Source: http://www.google.com/patents/US8086842?dq=7051018
Timestamp: 2014-08-29 21:44:17
Document Index: 275258925

Matched Legal Cases: ['Application No. 05105417', 'Application No. 2007240567', 'Application No. 200680024733', 'Application No. 2008141720', 'Application No. 200510082279', 'Application No. 200510082279', 'Application No. 200510082279', 'Application No. 05105417', 'Application No. 05105417', 'Application No. 05105417', 'Application No. 2005', 'Application No. 10', 'Application No. 200510082279']

Patent US8086842 - Peer-to-peer contact exchange - Google PatentsSearch Images Maps Play YouTube News Gmail Drive More »Sign in<nobr>Advanced Patent Search</nobr>PatentsA system may publish authenticated contact information in a publicly available index store, retrieve the contact information, and validate it. The claimed method and system may provide a client-based, server optional approach to publishing. The publicly available index store may be a distributed hash...http://www.google.com/patents/US8086842?utm_source=gb-gplus-sharePatent US8086842 - Peer-to-peer contact exchangeAdvanced Patent SearchPublication numberUS8086842 B2Publication typeGrantApplication numberUS 11/408,894Publication dateDec 27, 2011Filing dateApr 21, 2006Priority dateApr 21, 2006Also published asCA2646331A1, CN101427234A, CN101427234B, EP2089808A2, US20070250700, WO2007124180A2, WO2007124180A3Publication number11408894, 408894, US 8086842 B2, US 8086842B2, US-B2-8086842, US8086842 B2, US8086842B2InventorsGursharan Sidhu, Noah Horton, Sandeep K. SinghalOriginal AssigneeMicrosoft CorporationExport CitationBiBTeX, EndNote, RefManPatent Citations (109), Non-Patent Citations (189), Referenced by (3), Classifications (12), Legal Events (2) External Links: USPTO, USPTO Assignment, EspacenetPeer-to-peer contact exchangeUS 8086842 B2Abstract A system may publish authenticated contact information in a publicly available index store, retrieve the contact information, and validate it. The claimed method and system may provide a client-based, server optional approach to publishing. The publicly available index store may be a distributed hash table used in a peer-to-peer network. The system may be used in other secure directory service applications where a server may not be available or where server trust may be minimal.
1. A method of using a publicly available index store for a secure publication system, the method comprising:
configuring a first computing device to be a publisher of contact information corresponding to the publisher, wherein:
the contact information is required to be known by both the publisher and another node to enable an initial establishment of a secure connection between the another node and the publisher, and the contact information targeted for retrieval by only a user of the contact information;
the first computing device includes a first memory, a first processing unit, and first computer-executable instructions stored in the first memory and executable by the first processing unit to publish the contact information; at the publisher:
providing a first cryptographically unique identifier that is statistically unique to a public key of the publisher;
obtaining a second cryptographically unique identifier that is statistically unique to a public key of the user of the contact information;
appending the second cryptographically unique identifier to the first cryptographically unique identifier to form a combination key;
creating a publisher signature by signing the contact information with a publisher private key;
creating a single record corresponding to the contact information, wherein the single record includes and is indexed by the combination key, and wherein the single record includes the publisher public key, the publisher signature, and all of the contact information corresponding to the publisher; and
inserting the record into a publicly available index store;
configuring a second computing device to be the user of the contact information, the second computing device including a second memory, a second processing unit, and second computer-executable instructions stored in the second memory and executable by the second processing unit to use the contact information to establish a secure connection with the publisher; and
at the user:
obtaining the first cryptographically unique identifier;
retrieving the single record from the publicly available index store based on the combination key;
determining whether the first cryptographically unique identifier relates to the publisher public key included in the single record;
determining whether the contact information is signed by a private key corresponding to the publisher public key included in the single record;
establishing the secure connection with the publisher using at least a portion of the single record upon determining the first cryptographically unique identifier relates to the publisher public key included in the single record and the contact information is signed by the private key corresponding to the publisher public key included in the single record; and
refusing to establish the secure connection with the publisher upon determining the first cryptographically unique identifier does not relate to the publisher public key included in the single record or the contact information is not signed by the private key corresponding to the publisher public key included in the single record,
wherein the publisher and the user are different nodes in a peer-to-peer network.
determining, by the second computing device, whether the contact information has an expected format and syntax;
establishing the secure connection with the publisher using the at least the portion of the single record upon determining the contact information is determined to have the expected format and syntax; and
refusing to establish the secure connection with the publisher upon determining the contact information has an unexpected format or syntax.
3. The method of claim 1, wherein the index store is one of a distributed hash table and a directory server.
4. The method of claim 1, wherein the first cryptographically unique identifier is derived from the public key of the user using a hash function.
5. The method of claim 1, wherein the single record further includes a duration parameter that is proportional to an encryption strength.
6. The method of claim 5, further comprising at the second computing device:
establishing the secure connection with the publisher using the at least the portion of the single record upon determining that a duration indicated by the duration parameter has not expired; and
refusing to establish the secure connection with the publisher upon determining that the duration indicated by the duration parameter has expired.
