The present disclosure relates to functional, user-wearable devices that transmit, receive, store, and may temporarily contain data using encryption techniques to protect as well as detect and allow only the proper user(s) of the data. Users of these devices are provided with authentication and validation security, even when the devices are not in use. Specifically, the present disclosure describes devices, methods, and systems for authenticating not only the identity of one or more users, but the ability to encrypt and decrypt data that is sent to, from, and held within these user-wearable devices and utilizing securitized containers as needed. The securitized containers can be software containers and either real or virtual devices.
The use of “smart” wearable devices has its historic origins in the use of analogue timepieces—including pocket and wrist watches. Most of the five hundred year old history of watches consisted of the development of the mechanical watch. Watches evolved from portable spring driven clocks, which first appeared in 15th-century Europe. Portable timepieces were made possible by the invention of the mainspring in the early 15th century and most likely were developed by German clockmaker Peter Henlein. The invention of the quartz watch in the 1960s, which ran on electricity and kept time with a vibrating quartz crystal, proved a radical departure for the industry. During the 1980s quartz watches took over the market from mechanical watches, an event referred to as the “quartz crisis”. The first digital electronic watch, a Pulsar LED prototype in 1970, was developed jointly by Hamilton Watch Company and Electro-Data, founded by George H. Thiess and started a new revolution wearable devices.
Developments in the 2010s have included smartwatches, which are elaborate computer enabled electronic devices designed to be worn on a wrist. Their ubiquitous use today most likely has its initial roots in military and espionage needs. Although they generally incorporate timekeeping functions, this has become only a small fraction of current smartwatch capabilities. In addition to timekeeping, the user now has the ability to perform consumer purchases and with the invention of credit and debit cards, is able to transact business on an electronic basis as never before. Debit cards draw from a positive account balance maintained by the user and require verification of identification, usually a personal identification number (PIN) to complete a purchase.
“Smart Cards” are another recent transaction device that also requires a personal identification number to complete a transaction. Smart Cards, like debit cards, execute purchases from a positive account balance but the balance is maintained in the card itself. Additions to the card balance must be properly purchased and, typically, Smart Cards have safeguards against an illicit account increase.
Credit and debit-card purchases require the use of a physical card or at least its entry into a purchasing system by number. Users of Smart Cards are not immune to the disadvantages above. A buyer of goods from an automatic Smart Card-reading vending machine is required to swipe the card through a slot. The buyer is then required to enter a PIN to verify his or her identity and authorization for a purchase. Systems have begun to emerge that allow the non-contact use of Smart Cards through RF or infrared technology. However, a PIN must still be entered at some point in the transaction. If a Smart Card is stolen and the thief is able to acquire the rightful user's PIN, then there is no safeguard remaining to prevent the thief s access to the Smart Card's entire balance.
A reliable means of determining the identity of a potential user of a Smart Card, and thus whether that person is an authorized user, is by the use of biometric data identification. Biometric data is data taken from the measurement of some characteristic peculiar to an individual. A digitized thumbprint is an example of biometric data. Iris scans, speech pattern scans or various body temperatures, pH or even electrical characteristics are biometric data that can be used for validating the authenticity of an individual or groups of individuals.
In a system that uses biometric data for identification, a device that reads biometric data scans the relevant measurement of the candidate for identification. The attached system then compares the scanned data with data stored in the Smart Card. A match of data sets is then sufficient for identification.
A more recent implementation of such a scheme is the use of a thumbprint scanner which can read the user's thumbprint and determine whether it compares favorably with a stored thumbprint. If the user's data does not compare favorably, the system to which the identifying device is connected refuses to allow access to either on-board data or a network or, in some cases, a purchase. An iris scanner or a speech pattern reader functions similarly, though may be somewhat more difficult to implement. Systems using biometrics often still require physical contact between a user and a system and the system can be bulky and expensive. One solution to this issue has been to develop user-wearable electronic devices utilizing wireless transactions. These devices include devices that comprises a housing that houses a wireless communication device, one or more electronic circuits, a power source, a display device and a biometric data reading device. While enabled as a timepiece or performing other functions suitable to a user-wearable device (apparatus), the device can establish wireless communication with a counterpart communication apparatus in order to conduct a transaction. The biometric data reading device can read the user's applicable biometric data and then transmit a user identity validation and the wireless communication device can transmit user authorization for the transaction.
Although these devices enable efficient and user-friendly electronic transactions that do not require physical contact and employ biometric data reading in its operation, the need still exists for a user to be able to authorize a completely secured electronic transaction by having a wearable device that provides encryption for at least three vital aspects;
The present disclosure provides one or more devices, methods, and systems for a user to enable and authorize an encrypted transaction by having user-wearable devices provide enhanced security for at least four vital functional needs;
More specifically, the user-wearable devices must be capable of receiving and sending both encryption and decryption of each and every transaction associated with (in some cases continuous) bio-identification of the user as well as any transaction that the user determines should be carried out with the user-wearable devices. These transactions can include but are not limited to electronic, optical, radiative and other forms of signal generating energies and utilize one or more securitized containers. These securitized containers can be software containers and either real or virtual devices. Most often these signals will be transmitted in a wireless fashion.
More specifically, the present disclosure describes;
One or more user-wearable transaction secured devices, comprising: a housing; a computer driven communication module containing a microprocessor and data storage encryption capacity fixedly mounted in the housing; one or more circuits fixedly mounted in the housing and communicatively coupled with the computer driven communication module; a power source coupled with the circuits; at least one transceiver and a biometric data transceiver portion coupled with the housing and coupled with the circuits and with the communication module such that one or more sensors are held within or on one or more surfaces of the devices; wherein the devices transmit and receive encrypted signals that form specific transmissions determined by one or more users, that can utilize one or more securitized containers for the transmissions, to the transceiver;
wherein the transceiver determines, via authentication and validation, identification of the users and confirms if the users are wearing the devices via utilization of the computer driven communication module that can utilize one or more securitized containers;
wherein the communication module provides, processes, and analyzes bio-identification, continuous bio-confirmation, and authentication of said users and utilizes the securitized containers as needed and wherein the authentication includes either high security or low security authentication requests and wherein the containers can be software containers and either real or virtual devices.
