IP Library › Granted Patent US 10,419,419
Granted Patent B2
US 10,419,419 · App. 14/495,059 · Granted Sep 17, 2019

Technologies for sensor action verification

Inventors: David Kaplan (Modi'in, IL); Shahar Taite (Kfar Saba, IL); Aviv Ron (Nir Moshe, IL); Tomer Rider (Naahryia, IL)
Assignee: Intel Corporation
H04L63/0823H04L63/126H04W12/08
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 10,419,419
App. No.
14/495,059
Granted
Sep 17, 2019
Kind
B2
Abstract

Technologies for sensor action verification include a local computing device to receive a request for the local computing device to perform a sensor action from a remote computing device. The local computing device verifies the received request to confirm that the remote computing device is authorized to request the local computing device to perform the sensor action and performs, by a sensor controller of the local computing device, the requested sensor action in response to verification of the received request. The sensor controller manages operation of one or more sensors of the local computing device. The local computing device transmits a response message to the remote computing device indicating whether the requested sensor action has been performed by the sensor controller of the local computing device.

Claims (71)

1. A local computing device for sensor action verification, the local computing device comprising:

a main processor to execute an application;

one or more sensors to generate sensor data;

a sensor controller coupled to the one or more sensors; and

a security engine;

wherein the main processor is to: (i) receive, over a network, a request for the local computing device to perform a sensor action from a remote computing device, wherein the remote computer is not co-located with the local computing device, and (ii) forward the request to the sensor controller;

wherein the security engine is to verify the received request to confirm that the remote computing device is authorized to request the local computing device to perform the sensor action;

wherein the sensor controller is to (i) perform the requested sensor action in response to verification of the received request by the security engine and (ii) generate a response message that indicates whether the requested sensor action has been performed by the local computing device;

wherein the main processor is to transmit the response message to the remote computing device; and

wherein to perform the requested sensor action comprises to block control of the one or more sensors from the main processor while maintaining control of the one or more sensors by the sensor controller.

2. The local computing device of claim 1 , wherein to receive the request for the local computing device to perform the sensor action comprises to receive a request to disable a sensor of the local computing device.

3. The local computing device of claim 2 , wherein to receive the request to disable the sensor of the local computing device comprises to receive a request to disable at least one of a camera or a microphone of the local computing device.

4. The local computing device of claim 1 , wherein to receive the request for the local computing device to perform the sensor action comprises to receive a request to disable a sensor of the local computing device for a determined period of time;

wherein to perform the requested sensor action comprises to disable the sensor and establish a timer that corresponds with the determined period of time; and

wherein the sensor controller is further to re-enable the disabled sensor in response to expiration of the timer.

5. The local computing device of claim 1 , wherein to receive the request for the local computing device to perform the sensor action comprises to receive one or more sensor action parameters indicative of a condition associated with the performance of the sensor action; and wherein the sensor controller is further to:

monitor for a satisfaction of the condition associated with the performance of the sensor action; and

perform a condition satisfaction action that corresponds with the satisfaction of the condition in response to a determination that the condition has been satisfied.

6. The local computing device of claim 1 , wherein to receive the request to perform the sensor action comprises to receive a remote public cryptographic key of the remote computing device and a signature of the remote computing device; and

wherein to verify the received request comprises to (i) confirm that the remote computing device is authorized to request the sensor action to be performed by the local computing device and (ii) verify the signature with the remote public cryptographic key.

7. The local computing device of claim 6 , wherein to confirm that the remote computing device is authorized to request the sensor action to be performed by the local computing device comprises to compare the remote public cryptographic key to relationship data stored on the local computing device, wherein the relationship data includes a control policy that identifies sensor actions the remote computing device is authorized to request the local computing device to perform.

8. The local computing device of claim 1 , wherein the sensor controller is further to generate the response message based on the requested sensor action, wherein the generated response message (i) indicates whether the requested sensor action has been performed by the sensor controller of the local computing device and (ii) includes a local public cryptographic key of the local computing device and a signature of the local computing device generated by the security engine for use by the remote computing device to verify the local computing device.

9. The local computing device of claim 1 , wherein the security engine is further to establish a trusted relationship with the remote computing device,

wherein to verify the received request comprises to verify the received request to confirm that the remote computing device is authorized to request the local computing device to perform the sensor action based on the established trusted relationship.

10. The local computing device of claim 9 , wherein to establish the trusted relationship with the remote computing device comprises to:

transmit a local public cryptographic key of the local computing device to the remote computing device;

receive a remote public cryptographic key of the remote computing device from the remote computing device;

store (i) a local private cryptographic key that corresponds with the local public cryptographic key and (ii) the remote public cryptographic key as relationship data for the remote computing device on a memory of the local computing device;

determine a sensor action of the local computing device that the remote computing device is authorized to request the local computing device to perform; and

store the determined sensor action in a control policy associated with the remote computing device.

11. The local computing device of claim 1 , wherein the sensor controller is further to output a feedback signal indicating a status of the request to perform the sensor action.

12. The local computing device of claim 1 , wherein the sensor controller is further to transmit a heartbeat signal to the remote computing device via the main processor that indicates a status of the sensor corresponding with the requested sensor action.

13. The local computing device of claim 1 , wherein the one or more sensors comprise a camera, wherein to receive the request for the local computing device to perform the sensor action comprises to receive a request to modify a control parameter of the camera, wherein the control parameter comprises at least one of a resolution of the camera, a zoom power of the camera, and a capture frequency of the camera.

