Back to results
US 9,426,159 B2Granted
Securing sensor data
AssigneeIntel Corporation
InventorsReshma Lal, Pradeep M. Pappachan
Life of this patent
Estimating the term…
Abstract
Systems and methods include establishing a secure communication between an application module and a sensor module. The application module is executing on an information-handling machine, and the sensor module is coupled to the information-handling machine. The establishment of the secure communication is at least partially facilitated by a mutually trusted module.
Claims15
A system comprising:
- a processing device coupled to a storage device;
- a sensor module;
- an application module, as facilitated by the processing device, configured to execute on the information-handling system;
- and
- a mutually trusted module, as facilitated by the processing device, coupled to the sensor module and to the application module, wherein the mutually trusted module is configured to facilitate, at least partially, the establishment of a secure communication between the application module and the sensor module,
- wherein the application module to transmit to the sensor module a session policy based at least upon the establishing the secure communication, wherein the session policy includes rules governing operations relating to the sensor module and the application module such that the session policy to dictate an exclusive session for a duration of time between the application module and the sensor module, and wherein the sensor module is configured to enforce the session policy, and
- wherein the mutually trusted module is configured to facilitate, at least partially, at least one of
- an establishment of a cryptographically secure communication, including an exchange of one or more cryptographic keys, between the application module and the sensor module,
- an establishment of a cryptographically secure communication, including an exchange of one or more cryptographic keys with the application module, and a dedicated link between the sensor module and the mutually trusted module,
- an establishment of a first restricted access to a memory range for the application module, and of a second restricted access to the memory range for the sensor module, and
- an establishment of a cryptographically secure communication, including an exchange of one or more cryptographic keys, with the application module, and wherein the mutually trusted module is physically included in the sensor module.
8 more elements
A method for securely exchanging information, the method comprising:
- establishing a secure communication between an application module and a sensor module, wherein the application module is executing on an information-handling machine and wherein the sensor module is coupled to the information-handling machine, wherein the establishing is at least partially facilitated by a mutually trusted module;
- transmitting, by the application module, a session policy to the sensor module based at least upon the establishing the secure communication, wherein the session policy includes rules governing operations relating to the sensor module and the application module such that the session policy to dictate an exclusive session for a duration of time between the application module and the sensor module, and wherein the sensor module is configured to enforce the session policy;
- and
- facilitating, by the trusted module, at least partially, at least one of
- establishment of a cryptographically secure communication, including a secure exchange of one or more cryptographic keys, between the application module and the sensor module,
- establishment of a cryptographically secure communication, including an exchange of one or more cryptographic keys between the application module, and a dedicated link between the sensor module and the mutually trusted module,
- establishment of a first restricted access to a memory range for the application module, and of a second restricted access to the memory range for the sensor module, and
- establishment of a cryptographically secure communication, including an exchange of one or more cryptographic keys, between the application module, and wherein the mutually trusted module is physically included in the sensor module.
5 more elements
At least one non-transitory, machine-accessible storage medium having instructions stored thereon, wherein the instructions are configured, when executed on a machine, to cause the machine to:
- establish a cryptographically secure communication between an application module and a sensor module, wherein the application module is configured to execute on an information-handling machine;
- transmit, by the application module, a session policy to the sensor module based at least upon the establishing the secure communication, wherein the session policy includes rules governing operations relating to the sensor module and the application module such that the session policy to dictate an exclusive session for a duration of time between the application module and the sensor module, and wherein the sensor module is configured to enforce the session policy;
- and
- facilitate, by the trusted module, at least partially, at least one of
- establishment of a cryptographically secure communication, including a secure exchange of one or more cryptographic keys, between the application module and the sensor module,
- establishment of a cryptographically secure communication, including an exchange of one or more cryptographic keys between the application module, and a dedicated link between the sensor module and the mutually trusted module,
- establishment of a first restricted access to a memory range for the application module, and of a second restricted access to the memory range for the sensor module, and
- establishment of a cryptographically secure communication, including an exchange of one or more cryptographic keys, between the application module, and wherein the mutually trusted module is physically included in the sensor module.
5 more elements
Dependencies are inferred from the claim text.