The circuits can be connected to sensors or themselves function as sensors. In addition, the circuits can be selected from the group consisting of; electronic, optical, and radiation emitting/receiving energized circuits that transmit and receive signals.
One or more display portions can be communicatively coupled with the circuits.
The housing maybe in the shape of a wristwatch, wherein the wristwatch incorporates features that provide functions for one or more devices selected from the group consisting of; a camera, a smartphone, a calculator, a global positioning system (GPS), a radio, a television, a door opener, or other remote energy switching device, and a transceiver, wherein the transceiver is capable of acting as an IP protocol data unit.
The housing can also be in a shape selected from the group consisting of; necklaces, broaches, rings, earrings, badges, belt buckles, assorted jewelry, and articles of clothing.
The signals carry data that is transmitted and received by the transceiver(s) and wherein the transceiver has an ability to analyze and act upon instructions contained within the data and can utilize one or more securitized containers.
The sensors are often biometric sensors that provide biometric data that contains information provided by one or more securitized containers and are used to confirm or deny access to user-wearable devices. The bio-identification initiates a process that requires user action to bio-identify user-wearers followed by initial bio-confirmation and then authentication of user-wearers to enable one or more transactions wherein the transactions are provided by one or more securitized containers.
The bio-identification is continuously confirmed by authentication requests such that if bio-confirmation is not confirmed, a de-authenticate procedure is initiated that utilizes one or more securitized containers and that requires bio-identification confirmation must be re-initiated. The authentication requests can be high security requests that require users actively re-bio-identify themselves in order for authentication requests to proceed and such that a test for bio-confirmation is maintained that results in a confirmation that allows for completion of authentication. Alternatively, authentication requests are low security requests that do not require re-bio-identification, and such that a test for bio-confirmation is maintained that results in a confirmation that allows for completion of authentication and wherein this authentication process utilizes one or more securitized containers. Authentication requests can be communicated to user-wearable devices from external sources or authentication requests can be user initiated originating from user-wearable devices.
Users according to another aspect of this disclosure, are notified when encryption is initiated, in process, or completed and wherein the notification utilizes one or more securitized containers.
The encryption is provided for transmissions during transmission of a credential identifier to control a server and utilizes one or more securitized containers.
The display portions can display timepiece data and/or transaction data.
Further, the biometric transceiver is adapted to read information from one or more of a group consisting of: a user's fingerprints, voice patterns, a body's electrical, chemical, physical, and biological characteristics, biotags, facial characteristics, skin pH, thermal characteristics, ocular characteristics, kinesthetics, and genetic make-up and wherein users are defined as being any member of a genus of an animal or plant kingdom.
Power for the user-wearable devices may be obtained from a variety of sources including via a one or more of a group including a battery, a solar cell, and/or electromagnetic and/or radiative coupling from an external source.
Transmissions sent or received by the transceiver optionally with a biometric data transceiver portion of the transceiver provide internal and external user identity validation for the devices that validate authentication via utilization of at least one distributed auto-synchronous array (DASA) database, wherein the DASA database contains and provides at least one authentication and encryption application and wherein the transmissions utilize one or more securitized containers.
The transmissions access and transmit a portion of data contained within the DASA database to said user-wearable devices, validates data transmitted from the user-wearable devices with a portion of data within the DASA database, and further establishes validity of data according to a set of rules for data residing in the DASA database such that all transmissions incoming to, held within, and outgoing from the sensors or any transceivers of the devices, function securely and singularly for a specific, designated set of users and wherein the transmissions utilize one or more securitized containers.
The DASA database also provides one or more transmittable codes, wherein the codes originate within the authentication and validation applications and wherein the user-wearable devices communicate internally and externally by transmission and reception of data signals.
Codes are securitized in that the codes are not readily accessible from an external source or within the user-wearable devices without passing through a security check to ensure that proper access occurs. The codes should be encrypted.
More specifically, the codes utilize authentication, validation, and encryption applications that authenticate, validate, and encrypt signals between detecting devices capable of searching, retrieving, analyzing, and validating the codes. Further, the codes are generated after installation of the authentication, validation, and encryption applications is complete.
The codes can be either recognizable or not recognizable by the user-wearable devices during attempted authentication and validation. In addition, the codes can be selected from one or more of a group consisting of; a QR code, a bar code, a digital code, a temporal code, a binary code, an analogue code, and a 7-bit binary code.
The data within the DASA database can be and in at least one embodiment, accessed, manipulated, and arranged by a computer driven communication module residing within said devices.
In most embodiments, the transmissions are wireless and the transmissions provide communications that are transmitted and received via oral, verbal, text, video, and data messaging and wherein the communications can be displayed.
In at least one instance, authentication is a challenge response system utilizing transmissions and one or more securitized containers wherein transmissions lead to one or more transactions. The challenge response system utilizes communications that contain implicit or explicit logic and one or more securitized containers. Implicit logic requires a pre-arranged sets of data variables in a form of communications with one or more transceivers and one or more securitized containers, so that authentication can proceed. Alternatively, explicit logic requires creation and analysis of different sets of data variables in a form of communications with one or more transceivers, so that authentication can proceed.
