Motorola Solutions, Inc.

Motorola Corporation

Motorola Mobility LLC

Thomas S Messerges

Ezzat A Dabbish

Larry C Puhl

Adam Cory Lewis

Bradley Michael Hiben

Francesca Schuler

Eric Johnson

Anthony R Metke

Ellis Arthur Pinder

Stephen Leigh Kuffner

Katrin Reitsma

Daniel Aaron Law

Brian W Pruss

Michael F Korus

Michael D Pearce

David P Gurney

Timothy J Collins

Gregory J Buchwald

Steven D Tine

Douglas A Kuhlman

Lin Lin

Kenneth C Fuchs

Dean H Vogler

Robert Horvath

Daniel A Law

Jonathan Whitall

Janet A Manzanares

Yi Q Li

David Johnson

Ruben R Formoso

Jon Milan

Dharamendra Kumar

A computer apparatus, such as a validator node, for validating incident-related data records in a distributed electronic ledger is configured to receive a request from an agent to add a proposed incident-related data record associated with an incident to the distributed electronic ledger. In response to the proposed incident-related data record, the computer apparatus determines, from the distributed electronic ledger, one or more attributes of the agent or incident. The computer apparatus determines whether the proposed incident-related data record satisfies validation criteria based at least partially on the one or more attributes of the agent or incident. Once validated, the computer apparatus may then append the proposed incident-related data record to the distributed electronic ledger. Alternatively, the proposed incident-related data record may be appended regardless of validity, but an indication of validity may be appended if the proposed incident-related data record is validated.

System for validating and appending incident-related data records in a distributed electronic ledger

A device attestation server and method for attesting to the integrity of a mobile device is provided. An attestation request is sent from a mobile device to a device attestation server. The device attestation server runs an attestation method that is supported by the mobile device. The device attestation server creates an attestation token that includes a validation result and a plurality of attributes. The device attestation server sends the attestation token to the mobile device, which performs a validation method using the attestation token.

Device attestation server and method for attesting to the integrity of a mobile device

In order to address the above-mentioned need, a method for routing civilian calls to an associated public-safety officer is provided herein. During operation, a call processor receives a civilian call having a source identifier number identifying a source of the call and a target identifier number identifying a target of the call. A current status priority of the associated public-safety officer is determined as a function of the current assignment status, and when the current status priority is less than the incident record priority, the civilian call is routed directly to a mobile device associated with the associated public-safety officer. When the current status priority is greater than the incident record priority, the civilian call is routed directly to one of a public-safety answering point or an automated voice mail system.

Method and apparatus for handling citizen callback of public-safety officer

A method for registering an Internet of Things (IoT) device to an incident IoT ledger system is provided. A computer aided dispatch (CAD) device sends a first ledger request including an incident record to a distributed incident ledger operated by validation nodes. The CAD device receives a first ledger response indicating that the incident record was accepted and added into the incident ledger after being validated by the nodes. The CAD device then sends a second ledger request to an IoT distributed ledger operated by second validation nodes. The request includes a query to the IoT distributed ledger to find registered IoT devices for affiliating with the incident. The CAD device receives a second ledger response including information identifying registered IoT devices from the IoT distributed ledger. The CAD device then sends an affiliation invitation to an IoT device determined from the registered IoT devices identified in the second ledger response.

Method and system to associate the IoT devices with an incident and manage access

A device, system and method for installing encrypted data are provided. A device includes a processor comprising: immutable memory storing preconfigured trust anchor data; and a module storing preconfigured non-exportable data. The processor is configured to: receive an encrypted common protection key, encrypted using a manufacturing protection key, and an encrypted distribution private key, encrypted using a common protection key; obtain the manufacturing protection key using the preconfigured trust anchor data and the preconfigured non-exportable data; decrypt the encrypted common protection key using the manufacturing protection key to obtain the common protection key; decrypt the encrypted distribution private key using the common protection key to obtain a distribution private key; receive an encrypted data package including image-at-rest data encrypted with an image-at-rest key, the encrypted data package including encryption data for obtaining the image-at-rest key using the distribution private key; and install the encrypted data package at the memory.

