WO2019045914A1 - Systèmes et procédés d'authentification de dispositif - Google Patents
Systèmes et procédés d'authentification de dispositif Download PDFInfo
- Publication number
- WO2019045914A1 WO2019045914A1 PCT/US2018/043634 US2018043634W WO2019045914A1 WO 2019045914 A1 WO2019045914 A1 WO 2019045914A1 US 2018043634 W US2018043634 W US 2018043634W WO 2019045914 A1 WO2019045914 A1 WO 2019045914A1
- Authority
- WO
- WIPO (PCT)
- Prior art keywords
- computing device
- medication delivery
- processor
- delivery device
- transitory identity
- Prior art date
Links
Classifications
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04W—WIRELESS COMMUNICATION NETWORKS
- H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
- H04W12/06—Authentication
-
- A—HUMAN NECESSITIES
- A61—MEDICAL OR VETERINARY SCIENCE; HYGIENE
- A61M—DEVICES FOR INTRODUCING MEDIA INTO, OR ONTO, THE BODY; DEVICES FOR TRANSDUCING BODY MEDIA OR FOR TAKING MEDIA FROM THE BODY; DEVICES FOR PRODUCING OR ENDING SLEEP OR STUPOR
- A61M5/00—Devices for bringing media into the body in a subcutaneous, intra-vascular or intramuscular way; Accessories therefor, e.g. filling or cleaning devices, arm-rests
- A61M5/14—Infusion devices, e.g. infusing by gravity; Blood infusion; Accessories therefor
- A61M5/142—Pressure infusion, e.g. using pumps
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L63/00—Network architectures or network communication protocols for network security
- H04L63/04—Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks
- H04L63/0407—Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks wherein the identity of one or more communicating identities is hidden
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L63/00—Network architectures or network communication protocols for network security
- H04L63/08—Network architectures or network communication protocols for network security for authentication of entities
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L63/00—Network architectures or network communication protocols for network security
- H04L63/10—Network architectures or network communication protocols for network security for controlling access to devices or network resources
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
- H04L9/32—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials
- H04L9/3226—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials using a predetermined code, e.g. password, passphrase or PIN
- H04L9/3228—One-time or temporary data, i.e. information which is sent for every authentication or authorization, e.g. one-time-password, one-time-token or one-time-key
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04W—WIRELESS COMMUNICATION NETWORKS
- H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
- H04W12/60—Context-dependent security
- H04W12/69—Identity-dependent
- H04W12/75—Temporary identity
-
- A—HUMAN NECESSITIES
- A61—MEDICAL OR VETERINARY SCIENCE; HYGIENE
- A61M—DEVICES FOR INTRODUCING MEDIA INTO, OR ONTO, THE BODY; DEVICES FOR TRANSDUCING BODY MEDIA OR FOR TAKING MEDIA FROM THE BODY; DEVICES FOR PRODUCING OR ENDING SLEEP OR STUPOR
- A61M2205/00—General characteristics of the apparatus
- A61M2205/35—Communication
- A61M2205/3576—Communication with non implanted data transmission devices, e.g. using external transmitter or receiver
-
- A—HUMAN NECESSITIES
- A61—MEDICAL OR VETERINARY SCIENCE; HYGIENE
- A61M—DEVICES FOR INTRODUCING MEDIA INTO, OR ONTO, THE BODY; DEVICES FOR TRANSDUCING BODY MEDIA OR FOR TAKING MEDIA FROM THE BODY; DEVICES FOR PRODUCING OR ENDING SLEEP OR STUPOR
- A61M2205/00—General characteristics of the apparatus
- A61M2205/35—Communication
- A61M2205/3576—Communication with non implanted data transmission devices, e.g. using external transmitter or receiver
- A61M2205/3584—Communication with non implanted data transmission devices, e.g. using external transmitter or receiver using modem, internet or bluetooth
-
- A—HUMAN NECESSITIES
- A61—MEDICAL OR VETERINARY SCIENCE; HYGIENE
- A61M—DEVICES FOR INTRODUCING MEDIA INTO, OR ONTO, THE BODY; DEVICES FOR TRANSDUCING BODY MEDIA OR FOR TAKING MEDIA FROM THE BODY; DEVICES FOR PRODUCING OR ENDING SLEEP OR STUPOR
- A61M2205/00—General characteristics of the apparatus
- A61M2205/50—General characteristics of the apparatus with microprocessors or computers
-
- A—HUMAN NECESSITIES
- A61—MEDICAL OR VETERINARY SCIENCE; HYGIENE
- A61M—DEVICES FOR INTRODUCING MEDIA INTO, OR ONTO, THE BODY; DEVICES FOR TRANSDUCING BODY MEDIA OR FOR TAKING MEDIA FROM THE BODY; DEVICES FOR PRODUCING OR ENDING SLEEP OR STUPOR
- A61M2205/00—General characteristics of the apparatus
- A61M2205/50—General characteristics of the apparatus with microprocessors or computers
- A61M2205/502—User interfaces, e.g. screens or keyboards
- A61M2205/505—Touch-screens; Virtual keyboard or keypads; Virtual buttons; Soft keys; Mouse touches
-
- A—HUMAN NECESSITIES
- A61—MEDICAL OR VETERINARY SCIENCE; HYGIENE
- A61M—DEVICES FOR INTRODUCING MEDIA INTO, OR ONTO, THE BODY; DEVICES FOR TRANSDUCING BODY MEDIA OR FOR TAKING MEDIA FROM THE BODY; DEVICES FOR PRODUCING OR ENDING SLEEP OR STUPOR
- A61M2205/00—General characteristics of the apparatus
- A61M2205/58—Means for facilitating use, e.g. by people with impaired vision
- A61M2205/581—Means for facilitating use, e.g. by people with impaired vision by audible feedback
-
- A—HUMAN NECESSITIES
- A61—MEDICAL OR VETERINARY SCIENCE; HYGIENE
- A61M—DEVICES FOR INTRODUCING MEDIA INTO, OR ONTO, THE BODY; DEVICES FOR TRANSDUCING BODY MEDIA OR FOR TAKING MEDIA FROM THE BODY; DEVICES FOR PRODUCING OR ENDING SLEEP OR STUPOR
- A61M2205/00—General characteristics of the apparatus
- A61M2205/58—Means for facilitating use, e.g. by people with impaired vision
- A61M2205/582—Means for facilitating use, e.g. by people with impaired vision by tactile feedback
-
- A—HUMAN NECESSITIES
- A61—MEDICAL OR VETERINARY SCIENCE; HYGIENE
- A61M—DEVICES FOR INTRODUCING MEDIA INTO, OR ONTO, THE BODY; DEVICES FOR TRANSDUCING BODY MEDIA OR FOR TAKING MEDIA FROM THE BODY; DEVICES FOR PRODUCING OR ENDING SLEEP OR STUPOR
- A61M2205/00—General characteristics of the apparatus
- A61M2205/58—Means for facilitating use, e.g. by people with impaired vision
- A61M2205/583—Means for facilitating use, e.g. by people with impaired vision by visual feedback
-
- A—HUMAN NECESSITIES
- A61—MEDICAL OR VETERINARY SCIENCE; HYGIENE
- A61M—DEVICES FOR INTRODUCING MEDIA INTO, OR ONTO, THE BODY; DEVICES FOR TRANSDUCING BODY MEDIA OR FOR TAKING MEDIA FROM THE BODY; DEVICES FOR PRODUCING OR ENDING SLEEP OR STUPOR
- A61M2205/00—General characteristics of the apparatus
- A61M2205/60—General characteristics of the apparatus with identification means
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L2209/00—Additional information or applications relating to cryptographic mechanisms or cryptographic arrangements for secret or secure communication H04L9/00
- H04L2209/80—Wireless
- H04L2209/805—Lightweight hardware, e.g. radio-frequency identification [RFID] or sensor
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L2209/00—Additional information or applications relating to cryptographic mechanisms or cryptographic arrangements for secret or secure communication H04L9/00
- H04L2209/88—Medical equipments
Definitions
- the digital environment is one in which secrets are difficult to keep beyond a short period of time, and once secrecy is lost the formerly secret information may be proliferated rapidly and with complete fidelity.
- the digital environment is also one in which shared secrets have become target of "hacking" that has transformed many "secrets” (e.g., passwords, digital certificates, private information and other types of authentication data) into a commodity freely traded on the gray and black markets, destroying the benefit of such secrets for securing digital exchanges.
- secrets e.g., passwords, digital certificates, private information and other types of authentication data
- Various embodiments include methods of authenticating interactions between a medication delivery device (which is a first computing device) and a second computing device with support of a third computing device.
- Various embodiments may include obtaining a first transitory identity at the medication delivery device, sending the first transitory identity to the second computing device and to the third computing device, receiving in the second computing device the first transitory identity from the medication delivery device, obtaining a second transitory identity at the second computing device, sending the second transitory identity from the second computing device to the medication delivery device and to the third computing device, receiving in the medication delivery device the second transitory identity from the second computing device, sending an authentication query including the second transitory identity from the medication delivery device to the third computing device, sending an authentication query including the first transitory identity from the second computing to the third computing device, receiving in the third computing device the first transitory identity from the medication delivery device, receiving in the third computing device from the second computing device the authentication query comprising the first transitory identity, determining in the third computing device whether the first transitory
- Various embodiments further include computing devices configured with processor-executable instructions to perform operations of the method summarized above.
- Various embodiments further include a system including a medication delivery device, a second computing device, and a third computing device all configured to perform operations of the method summarized above.
- FIGS. 1A-1C are component block diagrams of a communication system suitable for use with various embodiments.
- FIG. 2 is a component block diagram of a communication device suitable for use with various embodiments.
- FIG. 3A is a process flow diagram illustrating a method of authenticating one computing device to another computing device according to various embodiments.
- FIG. 3B is a message flow diagram illustrating another method of authenticating one computing device to another computing device according to various embodiments.
- FIG. 3C illustrates a method 300a of operations executed by the medication delivery device as part of the method 300.
- FIG. 3D illustrates a method 300b of operations executed by the second computing device as part of the method 300.
- FIG. 3E illustrates a method 300c of operations executed by the third computing device as part of the method 300.
- FIG. 4A is a process flow diagram illustrating a method of authenticating one computing device to another computing device and authorizing an information transaction between the two devices according to various embodiments.
- FIG. 4B illustrates a method 400a of operations executed by the medication delivery device as part of the method 400.
- FIG. 4C illustrates a method 400b of operations executed by the second computing device as part of the method 400.
- FIG. 4D illustrates a method 400c of operations executed by the third computing device as part of the method 400.
- FIG. 5A is a process flow diagram illustrating a method of protecting communications between two computing devices in the event of an intrusion by an unauthorized party according to various embodiments.
- FIG. 5B illustrates a method 500a of operations executed by the third computing device as part of the method 500.
- FIG. 6A is a process flow diagram illustrating a method of authenticating one computing device to another computing device according to various embodiments.
- FIG. 6B illustrates a method 600a of operations executed by the medication delivery device as part of the method 600.