In at least another instance, the form of communications can define a credential identifier. The credential identifier comprises at least some form of data such as meta data combined with at least one authentication. Further the credential identifier comprises at least some form of data such as meta data combined with authentication requests. The credential identifier includes at least one of the group consisting of meta data, authentication, and authentication requests are encrypted and utilize one or more securitized software containers. The meta data includes an acknowledgement/non-acknowledgement portion that provides a path to determine access controlled by the server and/or the user-wearable devices that becomes one or more transactions and utilizes one or more securitized containers.
In a further embodiment, the communication module also includes an authentication module that performs a challenge response for the credential identifier by initially sending meta data to a server and utilizes one or more securitized containers. The authentication module is an input/output module that sends and receives transmission signals to and from the server in response to reception of the credential identifier and utilizes one or more securitized containers. The communication module is configured to transmit the credential identifier to access control of a server and utilizes one or more securitized containers via a wireless communication link. The communication module includes an interface to data residing on a server and wherein a form of the data can be displayed on the user-wearable devices. The server can be configured to authenticate said credential identifier during comparison against entries of one or more keys within a set of data configuration tables residing in the DASA database and utilizes one or more securitized containers. The application is secured in a secured DASA database within a secured cloud or other secured storage device utilizing the encryption application.
In an additional embodiment the encryption application employs a step-wise process as follows; a user of one or more user-wearable devices invokes secured transmission as attempts to acquire a key using tolerance techniques that provide for a number of attempts (n) to retrieve keys from a configuration table, wherein said encryption application possesses a get next key algorithm that is invoked locally on or in proximity to said user-wearable devices. The encryption application also provides for generation of encryption keys as well as a new master key, and simultaneous attempts are made to match one or more user identification (ID) encryption keys within a user ID encryption key database and wherein the encryption application utilizes one or more securitized containers. A tolerance range allows for a search of matching encryption keys that synchronizes with the user ID encryption key database.
In at least one instance, the encryption application is added to provide additional security layers required for the user-wearable devices so that a proper match is determined and establishes whether a user of the user-wearable devices is allowed access privileges. If access is allowed, a user's user-wearable device provides via oral, visual, text, or data signal transmission that utilizes one or more securitized containers, a display that provides at least a derivation of said match so that said user is notified and allowed access. All encryption keys can be removed from the data configuration table either before, during, or after the match, such that a key management system exists and utilizes one or more securitized containers to ensure that the keys themselves are neither discoverable nor compromised. If access is denied, said user's user-wearable device provides via oral, visual, text, or data signal transmission that utilizes one or more securitized containers. displayed as a denial of a match.
Lack of matching causes an encryption application that resides with the user's user-wearable device is removed and wherein to further ensure that master keys in the data configuration table are protected and secured, a new master table key is generated either via a signal from the user devices to one or more secured DASA database or via a signal from the key management system that utilizes one or more securitized containers.
The communication module invokes use of at least one of the group of interfaces comprising a serial interface, a TCP/IP interface, an IEEE 802.11 interface, an IEEE 802.15.4 interface, and a secure HTTP interface.
A method for transmitting and receiving data signals from one or more user-wearable secured transaction devices that utilize one or more securitized containers comprising: establishing communications with a transaction counterpart; selecting a transaction; reading and authenticating encrypted biometric data of the user of the devices; validating said user's biometric data; and transmitting an encrypted user identity validation upon successful validating of the user's biometric data, wherein transmissions sent or received by a transmissions transceiver portion of the devices is providing user identity validation for said devices via utilization of at least one DASA database that possesses an authentication and encryption application.
One method that involves several aspects of this disclosure includes transmissions that are accessing and transmitting a portion of data contained within the distributed auto-synchronized database (DASA) to the user-wearable devices, validating data transmitted from the user-wearable devices with a portion of data held within the DASA database, and further establishing validity of data according to a set of rules for data residing in the DASA database such that all transmissions incoming to, being held within, and outgoing from the circuits or any transceivers of the devices, are functioning in a secure manner for a specific, designated set of users.
Further, the DASA database provides one or more transmissible, securitized, and encrypted codes, wherein the codes originate within the authentication and encryption application, and wherein the user-wearable devices communicate internally and externally by transmission and reception of data signals that utilize authentication and encryption application(s). The transceivers function as detecting devices that search, retrieve, and analyze a code generated after installation of the authentication and encryption application is complete. The method includes the use of codes that are either recognizable or not recognizable by the user-wearable devices during attempted authentication and validation.
In at least one embodiment communications and are enabled with Bluetooth technology. The communications are enabled with infrared technology. The transaction could be a purchase, a command, and/or control of a switch, and wherein transaction is selected from one or more of a group consisting of data, voice, and video transmissions that control hardware.
One of the methods includes providing a user's biometric data that is electronically stored within one or more memory storage systems selected from any one or more of a group consisting of; memory chips, internal or external servers, and a cloud data storage medium, that exist internally to or externally from the user devices. The communications may be disabled until the user's data is authenticated and validated and/or re-authenticated and revalidated.
In at least one other embodiment, a system is employed for one or more user-wearable transaction secured devices for transmitting to and receiving data from one or more user-wearable secured transaction devices to another that utilizes one or more securitized containers, comprising: establishing communications with a transaction counterpart; selecting a transaction; reading and authenticating encrypted biometric data of one or more users of said devices; validating said users' biometric data; and transmitting encrypted users identity validation upon successfully validating said users' biometric data, wherein transmissions sent or received by a transmissions transceiver portion of the devices is providing users identity validation for the devices via utilization of at least one DASA database that possesses an authentication and encryption application.
