electronic device comprises storage space on a separate computer accessible through a network.