- FIG. 6C illustrates a method 600b of operations executed by the second computing device as part of the method 600.
- FIG. 6D illustrates a method 600c of operations executed by the third computing device as part of the method 600.
- FIG. 7 is a component block diagram of a mobile wireless computing device suitable for implementing various embodiments.
- FIG. 8 is a component block diagram of a portable wireless communication device suitable for implementing various embodiments.
- FIG. 9 is a component block diagram of a server device suitable for implementing various embodiments.
- Various embodiments provide methods, and computing devices (or other digital or programmable devices) configured to implement the methods, that enable authenticating of a computing device to other computing devices in a communication system based on dynamic information of a computing device that does not rely on the paradigm of shared secrets and static information. Because the transitory identity of each computing device is periodically or aperiodically changing, and each computing device is in periodic or aperiodic communication with other computing devices (synchronously or asynchronously) sending and/or receiving new transitory identities, various embodiments improve the function of any communication network or any electronic communication system by improving the security of communications.
- Various embodiments also improve the function of any communication network by reliably authenticating the identity of a participating computing device without relying on static identification information, such as a shared secret, that may be vulnerable to attack by access and/or copying.
- a computing device refers to any programmable computer or processor that can be configured with programmable instructions to perform various embodiment methods.
- a computing device may include one or all of personal computers, laptop computers, tablet computers, cellular telephones, smartphones, Internet enabled cellular telephones, Wi-Fi enabled electronic devices, personal data assistants (PDAs), wearable computing devices (including smart watches, necklaces, medallions, and any computing device configured to be worn, attached to a wearable item, or embedded in a wearable item), wireless accessory devices, wireless peripheral devices, Internet of Things (IoT) devices, network elements such as servers, routers, gateways, and the like (including so-called “cloud” computing devices), and similar electronic devices equipped with a short-range radio (e.g., a Bluetooth, Peanut, ZigBee, and/or Wi-Fi radio, etc.) and/or a wide area network connection (e.g., using one or more cellular radio access technologies to communicate using a wireless wide area network transceiver, or a wired connection
- the methods and computing devices configured to implement the methods described herein may be implemented in a variety of contexts in which the identity of the participating devices may be authenticated, such as health care record management, secure communications (e.g., government, business, intelligence community, etc.), public records management systems, voting systems, financial services systems, security brokerage systems, and many others.
- the methods and computing devices configured to implement the methods described herein may be implemented in IoT devices, or among IoT devices and an IoT device controller, such as a router, server, IoT hub, or another similar device.
- various embodiments when implemented in an IoT environment, may be of particular use in preventing distributed denial of service (DDoS) attacks, without human intervention.
- the methods and computing devices configured to implement the methods described herein may authenticate the participation of a computing device in an information transaction.
- the methods and computing devices configured to implement the methods described herein may be implemented in the context of a commercial transaction, to enable performance of a non-reputable commercial transaction in which, because the participation of specific computing devices may be authenticated, a participant may be unable to later deny participation in the transaction (such as, for example, a card-not-present financial transaction).
- component means, but not limited to, hardware, firmware, a computer-related entity, such as, but not limited to, hardware, firmware, a computer-related entity, such as, but not limited to, hardware, firmware, a
- a component may be, but is not limited to, a process running on a processor, a processor, an object, an executable, a thread of execution, a program, and/or a computer.
- a component may reside within a process and/or thread of execution and a component may be localized on one processor or core and/or distributed between two or more processors or cores.
- these components may execute from various non-transitory computer readable media having various instructions and/or data structures stored thereon.
- Components may communicate by way of local and/or remote processes, function or procedure calls, electronic signals, data packets, memory read/writes, and other known computer, processor, and/or process related communication methodologies.
- the digital environment enables rapid communication and information transactions on up to a global scale, among other things.
- the current digital environment rests on a shaky security foundation: the old paradigm of the static shared secret.
- authentication step visual recognition of the other party.
- the digital environment is one in which secrets are difficult to keep beyond a short period of time. Once secrecy is lost the formerly secret information may be proliferated rapidly and with complete fidelity. Breakdowns in digital system security, resulting in massive data breaches, have become nearly commonplace and the frequency of their occurrence has accelerated.
- a violation of trust or the misuse of a shared secret is at the root of the failure of security. While in certain cases a particular security failure may be due to a lack of strength in the technology employed to provide the trust and security, in general security failures in the digital environment have occurred in a wide variety of industries using a variety of technology deployments. Security failures occur across the board and are attributable not only to any particular deployed technology, but also to the practices and procedures inherent to its application and use. Thus, security failures in the digital environment are due to something more fundamental and endemic in the root strategy of the trust paradigm of the shared secret that has failed.
- the current paradigm of digital security fails for at least three fundamental reasons: (1) the current paradigm is based on trust, and trust is what fails; (2) the current paradigm is based on stable or static shared secrets, but the secrets do not remain secret; and (3) the vast majority of information transactions are between anonymous parties.
- “trusted systems” ultimately do not work because they are penetrable and vulnerable.
- current “trusted systems” are vulnerable to penetration and exploitation in large part due to the use of static or durable
- the current digital security paradigm relies on a certificate authority or similar entity that issues a static digital certificate (or another similar datum).
- the digital certificate may certify ownership of a public key by a named subject of the certificate, ostensibly enabling other parties to rely on signatures or assertions made about the private key that corresponds to the certified public key.
- SSL Secured Socket Layers
- a security protocol widely used to secure communications between computing devices e.g., between a web browser one a computing device and a remote web server.
- SSL employs a cryptographic system that uses a. public key and a private key to encrypt information sent between a computing device and a. website.
- the core of SSL security relies on certificates are provided by a certificate authority, which are installed on a company's server once the company is validated by the certificate authority.
- the certificate authority is a third party that is trusted by both the owner of the certificate and the other party relying on the certificate.
- authentication step is based on information that can be stolen and used by the attacker.
- login credentials consist of a username and a password. While numerous means exist for securing login credentials that make the credentials more complicated, such as one-time use and multif actor uses, all of the use methods of obfuscating or making login credentials more complex are ultimately vulnerable if the digital infrastructure itself is vulnerable. The very existence and use of multifactor authentication steps and multifactor authentication paths are admissions that user name -password combinations are inadequate to the task of providing security.
- Various embodiments disclosed in this application address the security vulnerability of digital systems and provide electronic security for device-to-device communication as well as for enhanced user authentication.
- Various embodiments provide computer-implemented methods to provide for continuous refreshing and changing of digital certificates.
- Various embodiments incorporate the assumption that trusted systems ultimately are demonstrably insecure, because such systems are penetrable and vulnerable.
- Various embodiments provide a digital communication system that assumes no trust among various network elements, for at least the reason that the digital environment is inherently untrustworthy.
- Various embodiments change the way devices are authenticated on networks by generating and sharing authenticating information of such limited duration that it cannot be effectively used by an attacker.
- the duration during which the authenticating information may be used may be relatively short, such as a duration of minutes. This contrast with the effective duration of certificates from a conventional certifying authority (CA), which may have a duration of up to decades in some cases.
- CA certifying authority
- the duration of the authenticating information may be determined to be shorter than the time it takes an attacker to obtain and exploit the information.
- Various embodiments are based on the assumption that the authenticating information is potentially vulnerable and may be obtained by an attacker, and the validity duration of the authenticating information may be determined such that its usefulness for authentication expires before an adversary can discover and exploit it.
- an amount of time required to decrypt a commonly used encryption hash (e.g., SHA256) using brute force may be determined.
- the validity duration of authentication information may change as advancements in computing technologies reduce the time required to discover and decrypt such information.
- the system may determine a validity duration for authenticating information that is shorter than the determined time required to decrypt the encrypted information.
- the relatively short useful duration of the authenticating information reduces by orders of magnitude the possibility of such authenticating information being guessed, accessed or "hacked” and then used as a means of attacking the system.
- Using such authenticating information enables the system to authorize only desired devices and to deny access to unauthorized devices, even when such unauthorized devices present previously-acceptable username and passwords, certificates or other access credentials.
- various embodiments further enable existing security technologies and components to preclude access to a device or system by attackers who have obtained perfect copies of legitimate user login credentials.
- Various embodiments may be applied in other security applications utilizing one-time passwords, such as cloud security, as well as on a wide range of devices, including Internet of Things (IoT) devices.
- IoT Internet of Things
- computing devices perform a bi-directional, three- way authentication in which each computing device periodically (or aperiodically) generates an ephemeral "transitory identity" using dynamic and/or static state aspects (alone or in combination) of the computing device.
- the transitory identities generated by each computing device may be exchanged and authenticated by two (or more) other computing devices.
- Transitory identities may be used with existing security methodologies, including hashing techniques, updated keystones, updated Trust Anchors, Client Certificate Mapping, Active Directory, Internet Information Services (IIS) Client Certificate Mapping, digital certificates, a trusted third-party, and other security mechanisms.
- Various embodiments may defeat attempts to impersonate an authorized computing device, such as an attempt to login to a computer network or online environment by an unauthorized user possessing the credentials of an authorized user.
- Various embodiments may also provide secure communications between digital devices of any kind on any network.
- various embodiments may provide secure, creditable and authenticated communication between computing devices on a communication network that eliminates the common vulnerabilities of conventional authentication technologies.
- a transitory identity may be generated dynamically, such as based at least in part on one or more changing or dynamic states of the computing device that generates the transitory identity, or dynamic information obtained by a sensor within the computing device (e.g., a camera, microphone, accelerometer, etc.).
- a computing device may generate its own transitory identity.
- another computing device such as an authentication server, may generate the transitory identity for the computing device, and the transitory identify may be pushed to the computing device, or pulled from the server by the computing device.
- a given transitory identity may be used only once. In such embodiments, a transitory identity that has been used may thereafter be unusable.
- time is a critical element of transitory identities.
- the expiration of a transitory identity may be limited to a reasonable length of time that a secret can be expected to be kept.
- the computing device may determine a time bound or time duration of a transitory identity such that the transitory identity is useful for a length of time that is shorter than a time required for an attacker to guess or acquire the transitory identity and use it in a successful attack, such as access to a secure network or completion of a secured transaction. Beyond the time bound or time duration, the transitory identity may be unusable for authentication of any computing device.
- the duration of a transitory identity may be shorter than the duration of a given communication session (e.g., a VPN session or an Internet shopping and purchase session). In such situations, a new transitory identity may be generated for the computing device during the
- each generated transitory identity may include unique data (that may be represented by a string of data) that represents a "snapshot" of a dynamic state of the generating computing device at the time that the transitory identity is generated.
- Various embodiments use the unique data (or unique data string) generated by reference to one or more constantly changing conditions as a basis for generating a unique dynamic certificate. As a result, it is not possible for an attacker to discover the basis for generating transitory identities in an attempt to generate counterfeit identities.
- computing devices may exchange information or otherwise negotiate a timing of when each computing device may generate a new transitory identity.
- a computing device e.g., a server
- another computing device e.g., a user device
- Such coordination of generating new transitory identities may enable frequent changes in transitory identities during an extended digital communication session.
