# US 12,003,648 B2 · Method and apparatus for securing real-time data transfer from a device > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 12,003,648 B2 - Document ID: US12003648B2 - Status: Granted - Kind: B2 - Application number: 17/400,059 - Filed: 2021-08-11 - Published: 2022-02-17 - Granted: 2024-06-04 - Earliest claimed: 2020-08-14 - Assignees: Nokia Technologies Oy - Applicants: Nokia Technologies Oy - Inventors: Ian Justin Oliver - Web page: https://patentgrep.com/patent/US12003648B2 ## CPC - G06F 21/602: {Providing cryptographic facilities or services} - H04L 9/3247: {involving digital signatures} - G06F 21/57: Certifying or maintaining trusted computer platforms, e.g. secure boots or power-downs, version controls, system software checks, secure updates or assessing vulnerabilities - G06F 21/64: Protecting data integrity, e.g. using checksums, certificates or signatures - H04L 9/3236: {using cryptographic hash functions} - H04L 9/3297: {involving time stamps, e.g. generation of time stamps} - H04L 63/123: {received data contents, e.g. message integrity} - H04L 63/18: {using different networks or channels, e.g. using out of band channels (cryptographic mechanisms or cryptographic arrangements for key distribution involving distinctive intermediate devices or communication paths H04L9/0827; cryptographic mechanisms or cryptographic arrangements for authentication using a plurality of channels H04L9/3215)} - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) ## Abstract Real-time data transfer from a device is secured by: receiving data items from a data source, buffering and continually sending same to a data collector; generating by a root of trust a cryptographically verifiable integrity claim based on current hardware and software configuration of the apparatus; forming second data by combining at least the cryptographically verifiable integrity claim and an amount of the data items; forming a hash from at least the second data; obtaining a stamp; causing the root of trust circuitry to form a first signature from at least the hash; forming third data by combining at least the second data, the hash and the first signature; and providing the data collector with a secured transmission comprising the third data. ## Claims ### Claim 1 An apparatus comprising: a processor and memory including computer program code, wherein the memory and computer program code are configured to, with the processor, cause the apparatus to: receive a plurality of first data items from a data source; provide the first data items to a collector; buffer the first data items; generate a cryptographically verifiable integrity claim based on current hardware and software configuration of the apparatus; form second data by combining at least the cryptographically verifiable integrity claim and an amount of the first data items; form a hash from at least the second data; cause the root of trust circuitry to form a first signature from at least the hash; form third data by combining at least the second data, the hash and the first signature; and provide the data collector with a secured transmission comprising the third data. ### Claim 2 (depends on 1) The apparatus of claim 1, wherein the memory and computer program code are further configured to, with the processor, cause the apparatus to form the third data using a self-contained protocol for securely transmitting information between parties. ### Claim 3 (depends on 1) The apparatus of claim 1, wherein the memory and computer program code are further configured to, with the processor, cause the apparatus to sign at least the third data and form a second signature. ### Claim 4 (depends on 1) The apparatus of claim 1, wherein the apparatus comprises a root of trust circuitry comprising a trusted platform module; and the first signature is formed using an identification of an attestation key of the root trust circuitry as one part of the combination from which the first signature is formed. ### Claim 5 (depends on 4) The apparatus of claim 4, wherein the memory and computer program code are further configured to, with the processor, cause the root of trust circuitry to form the first signature from at least the hash, the time stamp, and a nonce provided by the data collector. ### Claim 6 (depends on 1) The apparatus of claim 1, wherein the memory and computer program code are further configured to, with the processor, cause the apparatus to form a second signature from at least the second data and the hash. ### Claim 7 (depends on 1) The apparatus of claim 1, wherein the data source is a sensor input. ### Claim 8 (depends on 1) The apparatus of claim 1, wherein the memory and computer program code are further configured to, with the processor, cause the apparatus to receive a data request from the data collector for the third data. ### Claim 9 An apparatus operating as a data collector, the apparatus comprising a processor and memory including computer program code, wherein the memory and computer program code are configured to, with the processor, cause the apparatus to: obtain first data items from another apparatus; store the received first data items as a first group; obtain a secured data transmission from the another apparatus, the secured data transmission comprising third data; obtain from the third data at least second data; a hash; and a first signature; verify validity of the hash in comparison to the at least the second data; verify validity of the first signature at least in comparison to the hash; obtain a second group of data items from the second data; verify correctness of the first group of data items in comparison to the second group of data items; and determine the first group of data items as valid if each of the verifications were successful. ### Claim 10 (depends on 9) The apparatus of claim 9, wherein the memory and computer program code are further configured to, with the processor, cause the apparatus to: obtain a second signature from the secured transmission; verify validity of the second signature using at least the third data; and perform the determining the first group of data items as valid only if the second signature is verified as valid. ### Claim 11 (depends on 9) The apparatus of claim 9, wherein the memory and computer program code are further configured to, with the processor, cause the apparatus to perform: allowing given tolerance in the verifying of the correctness of the first group of data items in comparison to the second group of data items. ### Claim 12 (depends on 11) The apparatus of claim 11, wherein the tolerance is based on a quality of a communication channel between the apparatus and the device. ### Claim 13 (depends on 9) The apparatus claim 9, wherein the memory and computer program code are further configured to, with the processor, cause the apparatus to: obtain a cryptographically verifiable integrity claim from the secured transmission; and cause verifying the cryptographically verifiable integrity claim from the secured transmission. ### Claim 14 A method in an apparatus, comprising: receiving from a data source a plurality of data items; continually providing a data collector with the data items; buffering the first data items; generating by a root of trust circuitry a cryptographically verifiable integrity claim based on current hardware and software configuration of the apparatus; forming second data by combining at least the cryptographically verifiable integrity claim and an amount of the data items; forming a hash from at least the second data; obtaining a stamp; causing the root of trust circuitry to form a first signature from at least the hash; forming third data by combining at least the second data, the hash and the first signature; and providing the data collector with a secured transmission comprising the third data. ### Claim 15 A method in a data collector, comprising: receiving information from an apparatus; storing information; obtaining continually data items from the apparatus; storing the received first data items as a first group; obtaining a secured data transmission from the apparatus, the secured data transmission comprising third data; obtaining from the third data at least second data; a hash; and a first signature; verifying validity of the hash in comparison to the at least the second data; verify validity of the first signature at least in comparison to the hash; obtaining a second group of data items from the second data; verifying correctness of the first group of data items in comparison to the second group of data items; and determining the first group of data items as valid if each of the verifications were successful.