# US 2021/0243018 A1 · Data encryption for emergency response > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 2021/0243018 A1 - Document ID: US20210243018A1 - Status: Published application - Kind: A1 - Application number: 17/123,856 - Filed: 2020-12-16 - Published: 2021-08-05 - Earliest claimed: 2020-01-30 - Assignees: Apple Inc. - Applicants: Apple Inc. - Inventors: FREDERIC JACOBS; YANNICK L. SIERRA - Web page: https://patentgrep.com/patent/US20210243018A1 ## CPC - H04L 9/0825: {using asymmetric-key encryption or public key infrastructure [PKI], e.g. key signature or public key certificates} - H04L 9/0891: {Revocation or update of secret information, e.g. encryption key update or rekeying} - H04L 9/0894: {Escrow, recovery or storing of secret information, e.g. secret key escrow or cryptographic key storage} - H04L 9/3236: {using cryptographic hash functions} - H04L 9/3265: {using certificate chains, trees or paths; Hierarchical trust model} - H04L 63/0428: {wherein the data content is protected, e.g. by encrypting or encapsulating the payload} - H04L 63/0823: {using certificates (cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263)} - H04L 67/568: Storing data temporarily at an intermediate stage, e.g. caching - H04W 4/029: Location-based management or tracking services - H04W 4/90: Services for handling of emergency or hazardous situations, e.g. earthquake and tsunami warning systems [ETWS] - H04L 2209/04: Masking or blinding - H04L 2209/80: Wireless - H04L 2209/88: Medical equipments - H04W 4/02: Services making use of location information - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) - H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72) ## Abstract Embodiments described herein provide a method on a mobile electronic device to facilitate the transmission of encrypted user data to a service provider, such as an emergency service provider. An encrypted data repository stores user data to be transmitted to the service provider. A key to decrypt the encrypted data repository is wrapped using a key associated with a publicly trusted certificate for the service provider. In response a request received at the mobile device to initiate an emergency services request, the mobile device can transmit the encrypted data repository and wrapped cryptographic material to a server that is accessible by the service provider. ## Claims ### Claim 1 A method comprising: on a mobile electronic device: receiving and storing a set of publicly trusted certificates; generating cryptographic material to encrypt a data repository that stores user data; encrypting the data repository using the cryptographic material to generate an encrypted data repository; wrapping the cryptographic material using a key associated with a publicly trusted certificate, wherein the publicly trusted certificate is associated with a service provider; and transmitting the encrypted data repository and wrapped cryptographic material to a server for storage in a storage repository, the storage repository accessible by the service provider. ### Claim 2 (depends on 1) The method as in claim 1, further comprising transmitting the encrypted data repository and the wrapped cryptographic material to the server in response to an input at the mobile electronic device to initiate an emergency services request, wherein the service provider is an emergency service provider. ### Claim 3 (depends on 2) The method as in claim 2, further comprising: transmitting the encrypted data repository to the server before transmission of the wrapped cryptographic material; and transmitting the wrapped cryptographic material to the server in response to input at the mobile electronic device to initiate an emergency services request. ### Claim 4 (depends on 3) The method as in claim 3, further comprising transmitting location information for the mobile electronic device in response to the input at the mobile electronic device to initiate the emergency services request. ### Claim 5 (depends on 4) The method as in claim 4, further comprising transmitting an updated encrypted data repository to the server in response to a change in user data stored in the data repository stored on the mobile electronic device. ### Claim 6 (depends on 1) The method as in claim 1, wherein transmitting the wrapped cryptographic material to the server includes: wrapping the wrapped cryptographic material using an outer wrapping key to generate further wrapped cryptographic material; and transmitting further wrapped cryptographic material to the server as the wrapped cryptographic material. ### Claim 7 (depends on 6) The method as in claim 6, further comprising, in response to an input at the mobile electronic device to initiate an emergency services request, transmitting the outer wrapping key and location information for the mobile electronic device to the server. ### Claim 8 (depends on 1) The method as in claim 1, further comprising: binding the encrypted data repository with the wrapped cryptographic material via a hash value generated based on the encrypted data repository; and including a representation of the hash value in data