7. The method of claim 1, wherein the first cryptographically unique identifier comprises a group public key.
a plurality of peer nodes forming a peer-to-peer network;
a distributed hash table of the peer-to-peer network;
a first peer node from the plurality of peer nodes, the first peer node configured to:
publish contact information corresponding to the first peer node wherein the contact information is required to be known by both the first peer node and a second peer node from the plurality of peer nodes to enable an initial establishment of a secure connection between the first peer node and the second peer node, and the contact information targeted for retrieval by only the second peer node,
create a first cryptographically unique identifier that is statistically unique to a public key of the first peer node,
create a signature by signing the contact information with a private key of the first peer node,
obtain a second cryptographically unique identifier that is statistically unique to a public key of the second peer node,
append the second cryptographically unique identifier to the first cryptographically unique identifier to form a combination key,
create a single record corresponding to the contact information, wherein the single record includes and is indexed by the combination key, and wherein the single record includes the public key of the first peer node, the signature, and all of the contact information corresponding to the first peer node; and
insert the single record into the distributed hash table; and
the second peer node from the plurality of peer nodes, the second peer node configured to:
obtain the first cryptographically unique identifier;
retrieve the single record from the distributed hash table based on the combination key,
determine whether the first cryptographically unique identifier relates to the public key of the first peer node included in the single record,
determine whether the contact information is signed by a private key corresponding to the public key of the first peer node included in the single record,
determine whether the contact information has an expected format and syntax,
establish a secure connection with the first peer node using at least a portion of the single record upon determining:
the first cryptographically unique identifier relates to the public key of the first peer node included in the single record,
the contact information is signed by the private key corresponding to the public key of the first peer node included in the single record, and
the contact information has the expected format and syntax; and
refuse to establish the secure connection with the first peer node upon determining:
the first cryptographically unique identifier does not relate to the public key of the first peer node included in the single record,
the contact information is not signed by the private key corresponding to the public key of the first peer node included in the single record, or
the contact information has an unexpected format or syntax.
9. The system of claim 8, wherein the contact information is encrypted using a public key of the second peer node and the contact information is decrypted using a private key of the second peer node.
10. The system of claim 8, wherein the single record further includes a duration parameter, wherein the duration parameter is proportional to the strength of an encryption algorithm used to generate the public key of the first peer node and the private key corresponding to the public key of the first peer node.
11. The system of claim 10, wherein the second peer node is configured to:
establish the secure connection with the first peer node using the at least the portion of the single record upon determining that a duration indicated by the duration parameter has not expired; and
refuse to establish the secure connection with the first peer node upon determining that the duration indicated by the duration parameter has expired.
12. A memory storage device on a first node having computer-executable instructions for performing operations comprising:
receiving a second cryptographically unique identifier corresponding to a second node;
retrieving an entry from an index store based on a combination key, the combination key including a first cryptographically unique identifier corresponding to the first node appended to the second cryptographically unique identifier corresponding to the second node, wherein:
the entry contains a complete set of contact information corresponding to the second node and a public key corresponding to the second node;
the entry further contains the combination key and is indexed by the combination key;
the complete set of contact information is required to be known by both the first node and the second node to enable an initial establishment of a secure connection between the first node and the second node;
the complete set of contact information and the public key corresponding to the second node are together signed by a private key corresponding to the public key corresponding to the second node; and
the entry was previously entered into the index store by the second node;
determining whether the second cryptographically unique identifier relates to the public key corresponding to the second node;
determining whether the complete set of contact information and the public key corresponding to the second node are signed by the private key corresponding to the second node;
establishing the secure connection between the first node and the second node using at least a portion of the entry upon determining the second cryptographically unique identifier relates to the public key corresponding to the second node included in the entry and the contact information is signed by the private key corresponding to the public key corresponding to the second node included in the entry; and
refusing to establish the secure connection between the first and the second node upon determining the second cryptographically unique identifier does not relate to the public key corresponding to the second node included in the entry or the contact information is not signed by the private key corresponding to the public key corresponding to the second node included in the entry,
wherein the first node and the second node are different nodes in a peer-to-peer network.
13. The memory storage device of claim 12, further comprising:
determining whether the complete set of contact information has an expected format and syntax;
establishing the secure connection between the first node and the second node using the at least the portion of the single record upon determining the complete set of contact information has the expected format and syntax; and
refusing to establish the secure connection between the first node and the second node upon determining the complete set of contact information has an unexpected format or syntax.
14. The memory storage device of claim 12, further comprising determining whether a duration parameter of the entry has expired.
15. The memory storage device of claim 14, wherein a duration indicated by the duration parameter is proportional to a level of encryption used to generate the public key corresponding to the second node included in the entry and the private key corresponding to the second node.
16. The memory storage device of claim 12, wherein the complete set of contact information is encrypted using a public key of a computer associated with the second cryptographically unique identifier, and wherein the complete set of contact information is decrypted using a private key corresponding to the first node.
17. The method of claim 1, wherein establishing the secure connection with the publisher using the at least the portion of the single record comprises establishing the secure connection with the publisher using the publisher public key included in the single record.
18. The system of claim 8, wherein the second peer node establishes the secure connection with the first peer node using the public key of the first peer node included in the single record.
at the publisher, encrypting the contact information using the public key of the user; and
at the user, decrypting the contact information using a private key of he user.
BACKGROUND Directory services may typically be provided using a network server. In order to utilize the directory services, a user may be required to connect to the server and have a user account in order to access the directory service. Additionally, the user may have to trust the server to provide data integrity and data authentication. If the directory service is intended for a smaller group of connected entities, for example an ad hoc network, then creating and setting up a directory server for that ad hoc network may be inefficient. For example, ad hoc networks may typically be transient in nature, and the cost of setting up a dedicated server for short durations and for a small number of users may be too costly, due to administrator time, equipment resource capacity (some server must be reallocated or added), and user time (user may be involved in account creation and setup). Moreover, while server based systems may be common, new serverless systems such as peer-to-peer networks, may provide greater flexibility in creating ad hoc networks because they may not require a dedicated server to facilitate communications. However, to enable secure communications over these ad hoc networks using existing encryption processes, a directory service may be required to facilitate public key exchange that does not rely on a server based model.
SUMMARY A system may publish authenticated contact information in a publicly available index store. The system may also provide a method of retrieving the contact information and validating it. The claimed method and system may be client based, with a server being optional. The publicly available index store may be a distributed hash table used in a peer-to -peer network. The system may be used in other secure directory service applications where a server may not be available or where server trust may be minimal.
In one embodiment, the system may be used as a general message publishing system. In another embodiment, the system may be used to provide selective publication in which a posted record may only be retrieved and read by an intended recipient.