- a computing device may include a module, such as a transitory identity module, that may store a small unit of static information. The information may include text, an image, biometric information, and the like.
- a computing device may combine dynamic information with the static information to generate the transitory identity. By adding dynamic information to static information, an entire string information may be changed by altering a small element. Further, a hash of the combined dynamic information and static information may be different from a hash of the static information alone, without requiring alteration of the entire data set.
- each computing device participating in a computing device participating in a computing device
- Each participating communication device may send its generated transitory identity to an authentication server, which may function as a repository of the real-time generated transitory identities.
- the medication delivery device and a second computing device may each generate transitory identities, and may send the generated transitory identities to each other and to the authentication server.
- the medication delivery device may send a query to the authentication server that includes the transitory identity that the medication delivery device received from the second computing device, requesting that the authentication server authenticate the transitory identity of the second computing device.
- the third computing device may compare the second computing device's transitory identities received from both the second computing device and the medication delivery device.
- the third computing device may send to the medication delivery device an indication of authentication success of the second computing device.
- the indication of authentication success may be transmitted by the third computing device using methods configured to defeat man-in- the-middle attacks.
- the third computing device may function as a repository in a variety of applications, including, but not limited to financial services systems, security brokerage systems, healthcare record management systems, secure communication systems for business, government, intelligence community, etc., public records systems (e.g., firearm registries, Departments of Motor Vehicles, etc.), voting systems, and among Internet of Things devices.
- the third computing device may send to the medication delivery device an indication of authentication failure of the second computing device.
- the indication of authentication failure may be transmitted by the third computing device using methods configured to defeat man-in- the-middle attacks.
- the authentication server may also generate a transitory identity and send the third computing device transitory identity to the first and second computing devices, and the first and second computing devices may compare the third computing device transitory identity and authenticate for themselves the identity of the third computing device.
- the third computing device may send an instruction to other computing devices (e.g., the first and second computing devices) to generate a new transitory identity.
- each computing device participating in the communication system may periodically or aperiodically generate a new transitory identity.
- new transitory identities may be generated sufficiently before the expiration of one or more current transitory identities securing the communication session to enable the two computing devices and the third computing device to complete the exchanges and authentications of the new transitory identities so that the communication session can continue uninterrupted and secured by the new identities.
- each new transitory identity may be set for single use, such that each computing device that receives a transitory identity from another computing device may only use (interact with, authenticate, process, hash, etc.) a transitory identity once, after which the received transitory identity becomes unusable. Again, a lifetime may be set for each new transitory identity for a time duration that is less than a period of time in which an attacker may obtain and use the transitory identity. [0055] Various embodiments may operate to quickly reconstitute security after a successful attack.
- a successful attack on the authentication server or another device participating in the system will not compromise system security for any significant period of time, since any exfiltrated credential information is of no lasting value to the attacker, as it will all expire before it can be exploited.
- the authentication system may not be compromised by attacking the
- Various embodiments provide a communication system that is durable and sustainable and that operates successfully in an environment in which any and every component is likely to be successfully attacked and compromised.
- a medication delivery device and a second computing device may establish a trusted relationship based on a previously-shared data hash (e.g., using a hashing algorithm such as MD5, SHA1, or SHA2).
- the previously- shared data hash may be created, for example, from a stored and shared time-based one-time password algorithm (e.g., Internet Engineering Task Force RFC 6238, Temporary One-Time Password (TOTP), etc.).
- a previously-shared data hash may be stored in memory on the medication delivery device and/or the second computing device.
- the second computing device may initiate a session, such as an information transaction session or communication session, when the second computing device receives from the medication delivery device login data, such as a username and password, that may be associated with an account or session identifier.
- the login data may be used to identify the account or the session, the login data may not be used for purposes of communication security or authentication of any computing device or user.
- the medication delivery device may generate a transitory identity and send the transitory identity to the second device together with the login data, or separately from the login data.
- the medication delivery device may generate the transitory identity based on dynamic and/or static aspects of or determined by the medication delivery device.
- dynamic aspects of the medication delivery device may include aspects of the medication delivery device that change relatively rapidly, such as a clock time, a chip state, a register state, information received or detected by a sensor of the computing device (e.g., an accelerometer, optical sensor, temperature, humidity, and the like), location information from a Global Positioning System (GPS) device or a Wi-Fi signal, or any other source of data based on a dynamic aspect of the medication delivery device.
- GPS Global Positioning System
- dynamic aspects determined the medication delivery device may include an image or video clip captured by a camera, a sound clip of ambient sounds captured by a microphone, an audio video clip captured by a camera and microphone, or any other information regarding a surroundings or ambient conditions of the medication delivery device.
- dynamic aspects may be obtained from other sources that are random and frequently changing, such as external sensors and external sources of random information.
- the second computing device may send an authentication query to a third computing device, which may function as an authentication server or certificate authority.
- the authentication query may include the transitory identity generated by the medication delivery device.
- the authentication server may store the medication delivery device's transitory identity.
- the third computing device may send an authentication query to the medication delivery device. Responsive to the authentication query from the third computing device, the medication delivery device may send medication delivery device's transitory identity to the third computing device. In some embodiments, the medication delivery device may generate a hash of the medication delivery device transitory identity, and may send the generated hash of the medication delivery device's transitory identity to the third computing device.
- the third computing device may compare the medication delivery device's transitory identity received from the second computing device and the medication delivery device's transitory identity received from the medication delivery device. In response to determining that the two received transitory identities match, the third computing device may send an indication of authentication success of the medication delivery device to the second computing device. In response to determining that the two received transitory identities do not match, the third computing device may send an indication of medication delivery device authentication failure to the second computing device.
- the third computing device may maintain an audit trail of successful and failed login attempts.
- the audit trail may include metadata identifying, for example, a time of each attempt, identifiers of the first and second computing devices (and any other participating computing devices), a frequency of use, a frequency of authentication failures, and other details.
- the audit trail may be used for risk analysis, and may be displayed and/or accessible via a dashboard or other reporting mechanism.
- any of the participating computing devices may keep an audit trail.
- copies of transitory identities may be stored as part of the audit trail.
- Such stored transitory identities may not be used for authentication purposes, but may be used to identify participating computing devices, as well as to confirm the participation in a particular information transaction by a particular computing device.
- the information stored in the audit trail may be used to identify, for example, a computing device that has been targeted for attack in some manner.
- Various embodiments provide a system that may authenticate the identity of the computing device in a communication system based on transitory and/or dynamic information of each computing device, in contrast to the current paradigm of shared secrets and static information.
- a participating computing device may authenticate the identity of a second computing device using an ephemeral transitory identity that may be received from the second computing device and from a third computing device (e.g., an authentication server).
- the various embodiments stand in contrast to the current security paradigm, which is based on keeping secret a static unit of information, such as a static certificate.
- each computing device Because the transitory identity of each computing device is frequently changing, and each computing device is in periodic (or aperiodic) communication with other computing devices sending and/or receiving new transitory identities, various embodiments improve the function of any communication network or any electronic communication system by improving the security of communications.
- An adversary would be required to penetrate (at a minimum) three communication pathways - e.g., between the first and second computing devices, between the first and third computing devices, and between the second and third computing devices - simultaneously and synchronously in order to compromise communications between any two of the communication devices.
- Various embodiments may be implemented using a variety of computing devices and/or communication networks or systems without requiring substantive changes or alterations of any presently-existing infrastructure.
- Various embodiments also improve the function of any communication network by reliably authenticating the identity of a participating computing device without relying on static identification information, such as a shared secret, that could be vulnerable to attack by access and/or copying.
- a computing device that is configured to perform the various methods may be de-authorized or blocked from accessing the system in the event of theft or cloning of the computing device.
- the communication system 150 may include a variety of entities that may communicate using a communication network, such as an IoT network 154, a law firm 156, a defense contractor 158, a subcontractor 160, a bank 162, a health care entity 164, an online commerce entity 166, and a telecom entity 168.
- a communication network such as an IoT network 154, a law firm 156, a defense contractor 158, a subcontractor 160, a bank 162, a health care entity 164, an online commerce entity 166, and a telecom entity 168.
- Each of the entities 154-168 may communicate with and among each other.
- Each of the entities 154-168 may also communicate with a certificate authority 152.
- the certificate authority 152 may include one or more computing devices configured to perform operations to enable the authentication of an identity of a computing device, as further described below.
- the entities 154-168 are merely exemplary, and the communication network 150 may include a wide variety of entities, including entities that may handle health care records, secure communications (e.g., for a business or government agency), public records, voting systems, financial services, security brokerage systems, IoT
- FIG. IB Various embodiments may be implemented within a variety of communication systems 100, an example of which that includes medical delivery devices is illustrated in FIG. IB. With reference to FIGS. 1A and IB, the elements of the communication system 100 may be used in any of the entities 154-168.
- the communication system 100 may include medication delivery devices 142, 144, as well as computing devices 106, 108, and 116.
- a medication delivery device 142 may be an implantable medication delivery device that may be implanted into a patient 140.
- Each of the medication delivery devices 142, 144 may be configured to communicate with another computing device 116 via a wireless communication link 134 and 136, respectively.
- the computing device 116 may then provide communication connectivity to a
- remote computing devices 106, 108, and/or 114 such as a doctor's office, a hospital server, or a server at a manufacturer of the medication delivery device.
- the computing devices 106, 108, and/or 114 142, 144 may include components configured to deliver a medication to the patient 140.
- Examples of a medication include insulin or other hormones, antibiotics,
- Components configured to deliver a medication to the patient 140 may include components including a medication reservoir, a medication infusion pump, one or more sensors configured to provide data regarding conditions of the medications delivery device and/or physiological conditions of the patient 140, a controller (e.g., a processor and associated memory) that is configured to control the operation of the drug infusion pump, and a wireless transceiver for providing two-way communication between the controller and the computing device 116.
- the computing device 116 may receive telemetry from the medication delivery devices 142, 144 as well as issue commands to the medication delivery devices 142, 144 over wireless communication links 134, 136, as further described below.
- the computing devices 106 and 108 may include a back-end computing device such as a server. In some embodiments, the computing device 108 may communicate with an electronic security system 114 over a communication link 130. In some embodiments, the computing devices 106 and 108 (and possibly the computing device 114) may be operated by one entity. For example, a health care entity 164 or a telecom entity 168 may operate one or more of the computing devices 106, 108, and/or 114. In some embodiments, the computing devices 106, 108, and 114 may be operated by more than one entity.
- Each of the medication delivery devices 142, 144 and computing devices 106, 108, 116 and the electronic security system 114 may communicate with a
- the communication links 120, 122, 124, 126, 128, 132, and 130 may include wired or wireless communication links, and may further include additional devices to facilitate communication between the medication delivery devices 142, 144 and computing devices 106, 108, and 116, the electronic security system 114, and the communication network 112.
- additional devices may include access points, base stations, routers, gateways, wired and/or wireless communication devices, as well as backhaul communication links that may include fiber optic backhaul links, microwave backhaul links, and other suitable communication links.