The transmissions are accessing and transmitting a portion of data contained within the auto-synchronized database to said user-wearable devices, validating data transmitted from the user-wearable devices with a portion of data held within the auto-synchronous database, and further establishing validity of data according to a set of rules for data residing in the auto-synchronized database such that all transmissions incoming to, being held within, and outgoing from the circuits or any transceivers of the devices, are functioning in a secure manner for a specific designated set of users.
For the system, the DASA database provides one or more transmissible, securitized, and encrypted codes, wherein the codes originate within the authentication and encryption application, and wherein the user-wearable devices communicate internally and externally by transmission and reception of data signals that utilize the authentication and encryption application and wherein transceivers function as detecting devices that search, retrieve, and analyze a code generated after installation of the authentication and encryption application is complete. The system includes codes that are either recognizable or not recognizable by the user-wearable devices during attempted authentication and validation.
It is necessary to protect the content, quality and integrity of the authentication and associated authentication requests. In the present disclosure, this is accomplished, in part, by using a credential identifier that is sent or received during the authentication process. More specifically, utilization of meta data is combined with authentication so that an acknowledgement/non-acknowledgement status can be achieved. This combination of meta data and authentication are the elements needed to create a credential identifier which can be encrypted. The meta data is describing what is being acknowledged or not acknowledged. Non-acknowledgement is not a requirement of the authentication methodology. The encryption may be either static or dynamic. Dynamic encryption can utilize the DASA database in order to encrypt the meta data, the authentication, and/or the credential identifier. For the purposes of the present disclosure, encryption of the credential identifier or its associated elements (meta data and authentication) is not an absolute requirement.
In one instance of authentication, an encrypted credential identifier is provided to a control server. The authentication module communicating with the server is configured to authenticate the credential identifier against entries of one or more keys within a set of tables and an input/output module is configured to send and receive transmission signals to and from the credential identifier once the credential identifier has been successfully authenticated and/or validated.
In at least one embodiment, the encryption application employs a step-wise process as follows; a user of one or more user-wearable devices invokes secured transmission as attempts to acquire a key using a tolerance method are made. The tolerance method provides for a number of attempts (n) to retrieve keys from a configuration table. The encryption application possesses a get next key algorithm that is invoked locally on or in proximity to the user-wearable device. This encryption application allows for generation of encryption keys as well as generation of a new master key. Simultaneously, attempts are made to match one or more user identification (ID) encryption keys within a user ID encryption key database. A tolerance range is allowed to search for matching encryption keys which synchronizes with the user ID encryption key database.
A system that employs secured user-wearable devices for transmitting to and receiving data from one or more user-wearable secured transaction device to another is also considered. The system utilizes the establishment of communications with a transaction counterpart; selecting a transaction; reading and authenticating encrypted biometric data of the user of the devices; validating the user's biometric data; and transmitting an encrypted user identity validation upon successfully validating the user's biometric data. The transmissions sent or received by a transmissions transceiver portion of the devices provides user identity validation for the devices via utilization of at least one DASA database that possesses an authentication and encryption application.
These and other objects and advantages of the present invention will become obvious to those of ordinary skill in the art after having read the following detailed description of the preferred embodiments which are illustrated in the various drawing figures.
Embodiments of the present invention are presented in the following drawings.
Reference will now be made in detail to the one or more embodiments of the invention, examples of which are illustrated in the accompanying drawings.
These descriptions and representations provided so as to be understood by those skilled in the data processing arts to most effectively convey the substance of their work to others skilled in the art. A procedure, flow chart, logic block, process, etc., is here, and generally understood to be a self-consistent sequence of steps or instructions leading to a desired result. The steps are those requiring manipulations of physical quantities. Usually, though not necessarily, these quantities take the form of electrical, magnetic, and/or optical signals capable of being stored, transferred, combined, compared, and otherwise manipulated in a computer system. It has proven convenient at times, principally for reasons of common usage, to refer to these signals as bits, bytes, values, elements, symbols, characters, terms, numbers, or the like.
For the purposes of this disclosure, the hierarchy associated with the user-wearable devices is a bottom up list as follows (meaning the hierarchy is a pyramid that begins at its pinnacle with circuits and ends at its base with transactions);
Circuits that connect to devices and carry signals. The circuits can carry signals in one or more directions and the circuits may also be connected to sensors.
It should be borne in mind, however, that all of these and similar terms are to be associated with appropriate physical quantities and are merely convenient labels applied to these quantities. Unless specifically stated otherwise as apparent from the following discussions, it is appreciated that throughout the present disclosure, discussions utilizing terms such as “setting,” “storing,” “scanning,” “receiving,” “sending,” “disregarding,” “entering,” “establishing,” “selecting,” “reading,” “validating,” “transmitting,” or the like, refer to the action and processes of a computer system or similar intelligent electronic computing device, that manipulates and transforms data represented as physical (electronic/magnetic/optical) quantities within the computer system's registers and memories into other data similarly represented as physical quantities that is recognized by the same or other computer system memories or registers or other such information storage, transmission or display devices.
This discussion of this embodiment of the present disclosure that addresses the use of wearable user-devices that provide transmission transactions, involving authentication and validation of a user's identity as an authorized user as well as encryption and decryption of data that is transmitted to, received by or otherwise resides on the devices themselves.
In a specific embodiment the process (200) is outlined in the flowchart of
Referring back to the authentication requests (260), an option exists for either high security requests (270) or low security requests (280). The higher security requests (270) requires that the users actively re-bio-identify themselves (275) to continue the authentication process. A test for bio-confirmation (285) is maintained (290) resulting in transmission confirmation (300).
For lower security requests (280) the re-bio-identification step (275) is not required. It is possible, based on the present embodiment to keep the ease of simple transactions unencumbered so that after the authentication request allowance (260) is performed, transmission to a lower security request occurs (280) and the transmission is allowed assuming that bio-confirmation (285) is maintained (290) resulting in transmission confirmation (300). Other security levels allowing for other authentication methods could also be invoked.