Device, system and method for installing encrypted data

Provisioning device certificates for electronic processors. One example method includes receiving a flashloader at the electronic processor. The method also includes validating the flashloader with the electronic processor. After validating the flashloader, the method includes receiving an encrypted provisioned key bundle at the electronic processor. The method also includes decrypting the encrypted provisioned key bundle with the electronic processor using a provisioning key to create a decrypted provisioned key bundle. The method further includes executing a provisioning process on the electronic processor using the decrypted provisioned key bundle.

Method for provisioning device certificates for electronic processors in untrusted environments

A computer-implemented method is provided to submit incident data to distributed ledger networks. A request for a new incident record relating to an incident is received. The request includes at least one attribute relating to the incident. A jurisdiction of the new incident is determined. Nodes that are associated with the jurisdiction are identified. The identified nodes are invited to join a public distributed ledger network or a private distributed ledger network. The new incident record is submitted to the private distributed ledger network.

Method to establish distributed ledger networks with multiple access levels for an incident

A computer apparatus, such as a validator node, for validating data records in a distributed electronic ledger may be configured to receive a proposed data record submitted by an originating agent of an originating agency to a distributed ledger. In response to the proposed incident-related data record, other agents within the originating agency may, based on validation criteria, submit one or more responsive data records that may provide information for use in determining a validity of the proposed incident-related data record. Validator nodes hosted by external agencies may submit validation responses relative to a validity of the proposed incident-related data record. The system may determine that the proposed data record is valid. Based a consensus algorithm, the system may responsively append the proposed data record or an indication of validity to the distributed ledger or to a different distributed ledger.

System for validating and appending incident-related data records in an inter-agency distributed electronic ledger

A method for recovering a digital file from a locked device is provided. An identity token is received at a recovery app on the locked device. The recovery app retrieves a digital file from the locked device and sends the digital file and the identity token to a service external to the device.

Method to recover data from a locked device for upload to a service

A deployable wireless communications system includes memory, an antenna, and a processor connected to the memory and the antenna. The processor is configured to execute instructions to control the antenna to provide a deployable wireless network to wireless communications devices and to provide access for the wireless communications devices to the deployable wireless network according to profiles of each of the plurality of wireless communications devices stored in the memory. The system further includes an import service executable by the processor to import into the memory a profile carried by a wireless communications device. The profile is to provide access for the wireless communications device to the deployable wireless network.

Profiles in deployable wireless communications systems

An electronic device includes a memory configured to store a lab certificate, a code authentication certificate and the executable code. The electronic device also includes a processor associated with a unique device identifier. For a first operational condition of the plurality of operational conditions, the processor is configured to: retrieve the code authentication certificate associated with the executable code; determine that a valid lab certificate is present in the memory; authenticate the code authentication certificate by determining that the code authentication certificate is signed with a private developer key and that the signature is valid; and execute the executable code on the electronic device responsive to determining that the lab certificate is valid and authenticating the code authentication certificate.

Apparatus and method for multi-state code signing

In a method, a secured link is established between a primary device and a secondary device, both of which are assigned to a user. The secondary device receives, on the secured link, a request for a derived certificate for the primary device and a public key generated by the primary device. The secondary device generates the derived certificate for the primary device based on an original certificate issued to the secondary device and transmits, on the secured link, the derived certificate to the primary device.

Method and apparatus for deriving a certificate for a primary device

A device executes debugging instructions received from a debugging computer. The device receives a debugging establishment request from the debugging computer. The device transmits a unique identifier associated with the device and a secured expiration value to the debugging computer. The device receives a transport layer security (TLS) certificate from the debugging computer and establishes a secured and authenticated link with the debugging computer using the TLS certificate. The device enables a debugging mode, responsive to determining that an identifier in the TLS certificate matches the unique identifier and that a secured expiration value in the TLS certificate is valid and within a predefined validity range, and executes, in the debugging mode, debugging instructions received from the debugging computer.

Apparatus and method for securing a debugging session

A method and apparatus for modifying the Multimedia Internet KEYing (MIKEY) protocol to support an extended key-management message (KMM), wherein the apparatus programs a computer to perform the method, which includes: determining that a KMM is directed to a target device; determining that the KMM is an extended KMM related to a key-management operation that is not supported by the standard MIKEY protocol; signaling the extended KMM in at least one field of a MIKEY message; and sending the MIKEY message to the target device.

Growing community of inventors

Schaumburg, IL, United States of America

Thomas S Messerges