Constrained key derivation in geographical space
AssigneeRed Hat, Inc.
InventorsNathaniel P. McCallum, Peter M. Jones
Life of this patent
Estimating the term…
Abstract
The technology disclosed herein provides an enhanced cryptographic access control mechanism that uses a cryptographic keys that are based on location data. An example method may include: determining location data of a computing device; transforming the location data in view of conversion data associated with the computing device, wherein the conversion data causes a set of alternate location data values to transform to a specific cryptographic value; creating, by a processing device, a cryptographic key in view of the transformed location data; and using the cryptographic key to enable access to a protected resource.
Claims19
A method comprising:
- receiving, by a processing device, conversion data and security data, wherein the conversion data is generated in view of a location where access to a protected resource is permitted and causes a set of alternate location data values to transform to a same specific cryptographic value;
- determining location data of a computing device, wherein the location data corresponds to a location of the computing device;
- transforming, by the processing device, the location data in view of the conversion data;
- creating, by the processing device, a cryptographic key using the transformed location data and the security data as input to a cryptographic key function;
- and
- using the cryptographic key to enable access to a protected resource.
A system comprising:
- a memory;
- a processing device operatively coupled to the memory, the processing device to:
- receive conversion data and security data, wherein the conversion data is generated in view of a location where access to a protected resource is permitted and causes a set of alternate location data values to transform to a same specific cryptographic value;
- determine location data of a computing device, wherein the location data corresponds to a location of the computing device;
- transform the location data in view of the conversion data that is associated with the protected resource or the computing device;
- create a cryptographic key using the transformed location data and the security data as input to a cryptographic key function;
- and
- use the cryptographic key to enable access to a protected resource.
A non-transitory computer-readable storage medium comprising instructions that cause a processing device to:
- receive conversion data from a source, wherein the conversion data is associated with a protected resource generated in view of a location where access to a protected resource is permitted and causes alternate location data values to transform to a same specific cryptographic value;
- access security data associated with a computing device;
- determine location data of the computing device, wherein the location data corresponds to a location of the computing device;
- transform the location data in view of conversion data associated with the protected resource;
- execute a key derivation function that creates a cryptographic key using the security data and the transformed location data;
- and
- use the cryptographic key to enable access to the protected resource.
Dependencies are inferred from the claim text.