# US 2019/0173673 A1 · Power Management and Security for Wireless Modules in "Machine-to-Machine" Communications

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 2019/0173673 A1
- Document ID: US20190173673A1
- Status: Published application
- Kind: A1
- Application number: 16/271,428
- Filed: 2019-02-08
- Published: 2019-06-06
- Earliest claimed: 2013-09-10
- Assignees: Network-1 Technologies, Inc.
- Applicants: Network-1 Technologies, Inc.
- Inventors: John A. Nix
- Web page: https://patentgrep.com/patent/US20190173673A1

## CPC

- H04L 9/0861: {Generation of secret information including derivation or calculation of cryptographic keys or passwords}
- G06F 21/35: communicating wirelessly
- G06F 21/445: {by mutual authentication, e.g. between devices or programs}
- H04J 11/00: Orthogonal multiplex systems, {e.g. using WALSH codes}(H04J13/00 takes precedence)
- H04L 9/006: {involving public key infrastructure [PKI] trust models (network architecture or network communication protocol for supporting authentication of entities using certificates in a packet data network H04L63/0823)}
- H04L 9/0816: {Key establishment, i.e. cryptographic processes or cryptographic protocols whereby a shared secret becomes available to two or more parties, for subsequent use}
- H04L 9/0841: {involving Diffie-Hellman or related key agreement protocols}
- H04L 9/085: {Secret sharing or secret splitting, e.g. threshold schemes}
- H04L 9/088: {Usage controlling of secret information, e.g. techniques for restricting cryptographic keys to pre-authorized uses, different access levels, validity of crypto-period, different key- or password length, or different strong and weak cryptographic algorithms (network architectures or network communication protocols for using time-dependent keys in a packet data network H04L63/068)}
- H04L 9/0894: {Escrow, recovery or storing of secret information, e.g. secret key escrow or cryptographic key storage}
- H04L 9/14: using a plurality of keys or algorithms
- H04L 9/30: Public key, i.e. encryption algorithm being computationally infeasible to invert or user's encryption keys not requiring secrecy
- H04L 9/3066: {involving algebraic varieties, e.g. elliptic or hyper-elliptic curves}
- H04L 9/32: including means for verifying the identity or authority of a user of the system {or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials}
- H04L 9/321: {involving a third party or a trusted authority}
- H04L 9/3239: {involving non-keyed hash functions, e.g. modification detection codes [MDCs], MD5, SHA or RIPEMD}
- H04L 9/3247: {involving digital signatures}
- H04L 9/3249: {using RSA or related signature schemes, e.g. Rabin scheme}
- H04L 9/3263: {involving certificates, e.g. public key certificate [PKC] or attribute certificate [AC]; Public key infrastructure [PKI] arrangements (network architectures or network communication protocols for supporting authentication of entities using certificates in a packet data network H04L63/0823)}
- H04L 12/2854: {Wide area networks, e.g. public data networks}
- H04L 63/0272: {Virtual private networks}
- H04L 63/0435: {wherein the sending and receiving network entities apply symmetric encryption, i.e. same key used for encryption and decryption (cryptographic mechanisms or cryptographic arrangements for symmetric key encryption H04L9/06)}
- H04L 63/0442: {wherein the sending and receiving network entities apply asymmetric encryption, i.e. different keys for encryption and decryption (cryptographic mechanisms or cryptographic arrangements for public-key encryption H04L9/30)}
- H04L 63/045: {wherein the sending and receiving network entities apply hybrid encryption, i.e. combination of symmetric and asymmetric encryption (cryptographic mechanisms or cryptographic arrangements using a plurality of keys or algorithms H04L9/14)}
- H04L 63/061: {for key exchange, e.g. in peer-to-peer networks (cryptographic mechanisms or cryptographic arrangements for key agreement H04L9/0838)}
- H04L 63/0807: {using tickets, e.g. Kerberos (cryptographic mechanisms or cryptographic arrangements for entity authentication using tickets or tokens H04L9/3213)}
- H04L 63/123: {received data contents, e.g. message integrity}
- H04L 63/166: {at the transport layer}
- H04L 67/04: specially adapted for terminals or networks with limited capabilities; specially adapted for terminal portability
- H04W 4/70: Services for machine-to-machine communication [M2M] or machine type communication [MTC]
- H04W 8/082: {for traffic bypassing of mobility servers, e.g. location registers, home PLMNs or home agents}
- H04W 12/02: Protecting privacy or anonymity, e.g. protecting personally identifiable information [PII]
- H04W 12/033: of the user plane, e.g. user's traffic
- H04W 12/04: Key management, e.g. using generic bootstrapping architecture [GBA]
- H04W 12/06: Authentication
- H04W 12/069: using certificates or pre-shared keys
- H04W 12/40: Security arrangements using identity modules
- H04W 40/005: {Routing actions in the presence of nodes in sleep or doze mode}
- H04W 52/0216: {using a pre-established activity schedule, e.g. traffic indication frame}
- H04W 52/0235: {where the received signal is a power saving command}
- H04W 52/0277: {according to available power supply, e.g. switching off when a low battery condition is detected}
- H04W 76/27: Transitions between radio resource control [RRC] states
- H04W 80/04: Network layer protocols, e.g. mobile IP [Internet Protocol]
- G06F 2221/2105: Dual mode as a secondary aspect
- G06F 2221/2107: File encryption
- G06F 2221/2115: Third party
- H04L 63/0464: {using hop-by-hop encryption, i.e. wherein an intermediate entity decrypts the information and re-encrypts it before forwarding it}
- H04L 2209/24: Key scheduling, i.e. generating round keys or sub-keys for block encryption
- H04L 2209/72: Signcrypting, i.e. digital signing and encrypting simultaneously
- H04L 2209/805: Lightweight hardware, e.g. radio-frequency identification [RFID] or sensor
- H04W 84/12: WLAN [Wireless Local Area Networks]
- H04W 88/12: Access point controller devices
- Y02D 30/70: in wireless communication networks
- H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M)
- G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N)
- H04J: MULTIPLEX COMMUNICATION (transmission in general H04B; peculiar to transmission of digital information H04L5/00; systems for the simultaneous or sequential transmission of more than one television signal H04N7/08; in exchanges H04Q11/00; stereophonic systems H04S)
- H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72)
- Y02D: CLIMATE CHANGE MITIGATION TECHNOLOGIES IN INFORMATION AND COMMUNICATION TECHNOLOGIES [ICT], I.E. INFORMATION AND COMMUNICATION TECHNOLOGIES AIMING AT THE REDUCTION OF THEIR OWN ENERGY USE

