# US 2021/0344678 A1 · System for accessing data from multiple devices

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 2021/0344678 A1
- Document ID: US20210344678A1
- Status: Published application
- Kind: A1
- Application number: 17/144,899
- Filed: 2021-01-08
- Published: 2021-11-04
- Earliest claimed: 2013-08-29
- Assignees: Liberty Vaults Limited
- Applicants: Liberty Vaults Limited
- Inventors: Christopher Iain Johnston; Michel Leduc
- Web page: https://patentgrep.com/patent/US20210344678A1

## CPC

- H04L 63/10: {for controlling access to devices or network resources}
- G06F 21/32: using biometric data, e.g. fingerprints, iris scans or voiceprints
- G06F 21/34: involving the use of external additional devices, e.g. dongles or smart cards
- G06F 21/40: by quorum, i.e. whereby two or more security principals are required
- G06F 21/73: by creating or determining hardware identification, e.g. serial numbers
- H04L 63/123: {received data contents, e.g. message integrity}
- Y04S 40/20: Information technology specific aspects, e.g. CAD, simulation, modelling, system security
- H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M)
- G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N)
- Y04S: SYSTEMS INTEGRATING TECHNOLOGIES RELATED TO POWER NETWORK OPERATION, COMMUNICATION OR INFORMATION TECHNOLOGIES FOR IMPROVING THE ELECTRICAL POWER GENERATION, TRANSMISSION, DISTRIBUTION, MANAGEMENT OR USAGE, i.e. SMART GRIDS

## Abstract

A method of accessing data at a device, wherein the data is stored remotely from the device or in removable storage. The method may the following steps: (i) sending a request from the device to access the data, the request including an identification code of a secure element or a memory card associated with the device, (ii) verifying, based at least partly on the identification code, whether access to the data is to be allowed or denied, and (iii) allowing or denying the device access to the data accordingly.

## Claims

### Claim 1

(canceled)

### Claim 2

A method of accessing data at a device, wherein the data is stored in a plurality of partitions associated with the device, the partitions being stored in the device, remotely from the device or in removable storage, the method comprising the following operations:
(i) determining a selected partition to be accessed from the plurality of partitions, based on a signal read by the device from a signal emitting device;
(ii) sending a request from the device to access the data, the request including information specifying the selected partition to be accessed and an identification code of a secure element associated with the device;
(ii) verifying, based at least partly on the identification code, whether access to the data is to be allowed or denied; and
(iii) allowing or denying the device access to the data accordingly.

### Claim 3 (depends on 2)

The method of claim 2, wherein the data is stored in the cloud.

### Claim 4 (depends on 2)

The method of claim 2, wherein the request includes a passcode or PIN entered at the device and step (ii) also comprises verifying based on the passcode or PIN whether access to the data is to be allowed or denied.

### Claim 5 (depends on 2)

The method of claim 2, wherein the request includes data representing something inherent to a user of the device, and step (iii) also comprises verifying based on the data representing something inherent to the user of the device whether access to the data is to be allowed or denied, and/or
wherein the request includes data including a location, and step (iii) also comprises verifying based on the location whether access to the data is to be allowed or denied; and/or
wherein the request includes data including a time, and step (iii) also comprises verifying based on the time whether access to the data is to be allowed or denied; and/or
wherein the request includes data indicating that the user is part of a group, and step (iii) comprises verifying whether access to the data is to be allowed or denied based on whether another member of the group is accessing the data.

### Claim 6 (depends on 5)

The method of claim 5, wherein the data representing something inherent to the user of the device comprises data representing genetic and/or biometric information about the user.

### Claim 7 (depends on 2)

The method of claim 2, wherein the a secure element or memory card is a SIM, virtual SIM, SIM software, TPM, SE, TEE, Micro SD, Memory card, USB key or Smartcard associated with the device.

### Claim 8 (depends on 2)

The method of claim 2, wherein the data is stored in a partition associated with the device, and the request comprises data specifying the partition, and preferably wherein the data facilitates connection to a third party service.

### Claim 9 (depends on 8)

The method of claim 8, wherein the data specifying the partition comprises one or more of:
a PIN or passcode; and
data representing something inherent to the user of the device.

### Claim 10 (depends on 9)

The method of claim 9, wherein the data representing something inherent to the user of the device comprises data representing genetic and/or biometric information about the user.

### Claim 11 (depends on 2)

The method of claim 2, wherein the device is a telephone, a tablet, a laptop computer, a desktop computer, a TV, a set top box, a camera, a car, a games consol, glasses, a watch, Chromecast, a smart meter or any other device which is capable of sending and receiving data to remote devices.

### Claim 12 (depends on 2)

The method of claim 2, the method comprising, prior to steps (i)-(iv):
registering an identification code of a secure element or memory card with the data.

### Claim 13 (depends on 12)

The method of claim 12, wherein identification codes of more than one secure element or memory card are associated with the data.

### Claim 14

A system comprising a device and a data access controller for controlling access from the device to data stored in a partition associated with the device, and stored in the device, remotely from the device or in removable storage, wherein the device is arranged to read a signal from a signal emitting device identifying the partition to be accessed, send a request to access the data to the data access controller, the request including an identification code of a secure element or memory card associated with the device; and the data access controller is arranged to verify, based at least partly on the identification code, whether access to the data is to be allowed or denied, and to allow or deny the device access to the data accordingly.

### Claim 15

A method of accessing a cloud-based or web-based third party service from a device, the method comprising the following steps:
(i) sending a request from the device to a cloud-based partition associated with the device, the partition including data for facilitating connection to the third party service, the request including an identification code of a secure element or memory card associated with the device;
(ii) verifying, based at least partly on the identification code, whether access to the partition is to be allowed or denied;
(iii) allowing or denying the device access to the partition accordingly; and, after access to the partition is allowed:
(iv) transmitting credentials to the third party service,
wherein information required to identify and/or access the partition is read from a signal emitting device.

### Claim 16 (depends on 15)

The method of claim 15, wherein the signal emitting device is a Bluetooth, BLE, wifi, zigbee, NFC, GPS, or ISO14443 device, or makes use of any other form of contactless communication.

### Claim 17 (depends on 15)

The method of claim 15 further comprising the steps of:
(v) executing a mutual authentication process between the device and the remote or removable storage;
(vi) creating a secure channel between the device and the remote or removable storage; and
(vii) transmitting data between the two devices.

### Claim 18 (depends on 17)

The method of claim 17 wherein the authentication comprises two or more factors, the factors being chosen from the following list:
an identification code of a smart object (a memory card or secure element) associated with the device;
a passcode or PIN;
genetic or biometric identification data;
a location;
a time; or
whether another member (e.g. an administrator) or a group which the user belongs to is accessing the data.

### Claim 19 (depends on 17)

The method of claim 17 wherein the authentication comprises two factors, the factors being
an identification code of the secure element associated with the device; and
a passcode or PIN.