DRAWINGS FIG. 1 illustrates a block diagram of a computing system that may operate in accordance with the claims;
FIG. 2 illustrates a general peer-to-peer network;
FIG. 3 illustrates a general director server and service;
FIG. 4 illustrates a distributed hash table;
FIG. 5 illustrates a record used in an embodiment of the claims;
FIG. 6 illustrates a publishing process embodiment;
FIG. 7 illustrates a retrieval process embodiment;
FIG. 8 illustrates a modified record containing a duration parameter;
FIG. 9 illustrates an another validation process using a duration parameter;
FIG. 10 illustrates a modified record for selective publication;
FIG. 11 illustrates a publishing process embodiment for selective publication; and
FIG. 12 illustrates a retrieval process embodiment for selective publication.
FIG. 1 illustrates an example of a suitable computing system environment 100 on which a system for the blocks of the claimed method and apparatus may be implemented. The computing system environment 100 is only one example of a suitable computing environment and is not intended to suggest any limitation as to the scope of use or functionality of the method and apparatus of the claims. Neither should the computing environment 100 be interpreted as having any dependency or requirement relating to any one component or combination of components illustrated in the exemplary operating environment 100.
The blocks of the claimed method and apparatus are operational with numerous other general purpose or special purpose computing system environments or configurations. Examples of well known computing systems, environments, and/or configurations that may be suitable for use with the methods or apparatus of the claims include, but are not limited to, personal computers, server computers, hand-held or laptop devices, multiprocessor systems, microprocessor-based systems, set top boxes, programmable consumer electronics, network PCs, minicomputers, mainframe computers, distributed computing environments that include any of the above systems or devices, and the like.
The blocks of the claimed method and apparatus may be described in the general context of computer-executable instructions, such as program modules, being executed by a computer. Generally, program modules include routines, programs, objects, components, data structures, etc. that perform particular tasks or implement particular abstract data types. The methods and apparatus may also be practiced in distributed computing environments where tasks are performed by remote processing devices that are linked through a communications network. In a distributed computing environment, program modules may be located in both local and remote computer storage media including memory storage devices.
With reference to FIG. 1, an exemplary system for implementing the blocks of the claimed method and apparatus includes a general purpose computing device in the form of a computer 110. Components of computer 110 may include, but are not limited to, a processing unit 120, a system memory 130, and a system bus 121 that couples various system components including the system memory to the processing unit 120. The system bus 121 may be any of several types of bus structures including a memory bus or memory controller, a peripheral bus, and a local bus using any of a variety of bus architectures. By way of example, and not limitation, such architectures include Industry Standard Architecture (ISA) bus, Micro Channel Architecture (MCA) bus, Enhanced ISA (EISA) bus, Video Electronics Standards Association (VESA) local bus, and Peripheral Component Interconnect (PCI) bus also known as Mezzanine bus.
Computer 110 typically includes a variety of computer readable media. Computer readable media may be any available media that may be accessed by computer 110 and includes both volatile and nonvolatile media, removable and non-removable media. By way of example, and not limitation, computer readable media may comprise computer storage media and communication media. Computer storage media includes both volatile and nonvolatile, removable and non-removable media implemented in any method or technology for storage of information such as computer readable instructions, data structures, program modules or other data. Computer storage media includes, but is not limited to, RAM, ROM, EEPROM, flash memory or other memory technology, CD-ROM, digital versatile disks (DVD) or other optical disk storage, magnetic cassettes, magnetic tape, magnetic disk storage or other magnetic storage devices, or any other medium which may be used to store the desired information and which may accessed by computer 110. Communication media typically embodies computer readable instructions, data structures, program modules or other data in a modulated data signal such as a carrier wave or other transport mechanism and includes any information delivery media. The term �modulated data signal� means a signal that has one or more of its characteristics set or changed in such a manner as to encode information in the signal. By way of example, and not limitation, communication media includes wired media such as a wired network or direct-wired connection, and wireless media such as acoustic, RF, infrared and other wireless media. Combinations of the any of the above should also be included within the scope of computer readable media.
The computer 110 may also include other removable/non-removable, volatile/nonvolatile computer storage media. By way of example only, FIG. 1 illustrates a hard disk drive 140 that reads from or writes to non-removable, nonvolatile magnetic media, a magnetic disk drive 151 that reads from or writes to a removable, nonvolatile magnetic disk 152, and an optical disk drive 155 that reads from or writes to a removable, nonvolatile optical disk 156 such as a CD ROM or other optical media. Other removable/non-removable, volatile/nonvolatile computer storage media that may be used in the exemplary operating environment include, but are not limited to, magnetic tape cassettes, flash memory cards, digital versatile disks, digital video tape, solid state RAM, solid state ROM, and the like. The hard disk drive 141 is typically connected to the system bus 121 through a non-removable memory interface such as interface 140, and magnetic disk drive 151 and optical disk drive 155 are typically connected to the system bus 121 by a removable memory interface, such as interface 150.
The drives and their associated computer storage media discussed above and illustrated in FIG. 1, provide storage of computer readable instructions, data structures, program modules and other data for the computer 110. In FIG. 1, for example, hard disk drive 141 is illustrated as storing operating system 144, application programs 145, other program modules 146, and program data 147. Note that these components may either be the same as or different from operating system 134, application programs 135, other program modules 136, and program data 137. Operating system 144, application programs 145, other program modules 146, and program data 147 are given different numbers here to illustrate that, at a minimum, they are different copies. A user may enter commands and information into the computer 20 through input devices such as a keyboard 162 and pointing device 161, commonly referred to as a mouse, trackball or touch pad. Other input devices (not illustrated) may include a microphone, joystick, game pad, satellite dish, scanner, or the like.
These and other input devices are often connected to the processing unit 120 through a user input interface 160 that is coupled to the system bus, but may be connected by other interface and bus structures, such as a parallel port, game port or a universal serial bus (USB). A monitor 191 or other type of display device is also connected to the system bus 121 via an interface, such as a video interface 190. In addition to the monitor, computers may also include other peripheral output devices such as speakers 197 and printer 196, which may be connected through an output peripheral interface 190.
