Location aware cryptography
AssigneeCryptography Research, Inc.
InventorsAmbuj Kumar, Mark Evan Marson, Daniel Robert Beitel
Life of this patent
Estimating the term…
Abstract
A first entity may provide a request to transmit data from the first entity to a second entity. The first entity may receive a session key from the second entity in response to the request where the session key is encrypted by a second key that is based on a combination of a public key and a location associated with the second entity. A location associated with the first entity may be identified. Furthermore, a first key may be generated based on a combination of the location associated with the first entity and a private key that corresponds to the public key. The first key may decrypt data encrypted by the second key when the location associated with the first entity corresponds to the location associated with the second entity.
Claims20
A method of operating a first device, the method comprising:
- initiating a communication session with a second device;
- generating first location information associated with the first device;
- retrieving a public key and a private key associated with the first device;
- generating a location-based private key based on the first location information and the private key;
- transmitting a public key and a certificate to the second device;
- receiving, from the second device, a session key encrypted based on the public key and second location information associated with the second device;
- and
- communicating encrypted data with the second device in the communication session, wherein the encrypted data is encrypted with the session key.
A first device comprising:
- a memory;
- and
- a processing device operatively coupled with the memory, to:
- initiate a communication session with a second device;
- generate first location information associated with the first device;
- retrieve a public key and a private key associated with the first device;
- generate a location-based private key based on the first location information and the private key;
- transmit a public key and a certificate to the second device;
- receive, from the second device, a session key encrypted based on the public key and second location information associated with the second device;
- and
- communicate encrypted data with the second device in the communication session, wherein the encrypted data is encrypted with the session key.
A non-transitory computer readable medium including data that, when accessed by a processing device of a first device, cause the processing device to perform operations comprising:
- initiating a communication session with a second device;
- generating first location information associated with the first device;
- retrieving a public key and a private key associated with the first device;
- generating a location-based private key based on the first location information and the private key;
- transmitting a public key and a certificate to the second device;
- receiving, from the second device, a session key encrypted based on the public key and second location information associated with the second device;
- and
- communicating encrypted data with the second device in the communication session, wherein the encrypted data is encrypted with the session key.
Dependencies are inferred from the claim text.