# US 10,484,177 B2 · Method and apparatus for generation of a time-based one-time password for session encryption of sensor data gathered in low-performance and IOT environments > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 10,484,177 B2 - Document ID: US10484177B2 - Status: Granted - Kind: B2 - Application number: 15/646,036 - Filed: 2017-07-10 - Published: 2019-01-10 - Granted: 2019-11-19 - Earliest claimed: 2017-07-10 - Assignees: Dell Products L.P. - Applicants: Dell Products, LP - Inventors: Daniel L. Hamlin; Minhaj Ahmed; Amy C. Nelson - Web page: https://patentgrep.com/patent/US10484177B2 ## CPC - H04L 9/3228: {One-time or temporary data, i.e. information which is sent for every authentication or authorization, e.g. one-time-password, one-time-token or one-time-key} - G06F 11/0709: {in a distributed system consisting of a plurality of standalone computer nodes, e.g. clusters, client-server systems} - G06F 11/076: {by exceeding a count or rate limit, e.g. word- or bit count limit} - G06F 12/1408: {by using cryptography (for digital transmission H04L9/00)} - H04L 9/0863: {involving passwords or one-time passwords (network architectures or network communication protocols for using one-time keys in a packet data network H04L63/067)} - H04L 9/0869: {involving random numbers or seeds} - H04L 9/14: using a plurality of keys or algorithms - H04L 63/0838: {using one-time-passwords} - H04L 67/12: specially adapted for proprietary or special-purpose networking environments, e.g. medical networks, sensor networks, networks in vehicles or remote metering networks - H04W 12/06: Authentication - G06F 2201/88: Monitoring involving counting - G06F 2212/402: Encrypted data - H04L 2209/80: Wireless - H04W 4/38: for collecting sensor information - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) - H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72) ## Abstract A system for a time-based one-time password security system operating at a provisioning server may comprise transmitting one or more first locally generated random-string numbers for generation of a first time-based one-time password to a remotely connected internet of things sensor and a remotely connected internet of things sensor hub. The system may also comprise executing code instructions to associate the internet of things sensor with a first client key in a table stored in a memory operatively connected to the processor, associate the internet of things sensor hub with a second client key in the table, and associate the internet of things sensor and internet of things sensor hub with the one or more first locally generated random-string numbers in the table. Further the first remotely generated random-string numbers may identify a first preset function for generation of a first session key used in encrypting and decrypting sensor data records. ## Claims ### Claim 1 An information handling system of an internet of things sensor device comprising: a sensor; a network interface adapter to: receive one or more first remotely generated random-string numbers from a provisioning server for generation of a first time limited, one-time use password generated by a one-time password algorithm; wherein the first remotely generated random-string numbers are also transmitted to an internet of things sensor hub in communication with the internet of things sensor device; and transmit a first encrypted sensor data record to the internet of things sensor hub; a processor executing code instructions to: generate the first time limited, one-time use password using the received one or more first remotely generated random-string numbers; generate a first session key by mapping the first time limited, one-time use password to data of a fixed size according to a first preset function; gather sensor data from the sensor and store the sensor data in a sensor data record in a memory; and generate the first encrypted sensor data record for transmission to the internet of things sensor hub by encrypting the sensor data record using the first session key. ### Claim 2 (depends on 1) The information handling system of claim 1 further comprising: the network interface adapter executing code instructions to: receive one or more second remotely generated random-string numbers from the provisioning server for generation of a second time limited, one-time use password; transmit a second encrypted sensor data record to the internet of things sensor device; the processor executing code instructions to: generate the second time limited, one-time use password using the received one or more second remotely generated random-string numbers; generate a second session key by mapping the second time limited, one-time use password to data of a fixed size according to a second preset function; and generate the second encrypted sensor data record for transmission to the internet of things sensor hub by encrypting the sensor data record using the second session key. ### Claim 3 (depends on 2) The information handling system of claim 2, wherein the first preset function does not match the second preset function, and wherein one of the received second remotely generated random-string numbers identifies the second preset function. ### Claim 4 (depends on 1) The information handling system of claim 1, wherein one of the received first remotely generated random-string numbers identifies the first preset function. ### Claim 5 (depends on 1) The information handling system of claim 1, wherein the one or more of the received first remotely generated random-string numbers used to generate the time limited, one-time use password is a secret key. ### Claim 6 (depends on 1) The information handling system of claim 1, wherein the network interface adapter receives the one or more first remotely generated random-string numbers using an asymmetric key pair cryptography method. ### Claim 7 (depends on 1) The information handling system of claim 1, wherein the one or more first remotely generated random-string numbers includes a client key identifying the internet of things sensor device. ### Claim 8 An information handling system of an internet of things sensor hub comprising: a network interface adapter