Back to results
US 9,806,888 B1Granted
System and method for data protection using dynamic tokens
OwnerShimon Gersteninventor
Life of this patent
Estimating the term…
Abstract
A Data Protection Server (DPS) configured to authenticate, encrypt and decrypt blocks of data by using dynamic tokens. Instances of a DPS may be deployed in association with a host server and with multiple client devices to protect data exchanged between them. Since each DPS instance typically requires minimal device storage and computational resources, use of a DPS may be particularly advantageous in connection with the protection of data generated by limited resources devices.
Claims9
A computer-implemented method for data protection, the method comprising:
- determining that a dynamic data token (DDT) has been received, the DDT including a plurality of DDT elements;
- generating a dynamic key instance (DKI) using the DDT and key creation material (KCM) including a plurality of KCM elements wherein the KCM is randomly generated, the DKI including an ordered combination of integer values corresponding to KCM elements included within the plurality of KCM elements wherein the generating includes, for each of the plurality of DDT elements, selecting at least one of the plurality of KCM elements addressed by a value of the one of the plurality of DDT elements;
- encrypting, using the DKI, data so as to create encrypted data;
- and
- sending a data packet including the encrypted data.
2 more elements
A computer-implemented method for data protection, the method comprising:
- determining that a dynamic data token (DDT) has been received, the DDT including a plurality of DDT elements;
- generating a dynamic key instance (DKI) using the DDT and key creation material (KCM) including a plurality of KCM elements, the DKI including an ordered combination of integer values corresponding to KCM elements included within the plurality of KCM elements;
- receiving data from a device wherein the KCM is associated with device identifying information of the device wherein the device is a sensor;
- encrypting, using the DKI, the data so as to create encrypted data;
- and
- sending a data packet including the encrypted data.
3 more elements
An electronic device arrangement, comprising:
- a processor;
- a wireless transceiver;
- an electronic device configured to produce data;
- a memory including program code for a data protection server which, when executed, causes the processor to:
- determine that a dynamic data token (DDT) has been received by the wireless device, the DDT including a plurality of DDT elements;
- generate a dynamic key instance (DKI) using the DDT and key creation material (KCM) including a plurality of KCM elements wherein the KCM is randomly generated, the DKI including an ordered combination of integer values corresponding to KCM elements included within the plurality of KCM elements wherein the DKI is generated by, for each of the plurality of DDT elements, selecting at least one of the plurality of KCM elements addressed by a value of the one of the plurality of DDT elements;
- receive the data from the electronic device;
- encrypt, using the DKI, the data so as to create encrypted data;
- and
- instruct the wireless transceiver to send a data packet containing the encrypted data.
7 more elements
An electronic device arrangement, comprising:
- a processor;
- a wireless transceiver;
- an electronic device configured to produce data wherein the electronic device is a sensor;
- a memory including program code for a data protection server which, when executed, causes the processor to:
- determine that a dynamic data token (DDT) has been received by the wireless device, the DDT including a plurality of DDT elements;
- generate a dynamic key instance (DKI) using the DDT and key creation material (KCM) including a plurality of KCM elements, the DKI including an ordered combination of integer values corresponding to KCM elements included within the plurality of KCM elements;
- receive the data from the electronic device;
- encrypt, using the DKI, the data so as to create encrypted data;
- and
- instruct the wireless transceiver to send a data packet containing the encrypted data.
7 more elements
A computer-implemented method for data protection, the method comprising:
- determining that a dynamic data token (DDT) has been received, the DDT including a plurality of DDT elements;
- generating a dynamic key instance (DKI) using the DDT and key creation material (KCM) including a plurality of KCM elements, the DKI including an ordered combination of integer values corresponding to KCM elements included within the plurality of KCM elements;
- encrypting, using the DKI, data so as to create encrypted data;
- sending a data packet including the encrypted data;
- and
- executing a portion of an authentication protocol, the executing including:
- (1) receiving encrypted data (e-Data[i]) and a DDT[i];
- (2) decrypting the e-Data[i]) using DDT[i], thereby generating Data[i];
- (3) manipulating Data[i], thereby generating m-Data[i];
- (4) encrypting m-Data[i] using DDT[i], thereby generating e-m-Data[i]
- (5) sending e-m-Data[i] to a host configured to verify that m-Data[i] corresponds to Data[i];
- (6) repeating operations (1) through (5) for i=1 to m, where m is greater than one.
9 more elements
An electronic device arrangement, comprising:
- a processor;
- a wireless transceiver;
- an electronic device configured to produce data;
- a memory including program code for a data protection server which, when executed, causes the processor to:
- determine that a dynamic data token (DDT) has been received by the wireless device, the DDT including a plurality of DDT elements;
- generate a dynamic key instance (DKI) using the DDT and key creation material (KCM) including a plurality of KCM elements, the DKI including an ordered combination of integer values corresponding to KCM elements included within the plurality of KCM elements;
- receive the data from the electronic device;
- encrypt, using the DKI, the data so as to create encrypted data;
- instruct the wireless transceiver to send a data packet containing the encrypted data;
- and
- execute a portion of an authentication protocol, the authentication protocol including:
- (1) receiving encrypted data (e-Data[i]) and a DDT[i];
- (2) decrypting the e-Data[i]) using DDT[i], thereby generating Data[i];
- (3) manipulating Data[i], thereby generating m-Data[i];
- (4) encrypting m-Data[i] using DDT[i], thereby generating e-m-Data[i]
- (5) sending e-m-Data[i] to a host configured to verify that m-Data[i] corresponds to Data[i];
- (6) repeating operations (1) through (5) for i=1 to m, where m is greater than one.
14 more elements
Dependencies are inferred from the claim text.