Simple protocol for tangible security
The claimed subject matter provides systems and/or methods that effectuate a simple protocol for tangible security on mobile devices. The system can include devices that generate sets of keys and associated secret identifiers, employs the one or more keys to encrypt a secret and utilizes the identifiers and encryptions of the secret to populate a table associated with a security token device that is used in conjunction with a mobile device to release sensitive information persisted on the mobile device for user selected purposes.
1. A security token device comprising:
one or more processors; and
memory communicatively coupled to the one or more processors and storing instructions that, when executed, configure the one or more processors to perform acts comprising:
receiving, from a mobile device, a secret while the security token device is within a predetermined proximity to the mobile device;
storing the secret;
receiving, from the mobile device, a request for use of the secret;
based at least in part on the request for use of the secret and determining that the security token device is within the predetermined proximity to the mobile device:
retrieving the secret; and
sending the secret to the mobile device.
2. The security token device of claim 1 , wherein at least one of receiving the request or sending the secret is performed over at least one of:
a personal area network (PAN);
a local area network (LAN);
a campus area network (CAN);
metropolitan area network (MAN);
an extranet;
an intranet;
the Internet; or
a wide area network (WAN).
3. The security token device of claim 1 , where at least one of receiving the request or sending the secret is performed using near-field communication.
4. The security token device of claim 1 , wherein the acts further comprise:
receiving, from the mobile device, a secret identifier associated with a key used to encrypt the secret to create an encrypted version of the secret; and
storing the secret identifier together with the encrypted version of the secret.
5. The security token device of claim 4 wherein the acts further comprise:
retrieving the secret identifier; and
sending, to the mobile device, the secret identifier to decrypt the encrypted version of the secret at the mobile device.
6. The security token device of claim 1 , wherein the secret comprises a password.
7. The security token device of claim 1 , wherein at least one of receiving the request or sending the secret is performed using at least one of:
direct electrical contact communication;
radio frequency identification communication;
acoustical communication; or
optical communication.
8. A method comprising:
receiving, by a security device and from a mobile device, a secret;
storing, in memory of the security device, the secret;
receiving, by the security device and from the mobile device, a request for use of the secret; and
based at least in part on the request for use of the secret and when the security device is within a predetermined proximity to the mobile device:
retrieving the secret from the memory; and
sending, by the security device and to the mobile device, the secret.
9. The method of claim 8 , wherein at least one of receiving the request or sending the secret is performed using near field communications.
10. The method of claim 8 , wherein the secret comprises a password.
11. The method of claim 8 , wherein the secret comprises information associated with purchasing a good or service.
12. The method of claim 8 , wherein the security device comprises at least one of a watch, a watchband, a bracelet, a necklace, a cufflink, a tie clip, a key fob, or a card.
13. A wristband comprising:
one or more processors; and
memory communicatively coupled to the one or more processors and storing instructions that, when executed, configure the one or more processors to perform acts comprising:
receiving a secret from a portable device;
storing the secret;
receiving, from the portable device, a request for use of the secret;
based at least in part on the request for use of the secret and determining that the wristband is within a predetermined proximity to the portable device:
retrieving the secret; and
sending the secret to the portable device.
14. The wristband of claim 13 , wherein the secret comprises at least one of a password or user identification information.
15. The wristband of claim 13 , wherein the secret comprises information associated with purchasing a good or service.
16. The wristband of claim 15 , wherein the information associated with purchasing a good or service comprises at least one of credit card information, debit card information, or bank account information.
17. The wristband of claim 13 , wherein at least one of receiving the request or sending the secret is performed using at least one of near-field communication or communication over a personal area network.
18. The wristband of claim 13 , wherein the acts further comprise:
receiving, from the portable device, a secret identifier associated with a key used to encrypt the secret to create an encrypted version of the secret; and
storing the secret identifier together with the encrypted version of the secret.
19. The wristband of claim 18 , wherein the acts further comprise:
retrieving the secret identifier; and
sending, to the portable device, the secret identifier for use in decrypting the encrypted version of the secret.
20. The wristband of claim 13 , wherein at least one of receiving the request or sending the secret is performed using at least one of:
direct electrical contact communication;
radio frequency identification communication;
acoustical communication; or
optical communication.