The choice here, regarding the encryption via the encryption application previously described will be according to the designer(s) of the user-wearable devices. Most likely encryption will be kept to a minimum for these lower security requests.
There are two feedback loops in continuous operation. The first loop continuously bio-confirms the user has not removed the device or that another user has taken the device. This loop returns to (250) which is the continuously confirmed bio-identity from either (260) ready to process authentication requests or (300) when an authentication request has been completed. The second loop de-authenticates the user (295) whenever the user has removed the device or another user has taken the device. These continuous feedback loops reassures the ability to ensure authentication.
Once transmission confirmation is reached (300) according to
In the implementation of the embodiment envisioned, wearable-user devices can include a wearable piece of functional jewelry or other wearable accessories in addition to that of a smart watch. This implementation, not only houses the electronics and transceiver devices, it also provides both biometric and transmissions encryption applications to remove any security threat known. Note that, while this discussion focuses on the implementation of this embodiment as a smart watch which can function as a timepiece, many other implementations are envisioned, including wearable broaches, tie pins, cufflinks, belt buckles or even writing pens or PDA styli.
Both the aforementioned implementations of this embodiment of the present invention provide opportunity for multiple levels of security. By requiring multiple levels, the secure limitation of the operation of the transactional capabilities regarding these embodiments to a single, specific user is virtually impenetrable.
The range of applications regarding transmissions and associated transactions has no discernible limit. A few exemplary applications are outlined here in order to fully understand the need for securitizing such items as e-cash devices where the counterpart maybe an electronic wireless vending device. Another example could be the use of cars parking at a public parking meters or purchasing gasoline/diesel for automobiles, boats, or other modes of transportation. In fact the use of the user-wearable devices allows for the possible implementation of a proximity check that could be enabled by RF communications such as Bluetooth or use with GPS coordinates where it might be necessary to allow only very specific groups of users to access these transmissions and/or forms of communications. Military applications are also envisioned for essentially any war or peacetime activity where only certain individuals will be allowed access to the transmissions. Use of biometrics for each of these individuals could be based on various implantable wearable devices that emit signals specific only to that group.
The essence of these embodiments remains that of providing biometric data to validate a user's identity in order to authorize different transactions. Though the embodiments presented herein have focused on implementation of the present invention as a smart watch, other devices could be implemented including writing instruments, key chains or other items easily and normally worn by users.
For
Likewise, signals travel (444) from the control plane logic canister initiator and monitor (440) via a connector (485) which also provides a signal path (or tunnel) toward the trust plane (460) via a connector (485) from the control plane (410) to a longer (higher) container with application logic (480) which is either embedded in or sits atop the trust plane (460). In some cases, the signals may travel from connector (446) connecting the application repository (430) directly to the control plane (410) bypassing the canisters (440,450) and eventually via a pathway (442) toward the connector path (475) which enters either the container (470) or a portion of the trust plane (460). As before, the trust plane (460) provides both securitization and encryption as required by the system (400).
In addition, there is a signal path (446) that connects the control plane logic canister initiator and monitor (440) via pathway (435) and an application repository (430) with two (normally software) application logic prototypes (432,434) to ensure securitized communication(s) along this and all signal paths. Likewise, a signal path (448) connects control plane logic canister initiator and monitor (440) to a connector (425) which connects the containers (422, 424) to the control plane (410) as well as a connector which connects the container repository (420) to the control plane (410) for complete logic control that includes creating canisters and containers or bypassing canisters and directly creating containers.
To complete the signal path from the control plane (410) toward the trust plane (460), a shorter container (470) with application logic (432) is created and exists on or is embedded in the trust plane (460). The signal path (472) provides for flow and connection between the shorter container (470) and the longer (higher) container (480) which contains application logic (434). A connector path (485) also exists and allows for signals to pass from the control plane (410) and plane logic initiator and monitor (440) via an initial signal pathway (444).
There is also a connector path (475) from the control plane to the shorter container (470) and essentially identical signal paths (485, 495) which connect with both the longer (larger, higher) container (480) and the virtual container (490). The signal path (482) either leads signals toward or receives signals from an unsecured environment via a connection (462) and/or connection path that connects the trust plane (460) and/or containers (470,480,490) with either a cloud environment (464), where unsecured data may reside and eventually via a connector path (466) to a computer (467).
Also existing on or in the control plane (410) is a control plane logic canister remover and destroyer (450). Here a signal path (452) is used to connect the canister remover and destroyer (450) to a virtual container (490) via a signal path (495) that is also located at (in or on) the trust plane (460). This represents a communication path for the “end of life” for the virtual container (490) which initially existed as a real container. This entire portion of the schematic representation (450,452, 490, and 495) will disappear at the end of life once the container has been utilized. This also is provided to represent the ephemeral nature and connections associated with software containers as used by software developers today.
Together with the application logic (432) there is also shown and deployed an operating system (652) and an I/O interface (662) to ensure communications with a second container (480) having its own application logic (434), operating system (654), I/O interface (664) so that they can communicate with each other and the cloud (464) and computer (467). There is also included a virtual hardware interface (630) sitting on the actual hardware (bare metal), (640). The system is controlled by a controller residing in or on the control plane (410). In addition, there is a statistics communication processor that allows a software developer the ability to monitor and analyze the system continuously through both the control plane fabric (610) and the statistics communication processor plane and fabric (620). The statistics communication processor (616) is connected to the statistics plane via (622) which is the connector from (620) to the trust plane (460) as shown in
Finally, the use of the container is possible and it can be “run” so that its function in developing the software application can be completed (780). As the methodology and system (700) is proceeding, statistics involving all aspects of the system including all securitization and encryption can be monitored (790). This leads to understanding and being notified when using the managed securitized container device and system has been completed (795).
