Secure data sharing with publicly accessible computing nodes

• US 9,202,082 B2
• Filed: 03/14/2013
• Issued: 12/01/2015
• Est. Priority Date: 03/14/2013
• Status: Active Grant

• Current Assignee: Intel Corporation
• Original Assignee: Intel Corporation
• Inventors: Hochberg, Yoav, Anderson, Glen, Johnson, Brian, Ben Haim, Guy, Smith, Charles
• Primary Examiner(s): Yalew, Fikremariam A
• Application Number:
  US13/827,179
• Publication Number:
  US 20140283138A1
• Time in Patent Office: 992 Days
• US Class Current: 1/1
• CPC Class Codes: G06F 21/6245 Protecting personal data, e.g. for financial or medical purposes
• CPC Class Codes: G06F 2221/2143 Clearing memory, e.g. to prevent the data from being stolen
• CPC Class Codes: H04L 63/04 for providing a confidential data exchange among entities communicating through data packet networks
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/105 Multiple levels of security
• CPC Class Codes: H04L 63/1408 by monitoring network traffic monitoring network traffic per se H04L43/00
• CPC Class Codes: H04W 12/069 using certificates or pre-shared keys

Abstract

An embodiment of the invention includes determining a first security status for first information and a second security status for second information, the second security status being more secure than the first security status; establishing a first communication path between the system and a first local computing node via a first wireless path; conveying the first information to the first local computing node via the first wireless path based on the first security status; and withholding the second information from the first local computing node based on the second security status; wherein the first and second information are stored on at least one of the system and a remotely located computing node. Other embodiments are described herein.

Claims

1. At least one non-transitory storage medium having instructions stored thereon for causing a processor based computing system to:

determine a first security status for first information and a second security status for second information, the second security status being more secure than the first security status;

establish a first communication path between the system and a first local computing node via a first wireless path;

convey the first information to the first local computing node based on the first security status;

withhold the second information from the first local computing node based on the second security status;

establish a second communication path between the system and a second local computing node via a second wireless path; and

convey the second information to the second local computing node based on the second security status;

wherein the first and second information are stored on at least one of the system and a remotely located computing node.

2. The at least one medium of claim 1 comprising instructions to:

determine the first information was previously communicated via one of a predetermined group of social media outlets; and

determine the first security status for the first information based on the determining the first information was previously communicated via one of a predetermined group of social media outlets.

3. The at least one medium of claim 1 comprising instructions to:

determine the first security status for the first information in response to the first information satisfying a first user defined setting but not a second user defined setting; and

determine the second security status for the second information in response to the second information satisfying the second user defined setting.

4. The at least one medium of claim 1, wherein the second information is accessible to the second local computing node for only a predetermined amount of time based on the second security status.

5. The at least one medium of claim 4, wherein the predetermined amount of time is based on when the second information is accessed by the second local computing node.

6. The at least one medium of claim 1 comprising instructions to:

determine a first node security status for the first local computing node; and

convey the first information to the first local computing node based on the first node security status.

7. The at least one medium of claim 6 comprising instructions to determine the first node security status based on determining at least one of (a) a proximity between the first local computing node and the system;

(b) an encryption level to be used for conveying the first information to the first local computing node;

(c) whether the first local computing node is blacklisted; and

(d) whether the first local computing node is whitelisted.

8. The at least one medium of claim 1, wherein at least one of the first and second information include security credentials for the remotely located computing node.

9. The at least one medium of claim 1 comprising instructions to:

determine the first security status corresponds to third information based on having earlier determined the first security status for the first information;

wherein the third information was stored on at least one of the system and the remotely located computing node before the first information was stored on the at least one of the system and a remotely located computing node.

10. A method executed by at least one processor of a processor-based system comprising:

determining a first security status for first information and a second security status for second information, the second security status being more secure than the first security status;

establishing a first communication path between the system and a first local computing node via a first wireless path;

conveying the first information to the first local computing node based on the first security status;

withholding the second information from the first local computing node based on the second information having the second security status;

establishing a second communication path between the system and a second local computing node via a second wireless path; and

conveying the second information to the second local computing node based on the second security status;

wherein the first and second information are stored on at least one of the system and a remotely located computing node.

11. The method of claim 10 comprising:

determining the first information was previously communicated via one of a predetermined group of social media outlets; and

determining the first security status for the first information based on the determining the first information was previously communicated via one of a predetermined group of social media outlets.

12. The method of claim 10 comprising:

determining the first security status corresponds to third information based on having earlier determined the first security status for the first information;

wherein the third information was stored on at least one of the system and the remotely located computing node before the first information was stored on the at least one of the system and a remotely located computing node.