Authenticating environmental sensor systems based on security keys in communication systems
View Patent ↗Systems, methods, and software for operating environmental sensor systems are provided herein. In one example, a method is provided that includes monitoring environmental conditions to detect a trigger condition and transferring an access request for delivery to a data system responsive to the trigger condition. The method also includes receiving a security challenge transferred by the data system, and in response, transferring a security answer for delivery to the data system that includes a hash result generated using one of the security keys, and receiving a security grant transferred by the data system indicating one of the hash results. The method also includes selecting an environmental sensor function based on an association with one of the security keys used to generate the hash result indicated in the security grant, performing the environmental sensor function to obtain sensor data, and transferring the sensor data for delivery to the data system.
1. A method of operating an environmental sensor system comprising a sensor portion to perform a plurality of environmental sensor functions and a communication portion that stores a plurality of security keys, the method comprising:
in the sensor portion, monitoring at least one environmental condition to detect a trigger condition related to the environmental condition;
in the communication portion, transferring an access request for delivery to a remote data system responsive to the detection of the trigger condition;
in the communication portion, receiving a security challenge transferred by the remote data system, and in response, transferring a security answer for delivery to the remote data system that includes at least one hash result generated using at least one of the security keys;
in the communication portion, receiving a security grant transferred by the remote data system indicating one of the hash results;
in the communication portion, selecting at least one of the environmental sensor functions based on an association of the environmental sensor functions with one of the security keys used to generate the hash result indicated in the security grant;
in the sensor portion, performing the selected environmental sensor function to obtain sensor data; and
in the communication portion, transferring the sensor data for delivery to the remote data system.
2. The method of claim 1 , wherein the environmental condition comprises at least one of a geographic location, an atmospheric condition, and a radio frequency (RF) status.
3. The method of claim 1 , wherein the sensor portion comprises ones of a gas concentration sensor, a temperature sensor, a pressure sensor, a humidity sensor, and a seismic sensor.
4. The method of claim 1 , wherein the access request comprises a request to perform an environmental sensor function to obtain sensor data.
5. The method of claim 1 , wherein the security challenge comprises at least one request for the at least one hash result generated using the at least one of the security keys.
6. The method of claim 1 , wherein the at least one of the security keys is selected based on at least the trigger condition.
7. The method of claim 1 , wherein more than one hash result is transferred in the security answer, each hash result generated using a different one of the security keys.
8. The method of claim 1 , wherein the remote data system selects the indicated one of the hash results based on a successful authentication of the indicated one of the hash results.
9. The method of claim 1 , wherein selecting the at least one of the environmental sensor functions based on an association of the environmental sensor functions with the one of the security keys used to generate the hash result indicated in the security grant comprises maintaining a data structure relating ones of the environmental sensor functions to ones of the security keys, and selecting the at least one of the environmental sensor functions based on at least the data structure.
10. The method of claim 1 , further comprising:
in a secure processing zone of the communication portion, receiving the at least one of the security keys from an open processing zone of the communication portion in response to the trigger condition;
in the secure processing zone, processing the at least one of the security keys to determine the at least one hash result generated using at least one of the security keys;
in the secure processing zone, responsive to receiving the security grant transferred by the remote data system indicating the one of the hash results, indicating an authorized one of the security keys to the open processing zone; and
in the open processing zone, selecting at least one of the environmental sensor functions based on an association of the environmental sensor functions with the authorized one of the security keys.
11. An environmental sensor system, comprising:
a sensor portion configured to perform a plurality of environmental sensor functions and monitor environmental conditions to detect a trigger condition;
a communication portion that stores a plurality of security keys and is configured to:
transfer an access request for delivery to a remote data system responsive to the detection of the trigger condition;
receive a security challenge transferred by the remote data system, and in response, transfer a security answer for delivery to the remote data system that includes at least one hash result generated using at least one of the security keys;
receive a security grant transferred by the remote data system indicating one of the hash results;
select one of the environmental sensor functions based on an association of the environmental sensor function with one of the security keys used to generate the hash result indicated in the security grant;
the sensor portion configured to perform the selected environmental sensor function to obtain sensor data; and
the communication portion configured to transfer the sensor data for delivery to the remote data system.
12. The environmental sensor system of claim 11 , wherein the environmental condition comprises at least one of a geographic location, an atmospheric condition, and a radio frequency (RF) status.
13. The environmental sensor system of claim 11 , wherein the sensor portion comprises ones of a gas concentration sensor, a temperature sensor, a pressure sensor, a humidity sensor, and a seismic sensor.
14. The environmental sensor system of claim 11 , wherein the access request comprises a request to perform an environmental sensor function to obtain sensor data.
15. The environmental sensor system of claim 11 , wherein the security challenge comprises at least one request for the at least one hash result generated using the at least one of the security keys.
16. The environmental sensor system of claim 11 , wherein the at least one of the security keys is selected based on at least the trigger condition.
17. The environmental sensor system of claim 11 , wherein more than one hash result is transferred in the security answer, each hash result generated using a different one of the security keys.
18. The environmental sensor system of claim 11 , wherein the remote data system selects the indicated one of the hash results based on a successful authentication of the indicated one of the hash results.
19. The environmental sensor system of claim 11 , comprising:
maintaining a data structure relating ones of the environmental sensor functions to ones of the security keys, and selecting the at least one of the environmental sensor functions based on at least the data structure.
20. The environmental sensor system of claim 11 , comprising:
a secure processing zone of the communication portion configured to receive the at least one of the security keys from an open processing zone of the communication portion in response to the trigger condition;
the secure processing zone of the communication portion configured to process the at least one of the security keys to determine the at least one hash result generated using at least one of the security keys;
the secure processing zone of the communication portion configured to indicate an authorized one of the security keys to the open processing zone responsive to receiving the security grant transferred by the remote data system indicating the one of the hash results; and
the open processing zone of the communication portion configured to select at least one of the environmental sensor functions based on an association of the environmental sensor functions with the authorized one of the security keys.