When used in a LAN networking environment, the computer 110 is connected to the LAN 171 through a network interface or adapter 170. When used in a WAN networking environment, the computer 110 typically includes a modem 172 or other means for establishing communications over the WAN 173, such as the Internet. The modem 172, which may be internal or external, may be connected to the system bus 121 via the user input interface 160, or other appropriate mechanism. In a networked environment, program modules depicted relative to the computer 110, or portions thereof, may be stored in the remote memory storage device. By way of example, and not limitation, FIG. 1 illustrates remote application programs 185 as residing on memory device 181. It will be appreciated that the network connections illustrated are exemplary and other means of establishing a communications link between the computers may be used.
Peer-to-peer (P2P) systems employ a network of nodes that communicate with each other in a decentralized manner, e.g., without the aid of a central server. Each node (e.g., an application or a device) in the peer-to-peer network may communicate with another node on the network through a direct connection, or each node may communicate indirectly using one or more intermediate nodes to relay communications to an intended node.
FIG. 2 illustrates a high-level depiction of a P2P system 200. The system 200 includes a collection of peer entities (202-212). The peer entities (202-212) may be personal computer devices that are coupled together via a network or combination of networks. FIG. 2 illustrates an example in which each peer entity (202-212) is connected to all other peer entities (202-212). In other cases, one or more peer entities (202-212) may be connected to other peer entities (202-212) via one or more intermediary participants (202-212). However, in order to provide secure communication on a peer-to-peer network, secure connections between peer nodes may first need to be established.
Connection security may be based on a symmetric key encryption process, as may be commonly known in the art. In order to implement this encryption security, however, peer entities may need to first exchange certificates and/or public keys which enable a secure connection to be initially established. In some existing systems, such as that illustrated in FIG. 3, this exchange may be facilitated using a central directory server 300 where users 301, 302, 303 may post their certificates 304, 305, 306 and/or public keys on the directory server 300. A directory service 307 may be a database table containing records 308 of certificates and/or public keys indexed under a username or other identifier used as a key 309. A user capable of connecting to the directory server 300 and allowed access to the directory service 307 may lookup a target user using the target user's identifier, and obtain the target user's corresponding public key. This approach may require connectivity to the server 300, explicit signup with the directory server 300, and trust in the directory server 300. Furthermore, someone must incur the cost of hosting such as server. When a user 303 is connecting from a remote location, Internet connectivity 310 may additionally be required. The server signup process may involve user accounts that are used to promote trust in the directory server 300. For example, if any user could access the server 300, the server 300 may be viewed as more susceptible to compromise, especially if security information is being posted and exchanged, such as public keys. Further, creating a directory server for an ad hoc, temporary network may be impractical because of the transient nature of these networks and the difficulty in setting up a directory server. A possible workaround for an ad hoc peer-to-peer network may be to exchange public keys via email or via an off network process, such as physically sending or mailing a diskette containing a certificate/public key to a target member. This may enable the peer entities to establish server independent, secure links. However, this may be cumbersome and error-prone.
An embodiment of the claimed server-independent indexing process may use a serverless index store, such as a distributed hash table (DHT) 400 illustrated in FIG. 4. This distributed hash table 400 may be maintained over a group of peer entities 401-404 that form a peer-to-peer network 405. The entries in a distributed hash table may be logically divided or grouped using, for example, a hash function. The hash function may clump records together in some organized manner, thereby making retrieval more efficient. A DHT may have two primary properties: 1) distribution of a table (e.g., table 400), across a plurality of nodes (e.g., nodes 401-404); and 2) a routing mechanism (not shown) that provides a method for publishing and retrieving records. The routing mechanism and distribution may be managed by an overlay protocol such as Chord, PNRP, Pastry, Tapestry, etc. While a DHT may be used to provide an index store in accordance with an embodiment of the claims, it is emphasized that any index store which may be easily accessed by a group of peer entities may be used, including server-based indices. In the case of a server-based indices, the claimed system may reduce the level of trust required from the server alone because the claimed system may provide the necessary level of security for an unsecured index store.
An embodiment of the claimed server-independent indexing process may use a particular record format, as illustrated in FIG. 5. FIG. 5, illustrates that a publisher may post to the index store a record 500 containing contact information 501, the publisher's public key 502 and a signature 503 of the contact information using the publisher's private key. Alternatively, the signature may be for a combination of the contact information and public key. This record may be indexed by a record key 504. In one embodiment, the key 504 of the record may be a cryptographically unique identifier (CUI). A CUI may have two primary properties. First, the CUI may be statistically unique and second, the CUI may correspond to a particular user public key, such as the publisher public key 502. Similar to common database indexing schemes, a record key may need to be unique to prevent duplicate entity entries. Accordingly, a CUI may be one that is derived such that there is a high probability that it is unique for a particular situation or application. For example, in a peer group of only a few members, the CUI may be statistically unique if the probability that a cryptographically unique identifier may be derived from the same member public key is unlikely for the group size.
The CUI may be derived from a public key using an algorithm, such as a hash or encryption algorithm. The CUI may be verified to correspond or match with its public key using the algorithm. In one embodiment, the CUI may be used to represent a longer user identifier, such as a public key, in a shorter more user manageable form such as the peer names used in a P2P system described in U.S. patent application Ser. No. 10/882,079, entitled �Callsigns.�
The record of FIG. 5 may be used to publish contact information to an index store, such as the DHT 400 of FIG. 4. The CUI key 504 may be used to locate each record 500 and retrieve the contact information 501 and public key 502. In this embodiment, the published information may be public, i.e., the published information may not be encrypted, except for the signatures. However, other embodiments described below may encrypt portions of the published information. Also, while this embodiment illustrates using a record 500 to facilitate public key 502 exchange, it is emphasized that the system may be used in any application in which a unique message publication may be used. For example, instead of contact information 501, any message may be posted against a user CUI 504.
FIG. 6 illustrates a general publishing process in accordance with an embodiment of the claims. Using an algorithm such as a hash function, a CUI may be generated for a given user's public key 601. It is important to note that whatever algorithm may be used, that the CUI may be verified to correspond to the public key that was used to generate it. A record of the contact information, or other message data, and publisher's public key may be constructed 602 and the contact information and/or publisher's public key may be signed by the publisher's private key 603 (which may correspond to the public key). The record, including the contact information, the public key and the signature may be inserted 604 into a publicly available index. The record may be indexed by the CUI corresponding to the publisher public key.
