Patent ID: 7596227

Claim:
A method for limiting access to and/or the understanding of resources or capabilities of an interoperability application package and or resources or capabilities of a plurality of interoperability devices so that a first interoperability device is permitted to access or prohibited from accessing the second interoperability device from the plurality of interoperability devices, the method comprising: (1) executing or attempting to execute an executable device interoperability software application package conforming to an interoperability format of digitally encoded data, code and content, that is completely self-contained and sufficient to carry out an intended purpose of the interoperability software application on a plurality of connected or intermittently connected devices, the executable device interoperability software application package including security features that permit and limit access to and or an understanding of resources or capabilities of the interoperability application package and/or resources or capabilities of the interoperability devices when executed; (2) during the execution of the interoperability software application package, forming a basis for security including the following steps: (a) automatically collecting an entropy state measure security feature associated with the device by sampling aspects of the world outside of the device which are not synchronized to a clock used in the sampling by the device; (b) generating a device public/private key pair security feature; (c) generating a unique device Id (uid) security feature; and (d) storing the device public/private key pairs, unique device id, and the collected entropy state measure on the device for continued use whenever the device is active, the collected entropy state measure being sufficient to statistically guarantee that the generated key pair and generated device ids are unique from those generated in a similar manner, but using different gathered entropy; (e) maintaining at least one table storing lists of the device unique Id, a revoked device unique (uid), and a device teamed uid and mapping access level numbers to sets of access rights flags; the access level and access rights controlling an ability of the interoperability software application package to propagate transitively when permission is allowed to do so from device to device so that any device in the lists can gain access to a new device without the need for farther collection of security access credentials; (3) forming rules for allowing or preventing the limiting access; (4) using the formed basis and formed rules to provide a security task at least for the device; and (5) limiting access to and/or the understanding of resources or capabilities of the interoperability application package and/or resources or capabilities of the plurality of interoperability devices so that the first interoperability device is permitted to access or prohibited from accessing the second interoperability device.