that is transmitted to the server. ### Claim 9 (depends on 8) The method as in claim 8, wherein including the representation of the hash value in the data that is transmitted to the server includes transmitting the hash value to the server. ### Claim 10 (depends on 8) The method as in claim 8, wherein including the representation of the hash value in the data that is transmitted to the server includes transmitting a key derived based on the hash value to the server. ### Claim 11 A data processing system on a mobile electronic device, the data processing system comprising: a wireless network interface; a memory device having instructions stored thereon; and one or more processors coupled with the wireless network interface and the memory device, wherein the one or more processors are configured to execute instructions stored on the memory device, the instructions to cause the one or more processors to: receive and store a set of publicly trusted certificates; generate cryptographic material to encrypt a data repository that stores user data; encrypt the data repository using the cryptographic material to generate an encrypted data repository; wrap the cryptographic material using a key associated with a publicly trusted certificate, wherein the publicly trusted certificate is associated with a service provider; and transmit the encrypted data repository and wrapped cryptographic material to a server for storage in a storage repository, the storage repository accessible by the service provider. ### Claim 12 (depends on 11) The data processing system as in claim 11, the one or more processors further to: transmit the encrypted data repository and the wrapped cryptographic material to the server in response to an input at the mobile electronic device to initiate an emergency services request, wherein the service provider is an emergency service provider. ### Claim 13 (depends on 11) The data processing system as in claim 11, the one or more processors further to: transmit the encrypted data repository to the server before transmission of the wrapped cryptographic material; and transmit the wrapped cryptographic material to the server in response to input at the mobile electronic device to initiate an emergency services request. ### Claim 14 (depends on 13) The data processing system as in claim 13, the one or more processors further to transmit location information for the mobile electronic device in response to the input at the mobile electronic device to initiate the emergency services request. ### Claim 15 (depends on 11) The data processing system as in claim 11, wherein to transmit the wrapped cryptographic material to the server includes to: wrap the wrapped cryptographic material using an outer wrapping key to generate further wrapped cryptographic material; and transmit further wrapped cryptographic material to the server as the wrapped cryptographic material. ### Claim 16 (depends on 15) The data processing system as in claim 15, further comprising, in response to an input at the mobile electronic device to initiate an emergency services request, transmit the outer wrapping key and location information for the mobile electronic device to the server. ### Claim 17 A non-transitory machine readable medium storing instructions which, when executed by one or more processors on a mobile electronic device, cause the one or more processors to perform operations comprising: receiving and storing a set of publicly trusted certificates; generating cryptographic material to encrypt a data repository that stores user data; encrypting the data repository using the cryptographic material to generate an encrypted data repository; wrapping the cryptographic material using a key associated with a publicly trusted certificate, wherein the publicly trusted certificate is associated with a service provider; and transmitting the encrypted data repository and wrapped cryptographic material to a server for storage in a storage repository, the storage repository accessible by the service provider. ### Claim 18 (depends on 17) The non-transitory machine readable medium as in claim 17, the operations further comprising transmitting the encrypted data repository and the wrapped cryptographic material to the server in response to input at the mobile electronic device to initiate an emergency services request, wherein the service provider is an emergency service provider. ### Claim 19 (depends on 17) The non-transitory machine readable medium as in claim 17, further comprising: transmitting the encrypted data repository to the server before transmission of the wrapped cryptographic material; and transmitting the wrapped cryptographic material to the server in response to input at the mobile electronic device to initiate an emergency services request. ### Claim 20 (depends on 17) The non-transitory machine readable medium as in claim 17, further comprising: binding the encrypted data repository with the wrapped cryptographic material via a hash value generated based on the encrypted data repository; and including a representation of the hash value in data that is transmitted to the server.