FIG. 7 illustrates a retrieval process in accordance with an embodiment of the claims. A user desiring to connect with a second peer may obtain the CUI of the second peer 701. The CUI may be obtained out of band either through email or off network process (e.g., snail mail, verbal communication, business card, etc.). The CUI may then be used to lookup up a record mapped to the CUI in the index store 702. As discussed above, a record may include a key, some message information (contact information), and a signature.
The user may then query the index store to retrieve a record based on the CTJI 703. Once the CUI is retrieved, the CUI may be verified using the public key contained in the record to ensure that they correspond to each other 704. This process block may be used to verify that the record corresponds to the CUI. The CUI may be made statistically unique to the public key in any number of ways. In one embodiment, the peer communication system may pre-establish a common mapping process, for example using a recognized hash function. This initial verification process helps to ensure that the record may indeed correspond to the given CUI.
If the CUI maps properly, then the signature of the record may then be used to determine whether the signature is signed by a corresponding private key of the publisher 705. This may authenticate the message by providing evidence that the message originated from the publisher, as it may be assumed that the publisher owns the private key corresponding to the public key used for the encryption.
If the record/message is properly signed, a message format and/or syntax check 706 may then be performed on the contact information of the record. This may be used, for example, to ensure that the message was not hacked to match the signature. While providing a hacked message to match an encrypted signature may be statistically difficult, it may not be impossible. Hacking, however, may result in a message that does not conform to intended or expected format. Thus, a first check of the message may be made to determine whether the message format complies with an expected format. For example, where contact information is communicated, the contact information may require a ten character format. If the record format does not provide this ten character format, then someone or something may have tampered with the message 711.
Alternatively, or in addition, the semantics of the message may be checked. For example, the contact information may be limited to a list of options and specific relations between those options. Therefore, if the format requires two entries, and the first entry is related to the second entry (semantics) and they do not match this expected format, then someone or something may have tampered with the message 711.
If all of the verifications processes 704, 705, 706 have been completed successfully, then the record may be authentic and subsequently used 707, for example, the public key may be used to establish communication links. If any of the verification steps 704, 705, 706 fails, then someone or something may have been tampered with the message 711. In the case of a public key exchange system, a connection may be refused.
In another embodiment illustrated in FIG. 8, a duration parameter 801 may be included with the record 800. This duration parameter 801 may correspond to a level of encryption used in the authentication process described. For example, the encryption level may correspond to the strength of the encryption used to generate the public/private key pairs used in the claimed system. If the encryption strength is high, then the duration may be long and vice versa. The duration parameter 801 may indicate a duration of validity for the record. Thus, the duration parameter 801 may be used in the retrieval process as illustrated in FIG. 9. FIG. 9 illustrates the same process of FIG. 7, with the addition of block 909, where the duration 901 indicated by the duration parameter 801 is checked to determine whether the duration has expired. If the duration parameter 801 is expired, then the record may be compromised 911. Otherwise the record may be valid 907.
FIGS. 10-12 illustrates another embodiment where selective publication may be used to allow a first user to publish data that only a targeted second user may retrieve. In this selective publication embodiment, a record 1001, as illustrated in FIG. 10, may be used. The record 1001 may include a key 1002 that is formed from the combination of two CUIs 1003, 1004. The first CUI 1003 may be associated with a first user while the second CUI 1004 may be associated with a second user. The combination may be formed by simply appending the second CUI to the first CUI. This record may include a message portion 1005 and a duration parameter 1006. The message 1005 may contain data on a publisher's contact information, publisher public key, and a signature.
FIG. 11 illustrates a selective publishing process using the record 1001 of FIG. 10. A publisher could derive his CUI from a public key 1101, obtain a CUI of a selected recipient 1102, construct the message 1103, sign the message using the publisher's private key 1104 and insert the message into an index based 1105 on the CUI combination key 1101. Additionally, the message may be encrypted 1106 using the intended recipient's public key.
FIG. 12 illustrates a retrieval process for a selective publication process that is similar to FIG. 7 with the addition of blocks 1201, 1202, 1203. A recipient wishing to retrieve a published record may first obtain the CUI of the publisher 1201 and then lookup a record in the index store under the combined CUI key 1202. In a further enhanced embodiment, the message may be encrypted using a public key of the recipient. Thus, only the recipient may decrypt the intended data. After the recipient retrieves the message using the CUI combination key 1202, the recipient may use its private key to first decrypt the record 1203, after which the process of verification and validation follows that of FIG. 7. In this selective publication embodiment, the recipient's public key (used to encrypt the record) may be determined from the recipient CUI, which the publisher used to create the combination key.
In another enhancement of the above embodiment, the key may be a group public key, which is owned by a group of peers. In this embodiment, any member of the group may lookup a record under the group public key and perform the authentication process. The group of users may have access to the record and may be specifically targeted for receipt of a posted message.
It should be emphasized that while the specific embodiments described above may be associated with a public key exchange directory, the contact information may represent other data. For example, instead of contact information, the record may be a generic message posting. Thus, the claimed system may be used as a general publication system over any publicly accessible index store. The claimed system may also be used to provide directory services other than public key lookup. The claimed system enables existing distributed index stores, such as distributed hash tables, to function as secured directory services work without relying on a server.
Additionally, the claimed system may be used on existing server based directories where the server security may be minimal, thereby requiring the authentication process provided by the claimed system. In ad hoc systems such as peer groups and peer-to-peer networks, a serverless process of public key publication and retrieval may make the creation of such networks more efficient by reducing the need for a hosted, dedicated server to provide the directory service. The claimed method and system may also minimize user involvement because the public/private key encryption process may eliminate the need for a user to explicitly sign on to a server.