The availability of such a system allows for stronger security regarding the degree of confidentiality with more confidence. Employing this system further establishes the goal to help encryption systems develop a larger acceptance reputation. Such acceptance provides a consequent increase in usage and a worldwide strengthening of data communications, electronic mail, and commercial electronic transactions.
While most of the foregoing discussion about the present encryption technique has focused on the use of databases, lists and tables for storing transaction specific codes, it may be preferred in some applications having limited memory to provide an algorithm for calculating the next transaction specific code. The concept of “tolerance” described earlier may be incorporated either by setting an acceptable range of values for the transaction specific code (output of the algorithm) or the designated portion itself (input to the algorithm), the later being the equivalent of back calculating the designated portion and verifying that it is within the range of tolerance.
The embodiments of the present invention discussed herein present various implementations of a user-wearable electronic wireless communication transaction device. These embodiments provide different ways to achieve an easy-to-incorporate form factor and convenience of operation in accomplishing transactions wirelessly and without physical contact between the user-wearable device and any applicable counterpart device.
While the invention will be described in conjunction with these embodiments, it will be understood that they are not intended to limit the invention to these embodiments. Contrarily, the specification is intended to cover inventive alternatives, modifications and equivalents, which may be included within the spirit and scope of the invention as defined by the appended claims. Furthermore, in the following detailed description of the present disclosure, numerous specific details are set forth in order to provide a thorough understanding of the present disclosure. However, it will be obvious to one of ordinary skill in the art that the present disclosure may be practiced without these specific details.
In other instances, well-known methods, procedures, components, and circuits have not been described in detail so as not to unnecessarily obscure aspects of the present disclosure. The foregoing descriptions of specific embodiments of the present disclosure have been presented for purposes of illustration and description. They are not intended to be exhaustive or to limit the invention to the precise forms disclosed, and obviously many modifications and variations are possible in light of the above teaching. The embodiments were chosen and described in order to best explain the principles and its practical application, to thereby enable others skilled in the art to best utilize the disclosure and various embodiments with various modifications as are suited to the particular use contemplated.
The computer readable media described within this application is non-transitory. In most if not all cases, the transmission of data is transmitted via signals that are non-transitory signals.
In addition, each and every aspect of all U.S. Provisional Applications and US Non-Provisional applications as well as any of the cited granted patents listed above are hereby fully incorporated by reference.
In compliance with the patent laws, the subject matter disclosed herein has been described in language more or less specific as to structural and methodical features. However, the scope of protection sought is to be limited only by the following claims, given their broadest possible interpretations. The claims are not to be limited by the specific features shown and described, as the description above only discloses example embodiments. While the foregoing is directed to preferred embodiments of the present invention, other and further embodiments of the invention may be devised without departing from the basic scope thereof, and the scope thereof is determined by the claims which follow.
This application is a nonprovisional conversion of and takes priority under 119(e) of U.S. Provisional Application No. 62/652,737, filed Apr. 4, 2018 and entitled, “User-Wearable Secured Devices Provided with Encryption Assuring Authentication and Validation of Data Storage and Transmission That Utilize Securitized Containers”. This application is also a continuation of U.S. Nonprovisional application Ser. No. 16/221,041 filed Dec. 14, 2018 and entitled, “Managed Securitized Containers and Container Communications”, which is a nonprovisional conversion of U.S. Provisional Application number U.S. Provisional Application No. 62/610,827, entitled “Managed Securitized and Encrypted Containers and Container Communications”, filed Dec. 27, 2017. This application is also a continuation of U.S. application Ser. No. 16/173,091 filed Oct. 29, 2018, which is a continuation of U.S. Nonprovisional application Ser. No. 16/005,040 filed Jun. 11, 2018 entitled “Securitization of Temporal Digital Communications with Authentication and Validation of User and Access Devices”, granted as U.S. Pat. No. 10,154,021 on Dec. 11, 2018, which is a nonprovisional conversion of U.S. Provisional Application entitled “A System for Securing and Encrypting Temporal Digital Communications with Authentication and Validation of User and Access Devices” with Ser. No. 62/518,281 filed Jun. 12, 2017. This application is also a continuation of U.S. Nonprovisional application Ser. No. 16/202,905, filed Nov. 28, 2018 which is a continuation of U.S. Nonprovisional application Ser. No. 16/005,134, filed Jun. 11, 2018, granted as U.S. Pat. No. 10,171,444 on Jan. 1, 2019, and entitled “Securitization of Temporal Digital Communications with Authentication and Validation of User and Access Devices” which