# US 12,225,001 B2 · Autonomous control and secure communications system and methods for sensors > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 12,225,001 B2 - Document ID: US12225001B2 - Status: Granted - Kind: B2 - Application number: 17/346,299 - Filed: 2021-06-14 - Published: 2023-10-12 - Granted: 2025-02-11 - Earliest claimed: 2021-06-14 - Assignees: Drkumo Inc. - Applicants: Drkumo Inc. - Inventors: Kelly Dao Xuan Nguyen; Duc Ngoc Pham; Tri Ngoc Truong; Vu Tuan Phan; Ha Thi Thu Bui; Anvay Arvind Rane; Bao Huynh Duong - Web page: https://patentgrep.com/patent/US12225001B2 ## CPC - H04L 63/083: {using passwords (cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226)} - H04L 63/0435: {wherein the sending and receiving network entities apply symmetric encryption, i.e. same key used for encryption and decryption (cryptographic mechanisms or cryptographic arrangements for symmetric key encryption H04L9/06)} - H04L 63/0876: {based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint} - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) ## Abstract A networked computer system providing an automated control system that enables a sensor client to securely communicate with a heterogeneous set of unique sensors. The system enables autonomous secure identification of specific sensors capable of system inter-operation. Recognized sensors are autonomously paired and the connection secured using a password unique to the sensor and autonomously managed by the system. Measurement data is source encrypted using a well-defined public key, thereby providing data security that extends uninterrupted from the sensor itself to an appropriately authorized subsystem of the control system. ## Claims ### Claim 1 A method executed on a client device for autonomously establishing secure communications between a sensor device and a remote server system and mediated by the client device, the method comprising: a) receiving a sensor device identifier unique to the sensor device, the sensor device identifier including one or more data fields autonomously advertised by the sensor device; b) retrieving provisioning information defined for the sensor device identifier from the remote server system, the provisioning information including a sensor device password; c) establishing a secure communications session with the sensor device utilizing the provisioning information, at least in part by providing the sensor device password to the sensor device; d) transmitting instructions to the sensor device to require an alternate sensor device password to enable the secure communications session; e) transmitting to the remote server system the alternate sensor device password for inclusion in subsequently retrieved provisioning information; and f) receiving measurement data from the sensor device and transmitting that received measurement data to the remote server. ### Claim 2 (depends on 1) The method of claim 1 further comprising generating the alternate sensor device password. ### Claim 3 (depends on 1) The method of claim 1 further comprising transmitting to the sensor device instructions to begin collection or transmission of the measurement data. ### Claim 4 (depends on 3) The method of claim 3 wherein the instructions to begin collection or transmission of measurement data are transmitted in response to a signal received from the remote server system. ### Claim 5 (depends on 1) The method of claim 1 further comprising: b′) retrieving the provisioning information defined for the sensor device identifier from the remote server system, the provisioning information including the alternate sensor device password; c′) establishing an additional secure communications session with the sensor device utilizing the provisioning information, at least in part by providing the alternate sensor device password to the sensor device; and f′) receiving additional measurement data from the sensor device and transmitting that received additional measurement data to the remote server. ### Claim 6 (depends on 1) The method of claim 1 further comprising: a′) receiving a second sensor device identifier unique to a second sensor device, the second sensor device identifier including one or more data fields autonomously advertised by the second sensor device; b′) retrieving second provisioning information defined for the second sensor device identifier from the remote server system, the second provisioning information including a second sensor device password; c′) establishing a secure communications session with the second sensor device utilizing the second provisioning information, at least in part by providing the second sensor device password to the second sensor device; d′) transmitting instructions to the second sensor device to require an alternate second sensor device password to enable the secure communications session; e′) transmitting to the remote server system the alternate second sensor device password for inclusion in subsequently retrieved second provisioning information; and f′) receiving second measurement data from the second sensor device and transmitting that received second measurement data to the remote server. ### Claim 7 (depends on 6) The method of claim 6 further comprising: b″) retrieving the second provisioning information defined for the second sensor device identifier from the remote server system, the second provisioning information including the alternate second sensor device password; c″) establishing an additional secure communications session with the second sensor device utilizing the second provisioning information, at least in part by providing the alternate second sensor device password to the second sensor device; and f″) receiving additional second measurement data from the second sensor device and transmitting that received additional second measurement data to the remote server. ### Claim 8 (depends on 1) The method of claim 1, the measurement data received from the sensor device and transmitted to the remote server being in encrypted form according to a public encryption key of a corresponding asymmetric key pair, the public encryption key being stored