Patent CitationsCited PatentFiling datePublication dateApplicantTitleUS5005200Mar 7, 1989Apr 2, 1991Fischer Addison MPublic key/signature cryptosystem with enhanced digital signature certificationUS5473691Nov 5, 1993Dec 5, 1995Microsoft CorporationSystem and method for computer data transmissionUS5511122Jun 3, 1994Apr 23, 1996The United States Of America As Represented By The Secretary Of The NavyIntermediate network authenticationUS5563998Oct 19, 1990Oct 8, 1996Moore Business Forms, Inc.Forms automation system implementationUS5673319Feb 6, 1995Sep 30, 1997International Business Machines CorporationBlock cipher mode of operation for secure, length-preserving encryptionUS5729608Jul 27, 1993Mar 17, 1998International Business Machines Corp.Method and system for providing secure key distribution in a communication systemUS5746691Jun 6, 1997May 5, 1998Global Therapeutics, Inc.Method for polishing surgical stentsUS5778065Feb 8, 1996Jul 7, 1998International Business Machines CorporationMethod and system for changing an authorization password or key in a distributed communication networkUS5784562Oct 10, 1995Jul 21, 1998U S West Advanced Technologies, Inc.System for using a dialog session context to process electronic forms data on the world wide webUS5787172Feb 24, 1994Jul 28, 1998The Merdan Group, Inc.Apparatus and method for establishing a cryptographic link between elements of a systemUS5848244 *Dec 20, 1996Dec 8, 1998Mci Communications CorporationSystem and method for time-based real-time reconfiguration of a networkUS5854898Feb 24, 1995Dec 29, 1998Apple Computer, Inc.System for automatically adding additional data stream to existing media connection between two end points upon exchange of notifying and confirmation messages therebetweenUS5892904Dec 6, 1996Apr 6, 1999Microsoft CorporationCode certification for network transmissionUS5903721Mar 13, 1997May 11, 1999cha|Technologies Services, Inc.Method and system for secure online transaction processingUS5917480Jun 4, 1996Jun 29, 1999Microsoft CorporationIn a computer systemUS5944794Oct 2, 1995Aug 31, 1999Kabushiki Kaisha ToshibaUser identification data management scheme for networking computer systems using wide area networkUS5987376Jul 16, 1997Nov 16, 1999Microsoft CorporationSystem and method for the distribution and synchronization of data and state information between clients in a distributed processing systemUS6028938Dec 3, 1996Feb 22, 2000Shana CorporationSecure electronic forms permitting layout revisionUS6055234Jun 6, 1997Apr 25, 2000Nec CorporationATM switching control method and ATM switch having shared cell memoryUS6055236Mar 17, 1999Apr 25, 20003Com CorporationMethod and system for locating network services with distributed network address translationUS6078948Feb 3, 1998Jun 20, 2000Syracuse UniversityPlatform-independent collaboration backbone and framework for forming virtual communities having virtual rooms with collaborative sessionsUS6088700Aug 6, 1999Jul 11, 2000Larsen; Kenneth N.Automated forms completion for global information network applicationsUS6088805Feb 13, 1998Jul 11, 2000International Business Machines CorporationSystems, methods and computer program products for authenticating client requests with client certificate informationUS6101499Apr 8, 1998Aug 8, 2000Microsoft CorporationMethod and computer program product for automatically generating an internet protocol (IP) addressUS6108673Feb 25, 1997Aug 22, 2000International Business Machines CorporationSystem for creating a form from a template that includes replication blockUS6108687Mar 2, 1998Aug 22, 2000Hewlett Packard CompanySystem and method for providing a synchronized display to a plurality of computers over a global computer networkUS6128738Apr 22, 1998Oct 3, 2000International Business Machines CorporationCertificate based security in SNA data flowsUS6148405Nov 10, 1997Nov 14, 2000Phone.Com, Inc.Method and system for secure lightweight transactions in wireless data networksUS6154541Sep 30, 1997Nov 28, 2000Zhang; Jinglong FMethod and apparatus for a robust high-speed cryptosystemUS6155840Sep 18, 1998Dec 5, 2000At Home CorporationSystem and method for distributed learningUS6163809Dec 8, 1997Dec 19, 2000Microsoft CorporationSystem and method for preserving delivery status notification when moving from a native network to a foreign networkUS6175833Apr 22, 1998Jan 16, 2001Microsoft CorporationSystem and method for interactive live online voting with tallies for updating voting resultsUS6216110Feb 27, 1998Apr 10, 2001Microsoft CorporationSystem and method for publishing calendar information to a publicly accessible locationUS6229806Dec 30, 1997May 8, 2001Motorola, Inc.Authentication in a packet data systemUS6233606Dec 1, 1998May 15, 2001Microsoft CorporationAutomatic cache synchronizationUS6237025Dec 19, 1997May 22, 2001Collaboration Properties, Inc.Multimedia collaboration systemUS6237035Dec 18, 1997May 22, 2001International Business Machines CorporationSystem and method for preventing duplicate transactions in an internet browser/internet server environmentUS6247029May 1, 1998Jun 12, 2001International Business Machines CorporationWeb browser form enhancementsUS6269099Jul 1, 1998Jul 31, 20013Com CorporationProtocol and method for peer network device discoveryUS6279110Nov 10, 1997Aug 21, 2001Certicom CorporationMasked digital signaturesUS6308266Mar 4, 1998Oct 23, 2001Microsoft CorporationSystem and method for enabling different grades of cryptography strength in a productUS6327652Jan 8, 1999Dec 4, 2001Microsoft CorporationLoading and identifying a digital rights management operating systemUS6341349Oct 30, 1997Jan 22, 2002Hitachi, Ltd.Digital signature generating/verifying method and system using public key encryptionUS6363352Nov 13, 1998Mar 