- the computing device 106 may be configured to perform operations related to information transactions in a variety of contexts, including, without limitation, operations related to medication delivery via a medication delivery device, health care record management, secure communications, public records management systems, voting systems, financial services systems, security brokerage systems, as an IoT device controller, to perform a commercial transaction, as well as other contexts.
- the computing device 108 may be configured to perform operations related to generating and/or obtaining transitory identities, and authentication of an identity of a computing device such as one or more of the computing devices 102, 104, and 106, as further described below.
- the electronic security system 114 may be configured to perform network monitoring or network security functions, such as a network monitoring system, a key logging system, or another similar system. In some embodiments, electronic security system 114 may detect an unauthorized user or electronic intruder using or accessing the communication network 112, and may send an indication to the computing device 108 of the detection of the unauthorized user or electronic intruder. In some embodiments, the electronic security system 114 may be configured to monitor for and/or detect unauthorized accesses of a system, memory, network element, or component of a network element from an otherwise authorized user (e.g., an "insider" threat).
- an otherwise authorized user e.g., an "insider" threat
- the electronic security system 114 may be configured to receive a command or an indication that a computing device should be de-authorized from access to the communication system.
- the electronic security system 114 may be a component or an element of a network authorization system, or a human resources system, or a system that provides a list of authorized users of the communication system, or another similar system.
- the electronic security system 114 may receive a command or another message indicating that an authorization of a computing device should be removed or blocked.
- the computing device 108 may send an instruction to one or more of the medication delivery devices 142, 144 and computing devices 106 and 116 to obtain a new transitory identity, as further described below.
- the communication network 112 may include a variety of communication networks, including communication networks within an entity or enterprise, and external communication networks, publicly available communication networks, and combinations of networks as well as internetworks, including the internet.
- the communication network 112 may support communications using one or more wired and wireless communication protocols.
- Each of the communication links 120, 122, 124, 126, 128, 132, 134, and 136 may be two-way wired or wireless communication links.
- Wireless communication protocols may include one or more radio access technologies (RATs). Examples of wireless RATs include 3GPP Long Term
- LTE Long Term Evolution
- WiMAX Worldwide Interoperability for Microwave Access
- CDMA Code Division Multiple Access
- TDMA Time Division Multiple Access
- WCDMA Wideband CDMA
- GSM Global System for Mobility
- RATs may also include Wi-Fi, Bluetooth, Zigbee, LTE in Unlicensed spectrum (LTE-U), License Assisted Access (LAA), and MuLTEfire (a system that uses LTE on an unlicensed carrier band).
- Wired communication protocols may use a variety of wired networks (e.g., Ethernet, TV cable, telephony, fiber optic and other forms of physical network connections) that may use one or more wired
- Ethernet Point-To-Point protocol
- HDLC High-Level Data Link Control
- ADCCP Advanced Data Communication Control Protocol
- TCP/IP Transmission Control Protocol/Internet Protocol
- each of the communication links 120, 122, 124, 126, 128, 132, 134, and 136 are illustrated as single links, each of the communication links may include a plurality of wired or wireless links, such as plurality of frequencies or frequency bands, each of which may include a plurality of logical channels. Additionally, each of the various communication links 120, 122, 124, 126, 128, 132, 134, and 136 may utilize more than one communication protocol.
- the computing device 108 may communicate with a data store 110, such as a memory device, database, server device, or another device capable of storing data.
- a data store 110 such as a memory device, database, server device, or another device capable of storing data.
- the data store 110 may store an audit trail and associated metadata.
- the communication system 180 may include computing devices 184, 186, 188, 190, 192, 194, and 196.
- the computing devices 190-196 may include network elements, such as file servers, databases, or other similar network-accessible data sources.
- the computing devices 184 and 186 may include any form of user-operable network terminal, and may be similar to the computing devices 102 and 104.
- the computing devices 186-196 may be elements in a communication network 182, access to which may be protected by a device configured to protect electronic access to the communication network 182, such as a firewall 198.
- firewall 198 may protect the network 182 against attacks or exploitation by an external device, such as the computing device 184. However, the firewall 198 may not protect the network 182 against attacks or explication from a device that is inside the firewall 198, such as the computing device 186.
- Various embodiments may include the computing device 188 (which may be similar to the third computing device 108), which may be configured to perform operations related to generating and/or obtaining transitory identities, and
- firewall 198 may be employed to perform network operations such as traffic monitoring, gateway functions, routing, and other similar functions, the firewall 198 may not perform a security function or an authentication function of devices such as the computing devices 184 and 186.
- the computing devices 184 and 186 may communicate with the computing device 188 and/or with each other, enabling authentication of an identity of each of the computing devices 184 and 186, as well as, in some embodiments, an identity of the computing device 188.
- the communication system 180 may use inputs received at the computing device 184 or 186, such as a username and password, to identify a purported user or as a pointer to a user account, communication system 180 may not use credentials such as a username and password for security purposes or for authentication purposes. Rather, the communication system 180 may authenticate the identity of the computing devices 184 and 186 based on transitory and/or dynamic information of each computing device, as further described below.
- FIG. 2 is a component block diagram of a computing device 200 suitable for implementing various embodiments.
- the computing device 200 may be similar to the medication delivery devices 142, 144 and computing devices 106 and 108.
- the computing device 200 may include a processor.
- the processor 202 may be configurable with processor-executable instructions to execute operations of the various embodiments, a specialized processor, such as a modem processor, configurable with processor-executable instructions to execute operations of the various embodiments in addition to a primary function, a dedicated hardware (i.e., "firmware") circuit configured to perform operations of the various embodiments, or a combination of dedicated hardware/firmware and a programmable processor.
- the processor 202 may be coupled to memory 204, which may be a non- transitory computer-readable storage medium that stores processor-executable instructions.
- the memory 204 may store an operating system, as well as user application software and executable instructions.
- the memory 204 may also store application data, such as an array data structure.
- the memory 204 may include one or more caches, read only memory (ROM), random access memory (RAM), electrically erasable programmable ROM (EEPROM), static RAM (SRAM), dynamic RAM (DRAM), or other types of memory.
- the processor 202 may read and write information to and from the memory 204.
- the memory 204 may also store
- a protocol stack generally includes computer executable instructions to enable communication using a radio access protocol or communication protocol.
- the processor 202 may also communicate with a variety of modules for units configured to perform a variety of operations, as further described below.
- the processor 202 may communicate with a communication interface 206, an authentication module 208, a hashing module 210, a transitory identity module 212, the hash storage module 214, and a transaction module 216.
- the modules/units 206- 216 may be implemented on the computing device 200 in software, and hardware, or in a combination of hardware and software.
- Firmware, chip, system-on-a-chip (SOC), dedicated hardware (i.e., "firmware") circuit configured to perform operations of the various embodiments, or a combination of dedicated hardware/firmware and a programmable processor.
- the processor 202, the memory 204, and the various modules/units 206-216 may communicate over a communication bus or any other communication circuitry or interface.
- the communication interface 206 may include a network interface that may enable communications with to a communication network (e.g., the communication network 112).
- the communication interface 206 may include one or more
- I/O input/output ports through which a connection, such an Ethernet connection, a fiber optic connection, a broadband cable connection, a telephone line connection, or other types of wired communication connection may be provided.
- a connection such an Ethernet connection, a fiber optic connection, a broadband cable connection, a telephone line connection, or other types of wired communication connection may be provided.
- communication interface 206 may also include a radio unit that may enable radio frequency communication.
- the authentication module 208 may provide or be in communication with one or more input devices to receive an input from a user for login to the computing device 200.
- the input devices may include one or more buttons, sliders, touchpads, keyboards, biometric input devices, cameras, fingerprint readers, and other similar input devices.
- the transitory identity module 212 may generate a transitory identity for the computing device 200.
- the transitory identity may be based on one or more dynamic aspects of the computing device 200, individually or in combination with other dynamic or static information.
- the dynamic aspects of the computing device 200 may include aspects of the medication delivery device that change relatively rapidly, such as a clock time, a chip state, a register state, or any other source of data based on a dynamic aspect of the medication delivery device.
- the hashing module 210 may generate hash of a transitory identity that is generated by the transitory identity module 212.
- the hash storage module 214 may include a memory device, or may communicate with the memory 204, to store a transitory identity generated by the transitory identity module 212 and/or a hash of a transitory identity generated by the hashing module 210.
- the transaction module 216 may enable communication related to a transaction (as well as other communications) with another computing device (for example, between the computing device 102 and the computing device 106).
- the transaction module 216 may include hardware and/or software configured to provide a streamlined communication and/or transaction process with the transaction server.
- the transaction module may include hardware and/or software configured to provide a streamlined communication related to a specific service provider, such as a so-called "1 -click" service or another streamlined communication/transaction process.
- FIGS. 3 A and 3B illustrate a system method 300 of authenticating a medication delivery device (e.g., the medication delivery devices 142, 144 and computing devices 184, 186, and 200 of FIGS. 1B-2) to a second computing device (e.g., the computing device 106, 116, 190-196, and 200 of FIGS. 1B-2), and vice versa, through interactions with a third computing device (e.g., 108, 188, and 200 of FIGS. 1B-2) according to some embodiments.
- FIG. 3C illustrates a method 300a of operations executed by the medication delivery device as part of the method 300.
- FIG. 3D illustrates a method 300b of operations executed by the second computing device as part of the method 300.
- 3E illustrates a method 300c of operations executed by the third computing device as part of the method 300.
- the method 300 may be implemented by a processor (e.g., the processor 202 and/or the like) of a medication delivery device (i.e., a device processor), a processor of a second computing device, and a processor of a third computing device.
- a processor e.g., the processor 202 and/or the like
- a medication delivery device i.e., a device processor
- a processor of a second computing device i.e., a device processor
- a processor of a third computing device i.e., a processor of a third computing device.
- a medication delivery device e.g., the medication delivery devices 142, 144) and a second computing device (e.g., the computing devices 106, 116) may establish accounts with a third computing device (e.g., the computing device 108), which may, in some embodiments, function as an authentication server.
- the medication delivery device and the second computing device may be configured with (e.g., initialize, configure, install, etc.) one or more modules enabling each computing device to perform the operations of the method 300 (e.g., the modules 206-216).
- establishing an account with the third computing device may include determining and/or negotiating a communication path between the third computing device and the first/second computing device.
- each of the first and second computing devices may negotiate or determine a communication path with the third computing device that differs in one or more aspects.
- each computing device pair may use a different encryption method or protocol, communication protocol or application (e.g., hypertext markup language (HTML), short message service (SMS) text message), and the like.
- HTTP hypertext markup language
- SMS short message service
- a user may establish a plurality of accounts with a plurality of authentication servers without limitation.
- Various embodiments may provide a defense against the penetration and compromise of communications between any two of the medication delivery device, the second computing device, and the third computing device.
- an attacker performing a man-in-the-middle (MITM) attack may secretly relay communications between two network devices, and may monitor and/or alter those communications.
