IP Library Granted Patent US 11,323,425
Granted Patent B2
US 11,323,425 · App. 16/574,293 · Granted May 3, 2022

Systems and methods for selecting cryptographic settings based on computing device location

Inventors: Taylor Leigh Greenwood (Research Triangle Park, NC); Doug Oliver (Research Triangle Park, NC); Christopher A. Peterson (Research Triangle Park, NC); Scott Piper (Research Triangle Park, NC)
Assignee: Lenovo Global Technology (United States) Inc.
H04L63/0485G06F9/45558H04L9/3234G06F2009/45587
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 11,323,425
App. No.
16/574,293
Granted
May 3, 2022
Kind
B2
Abstract

Systems and methods for selecting cryptographic settings based on computing device location are disclosed. According to an aspect, a method includes determining a location of a client of a server. The method also includes selecting, at the server and based on the location of the client, one of several different cryptographic settings for communication with the client or data management. The method may also include implementing, at the server, the selected cryptographic setting.

Claims (42)

1. A method comprising:

at a server comprising first and second hardware components including a Trusted Platform Module (TPM) hardware component and a Trusted Cryptography Module (TCM) hardware component, respectively, configured to implement first and second cryptographic functions, respectively, wherein the first and second cryptographic functions operate according to different standards, and wherein the first and second cryptographic functions are associated with different locations:

providing a plurality of virtual machines, each virtual machine being associated with the first hardware component or the second hardware component;

determining a location of a client of the server;

determining to connect the client to one of the virtual machines associated with the cryptographic function associated with the location; and

connecting the client to the one of the virtual machines; and

at the first hardware component or the second hardware component of the virtual machine connected to the client:

implementing functionality for the cryptographic function of the virtual machine connected to the client.

2. The method of claim 1 , wherein the client comprises a computing device located remote from the server.

3. The method of claim 1 , wherein determining a location of a client includes:

determining an Internet protocol (IP) address of the client; and

using the IP address to determine the location.

4. The method of claim 1 , wherein the location is associated with a government territory, and

wherein connecting the client to the one of the virtual machines comprises connecting the client to the one of the virtual machines based on the government territory associated with the location.

5. The method of claim 4 , wherein the geographic territory corresponds to one of a country and governed geographic area.

6. The method of claim 1 , wherein implementing the functionality includes communicating, at the server, with the client in accordance with a cryptographic setting of the virtual machine connected to the client.

7. The method of claim 1 , wherein implementing the functionality includes communicating, at the server, managing data of the client in accordance with a cryptographic setting of the virtual machine connected to the client.

8. The method of claim 1 , wherein a cryptographic setting of the virtual machine connected to the client is in accordance with one of TPM standard and TCM standard.

9. The method of claim 1 , wherein implementing the functionality comprises using, for the client, the virtual machine connected to the client for emulation.

10. The method of claim 1 , wherein implementing the functionality comprises one of encrypting and hashing for the client based on a cryptographic setting of the virtual machine connected to the client.

11. The method of claim 1 , further comprising selecting a cryptographic setting of the virtual machine connected to the client based on a location of the server.

12. A method comprising:

at a computing device:

associating first and second cryptographic functions with first and second hardware components, respectively, wherein the first and second hardware components include a Trusted Platform Module (TPM) hardware component and a Trusted Cryptography Module (TCM) hardware component, respectively, and wherein the first and second cryptographic functions operate according to different standards, and wherein the first and second cryptographic functions are associated with different locations;

determining a location of the computing device;

connecting, based on the location of the computing device and the cryptographic function associated with the location, the computing device to one of a plurality of virtual machines associated with the cryptographic function that matches the location;

implementing, via the virtual machine connected to the computing device, functionality for the computing device in accordance with cryptographic function of the virtual machine connected to the computing device.

13. The method of claim 12 , wherein the computing device is a server.

14. The method of claim 12 , wherein the location is associated with a government territory.

15. The method of claim 12 , wherein a cryptographic setting of the virtual machine connected to the computing device is in accordance with one of TPM standard and TCM standard.

16. The method of claim 12 , wherein the location is associated with a government territory, and

wherein the method further comprises connecting the one of the virtual machines based on the government territory associated with the location.

17. The method of claim 16 , wherein the geographic territory corresponds to one of a country and governed geographic area.

18. A computing device comprising:

a cryptographic module configured to:

associate first and second cryptographic functions with first and second hardware components, respectively, wherein the first and second hardware components include a Trusted Platform Module (TPM) hardware component and a Trusted Cryptography Module (TCM) hardware component, respectively, and wherein the first and second cryptographic functions operate according to different standards, and wherein the first and second cryptographic functions are associated with different locations;

determine a location of a client;

select, based on the location of the client and the cryptographic function associated with the location, one of cryptographic functions for one of communication with the client and data management;

connect the client to the virtual machine associated with the cryptographic function associated with the location of the client; and

implement, via the virtual machine connected to the client, the selected cryptographic function.

19. The computing device of claim 18 , wherein the cryptographic module is configured to one of TPM standard and TCM standard based on the selected cryptographic function.

20. The computing device of claim 18 , wherein the cryptographic module is configured to implement communications and data management for a virtual machine used by the client in accordance with the selected cryptographic function.

Assignments (3)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Feb 21, 2025
From: LENOVO GLOBAL TECHNOLOGIES INTERNATIONAL LIMITED
To: LENOVO GLOBAL TECHNOLOGIES SWITZERLAND INTERNATIONAL GMBH
Reel/Frame 070292/0001 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Feb 21, 2025
From: LENOVO ENTERPRISE SOLUTIONS (SINGAPORE) PTE LTD.
To: LENOVO GLOBAL TECHNOLOGIES INTERNATIONAL LTD.
Reel/Frame 070292/0223 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Sep 19, 2019
From: GREENWOOD, TAYLOR LEIGH; OLIVER, DOUG; PETERSON, CHRISTOPHER A.; PIPER, SCOTT
To: LENOVO ENTERPRISE SOLUTIONS (SINGAPORE) PTE. LTD.
Reel/Frame 050426/0546 →