14. The local computing device of claim 1 , further comprising an integrated sensor hub that includes the sensor controller.

15. One or more non-transitory machine-readable storage media comprising a plurality of instructions stored thereon that, in response to execution by a local computing device, cause the local computing device to:

execute, by a main processor of the local computing device, an application;

receive, by the main processor from a remote computing device and over a network, a request for the local computing device to perform a sensor action, wherein the remote computing device is not co-located with the local computing device;

forward, by the main processor, the request to a sensor controller of the local computing device;

verify, by a security engine of the local computing device, the received request to confirm that the remote computing device is authorized to request the local computing device to perform the sensor action;

perform, by the sensor controller, the requested sensor action in response to verification of the received request, wherein the sensor controller manages operation of one or more sensors of the local computing device;

generate, by the sensor controller, a response message indicating whether the requested sensor action has been performed by the sensor controller of the local computing device; and

transmit, by the main processor, the response message to the remote computing device;

wherein to perform the requested sensor action comprises to block control of the one or more sensors from the main processor of the local computing device while maintaining control of the one or more sensors by the sensor controller.

16. The one or more non-transitory machine-readable storage media of claim 15 , wherein to receive the request for the local computing device to perform the sensor action comprises to receive a request to disable a sensor of the local computing device.

17. The one or more non-transitory machine-readable storage media of claim 15 , wherein to receive the request for the local computing device to perform the sensor action comprises to receive a request to disable a sensor of the local computing device for a determined period of time;

wherein to perform the requested sensor action comprises to disable the sensor and establish a timer corresponding with the determined period of time; and

wherein the plurality of instructions further cause the local computing device to re-enable the disabled sensor in response to expiration of the timer.

18. The one or more non-transitory machine-readable storage media of claim 15 , wherein to receive the request to perform the sensor action comprises to receive a remote public cryptographic key of the remote computing device and a signature of the remote computing device; and

wherein to verify the received request comprises to (i) confirm that the remote computing device is authorized to request the sensor action to be performed by the local computing device based on a comparison of the remote public cryptographic key to relationship data stored on the local computing device and (ii) verify the signature using the remote public cryptographic key, wherein the relationship data includes a control policy that identifies sensor actions the remote computing device is authorized to request the local computing device to perform.

19. The one or more non-transitory machine-readable storage media of claim 15 , wherein the plurality of instructions further cause the local computing device to generate the response message based on the requested sensor action, wherein the generated response message (i) indicates whether the requested sensor action has been performed by the sensor controller of the local computing device and (ii) includes a local public cryptographic key of the local computing device and a signature of the local computing device generated by the security engine for use by the remote computing device to verify the local computing device.

20. The one or more non-transitory machine-readable storage media of claim 15 , wherein the plurality of instructions further cause the local computing device to establish a trusted relationship with the remote computing device,

wherein to verify the received request comprises to verify the received request to confirm that the remote computing device is authorized to request the local computing device to perform the sensor action based on the established trusted relationship.

21. The one or more non-transitory machine-readable storage media of claim 20 , wherein to establish the trusted relationship with the remote computing device comprises to:

transmit a local public cryptographic key of the local computing device to the remote computing device;

receive a remote public cryptographic key of the remote computing device from the remote computing device;

store (i) a local private cryptographic key corresponding with the local public cryptographic key and (ii) the remote public cryptographic key as relationship data for the remote computing device on a memory of the local computing device;

determine a sensor action of the local computing device that the remote computing device is authorized to request the local computing device to perform; and

store the determined sensor action in a control policy associated with the remote computing device.

22. The one or more non-transitory machine-readable storage media of claim 15 , wherein to receive the request for the local computing device to perform the sensor action comprises to receive a request to modify a control parameter of a camera of the local computing device, wherein the control parameter comprises at least one of a resolution of the camera, a zoom power of the camera, and a capture frequency of the camera.

23. A method for sensor action verification, the method comprising:

executing, by a main processor of a local computing device, an application;

receiving, by the main processor and from a remote computing device, a request for the local computing device to perform a sensor action;

forwarding, by the main processor, the request to a sensor controller of the local computing device;

verifying, by a security engine of the local computing device, the received request to confirm that the remote computing device is authorized to request the local computing device to perform the sensor action;

performing, by a sensor controller of the local computing device, the requested sensor action in response to verification of the received request, wherein the sensor controller manages operation of one or more sensors of the local computing device;

generating, by the sensor controller, a response message indicating whether the requested sensor action has been performed by the sensor controller of the local computing device; and

transmitting, by the main processor, the response message to the remote computing device;

wherein performing the requested sensor action comprises blocking control of one or more sensors from a main processor of the local computing device while maintaining control of the one or more sensors by the sensor controller.

24. The method of claim 23 , wherein receiving the request for the local computing device to perform the sensor action comprises receiving a request to disable a sensor of the local computing device for a determined period of time;

wherein performing the requested sensor action comprises disabling the sensor and establishing a timer corresponding with the determined period of time; and

further comprising re-enabling the disabled sensor in response to expiration of the timer.

Assignments (2)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Jul 30, 2019
From: KAPLAN, DAVID
To: INTEL CORPORATION
Reel/Frame 049905/0436 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Jul 16, 2019
From: TAITE, SHAHAR; RON, AVIV; RIDER, TOMER
To: INTEL CORPORATION
Reel/Frame 049766/0518 →
Continuity (1)
Related Publication 20160087976A1 · Mar 24, 2016
Cited By (2)
US 12,641,133 US 12,701,150