in the sensor device and a corresponding private encryption key of the asymmetric key pair being stored in the remote server. ### Claim 9 (depends on 1) The method of claim 1 further comprising encrypting the measurement data according to a public encryption key of a corresponding asymmetric key pair, the public encryption key being stored in the client device and a corresponding private encryption key of the asymmetric key pair being stored in the remote server, the measurement data being transmitted to the remote server in encrypted form according to the public encryption key. ### Claim 10 A client device comprising a one or more hardware processors, one or more non-transitory digital storage media, and one or more wired or wireless network connections, the client device being structured, programmed, and connected to perform a method for autonomously establishing secure communications between a sensor device and a remote server system and mediated by the client device, wherein the method comprises: a) receiving a sensor device identifier unique to the sensor device, the sensor device identifier including one or more data fields autonomously advertised by the sensor device; b) retrieving provisioning information defined for the sensor device identifier from the remote server system, the provisioning information including a sensor device password; c) establishing a secure communications session with the sensor device utilizing the provisioning information, at least in part by providing the sensor device password to the sensor device; d) transmitting instructions to the sensor device to require an alternate sensor device password to enable the secure communications session; e) transmitting to the remote server system the alternate sensor device password for inclusion in subsequently retrieved provisioning information; and f) receiving measurement data from the sensor device and transmitting that received measurement data to the remote server. ### Claim 11 (depends on 10) The client device of claim 10 wherein the method further comprises generating the alternate sensor device password. ### Claim 12 (depends on 10) The client device of claim 10 wherein the method further comprises transmitting to the sensor device instructions to begin collection or transmission of the measurement data. ### Claim 13 (depends on 12) The client device of claim 12 wherein the instructions to begin collection or transmission of measurement data are transmitted in response to a signal received from the remote server system. ### Claim 14 (depends on 10) The client device of claim 10 wherein the method further comprises: b′) retrieving the provisioning information defined for the sensor device identifier from the remote server system, the provisioning information including the alternate sensor device password; c′) establishing an additional secure communications session with the sensor device utilizing the provisioning information, at least in part by providing the alternate sensor device password to the sensor device; and f′) receiving additional measurement data from the sensor device and transmitting that received additional measurement data to the remote server. ### Claim 15 (depends on 10) The client device of claim 10 wherein the method further comprises: a′) receiving a second sensor device identifier unique to a second sensor device, the second sensor device identifier including one or more data fields autonomously advertised by the second sensor device; b′) retrieving second provisioning information defined for the second sensor device identifier from the remote server system, the second provisioning information including a second sensor device password; c′) establishing a secure communications session with the second sensor device utilizing the second provisioning information, at least in part by providing the second sensor device password to the second sensor device; d′) transmitting instructions to the second sensor device to require an alternate second sensor device password to enable the secure communications session; e′) transmitting to the remote server system the alternate second sensor device password for inclusion in subsequently retrieved second provisioning information; and f′) receiving second measurement data from the second sensor device and transmitting that received second measurement data to the remote server. ### Claim 16 (depends on 15) The client device of claim 15 wherein the method further comprises: b″) retrieving the second provisioning information defined for the second sensor device identifier from the remote server system, the second provisioning information including the alternate second sensor device password; c″) establishing an additional secure communications session with the second sensor device utilizing the second provisioning information, at least in part by providing the alternate second sensor device password to the second sensor device; and f″) receiving additional second measurement data from the second sensor device and transmitting that received additional second measurement data to the remote server. ### Claim 17 (depends on 10) The client device of claim 10, the measurement data received from the sensor device and transmitted to the remote server being in encrypted form according to a public encryption key of a corresponding asymmetric key pair, the public encryption key being stored in the sensor device and a corresponding private encryption key of the asymmetric key pair being stored in the remote server. ### Claim 18 (depends on 10) The client device of claim 10 wherein the method further comprises encrypting the measurement data according to a public encryption key of a corresponding asymmetric key pair, the public encryption key being stored in the client device and a corresponding private encryption key of the asymmetric key pair being stored in the remote server, the measurement data being transmitted to the remote server in encrypted form according to the public encryption key. ### Claim 19 (depends on 10) The client device of claim 10 wherein the client device comprises a smart device, a smartphone, or a tablet computer.