- Various embodiments would require an attacker to simultaneously compromise three communication pathways nearly simultaneously: a first
- a processor of a medication delivery device may obtain a first transitory identity.
- the processor of the medication delivery device may obtain the first transitory identify by generating the first transitory identity (e.g., operation 302a).
- the processor of the medication delivery device may obtain a generated first transitory identity from a third computing device (e.g., the computing device 108) (e.g., operation 302b).
- the processor of the third computing device may push the generated first transitory identity to the medication delivery device (e.g., the third computing device may send the generated transitory identity to the medication delivery device without a request from the medication delivery device).
- the processor of the medication delivery device may pull the first transitory identity from the third computing device.
- the medication delivery device may send a request for the transitory identity to the third computing device, and the third computing device may send the transitory identity to the medication delivery device in response to the request.
- a processor of the second computing device may generate a second transitory identity (e.g., operation 304a).
- the processor of the second computing device may obtain the first transitory identify by generating the second transitory identity.
- the processor of the second computing device may obtain a second transitory identity from the third computing device (e.g., operation 304b).
- the processor of the third computing device may push the second transitory identity to the second computing device.
- the processor of the second computing device may pull the generated second transitory identity from the third computing device.
- a processor of the third computing device may generate a third transitory identity.
- the processor of the medication delivery device may send the first transitory identity to the second computing device and the third computing device.
- the transmission of the first transitory identity to the second computing device may be via any open communication link, such as a communication link that is in the process of being established between the medication delivery device and the second computing device.
- the communication may be encrypted, and thus the transmission may be accomplished after an initial encryption key has been exchanged.
- the communication link may be open (i.e., not encrypted) so that the computing devices can authenticate one another via various embodiments before exchanging encryption keys.
- the transmission of the first transitory identity to the third computing device may be via another communication link, which may be encrypted or not encrypted. In some embodiments, this transmission may be via a public network, such as the Internet. In some embodiments, this transmission may be via private or dedicated communication link.
- the processor of the second computing device may send the second transitory identity to the medication delivery device and the third computing device.
- the transmission of the second transitory identity to the medication delivery device may be via any open communication link, such as the communication link that is in the process of being established between the medication delivery device and the second computing device by which the second computing device receives the first transitory identity.
- the communication may be encrypted, and thus the transmission may be accomplished after an initial encryption key has been exchanged.
- the communication link may be open (i.e., not encrypted) so that the computing devices can authenticate one another via various embodiments before exchanging encryption keys.
- the transmission of the second transitory identity to the third computing device may be via another communication link, which may be encrypted or not encrypted.
- this transmission may be via a public network, such as the Internet.
- this transmission may be via private or dedicated communication link.
- the processor of the third computing device may send the third transitory identity to the medication delivery device and the second computing device.
- the transmission of the third transitory identity to the first and second computing devices may be via the same
- Such communication links may be encrypted or not encrypted.
- this transmission may be via a public network, such as the Internet. In some embodiments, this transmission may be via private or dedicated communication link.
- the processor of the medication delivery device may send an authentication query including the second transitory identity to the third computing device.
- the medication delivery device may send the authentication query automatically, such as in the background.
- the medication delivery device may send the authentication query in response to a command.
- the authentication request may include a small unit of information that may be stored at the medication delivery device, such as text, an image, biometric information, or other readily personalizable information.
- the medication delivery device may include the small unit of information in or with the authentication request.
- the processor of the second computing device may send an authentication query including the first transitory identity to the third computing device.
- the processor of the third computing device may determine whether the second transitory identity from the medication delivery device matches the second transitory identity from the second computing device. In some embodiments, the third computing device may perform this operation by a direct comparison of the two received transitory identities (e.g., a subtraction and check for remainder). In some embodiments, the third computing device may perform this operation by performing a hash function on one or both of the received transitory identities and determining whether the two match by comparing the results of the hash function(s).
- the processor of the third computing device may send an indication of authentication failure of the second computing device to the medication delivery device and/or the second computing device in block 322.
- the processor of the third computing device may send an indication of authentication success of the second computing device to the medication delivery device and/or the second computing device in block 326.
- the processor of the third computing device may determine whether the first transitory identity from the second computing device matches the first transitory identity from the medication delivery device.
- the processor of the third computing device may send an indication of authentication failure of the medication delivery device to the medication delivery device and/or the second computing device in block 324.
- the processor of the third computing device may send an indication of authentication success of the second computing device to the medication delivery device and/or the second computing device in block 328.
- the indications of authentication failure or authentication success may include a very short message or data structure, and some implementations, the indication may include a single bit, such as a 0 or a 1, indicating authentication failure or authentication success, respectively.
- the processor of the third computing device may send an instruction to the medication delivery device and the second computing device to obtain new transitory identities in block 330.
- the instruction may include an instruction to generate a new transitory identity at the first and second computing devices, respectively.
- the instruction may include an instruction to each of the first and second computing devices respectively to obtain a new transitory identity from the third computing device.
- the third computing device may generate and send a new transitory identity for each of the first and second computing devices without a request from either the first or second computing device.
- the processors of the first, second, and third computing devices may then perform the operations of blocks 302, 304, and 306 of the methods 300, 300a, 300b and 300c, respectively.
- the first, second, and third computing devices may periodically repeat the operations of the methods 300, 300a, 300b and 300c to perform continuous, periodic background authentication of the other computing devices.
- the processors of the first, second, and third computing devices may periodically repeat the operations of the methods 300, 300a, 300b and 300c with or without an instruction or other message from another of the first, second, and third computing devices.
- the methods 300, 300a, 300b and 300c substantially reduces the possibility that any of the transitory identities may be intercepted and used to impersonate one of the computing devices.
- the third computing device may perform the operations of block 330 and 300c in the event of an authentication failure of the medication delivery device and/or the second computing device 332.
- the third computing device may respond to an authentication failure of a computing device as an indication of a compromise or an attempted compromise of a participating computing device, or of the system.
- the third computing device may instruct all participating computing devices to obtain new transitory identities.
- computing devices that are configured to participate in the system may be able to obtain a new transitory identity
- computing devices that are not so configured - such as cyber intruders and other adversaries - may be unable to obtain a new transitory identity, and will be effectively blocked from further communication using the system.
- the processors of the first, second, and third computing devices may repeat their respective operations at a frequency that is less than a determined time required for an attacker to obtain and use the first and/or second transitory identities.
- the duration of the first, second, and/or third transitory identities (the "validity durations") may be set to be shorter than the time required by an attacker to obtain and exploit one or more of the transitory identities.
- the processor of the first and/or second third computing devices may obtain a new transitory identity in response to determining that the validity duration of the respective first and/or second transitory identity has expired.
- the processor of the third computing device may generate a new transitory identity for the first, second, and/or third computing devices in response to determining that the validity duration of the respective first and/or second transitory identity has expired.
- FIG. 3C illustrates a method 300a of operations executed by the medication delivery device as part of the method 300.
- the method 300a may be implemented by a processor (e.g., the processor 202 and/or the like).
- the processor of the medication delivery device may perform operations of like numbered blocks of the method 300.
- the processor of medication delivery device may perform a security action.
- the processor of the medication delivery device may stop performing the information transaction with the second computing device.
- the processor of the medication delivery device may also block further communication with the second computing device.
- the processor of the medication delivery device may store an indication of the authentication success in block 338.
- the processor of the medication delivery device may conduct the information transaction with the second computing device.
- the processor of the medication delivery device may then obtain a new transitory identity in block 302.
- the processor of the medication delivery device may determine that a validity duration of the transitory identity has expired, and in response to determining that the validity duration of the transitory identity has expired the processor of the medication delivery device may obtain a new transitory identity in block 302.
- the processor of the medication delivery device may receive an instruction from the third computing device to obtain a new transitory identity. The processor of the medication delivery device may then perform the operations of block 302.
- FIG. 3D illustrates a method 300b of operations executed by the second computing device as part of the method 300.
- the method 300b may be implemented by a processor (e.g., the processor 202 and/or the like).
- the processor of the second computing device may perform operations of like numbered blocks of the method 300.
- the processor of the second computing device may determine whether an indication of authentication success or an indication of authentication failure is or has been received from the third computing device. In some optional embodiments, the processor may also determine whether no indication is received from the third computing device.
- the processor of the second computing device may store an indication of the
- the processor of second computing device may perform a security action.
- the processor of the second computing device may stop performing the information transaction with the medication delivery device.
- the processor of the second computing device may also block further communication with the medication delivery device.
- the processor of the second computing device may store an indication of the authentication success in block 350.
- the processor of the second computing device may conduct the information transaction with the medication delivery device.
- the processor of the second computing device may then obtain a new transitory identity in block 304.
- the processor of the second computing device may determine that a validity duration of the second transitory identity has expired, and in response to determining that the validity duration of the second transitory identity has expired the processor of the second computing device may obtain a new transitory identity in block 304.
- the processor of the second computing device may receive an instruction from the third computing device to obtain a new transitory identity. The processor of the second computing device may then perform the operations of block 304.
- FIG. 3E illustrates a method 300c of operations executed by the third computing device as part of the method 300.
- the method 300c may be implemented by a processor (e.g., the processor 202 and/or the like).
- the device processor of the third computing device may perform operations of like numbered blocks of the method 300.
- the processor of the third computing device may receive an authentication query from the medication delivery device.
- the processor of the third computing device may determine whether the second transitory identity from the medication delivery device matches the second transitory identity from the second computing device, as described above.
- the processor of the third computing device may receive an authentication query from the second computing device.
- the processor of the third computing device may determine whether the first transitory identity from the second computing device matches the first transitory identity from the medication delivery device, as described above.
- FIG. 4A illustrates a method 400 of authenticating a computing device and authorizing an information transaction of a medication delivery device (e.g., the medication delivery devices 142, 144 of FIG. IB) with a second computing device (e.g., the computing device 106, 116, 190-196, and 200 of FIGS. 1B-2), and vice versa, through interactions with a third computing device (e.g., 108, 188, and 200 of FIGS. 1B-2) according to some embodiments.
- FIG. 4B illustrates a method 400a of operations executed by the medication delivery device as part of the method 400.
- FIG. 4C illustrates a method 400b of operations executed by the second computing device as part of the method 400.
- the method 400 may be implemented by a processor (e.g., the processor 202 and/or the like) of the computing device (i.e., a device processor).
- the processor of a medication delivery device e.g., the medication delivery devices 142, 144 may send information identifying a user account to a second computing device (e.g., the computing device 106), such as via a third computing device (e.g., the computing device 108).
- the processor of the second computing device may confirm the correlation of the identifying information to an account of the medication delivery device.
- the second computing device may send a message indicating the confirmation to the medication delivery device.
- the identifying information used in block 402 may include a previously-used transitory identity used in communication with the second computing device, such as a most-recently used or last-used transitory identity, that was used for communication between the first and second computing device.
- a previously -used transitory identity may be used for initial identification purposes only, and may not be used to authenticate the identity of the first communication device.
- use of the previously-used transitory identity may enable enhanced identification (but not authentication) of a purported identity of the medication delivery device.