is a nonprovisional conversion of U.S. Provisional Application entitled “Securitizing Temporal Digital Communications Via Authentication and Validation for Wireless User and Access Devices” with Ser. No. 62/518,337, filed Jun. 12, 2017. Further, application Ser. No. 16/005,134, filed Jun. 12, 2018, granted as U.S. Pat. No. 10,171,444 on Jan. 1, 2018, is a continuation-in-part of U.S. Nonprovisional application Ser. No. 16/005,040 filed Jun. 11, 2018 entitled “Securitization of Temporal Digital Communications with Authentication and Validation of User and Access Devices”, granted as U.S. Pat. No. 10,154,021 on Dec. 11, 2018. This application is also a continuation of U.S. Nonprovisional application Ser. No. 16/178,295, filed Nov. 2, 2018, which is a continuation of U.S. Nonprovisional application Ser. No. 16/005,281 filed Jun. 11, 2018 and entitled, “User-Wearable Secured Devices Provided Assuring Authentication and Validation of Data Storage and Transmission”, which is a nonprovisional conversion of 62/518,371, filed Jun. 12, 2017 and entitled, “User-Wearable Secured Devices Provided with Encryption Assuring Authentication and validation of Data Storage and Transmission”. Further, application Ser. No. 16/005,281, filed Jun. 11, 2018, granted as U.S. Pat. No. 10,154,031 on Dec. 11, 2018, is a continuation-in-part of U.S. Nonprovisional application Ser. No. 16/005,040 filed Jun. 11, 2018 entitled “Securitization of Temporal Digital Communications with Authentication and Validation of User and Access Devices”, granted as U.S. Pat. No. 10,154,021 on Dec. 11, 2018. This application is also a continuation of U.S. Nonprovisional application Ser. No. 16/173,179, filed Oct. 29, 2018, which is a continuation of U.S. Nonprovisional application Ser. No. 16/005,871, filed Jun. 12, 2018 and entitled, “Devices that Utilize Random Tokens Which Direct Dynamic Random Access,” which is a nonprovisional conversion of U.S. Provisional Application No. 62/540,266, filed Aug. 2, 2017 and entitled, “Selectable Key and Key Locator for A Hidden Dynamic Random Access Encryption System”. Further, application Ser. No. 16/005,871, filed Jun. 12, 2018, granted as U.S. Pat. No. 10,171,435 on Jan. 1, 2019, is a continuation-in-part of U.S. Nonprovisional application Ser. No. 16/005,040 filed Jun. 11, 2018 entitled “Securitization of Temporal Digital Communications with Authentication and Validation of User and Access Devices”, granted as U.S. Pat. No. 10,154,021 on Dec. 11, 2018. This application is also a continuation of U.S. Nonprovisional application Ser. No. 16/173,258, filed Oct. 29, 2018, which is a continuation of U.S. Nonprovisional application Ser. No. 16/005,918 filed Jun. 12, 2018, granted as U.S. Pat. No. 10,154,016 on Dec. 11, 2018, and entitled, “Devices for Transmitting and Communicating Randomized Data Utilizing Sub-Channels”, which is a nonprovisional conversion of U.S. Provisional Application No. 62/540,307 filed Aug. 2, 2017 and entitled, “Devices for Transmitting and Communicating Randomized Encrypted Data Utilizing Sub-Channels”. Further, application Ser. No. 16/005,918, filed Jun. 12, 2018, granted as U.S. Pat. No. 10,154,016 on Dec. 11, 2018, is a continuation-in-part of U.S. Nonprovisional application Ser. No. 16/005,040 filed Jun. 11, 2018 entitled “Securitization of Temporal Digital Communications with Authentication and Validation of User and Access Devices”, granted as U.S. Pat. No. 10,154,021 on Dec. 11, 2018. This application is also a continuation of U.S. Nonprovisional application Ser. No. 16/173,323, filed Oct. 29, 2018, which is continuation of U.S. Nonprovisional application Ser. No. 16/005,968 filed Jun. 12, 2018, granted as U.S. Pat. No. 10,154,015 on Dec. 11, 2018, and entitled, “Executable Coded Cipher Keys”, which is a nonprovisional conversion of U.S. Provisional Application No. 62/540,326 filed Aug. 2, 2017 and entitled, “Executable Coded Cipher Keys”. Further, application Ser. No. 16/005,968, filed Jun. 12, 2018, granted as U.S. Pat. No. 10,154,015 on Dec. 11, 2018, is a continuation-in-part of U.S. Nonprovisional application Ser. No. 16/005,040 filed Jun. 11, 2018 entitled “Securitization of Temporal Digital Communications with Authentication and Validation of User and Access Devices”, granted as U.S. Pat. No. 10,154,021 on Dec. 11, 2018. In addition, this application is also a continuation of and takes priority under 35 USC § 120 of U.S. patent application Ser. No. 16/173,384, filed Oct. 29, 2018, which is a continuation of application Ser. No. 16/006,011, filed Jun. 12, 2018, granted as U.S. Pat. No. 10,158,613 on Dec. 18, 2018, which is a nonprovisional conversion of and takes priority under 119(e) of U.S. Provisional Application No. 62/540,352, entitled “Combined Hidden Dynamic Random Access Devices and Encryption Systems Utilizing Selectable Keys and Key Locators for Communicating Randomized Encrypted Data Together with Sub-Channels and Executable Coded Encryption Keys”, filed Aug. 2, 2017. Further, application Ser. No. 16/006,011, filed Jun. 12, 2018, granted as U.S. Pat. No. 10,158,613 on Dec. 18, 2018, is a continuation-in-part of U.S. Nonprovisional application Ser. No. 16/005,040 filed Jun. 11, 2018 entitled “Securitization of Temporal Digital Communications with Authentication and Validation of User and Access Devices”, granted as U.S. Pat. No. 10,154,021 on Dec. 11, 2018. This application is also a continuation of U.S. Nonprovisional application Ser. No. 16/222,421 filed Dec. 17, 2018 and entitled “Securing Temporal Digital Communications With Authentication and Validation for Wireless User and Access Devices for Securitized Containers” which is a nonprovisional conversion of U.S. Provisional Application entitled “Securitizing Temporal Digital Communications Via Authentication and Validation for Wireless User and Access Devices” with Ser. No. 62/652,709, filed Apr. 4, 2018.
