Secure non-geospatially derived device presence information

摘要

This invention includes a system and method to enable a device to determine the presence information of another device over a secure communication network. First, the device and a presence server establish a secure connection. Next, while the initial secure connection with the presence server is established, the device generates a randomly created token and provides it to the presence server. The token is used as a shared-secret by the device and the presence server to secure future presence communications over a non-secure connection. Next, without the need to again enter a password or establish a secure connection with the presence server, the device uses the shared-secret to sign, encrypt and convey presence information to the presence server over an arbitrary connection. Finally, the presence server may share the first device's presence information with another device.

主权项

1. A system enabling a second device to determine a presence information of a first device comprising:
a presence server; the first device, which establishes a secure connection with the presence server, and while the secure connection with the presence server is established the first device generates a token uniquely associated with the first device, and provides the token to the presence server over the secure connection; the presence information of the first device, wherein the first device uses the token as an encryption key to encrypt the presence information of the first device; an unsecure network connection, wherein the first device sends the encrypted presence information to the presence server over the unsecured network connection, and the presence server uses the token to decrypt the encrypted presence information to produce the presence information of the first device, and the first device keeps a continuous return path open through the unsecure network connection by optimizing the timing in which the first device sends updated presence information to the presence server; the second device, which receives the presence information of the first device from the presence server.