## Abstract

Methods and systems are provided for power management and security for wireless modules in “Machine-to-Machine” communications. A wireless module operating in a wireless network and with access to the Internet can efficiently and securely communicate with a server. The wireless network can be a public land mobile network (PLMN) that supports wireless wide area network technology including 3rd generation (3G) and 4th generation (4G) networks, and future generations as well. The wireless module can (i) utilize sleep and active states to monitor a monitored unit with a sensor and (ii) communicate with wireless network by utilizing a radio. The wireless module can include power control steps to reduce the energy consumed after sending sensor data by minimizing a tail period of a radio resource control (RRC) connected state. Messages between the wireless module and server can be transmitted according to the UDP or UDP Lite protocol with channel coding in the datagram body for efficiency while providing robustness to bit errors. The wireless module and server can utilize public key infrastructure (PKI) such as public keys to encrypt messages. The wireless module and server can use private keys to generate digital signatures for datagrams sent and decrypt messages received. The communication system between the wireless module and the server can conserve battery life in the wireless module while providing a system that is secure, scalable, and robust.

## Claims

### Claim 1

A computer system comprising:
(a) one or more processors; and
(b) one or more computer-readable media operatively connected to the one or more processors and having stored thereon instructions that, when executed by the one or more processors, cause the computer system to perform a method of saving power during machine to machine communication of sensor information over a wireless network, the method comprising steps of:
(1) storing, by the computer system at a wireless module, identity information related to the wireless module;
(2) transmitting, by the computer system from the wireless module to a communication network server via the wireless network, the identity information to identify the wireless module to the wireless network server and establish a connection with the communication network;
(3) changing, by the computer system at the wireless module, a processor of the wireless module to a sleep mode and a radio of the wireless module to an off mode;
(4) determining, by the computer system at the wireless module, whether a predetermined sleep mode time has expired;
(5) changing, by the computer system at the wireless module when the predetermined sleep mode time has expired, the processor of the wireless module to an active mode and the radio to an on state;
(6) recording, by the computer system at the wireless module, sensor information;
(7) encrypting, by the computer system at the wireless module, the sensor information using a derived key based on at least a module private key;
(8) transmitting, by the computer system from the wireless module via the wireless network, the encrypted sensor information;
(9) receiving, by the computer system at the wireless module via the wireless network, encrypted confirmation information;
(10) decrypting, by the computer system at the wireless module, using the derived key the encrypted confirmation information;
(11) confirming, by the computer system at the wireless module, that the encrypted sensor information was received by an application server based at least on the decrypted confirmation information; and
(12) changing, by the computer system at the wireless module, by a processor of the wireless module a sleep mode and by a radio of the wireless module an off mode in response to the determination that the encrypted sensor information was received by an application server.

### Claim 2 (depends on 1)

The computer system of claim 1, wherein the wireless network is a GPRS network.

### Claim 3 (depends on 1)

The computer system of claim 1, wherein the wireless network uses a CDMA2000 protocol.

### Claim 4 (depends on 1)

The computer system of claim 1, wherein the wireless network uses a Long-Term Evolution protocol.

### Claim 5 (depends on 1)

The computer system of claim 1, wherein the wireless network uses an Institute of Electrical and Electronics Engineers' (IEEE) 802.16 standard.

### Claim 6 (depends on 1)

The computer system of claim 1, wherein the wireless module comprises a computer with a radio.

### Claim 7 (depends on 1)

The computer system of claim 1, wherein the wireless module comprises a tracking device.

### Claim 8 (depends on 1)

The computer system of claim 1, wherein the wireless module comprises a circuit board with a radio that accesses the wireless network.

### Claim 9 (depends on 1)

The computer system of claim 1, wherein the wireless module comprises a sensor that provides the sensor information.

### Claim 10 (depends on 9)

The computer system of claim 9, wherein the sensor provides the sensor information regarding at least one of temperature, physical location, humidity, weight, vibration, sound and shock.

### Claim 11 (depends on 1)

The computer system of claim 1, wherein the wireless module is operatively connected to a sensor that provides the sensor information.

### Claim 12 (depends on 11)

The computer system of claim 11, wherein the sensor provides the sensor information regarding at least one of temperature, physical location, humidity, weight, vibration, sound and shock.

### Claim 13 (depends on 1)

The computer system of claim 1, wherein the wireless network communicates using an Internet Protocol.

### Claim 14 (depends on 13)

The computer system of claim 13, wherein the wireless network communicates using UDP packets.

### Claim 15 (depends on 14)

The computer system of claim 14, wherein the wireless network communicates using UDP Light packets.

### Claim 16 (depends on 1)

The computer system of claim 1, wherein the wireless network communicates via TCP packets.