- the previously-used transitory identity may be used for two-factor (or multi- factor) identification of the medication delivery device. Further, since the previously- used transitory identity may not be displayed or presented to a user of the medication delivery device, by virtue of being extremely difficult to obtain from the medication delivery device, using the previously-used transitory identity to initially identify the medication delivery device may be more secure than a user name and password, which may be observed for example by observation of a display of the first being device.
- the previously-used transitory identify may also be used to rapidly recover a state of a previous communication (e.g., a website being browsed, a message being read, an image being viewed, etc.).
- state information may be encoded in the transitory identity.
- the identifying information may include a traditional username and password or other conventional identifying information. In such embodiments, the identifying information may be used only for the purpose of identifying the purported identity of the first communication device, and not for authentication of the medication delivery device or the second computing device.
- a processor of the medication delivery device may send a request to the second computing device to perform an information transaction.
- the information transaction may include the provision of information to an electronic health records service or a public records service, a voter registration database or voting system, an online purchase, a banking transaction, or another similar exchange of information or electronic transaction.
- a processor of the second computing device may send a request to the third computing device to confirm the identity of the medication delivery device.
- the processor of the second computing device may send a request for a transitory identity to the medication delivery device.
- the request may include an instruction to generate, or may trigger the generation of, a new transitory identity by the medication delivery device.
- the request may include an instruction to obtain a new transitory identity from the third computing device. This transmission of the transitory identity may be accomplished by or using any of the communication channels and methods described with reference to the method 300.
- the processor of the medication delivery device may send a transitory identity from the medication delivery device to the second computing device and to the third computing device. This transmission of the transitory identity may be accomplished by or using any of the communication channels and methods described with reference to the method 300.
- the second computing device may send the transitory identity received from the medication delivery device to the third computing device.
- the third computing device thus may receive a transitory identity generated by the medication delivery device from the medication delivery device and, along a separate
- the medication delivery device's transitory identity from the second computing device.
- This transmission of the transitory identity may be accomplished by or using any of the communication channels and methods described with reference to the method 300.
- a processor of the third computing device may compare the transitory identity of the medication delivery device received from the medication delivery device and the transitory identity of the medication delivery device received from the second computing device.
- the processor of the third computing device may determine whether the transitory identities match.
- the processor of the third computing device may send an indication of confirmation failure of the medication delivery device in block 420.
- This transmission of the indication of confirmation failure may be accomplished by or using any of the communication channels and methods described with reference to the method 300 for similar transmissions.
- the processor of the third computing device may send the failure notification to the second computing device.
- the processor of the third computing device may send a failure notification to a third party, such as to a computing device of an information security officer.
- the third computing device may perform an action based on the medication delivery device confirmation failure.
- the processor of the third computing device may send a failure notification to an email on record that is associated with the medication delivery device, to notify a registered user of the medication delivery device of a possible compromise of the medication delivery device.
- the processor of the third computing device may determine whether more than one computing device purporting to be the medication delivery device. Detection of more than one computing device purporting to be the medication delivery device may indicate that the medication delivery device has been cloned or otherwise copied in some manner.
- the third computing device may send an alert, may de-authorize the medication delivery device from participating in the system, may lock the medication delivery device out of the system, and/or may send command deactivating the medication delivery device.
- the processor of the third computing device may send an indication of the confirmation success of the medication delivery device in block 422. This transmission of the indication of confirmation success may be accomplished by or using any of the communication channels and methods described with reference to the method 300 for similar transmissions. In some embodiments, the processor of the third computing device may send an indication of the confirmation success to the second computing device and to the medication delivery device.
- the participating computing devices may perform operations to enable the authentication of the participation of one or more of the participating computing devices (e.g., the medication delivery device, the second computing device, etc.).
- authenticating the participation of one or more of the participating computing devices may enable an information transaction to be non-reputable.
- the operations enabling authentication of the participation of one or more of the participating computing devices may serve as a substitute for other traditional operations authenticating a computing device's (or a user's) participation in an information transaction, such as obtaining a signature, requiring entry of a password or code, or requiring an additional user interaction (e.g., "clicking" on a confirmation button).
- the processor of the medication delivery device may generate a text string, and may generate an encrypted version of the text string.
- the medication delivery device may send the generated text string unencrypted to the second computing device. This transmission may be accomplished by or using any of the communication channels and methods described with reference to the method 300 for similar transmissions.
- the processor of the medication delivery device may send the encrypted text string to the third computing device. This transmission may be accomplished by or using any of the communication channels and methods described with reference to the method 300 for similar transmissions.
- the processor of the third computing device may decrypt the encrypted texturing received from the first communication device.
- the processor the third computing device may re -encrypt the decrypted text string and may send the re-encrypted text string to the second computing device. This transmission may be accomplished by or using any of the communication channels and methods described with reference to the method 300 for similar transmissions.
- the encrypted text string received by the third computing device may be encrypted according to an encryption method or protocol negotiated or agreed to between the medication delivery device and the third computing device. Further, the third computing device may re-encrypt the text string according to an encryption method or protocol negotiated or agreed to between the second computing device and the third computing device.
- the processor of the second computing device may decrypt the re-encrypted text string received from the third computing device.
- the processor of the second computing device may have now received the unencrypted text string directly from the medication delivery device, and the re- encrypted medication delivery device's text string from the third computing device.
- the processor of the second device may compare the text string from the medication delivery device and the text string from the third computing device.
- the processor of the second computing device may determine whether the text strings match. [0156] In response to determining that the text strings do not match (i.e.,
- the processor of the second computing device may send an indication that the participation of the medication delivery device in the information transaction is not authenticated in block 440.
- This transmission may be accomplished by or using any of the communication channels and methods described with reference to the method 300 for similar transmissions.
- the operations of block 440 may include determining that the participation of the medication delivery device in the information transaction is not authenticated in response to determining that the text strings do not match, and sending the indication that the participation of the medication delivery device in the information transaction is not authenticated.
- the second computing device may store as part of an audit trail the indication that the participation of the medication delivery device is not authenticated.
- the third computing device may store as part of an audit trail the indication that the participation of the medication delivery device is not authenticated.
- the processor of the second computing device may prevent the performance of the information transaction. In some embodiments, the processor of the second computing device may prevent the completion of one or more operations of the information transaction.
- the processor of the second computing device may send an indication that the participation of the medication delivery device in the information transaction is authenticated in block 444.
- This transmission may be accomplished by or using any of the communication channels and methods described with reference to the method 300 for similar transmissions.
- the operations of block 444 may include determining that the participation of the medication delivery device in the information transaction is authenticated in response to determining that the text strings match, and sending the indication that the participation of the medication delivery device in the information transaction is authenticated.
- the second computing device may store as part of an audit trail the indication that the participation of the medication delivery device is authenticated.
- the third computing device may store as part of an audit trail the indication that the participation of the medication delivery device is authenticated.
- the processor of the second computing device may enable the performance of the information transaction. In some embodiments, the processor of the second computing device may complete the information transaction.
- FIG. 4B illustrates a method 400a of operations executed by the medication delivery device as part of the method 400.
- the method 400a may be implemented by a processor (e.g., the processor 202 and/or the like).
- the processor of the medication delivery device may perform operations of like numbered blocks of the method 400.
- the processor of the medication delivery device may receive a confirmation from the second computing device of the correlation of the identifying information to the medication delivery device account.
- the processor of the medication delivery device may receive from the second computing device a request for the medication delivery device's transitory identity.
- the processor may perform the operations of blocks 424-428.
- the processor may perform the information transaction in block 456.
- FIG. 4C illustrates a method 400b of operations executed by the second computing device as part of the method 400.
- the method 400a may be implemented by a processor (e.g., the processor 202 and/or the like).
- the processor of the second computing device may perform operations of like numbered blocks of the method 400.
- the processor of the second computing device may receive information identifying the user account from the medication delivery device.
- the processor of the second computing device may receive from the medication delivery device a request to perform an information transaction.
- the processor of the second computing device may receive a transitory identity from the medication delivery device (i.e., the first device's transitory identity).
- the processor of the second computing device may determine whether an indication of confirmation success of the medication delivery device or confirmation failure of the medication delivery device is or has been received.
- the processor may stop performing the operations of method 400 and 400b in block 464.
- the processor may proceed with the information transaction.
- the processor may receive the unencrypted text string from the medication delivery device.
- the processor may receive the re-encrypted text string from the third computing device.
- the processor of the second computing device may compare the text string from the medication delivery device and the text string from the third computing device. In various embodiments, the processor of the second computing device may decrypt the re-encrypted text string received from the third computing device. In determination block 438, the processor of the second computing device may determine whether the text strings match (i.e., whether the text string from the medication delivery device matches the text string from the third computing device).
- the processor of the second computing device may send an indication that the participation of the medication delivery device in the information transaction is not authenticated in block 440.
- the processor of second computing device may prevent the performance of the information transaction. In some embodiments, the processor of the second computing device may prevent the completion of one or more operations of the information transaction.
- the processor of the second computing device may send an indication that the participation of the medication delivery device in the information transaction is authenticated in block 444.
- FIG. 4D illustrates a method 400c of operations executed by the third computing device as part of the method 400.
- the method 400c may be implemented by a processor (e.g., the processor 202 and/or the like).
- the processor of the third computing device may perform operations of like numbered blocks of the method 400.
- the processor of the third computing device may receive from the medication delivery device the transitory identity of the medication delivery device.
- the processor of the third computing device may receive the medication delivery device's transitory identity from the second computing device.
- the processor of the third computing device may compare the transitory identity of the medication delivery device received from the medication delivery device and the transitory identity of the medication delivery device received from the second computing device.
- the processor the third computing device may receive the encrypted text string from the medication delivery device.
- the processor of the third computing device may determine whether the participation of the medication delivery device in the information transaction is authenticated or not authenticated.
- the processor of the third computing device may store an indication of the authentication failure in block 478.
- the processor of the third computing device may store an indication of the authentication success in block 480.
- FIG. 5A illustrates a method 500 of authenticating a medication delivery device (e.g., the computing device 102, 104, 184, 186, and 200 of FIGS. 1B-2) with a second computing device (e.g., the computing device 106, 190-196, and 200 of FIGS. 1B-2), and vice versa, through interactions with a third computing device (e.g., 108, 188, and 200 of FIGS. 1B-2) according to some embodiments.
- the method 500 may be implemented by a processor (e.g., the processor 202 and/or the like) of the computing device (i.e., a device processor).
- the device processor may perform operations of like-numbered blocks of the method 300.
- a processor of an electronic security system may monitor a communication system.
- the electronic security system may perform network monitoring, key logging, intrusion detection, traffic analysis, or another operation to perform network monitoring or security functions.
- the processor of the electronic security system may send an indication of the electronic intruder or unauthorized user to a third computing device (e.g., the third computing device 108) in block 506.
- a third computing device e.g., the third computing device 108
- a processor of the third computing device may receive the indication of the electronic intruder or unauthorized user from the electronic security system.