Number | Name | Date | Kind |
---|---|---|---|
4200770 | Hellman et al. | Apr 1980 | A |
4218582 | Hellman et al. | Aug 1980 | A |
4405829 | Rivest et al. | Sep 1983 | A |
4424414 | Hellmn et al. | Jan 1984 | A |
4578530 | Zeidler | Mar 1986 | A |
5214703 | Massey et al. | May 1993 | A |
5227613 | Takagi | Jul 1993 | A |
5675653 | Nelson, Jr. | Oct 1997 | A |
5825890 | Elgamal et al. | Oct 1998 | A |
6154636 | Wright | Nov 2000 | A |
6157722 | Lerner et al. | Dec 2000 | A |
6160998 | Wright | Dec 2000 | A |
6466780 | Geiselman et al. | Oct 2002 | B1 |
6522867 | Wright | Feb 2003 | B1 |
6766161 | Geiselman et al. | Jul 2004 | B2 |
6959086 | Ober et al. | Oct 2005 | B2 |
7181016 | Cross et al. | Feb 2007 | B2 |
7382883 | Cross et al. | Jun 2008 | B2 |
8205091 | Buckley | Jun 2012 | B2 |
8462955 | Ureche et al. | Jun 2013 | B2 |
8825999 | Mohamed | Sep 2014 | B2 |
9094191 | Avanzi et al. | Jul 2015 | B2 |
9213858 | Sharma et al. | Dec 2015 | B2 |
9465953 | Shasrma et al. | Oct 2016 | B2 |
9521123 | Jueneman et al. | Dec 2016 | B2 |
9600676 | Farmer | Mar 2017 | B1 |
9703985 | Sanchez | Jul 2017 | B1 |
9900287 | Jooste | Feb 2018 | B1 |
10122766 | Viswnathan et al. | Nov 2018 | B2 |
20050076198 | Skomra | Apr 2005 | A1 |
20050228986 | Fukasawa | Oct 2005 | A1 |
20110107086 | Soliman | May 2011 | A1 |
20110110364 | Fried | May 2011 | A1 |
20110112901 | Fried | May 2011 | A1 |
20120198538 | Spring et al. | Aug 2012 | A1 |
20130332025 | Ziarno | Dec 2013 | A1 |
20140085050 | Luna | Mar 2014 | A1 |
20140279528 | Slaby | Sep 2014 | A1 |
20140282153 | Christiansen | Sep 2014 | A1 |
20140337621 | Nakhimov | Nov 2014 | A1 |
20150169882 | Saxena | Jun 2015 | A1 |
20160294794 | Mancic | Oct 2016 | A1 |
20160315974 | Viswanathan et al. | Oct 2016 | A1 |
20160337328 | Sallam | Nov 2016 | A1 |
20170012642 | Declercq et al. | Jan 2017 | A1 |
20170118207 | Madhu | Apr 2017 | A1 |
Number | Date | Country |
---|---|---|
20160104625 | Sep 2016 | KR |
2017111843 | Jun 2016 | WO |
Entry |
---|
Krivtsova, E. International Search Report. Federal Institute of Industrial Property. ISA/RU. Form PCT/ISA/210. Box A-C. Apr. 18, 2019, Moscow, Russia. |
Krivtsova, E. Written Opinion of the International Searching Authority. Federal Institute of Industrial Property. ISA/RU. Form PCT/IS/237. Box No. V and Supplemental Box. Apr. 18, 2019, Moscow, Russia. |
Number | Date | Country | |
---|---|---|---|
20190268772 A1 | Aug 2019 | US |
Number | Date | Country | |
---|---|---|---|
62540266 | Aug 2017 | US | |
62518281 | Jun 2017 | US | |
62610827 | Dec 2017 | US | |
62652709 | Apr 2018 | US | |
62652737 | Apr 2018 | US | |
62540352 | Aug 2017 | US | |
62518337 | Jun 2017 | US |
Number | Date | Country | |
---|---|---|---|
Parent | 16173179 | Oct 2018 | US |
Child | 16222684 | US | |
Parent | 16005871 | Jun 2018 | US |
Child | 16173179 | US | |
Parent | 16173258 | Oct 2018 | US |
Child | 16173091 | US | |
Parent | 16005918 | Jun 2018 | US |
Child | 16173258 | US | |
Parent | 16005040 | Jun 2018 | US |
Child | 16173091 | US | |
Parent | 16222684 | US | |
Child | 16173091 | US | |
Parent | 16202905 | Nov 2018 | US |
Child | 16222684 | US | |
Parent | 16005134 | Jun 2018 | US |
Child | 16202905 | US | |
Parent | 16222684 | Dec 2018 | US |
Child | 16202905 | US | |
Parent | 16221041 | Dec 2018 | US |
Child | 16222684 | US | |
Parent | 16222684 | US | |
Child | 16222684 | US | |
Parent | 16222421 | Dec 2018 | US |
Child | 16222684 | US | |
Parent | 16222684 | US | |
Child | 16222684 | US | |
Parent | 16173384 | Oct 2018 | US |
Child | 16222684 | US | |
Parent | 16006011 | Jun 2018 | US |
Child | 16173384 | US | |
Parent | 16173323 | Oct 2018 | US |
Child | 16222684 | US | |
Parent | 16005968 | Jun 2018 | US |
Child | 16173323 | US | |
Parent | 16178295 | Nov 2018 | US |
Child | 16222684 | US |
Number | Date | Country | |
---|---|---|---|
Parent | 16005040 | Jun 2018 | US |
Child | 16005871 | US | |
Parent | 16222684 | US | |
Child | 16005871 | US | |
Parent | 16173091 | Oct 2018 | US |
Child | 16222684 | US | |
Parent | 16005040 | Jun 2018 | US |
Child | 16006011 | US | |
Parent | 16222684 | US | |
Child | 16006011 | US | |
Parent | 16005040 | Jun 2018 | US |
Child | 16005968 | US | |
Parent | 16222684 | US | |
Child | 16005968 | US |