26, 2002Microsoft CorporationAutomatic scheduling and formation of a virtual meeting over a computer networkUS6367009Dec 17, 1998Apr 2, 2002International Business Machines CorporationExtending SSL to a multi-tier environment using delegation of authentication and authorityUS6367012Dec 6, 1996Apr 2, 2002Microsoft CorporationEmbedding certifications in executable files for network transmissionUS6397303Jun 24, 1999May 28, 2002International Business Machines CorporationData processing system, cache, and method of cache management including an O state for memory-consistent cache linesUS6405290Jun 24, 1999Jun 11, 2002International Business Machines CorporationMultiprocessor system bus protocol for O state memory-consistent dataUS6421673Dec 13, 1999Jul 16, 2002Novient, Inc.Method for mapping applications and or attributes in a distributed network environmentUS6424718Jun 11, 1997Jul 23, 2002International Business Machines CorporationData communications system using public key cryptography in a web environmentUS6424981Dec 15, 1999Jul 23, 2002Microsoft CorporationCustomization of network documents using customization informations stored on the server computerUS6526411Nov 15, 2000Feb 25, 2003Sean WardSystem and method for creating dynamic playlistsUS6526506Feb 25, 1999Feb 25, 2003Telxon CorporationMulti-level encryption access point for wireless networkUS6529932Apr 1, 1998Mar 4, 2003Microsoft CorporationMethod and system for distributed transaction processing with asynchronous message deliveryUS6578143Dec 18, 1998Jun 10, 2003Qualcomm IncorporatedMethod for negotiating weakened keys in encryption systemsUS6598083Dec 30, 1999Jul 22, 2003Intel CorporationSystem and method for communicating over a non-continuous connection with a device on a networkUS6600823Oct 16, 1997Jul 29, 2003Unisys CorporationApparatus and method for enhancing check securityUS6615348Apr 16, 1999Sep 2, 2003Intel CorporationMethod and apparatus for an adapted digital signatureUS6636899Sep 24, 1998Oct 21, 2003Xerox CorporationArchitecture for software for remote maintenance of a machine such as a copierUS6658568Oct 26, 1999Dec 2, 2003Intertrust Technologies CorporationTrusted infrastructure support system, methods and techniques for secure electronic commerce transaction and rights managementUS6671804 *Jun 12, 2000Dec 30, 2003Bbnt Solutions LlcMethod and apparatus for supporting authorities in a public key infrastructureUS6675205Jul 20, 2001Jan 6, 2004Arcessa, Inc.Peer-to-peer automated anonymous asynchronous file sharingUS6687755Jun 27, 2000Feb 3, 2004Microsoft CorporationSelectively utilizing an automatically generated internet protocol address in a networked environmentUS6701344Jul 31, 2000Mar 2, 2004The Boeing CompanyDistributed game environmentUS6714966Jul 31, 2000Mar 30, 2004The Boeing CompanyInformation delivery serviceUS6728753Nov 1, 1999Apr 27, 2004Microsoft CorporationPresentation broadcastingUS6732110Jun 27, 2001May 4, 2004International Business Machines CorporationEstimation of column cardinality in a partitioned relational databaseUS6745178Apr 28, 2000Jun 1, 2004International Business Machines CorporationInternet based method for facilitating networking among persons with similar interests and for facilitating collaborative searching for informationUS6782103 *Oct 25, 2000Aug 24, 2004Fujitsu Services LimitedCryptographic key managementUS6782294Feb 19, 2003Aug 24, 2004Arecont Intellectual Property Holdings, LlcInternet based distributed control systemUS6789189 *Feb 1, 2003Sep 7, 2004First Data CorporationManaging account database in ABDS systemUS6791582Dec 29, 2000Sep 14, 2004International Business Machines CorporationMethod and system for identifying and displaying information that is new or has been updated in a placeUS6801604Jun 25, 2002Oct 5, 2004International Business Machines CorporationUniversal IP-based and scalable architectures across conversational applications using web services for speech and audio processing resourcesUS6832322Jun 16, 2000Dec 14, 2004International Business Machines CorporationSystem and method for network address translation integration with IP securityUS6938166Sep 21, 1999Aug 30, 2005Thomson Licensing S.A.Method of downloading of data to an MPEG receiver/decoder and MPEG transmission system for implementing the sameUS6941366Jan 17, 2001Sep 6, 2005International Business Machines CorporationMethods, systems and computer program products for transferring security processing between processors in a cluster computing environmentUS6941384Aug 17, 2000Sep 6, 2005International Business Machines CorporationMethods, systems and computer program products for failure recovery for routed virtual internet protocol addressesUS6944672Jun 17, 2002Sep 13, 2005Cisco Technology, Inc.Method and system for processing fragments and their out-of-order delivery during address translationUS6957346Jun 15, 1999Oct 18, 2005Ssh Communications Security Ltd.Method and arrangement for providing security through network address translations using tunneling and compensationsUS6968179Jul 27, 2000Nov 22, 2005Microsoft CorporationPlace specific buddy list servicesUS7032242Mar 17, 1999Apr 18, 20063Com CorporationMethod and system for distributed network address translation with network security featuresUS7051202 *Jan 23, 2001May 23, 2006Nec CorporationApparatus and computer-recording medium for evaluation support of encryption algorithm strengthUS7129891Nov 21, 2003Oct 31, 2006Xerox CorporationMethod for determining proximity of devices in a wireless networkUS7134019Nov 13, 2001Nov 7, 2006Microsoft CorporationMethods and systems for unilateral authentication of messagesUS7216233Aug 14, 2000May 8, 2007Sun Microsystems, Inc.Apparatus, methods, and computer program products for filtering informationUS7370197Sep 