Simple protocol for tangible security
AssigneeMicrosoft Technology Licensing, LLC
InventorsYuQun Chen, Michael J. Sinclair, Josh D. Benaloh
Life of this patent
Estimating the term…
Abstract
The claimed subject matter provides systems and/or methods that effectuate a simple protocol for tangible security on mobile devices. The system can include devices that generate sets of keys and associated secret identifiers, employs the one or more keys to encrypt a secret and utilizes the identifiers and encryptions of the secret to populate a table associated with a security token device that is used in conjunction with a mobile device to release sensitive information persisted on the mobile device for user selected purposes.
Claims20
A method comprising:
- using one or more processors of a computing device:
- receiving a first request for a first value;
- obtaining, from an area of memory of the computing device, both a secret that is used to generate an encrypted value and a second value that associates the secret with the encrypted value;
- in response to receiving the first request for the first value and based at least in part on determining that a security token device is within a wireless range of the computing device, sending a second request to the security token device for the encrypted value, the second request including the second value;
- and
- receiving, from a set of one or more encrypted values stored on the security token device, the encrypted value based on a correspondence between the second value and a third value that is associated or stored with the encrypted value in the security token device;
- obtaining the first value from the encrypted value based on the correspondence between the second value and the third value;
- and
- providing the first value responsive to the first request.
A computing device comprising:
- one or more processors;
- and
- memory communicatively coupled to the one or more processors and storing instructions that, when executed, configure the one or more processors to perform operations comprising:
- receiving a first request for a first value;
- obtaining, from an area of memory of the computing device, both a secret that is used to generate an encrypted value and a second value that associates the secret with the encrypted value;
- responsive to receiving the first request and based upon determining that a security token device is within a wireless range of the computing device, sending a second request to the security token device to retrieve the first value from a set of two or more values that are encrypted using the secret, the second request including the second value;
- and
- receiving, by the computing device, from the security token device, the first value based on a correspondence between second value and a third value that is associated or stored with the two or more values that are encrypted using the secret.
A non-transitory machine-readable medium, comprising instructions, when executed, cause a machine to perform operations comprising:
- receiving a first request for a first value;
- obtaining, from an area of memory of the computing device, both a secret that is used to generate an encrypted value and a second value that associates the secret with the encrypted value;
- responsive to receiving the first request for the first value and based at least in part on determining that a security token device is within a wireless range of the computing device, sending a second request to the security token device for the first value, the second request including the second value;
- receiving, from a set of one or more encrypted values stored on the security token device, the an encrypted version of first value based on a correspondence between the second value and a third value that is associated or stored with the encrypted version of the first value in the security token device;
- obtaining the first value from the encrypted version of the first value based on the correspondence between the second value and the third value;
- and
- providing the obtained first value responsive to the first request.
Dependencies are inferred from the claim text.