- the processor of the third computing device may send an instruction to a medication delivery device (e.g., the computing device 102 and 104) and the second computing device (e.g., the computing device 106) to obtain new transitory identities in block 330.
- a medication delivery device e.g., the computing device 102 and 104
- the second computing device e.g., the computing device 106
- Processors of the first and second computing devices may then perform the operations of blocks 302 and 304.
- the third computing device may send the instructions to the medication delivery device and the second computing device in the background, transparent to any end user (for example, without the medication delivery device or the second computing device presenting to a respective user any indication of receiving the instruction from the third computing device).
- the third computing device may instruct the first and second computing devices, as well as any other computing devices participating in the system, to obtain a new transitory identity and thus perform a "global reset" that may block the intruder or unauthorized user from accessing the communication system.
- the speed at which the third computing device may send the instruction to obtain new transitory identities to various computing devices, and at which of the various computing devices may obtain a respective new transitory identity may be limited only by the operating speed of each computing device and any network communication delay (e.g., communication latency).
- An amount of time required for sending the instructions to the first and second computing devices and for the first and second computing devices to obtain new transitory identities is thus shorter than, for example, an amount of time required for a conventional certificate authority to issue new certificates to all participating users.
- the method 500 does not require manual operations by a user of the first or second computing device, such as a password reset. Indeed, as described above, a user of the first or second computing device may continue to use existing credentials, such as a username and password - even after a security breach - because the existing credentials may be used to identify the user but not be used for authentication purposes.
- the electronic security system may be configured to receive a command or an indication that a computing device should be de-authorized from access to the communication system.
- the electronic security system may be a component or an element of a network authorization system, or a human resources system, or a system that provides a list of authorized users of the communication system, or another similar system.
- the electronic security system may receive a command or another message indicating that an authorization of a computing device should be removed or blocked.
- the third computing device in response to receiving an indication that an unauthorized user or electronic intruder has been detected, that a computing device authorization should be removed or blocked, or another similar indication, the third computing device may send an instruction to the medication delivery device and/or the second computing device to obtain a new transitory identity.
- FIG. 5B illustrates a method 500a of operations executed by the third computing device as part of the method 500.
- the method 500a may be implemented by a processor (e.g., the processor 202 and/or the like).
- the processor of the third computing device may receive from the electronic security system an indication of the electronic intruder or unauthorized user.
- the processor of the third computing device may send an instruction to the medication delivery device (e.g., the computing device 102 and 104) to obtain a new transitory identity.
- the processor of the medication delivery device may proceed to block 302 of the method 300 (FIGS. 3A-3C).
- the processor of the third computing device may send an instruction to the second computing device (e.g., the computing device 106) to obtain a new transitory identity.
- the processor of the second computing device may proceed to block 304 of the method 300 (FIGS. 3A, 3B, and 3D).
- FIG. 6A illustrates a method 600 of authenticating a medication delivery device (e.g., the computing device 102, 104, 184, 186, and 200 of FIGS. 1B-2) to a second computing device (e.g., the computing device 106, 190-196, and 200 of FIGS. 1B-2), and vice versa, through interactions with a third computing device (e.g., 108, 188, and 200 of FIGS. 1B-2) according to some embodiments.
- FIG. 6B illustrates a method 600a of operations executed by a processor of the medication delivery device as part of the method 600.
- FIG. 6C illustrates a method 600b of operations executed by a processor of the second computing device as part of the method 600.
- FIG. 6D illustrates a method 600c of operations executed by a processor of the third computing device as part of the method 600.
- the processor of the medication delivery device may send the small unit of static information to the third computing device.
- the small unit of static information may include a human-perceivable indicator such as, for example, an image, an icon, a sound, a rhythm or rhythmic pattern, haptic feedback instructions, or another similar unit of information that may be presented by a computing device.
- the processor of the third computing device may send the small unit of static information to the second computing device.
- the third computing device may send the small unit of static information together with, in parallel with, before, or after, the indication of the authentication success of the medication delivery device that the third computing device may send to the second computing device in block 328.
- the processor of the second computing device may send the small unit of static information to the medication delivery device.
- processor of the medication delivery device may present the small unit of static information.
- presenting the small unit of static information may include presenting a human-perceivable indication, instructions for which are included in the small unit of static information.
- the human-perceivable indication may include a picture (such as an image, icon, emoji, etc.), a sound (such as music, an alert noise, a rhythm or rhythmic pattern, etc.), a vibration (such as by a haptic feedback device), or another human-perceivable indication.
- presenting the small unit of static information may include a picture (such as an image, icon, emoji, etc.), a sound (such as music, an alert noise, a rhythm or rhythmic pattern, etc.), a vibration (such as by a haptic feedback device), or another human-perceivable indication.
- presenting the small unit of static information may include a
- the small unit of static information may be selected by, created by, or personalized by a user of the medication delivery device such that the small unit of static information is readily recognizable when presented by the medication delivery device.
- the presentation of the human-perceivable indication may provide a readily perceived indication that the second computing device received the small unit of static information from the third computing device.
- the presentation of the human- perceivable indication by the medication delivery device may provide an additional indication to the medication delivery device of the identity of the second computing device, by verifying the receipt of the small unit of static information by the second computing device from the third computing device.
- the second computing device may receive the small unit of static information from the third computing device, and the second computing device may send the small unit of static information directly to the medication delivery device to indicate that the second computing device is an authenticated participant in the communication.
- the third computing device having received the small image from the medication delivery device, and having authenticated the second computing device, may send the small image to the second computing device.
- the second computing device may then send the image to the medication delivery device, for example, to be displayed by the medication delivery device to provide a visual indication of the authentication of the second computing device.
- the use of such a small unit of static information to provide an indication of the authentication of the second computing device may aid in mitigating, among other things, spear phishing attacks, man-in-the-middle attacks, and other similar communication attacks involving interception of communication or impersonation of a computing device.
- an e-commerce server may receive from the third computing device (e.g., functioning as an authentication server) a small image file received by the third computing device from the medication delivery device (e.g., a user device). The e-commerce server may then send the small image file to the medication delivery device to be included in the website of the e-commerce service, or to provide some other visual indication displayed on the medication delivery device of the authentication of the second computing device.
- the image encoded by the small image file may be personalized by, and thus readily recognized by, a user of the medication delivery device.
- the simple visual indication is typically generic such that the simple visual indication is easy to copy and use in a fake or malicious services, such as a phishing site.
- the presentation of the small static unit of information in various embodiments represents an improvement over current security system by providing a readily perceived and personalized indication that the second computing device received the small unit of static information from the third computing device. This provides an additional indication to a user of the medication delivery device that the second computing device is or has been authenticated by the third computing device.
- FIG. 6B illustrates a method 600a of operations executed by the medication delivery device as part of the method 600.
- the method 600a may be implemented by a processor (e.g., the processor 202 and/or the like).
- the processor of the medication delivery device may perform operations of like numbered blocks of the methods 300 and 300a.
- the processor of the medication delivery device may send the small unit of static information to the third computing device.
- the processor of the medication delivery device may receive the small unit of static information.
- the processor of the medication delivery device may present the small unit of static information.
- the processor of the medication delivery device may then perform the operations of block 340 and optional block 342 as described.
- FIG. 6C illustrates a method 600b of operations executed by the second computing device as part of the method 600.
- the method 600b may be implemented by a processor (e.g., the processor 202 and/or the like).
- the processor of the second computing device may perform operations of like numbered blocks of the methods 300 and 300b.
- the processor of the second computing device may receive the small unit of static information from the third computing device.
- the processor of the second computing device may send the small unit of static information to the medication delivery device.
- the processor may then perform the operations of block 352 and optional block 354 as described.
- FIG. 6D illustrates a method 600c of operations executed by the third computing device as part of the method 600.
- the method 600c may be implemented by a processor (e.g., the processor 202 and/or the like).
- the processor of the third computing device may perform operations of like numbered blocks of the methods 300 and 300d.
- the processor of the third computing device may receive the small unit of static information from the medication delivery device.
- the processor of the third computing device may send the small unit of static information from the third computing device to the second computing device.
- Various embodiments provide a system that may authenticate the identity of the computing device in a communication system based on dynamic information of each computing device, in contrast to the current paradigm of shared secrets and static information.
- Various embodiments improve the operation of each participating computing device by dramatically improving the security of communications among the participating computing devices.
- the transitory identity of each computing device changes periodically, and each computing device is in periodic communication with other computing devices sending and/or receiving new transitory identities
- various embodiments improve the function of a communication network or an electronic communication system by improving the security of communications.
- Various embodiments also improve the function of any communication network by reliably authenticating the identity of a participating computing device without relying on static identification information, such as a shared secret, that may be vulnerable to attack by access and/or copying.
- Various embodiments may improve the function of each participating computing device, as well as the overall communication system, by enabling the authentication of the participating communication devices.
- Various embodiments improve the function of each participating computing device in a wide range of communications and/or information transaction contexts, including healthcare record management, secure communications (e.g., government, business, intelligence community, etc.), public records management systems, voting systems, financial services systems, security brokerage systems, and many others.
- Various embodiments may also improve the function of the Internet of Things, and communication among various IoT devices or among IoT devices and an IoT device controller, such as a router, server, IoT hub, or another similar device.
- various embodiments when implemented in an IoT environment, may be of particular use in preventing distributed denial of service (DDoS) attacks, without human intervention.
- Various embodiments may improve the function of a communication system by enabling the performance of a non-reputable information transaction in which, because the participation of specific computing devices may be authenticated, the authentication procedure may generate evidence creating a presumption that a participant actually participated in the information transaction.
- FIG. 7 is a component block diagram of a mobile wireless communication device 700 suitable for implementing various embodiments.
- the mobile wireless communication device 700 may include a processor 702 coupled to a touchscreen controller 706 and an internal memory 704.
- the processor 702 may be one or more multi-core integrated circuits designated for general or specific processing tasks.
- the internal memory 704 may be volatile or non-volatile memory, and may also be secure and/or encrypted memory, or unsecure and/or unencrypted memory, or any combination thereof.
- the touchscreen controller 706 and the processor 702 may also be coupled to a touchscreen panel 712, such as a resistive-sensing touchscreen, capacitive-sensing touchscreen, infrared sensing touchscreen, etc. Additionally, the display of the mobile wireless communication device 700 need not have touch screen capability.
- the mobile wireless communication device 700 may have two or more radio signal transceivers 708 (e.g., Peanut, Bluetooth, Zigbee, Wi-Fi, radio frequency (RF), etc.) and antennae 710, for sending and receiving communications, coupled to each other and/or to the processor 702.
- the transceivers 708 and antennae 710 may be used with the above-mentioned circuitry to implement the various wireless
- the mobile wireless communication device 700 may include one or more cellular network wireless modem chip(s) 716 coupled to the processor and antennae 710 that enables communication via two or more cellular networks via two or more radio access technologies.
- the mobile wireless communication device 700 may include a peripheral wireless device connection interface 718 coupled to the processor 702.