to: receive one or more first remotely generated random-string numbers from a provisioning server for generation of a first time limited, one-time use password generated by a one-time password algorithm; wherein the first remotely generated random-string numbers are also transmitted to an internet of things sensor device in communication with the internet of things sensor hub; and receive a first sensor data record from and encrypted by the internet of things sensor device; a processor executing code instructions to: generate the first time limited, one-time use password using the received one or more first remotely generated random-string numbers; generate a first session key by mapping the first time limited, one-time use password to data of a fixed size according to a preset function; decrypt the first sensor data record using the session key; and if the decryption is successful, evaluate the decrypted first sensor data record. ### Claim 9 (depends on 8) The information handling system of claim 8 further comprising: the network interface adapter executing code instructions to: transmit an error message to a remotely connected provisioning server if the generated session key does not successfully decrypt the first sensor data record; receive one or more second remotely generated random-string numbers from the provisioning server for generation of a second time limited, one-time use password; re-receive the first sensor data record from and re-encrypted by the internet of things sensor device; the processor executing code instructions to: generate the second time limited, one-time use password using the received one or more second remotely generated random-string numbers; generate a second session key by mapping the second time limited, one-time use password to data of a fixed size according to the preset function; decrypt the second sensor data record using the second session key; and if the decryption is successful, evaluate the decrypted second sensor data record. ### Claim 10 (depends on 8) The information handling system of claim 8, wherein one of the received first remotely generated random-string numbers identifies the first preset function. ### Claim 11 (depends on 8) The information handling system of claim 8, wherein the one or more first remotely generated random-string numbers includes a client key identifying the internet of things sensor hub. ### Claim 12 (depends on 11) The information handling system of claim 11 further comprising: the network interface adapter executing code instructions to: transmit the client key to the remotely connected provisioning server if the generated session key does not successfully decrypt the sensor data record. ### Claim 13 (depends on 8) The information handling system of claim 8, wherein the one or more of the received first remotely generated random-string numbers used to generate the time limited, one-time use password is a secret key. ### Claim 14 (depends on 8) The information handling system of claim 8, wherein the network interface adapter receives the one or more first remotely generated random-string numbers using an asymmetric key pair cryptography method. ### Claim 15 An information handling system of an encryption key seed provisioning server comprising: a network interface adapter executing code instructions to: transmit one or more first locally generated random-string numbers for generation of a first time-based one-time password to a remotely connected internet of things sensor device and a remotely connected internet of things sensor hub; a processor executing code instructions to: associate the internet of things sensor device with a first client key in a table stored in a memory operatively connected to the processor; associate the internet of things sensor hub with a second client key in the table; and associate the internet of things sensor device and internet of things sensor hub with the one or more first locally generated random-string numbers in the table. ### Claim 16 (depends on 15) The information handling system of claim 15 further comprising: the processor executing code instructions to: upon receipt of an error message, increment an error message counter variable by a value of one; if the error message counter variable does not meet a security threshold value, associate the internet of things sensor device and internet of things sensor hub with one or more second locally generated random-string numbers; the network interface adapter executing code instructions to: receive the second client key and the error message from the internet of things sensor hub; and if the error message counter variable does not meet the security threshold value, transmit the second locally generated random-string numbers to the internet of things sensor device and the internet of things sensor hub. ### Claim 17 (depends on 16) The information handling system of claim 16 further comprising: the processor executing code instructions to: if the error message counter variable meets the security threshold value, disassociate the internet of things sensor hub associated with the received second client key with the one or more first locally generated random-string numbers, the second locally generated random-string numbers, and all other locally generated random-string numbers stored in the table in the memory. ### Claim 18 (depends on 15) The information handling system of claim 15, wherein the network interface adapter transmits the one or more first remotely generated random-string numbers using an asymmetric key pair cryptography method. ### Claim 19 (depends on 15) The information handling system of claim 15, wherein the one or more first remotely generated random-string numbers includes the first client key and the second client key. ### Claim 20 (depends on 15) The information handling system of claim 15, wherein one of the transmitted first remotely generated random-string numbers identifies a first preset function for mapping of the first time limited, one-time use password to data of a fixed size to generate a first session key used in encrypting and decrypting sensor data records by the internet of things sensor device and internet of things sensor hub.