# US 11,909,865 B2 · Method and device for securing a communication path

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 11,909,865 B2
- Document ID: US11909865B2
- Status: Granted
- Kind: B2
- Application number: 17/456,032
- Filed: 2021-11-22
- Published: 2023-05-25
- Granted: 2024-02-20
- Earliest claimed: 2021-11-22
- Assignees: Lenovo (Singapore) Pte. Ltd.
- Applicants: Lenovo (Singapore) Pte. Ltd
- Inventors: Scott Li; Igor Stolbikov; Rod D. Waltermann; Joshua N. Novak
- Web page: https://patentgrep.com/patent/US11909865B2

## CPC

- H04L 9/0825: {using asymmetric-key encryption or public key infrastructure [PKI], e.g. key signature or public key certificates}
- G06F 21/85: interconnection devices, e.g. bus-connected or in-line devices
- H04L 9/0861: {Generation of secret information including derivation or calculation of cryptographic keys or passwords}
- H04L 9/088: {Usage controlling of secret information, e.g. techniques for restricting cryptographic keys to pre-authorized uses, different access levels, validity of crypto-period, different key- or password length, or different strong and weak cryptographic algorithms (network architectures or network communication protocols for using time-dependent keys in a packet data network H04L63/068)}
- H04L 9/0891: {Revocation or update of secret information, e.g. encryption key update or rekeying}
- H04L 9/0894: {Escrow, recovery or storing of secret information, e.g. secret key escrow or cryptographic key storage}
- H04L 9/14: using a plurality of keys or algorithms
- H04L 9/3242: {involving keyed hash functions, e.g. message authentication codes [MACs], CBC-MAC or HMAC}
- H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M)
- G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N)

## Abstract

An electronic device is provided that includes a memory storing program instructions, and one or more processors. The one or more processors, when executing the program instructions, are configured to generate an agent public key, and generate a key font based on the agent public key. The one or more processors are also configured to communicate the key font to an operating system, and obtain a key message based on the key font from an application. The one or more processors are also configured to respond to the key message on a bus based on the key message.

## Claims

### Claim 1

An electronic device comprising:
a memory storing program instructions;
one or more processors that, when executing the program instructions, are configured to:
(a) generate an agent public key;
(b) generate a key font based on the agent public key;
(c) communicate the key font to an operating system;
(d) obtain a key message based on the key font from an application; and
(e) respond to the key message on a bus based on the key message.

### Claim 2 (depends on 1)

The electronic device of claim 1, the one or more processors also configured to:
(f) generate an updated agent public key after a determined period;
(g) generate an updated key font based on the updated public key;
(h) obtain an updated key message based on the updated key font from the application;
(i) respond to the updated key message on the bus based on the updated key message; and
(j) repeat steps (f)-(i).

### Claim 3 (depends on 1)

The electronic device of claim 1, the one or more processors also configured to uninstall the key font in response to responding to the key message on the bus.

### Claim 4 (depends on 1)

The electronic device of claim 1, wherein the application is a progressive web application.

### Claim 5 (depends on 1)

The electronic device of claim 1, wherein the bus is a message queuing telemetry transport (MQTT) bus.

### Claim 6 (depends on 1)

The electronic device of claim 1, further comprising the application, and wherein the application is configured to:
receive the key font from the operating system;
generate the key message; and
communicate the key message over the bus.

### Claim 7 (depends on 6)

The electronic device of claim 6, wherein to generate the key message includes encrypting the key message based on the agent public key and an application public key.

### Claim 8 (depends on 1)

The electronic device of claim 1, further comprising the operating system, wherein the operating system is configured to receive the key font and communicate the key font to the application.

### Claim 9

A computer implemented method for providing a secure communication path comprising:
under control of one or more processors including program instructions to:
(a) generate an agent public key;
(b) generate a key font based on the agent public key;
(c) communicate the key font to an operating system;
(d) obtain a key message based on the key font from an application; and
(e) respond to the key message on a bus based on the key message.

### Claim 10 (depends on 9)

The method of claim 9, the one or more processors also including program instructions to:
(f) generate an updated agent public key after a determined period;
(g) generate an updated key font based on the updated public key;
(h) obtain an updated key message based on the updated key font from the application;
(i) respond to the updated key message on the bus based on the updated key message; and
(j) repeat steps (f)-(i).

### Claim 11 (depends on 9)

The method of claim 9, the one or more processors also including program instructions to uninstall the key font in response to responding to the key message on the bus.

### Claim 12 (depends on 9)

The method of claim 9, wherein the application is a progressive web application.

### Claim 13 (depends on 9)

The method of claim 9, wherein the bus is a message queuing telemetry transport (MQTT) bus.

### Claim 14

An electronic device comprising:
a memory storing program instructions;
one or more processors that, when executing the program instructions, are configured to:
generate a first key font based on a first agent public key;
an operating system configured to receive the first key font and communicate the first key font to an application;
the one or more processors also configured to:
obtain a first key message based on the first key font from the application; and
respond to the first key message on a bus based on the first key message.

### Claim 15 (depends on 14)

The electronic device of claim 14, wherein the application is a progressive web application.

### Claim 16 (depends on 14)

The electronic device of claim 14, wherein the bus is a message queuing telemetry transport (MQTT) bus.

### Claim 17 (depends on 14)

The electronic device of claim 14, wherein the one or more processors are also configured to uninstall the key font in response to responding to the key message on the bus.

### Claim 18 (depends on 14)

The electronic device of claim 14, further comprising the application, and wherein the application is configured to:
receive the key font from the operating system;
generate the key message based on the key font; and
communicate the key message over the bus.

### Claim 19 (depends on 18)

The electronic device of claim 18, wherein to generate the key message includes encrypting the key message based on the agent public key and an application public key.

### Claim 20 (depends on 14)

The electronic device of claim 14, the one or more processors also configured to:
in response to a determined period lapsing after generating the first agent public key, generate a second agent public key; and generate a second key font based on the second agent public key;
the operating system also configured to receive the second key font and communicate the second key font to an application;
the one or more processors also configured to:
obtain a second key message based on the second key font from the application; and
respond to the second key message on the bus based on the second key message.