- the peripheral wireless device connection interface 718 may be singularly configured to accept one type of connection, or may be configured to accept various types of physical and communication connections, common or proprietary, such as USB, FireWire,
- the peripheral wireless device connection interface 718 may also be coupled to a similarly configured peripheral wireless device connection port (not shown).
- the mobile wireless communication device 700 may also include speakers 714 for providing audio outputs.
- the mobile wireless communication device 700 may also include a housing 720, constructed of a plastic, metal, or a combination of materials, for containing all or some of the components discussed herein.
- the mobile wireless communication device 700 may include a power source 722 coupled to the processor 702, such as a disposable or rechargeable battery.
- the rechargeable battery may also be coupled to the peripheral wireless device connection port to receive a charging current from a source external to the mobile wireless communication device 700.
- the mobile wireless communication device 700 may also include a physical button 724 for receiving user inputs.
- the mobile wireless communication device 700 may also include a power button 726 for turning the mobile wireless communication device 700 on and off.
- FIG. 8 illustrates an example laptop computer 800.
- the computer 800 generally includes a processor 801 coupled to volatile memory 802 and a large capacity nonvolatile memory, such as a disk drive 803.
- the computer 800 may also include a compact disc (CD) and/or DVD drive 804 coupled to the processor 801.
- the computer 800 may also include a number of connector ports coupled to the processor 801 for establishing data connections or receiving external memory devices, such as a network connection circuit 805 for coupling the processor 801 to a network.
- the computer 800 may also include a display 807, a keyboard 808, a pointing device such as a trackpad 810, and other similar devices.
- FIG. 9 illustrates an example network element, server device 900.
- the server device 900 may typically include a processor 901 coupled to volatile memory 902 and a large capacity nonvolatile memory, such as a disk drive 903.
- the server device 900 may also include a peripheral memory access device such as a floppy disc drive, compact disc (CD) or digital video disc (DVD) drive 906 coupled to the processor 901.
- a peripheral memory access device such as a floppy disc drive, compact disc (CD) or digital video disc (DVD) drive 906 coupled to the processor 901.
- the server device 900 may also include network access ports 904 (or interfaces) coupled to the processor 901 for establishing data connections with a network, such as the Internet and/or a local area network coupled to other system computers and servers.
- a network such as the Internet and/or a local area network coupled to other system computers and servers.
- the server device 900 may include additional access ports, such as USB, Firewire, Thunderbolt, and the like for coupling to peripherals, external memory, or other devices.
- the processors 702, 801, 901 may be any programmable microprocessor, microcomputer or multiple processor chip or chips that can be configured by software instructions (applications) to perform a variety of functions, including the functions of the various aspects described below. In some mobile devices, multiple processors 702 may be provided, such as one processor dedicated to wireless communication functions and one processor dedicated to running other applications. Typically, software applications may be stored in the internal memory 704, 802, 902 before they are accessed and loaded into the processor 702, 801, 901. The processor 702, 801, 901 may include internal memory sufficient to store the application software instructions.
- Various embodiments may be implemented in any number of single or multiprocessor systems.
- processes are executed on a processor in short time slices so that it appears that multiple processes are running simultaneously on a single processor.
- information pertaining to the current operating state of the process is stored in memory so the process may seamlessly resume its operations when it returns to execution on the processor.
- This operational state data may include the process's address space, stack space, virtual address space, register set image (e.g., program counter, stack pointer, instruction register, program status word, etc.), accounting information, permissions, access restrictions, and state information.
- a process may spawn other processes, and the spawned process (i.e., a child process) may inherit some of the permissions and access restrictions (i.e., context) of the spawning process (i.e., the parent process).
- a process may be a heavy-weight process that includes multiple lightweight processes or threads, which are processes that share all or portions of their context (e.g., address space, stack, permissions and/or access restrictions, etc.) with other processes/threads.
- a single process may include multiple lightweight processes or threads that share, have access to, and/or operate within a single context (i.e., the processor's context).
- DSP digital signal processor
- ASIC application specific integrated circuit
- a general-purpose processor may be a microprocessor, but, in the alternative, the processor may be any conventional processor, controller, microcontroller, or state machine.
- a processor may also be implemented as a combination of communication devices, e.g., a combination of a DSP and a microprocessor, a plurality of microprocessors, one or more
- microprocessors in conjunction with a DSP core, or any other such configuration.
- some blocks or methods may be performed by circuitry that is specific to a given function.
- the functions described may be implemented in hardware, software, firmware, or any combination thereof. If implemented in software, the functions may be stored as one or more instructions or code on a non- transitory computer-readable medium or non-transitory processor-readable medium.
- the operations of a method or algorithm disclosed herein may be embodied in a processor-executable software module, which may reside on a non-transitory computer-readable or processor-readable storage medium.
- Non-transitory computer- readable or processor-readable storage media may be any storage media that may be accessed by a computer or a processor.
- non-transitory computer-readable or processor-readable media may include RAM, ROM, EEPROM, FLASH memory, CD-ROM or other optical disk storage, magnetic disk storage or other magnetic storage devices, or any other medium that may be used to store desired program code in the form of instructions or data structures and that may be accessed by a computer.
- Disk and disc includes compact disc (CD), laser disc, optical disc, digital versatile disc (DVD), floppy disk, and Blu-ray disc where disks usually reproduce data magnetically, while discs reproduce data optically with lasers. Combinations of the above are also included within the scope of non-transitory computer-readable and processor-readable media.
- the operations of a method or algorithm may reside as one or any combination or set of codes and/or instructions on a non-transitory processor-readable medium and/or computer-readable medium, which may be incorporated into a computer program product.
Landscapes
- Engineering & Computer Science (AREA)
- Computer Security & Cryptography (AREA)
- Computer Networks & Wireless Communication (AREA)
- Signal Processing (AREA)
- Health & Medical Sciences (AREA)
- General Engineering & Computer Science (AREA)
- Computing Systems (AREA)
- Computer Hardware Design (AREA)
- Heart & Thoracic Surgery (AREA)
- Hematology (AREA)
- Life Sciences & Earth Sciences (AREA)
- Animal Behavior & Ethology (AREA)
- General Health & Medical Sciences (AREA)
- Public Health (AREA)
- Veterinary Medicine (AREA)
- Biomedical Technology (AREA)
- Anesthesiology (AREA)
- Vascular Medicine (AREA)
- Medical Treatment And Welfare Office Work (AREA)
Abstract
Des modes de réalisation comprennent des procédés, des systèmes et des dispositifs informatiques configurés pour mettre en œuvre les procédés d'authentification d'un dispositif informatique. Un processeur d'un dispositif d'administration de médicament peut obtenir une identité transitoire et peut envoyer l'identité transitoire à un deuxième dispositif informatique et à un troisième dispositif informatique. Un processeur du deuxième dispositif informatique peut envoyer l'identité transitoire au troisième dispositif informatique avec une demande d'authentification du dispositif d'administration de médicament. Le processeur du troisième dispositif informatique peut authentifier l'identité du dispositif d'administration de médicament lorsqu'il est déterminé que l'identité transitoire reçue du dispositif de distribution de médicament correspond à l'identité transitoire reçue en provenance du deuxième dispositif informatique.
Applications Claiming Priority (2)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
US15/694,745 | 2017-09-01 | ||
US15/694,745 US10419226B2 (en) | 2016-09-12 | 2017-09-01 | Systems and methods for device authentication |
Publications (1)
Publication Number | Publication Date |
---|---|
WO2019045914A1 true WO2019045914A1 (fr) | 2019-03-07 |
Family
ID=65525979
Family Applications (1)
Application Number | Title | Priority Date | Filing Date |
---|---|---|---|
PCT/US2018/043634 WO2019045914A1 (fr) | 2017-09-01 | 2018-07-25 | Systèmes et procédés d'authentification de dispositif |
Country Status (1)
Country | Link |
---|---|
WO (1) | WO2019045914A1 (fr) |
Citations (5)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
WO2012089967A1 (fr) * | 2010-12-30 | 2012-07-05 | France Telecom | Procédé d'authentification d'une première et d'une deuxième entités auprès d'une troisième entité |
US8510565B2 (en) * | 2008-03-06 | 2013-08-13 | China Iwncomm Co., Ltd. | Bidirectional entity authentication method based on the credible third party |
US8855312B1 (en) * | 2012-06-29 | 2014-10-07 | Emc Corporation | Mobile trust broker |
US20160156614A1 (en) * | 2014-11-28 | 2016-06-02 | Hcl Technologies Limited | Provisioning a device over an internet of things |
US9432198B2 (en) * | 2010-09-07 | 2016-08-30 | Siemens Aktiengesellschaft | Method for certificate-based authentication |
-
2018
- 2018-07-25 WO PCT/US2018/043634 patent/WO2019045914A1/fr active Application Filing
Patent Citations (5)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US8510565B2 (en) * | 2008-03-06 | 2013-08-13 | China Iwncomm Co., Ltd. | Bidirectional entity authentication method based on the credible third party |
US9432198B2 (en) * | 2010-09-07 | 2016-08-30 | Siemens Aktiengesellschaft | Method for certificate-based authentication |
WO2012089967A1 (fr) * | 2010-12-30 | 2012-07-05 | France Telecom | Procédé d'authentification d'une première et d'une deuxième entités auprès d'une troisième entité |
US8855312B1 (en) * | 2012-06-29 | 2014-10-07 | Emc Corporation | Mobile trust broker |
US20160156614A1 (en) * | 2014-11-28 | 2016-06-02 | Hcl Technologies Limited | Provisioning a device over an internet of things |
Similar Documents
Publication | Publication Date | Title |
---|---|---|
US10542002B2 (en) | Systems and methods for device authentication | |
US10419226B2 (en) | Systems and methods for device authentication | |
US20210350013A1 (en) | Security systems and methods for continuous authorized access to restricted access locations | |
US10057269B1 (en) | Systems and methods for device verification and authentication | |
US11063944B2 (en) | Out-of-band authentication based on secure channel to trusted execution environment on client device | |
CA2968051C (fr) | Systemes et procedes d'authentification a l'aide de multiples dispositifs | |
US10659444B2 (en) | Network-based key distribution system, method, and apparatus | |
Alnahari et al. | Authentication of IoT device and IoT server using security key | |
WO2019045914A1 (fr) | Systèmes et procédés d'authentification de dispositif | |
Mashima et al. | User-centric handling of identity agent compromise | |
Ligatti et al. | Dmitry Goldgof Department of Computer Science and Engineering University of South Florida {ligatti, goldgof}@ usf. edu {cagricetin, sengram, subils}@ mail. usf. edu | |
Zhang et al. | Glass and Samsung Galaxy Watch |
Legal Events
Date | Code | Title | Description |
---|---|---|---|
121 | Ep: the epo has been informed by wipo that ep was designated in this application |
Ref document number: 18849670 Country of ref document: EP Kind code of ref document: A1 |
|
NENP | Non-entry into the national phase |
Ref country code: DE |
|
122 | Ep: pct application non-entry in european phase |
Ref document number: 18849670 Country of ref document: EP Kind code of ref document: A1 |