12, 2002May 6, 2008Microsoft CorporationMethod and system for authenticating messagesUS7409544Mar 27, 2003Aug 5, 2008Microsoft CorporationMethods and systems for authenticating messagesUS7478120Apr 27, 2004Jan 13, 2009Xiaohai ZhangSystem and method for providing a peer indexing serviceUS7624264Jun 22, 2005Nov 24, 2009Microsoft CorporationUsing time to determine a hash extensionUS7929689Jun 30, 2004Apr 19, 2011Microsoft CorporationCall signsUS20010010720Dec 18, 2000Aug 2, 2001Kimball Bridget D.Multiple signature authentication in conditional access systemsUS20010013050Dec 20, 2000Aug 9, 2001Shah Niraj A.Buddy list aggregationUS20010019609Jan 23, 2001Sep 6, 2001Yukiyasu TsunooEncryption evaluation support system that can largely reduce evaluation time of encryption algorithm, and record medium recording its programUS20010035976Feb 13, 2001Nov 1, 2001Andrew PoonMethod and system for online presentations of writings and line drawingsUS20010053213May 15, 2001Dec 20, 2001International Business Machines CorporationTeleconferencing system and methodUS20020032765Jul 13, 2001Mar 14, 2002David PezzuttiIntelligent network providing network accss services (INP-NAS)US20020073204Dec 7, 2000Jun 13, 2002Rabindranath DuttaMethod and system for exchange of node characteristics for DATA sharing in peer-to-peer DATA networksUS20020097267Dec 20, 2001Jul 25, 2002Numedeon, Inc.Graphical interactive interface for immersive online communitiesUS20020133607Mar 6, 2002Sep 19, 2002Pekka NikanderAddress mechanisms in internet protocolUS20020140730Dec 29, 2000Oct 3, 2002International Business Machines CorporationMethod and system for indentifying and displaying information that is new or has been updated in a placeUS20020143989Aug 29, 2001Oct 3, 2002Microsoft CorporationPeer-to-peer name resolution protocol (PNRP) and multilevel cache for use therewithUS20020152380Apr 12, 2001Oct 17, 2002Microsoft CorporationMethods and systems for unilateral authentication of messagesUS20020152384Nov 13, 2001Oct 17, 2002Microsoft CorporationMethods and systems for unilateral authentication of messagesUS20040010688 *Jun 5, 2003Jan 15, 2004Natsume MatsuzakiAuthentication system and key registration apparatusUS20040064693 *Sep 26, 2002Apr 1, 2004Pabla Kuldipsingh A.Distributed indexing of identity information in a peer-to-peer networkUS20050010794 *Jul 19, 2004Jan 13, 2005Carpentier Paul R.Content addressable information encapsulation, representation, and transferUS20070055877 *Apr 6, 2004Mar 8, 2007Joakim PerssonSecurity in a communication networkUS20070245144 *Mar 15, 2005Oct 18, 2007Stephen WilsonSystem and Method for Anonymously Indexing Electronic Record SystemsUSRE36946Dec 5, 1996Nov 7, 2000Sun Microsystems, Inc.Method and apparatus for privacy and authentication in wireless networks* Cited by examinerNon-Patent CitationsReference1"About Presentation Broadcasting", http://office.microsoft.com/en-us/assistance/HP052411931033.aspx, (Jul. 1, 2005), 3 pages.2"Connecting and Extending Peer-to-Peer Networks", Lion Share White Paper; http://lionshare.its.psu.edu/main/info/docspresentation/LionshareWP.pdf, Lion Share WP.pdf, (Oct. 2004), 32 pages.3"Design Explorations", IBM Research; Social Computing Group, (Apr. 19, 2005), 4 pages.4"European Search Report", EP Application No. 05105417.9-2212, The Hague, (Aug. 17, 2006), 2 pages.5"Final Office Action", U.S. Appl. No. 10/242,705, (Feb. 9, 2007), 15 pages.6"Final Office Action", U.S. Appl. No. 10/882,079, (Aug. 4, 2008), 9 pages.7"Final Office Action", U.S. Appl. No. 10/882,079, (Feb. 5, 2010), 9 pages.8"Final Office Action", U.S. Appl. No. 11/159,555, (Apr. 20, 2011), 25 pages.9"Final Office Action", U.S. Appl. No. 11/159,555, (Aug. 3, 2010), 21 pages.10"Final Office Action", U.S. Appl. No. 11/159,555, (Nov. 12, 2009), 20 pages.11"Final Office Action", U.S. Appl. No. 11/175,951, (Mar. 12, 2009), 17 pages.12"Finding Friendly People Near Me", http://www.new2uk.org/Templates/n2uk-finding-home.html, (Jul. 1, 2005), 1 page.13"Foreign Office Action", Australian Application No. 2007240567, (May 9, 2011), 2 pages.14"Foreign Office Action", Chinese Application No. 200680024733.2, (May 24, 2010),13 pages.15"Foreign Office Action", Russian Application No. 2008141720, (May 3, 2011), 6 pages.16"Glossary for the Linux FreeS/WAN Project", 22 pages.17"IBM Lotus Instant Messaging and Web Conferencing", IBM Software-IBM Lotus Instant Messaging and Web Conferencing home page, (Apr. 19, 2005), 3 pages.18"IBM Workplace Collaboration Services Overview Guide", printed from ftp://ftp.lotus.com/pub/lotusweb/IGM-Workplace-collaboration-service-g224733301-118.pdf, (Jul. 1, 2005), 2 pages.19"Interoperable Home Infrastructure", Intel Technology Journal, vol. 6 Issue 4, ISSN 1535-766X, (Nov. 15, 2001), 78 pages.20"ITU-T recommendation X.690, Information Technology-ASN.1 Encoding Rules: Specification of Basic Encoding Distinguished Encoding Rules (BER), Canonical Encoding Rules (CER) and Distinguished Encoding Rules (DER)", International Telecommunication Union, (Jul. 2002), 36 pages.21"Meeting Maker", Meeting Maker printout;http://www.meetingmaker.com/products/meetingmaker/default.cfm, (Jul. 1, 2005), 2 pages.22"Minutes of IPSEC Working Group Meeting", IPSEC, 2.5.2 IP Security Protocol (IPsec), Proceedings of the 52nd Internet Engineering Task Force, Salt Lake City, USA, (Dec. 2001), 14 pages.23"MSN Launches New Internet Search Service Designed to Give More-Precise Answers in Less Time" http://www.microsoft.com/presspass/perss/2005/feb05/02-01NewEnginePR.mspx, (Feb. 1, 2005), 3 pages.24"Non Final Office Action", U.S. Appl. No. 11/175,951, (Jul. 29, 2008), 11 pages.25"Non-Final Office Action", U.S. Appl. No. 10/242,705, (Aug. 8, 2006),16 pages.26"Non-Final Office Action", U.S. Appl. No. 10/242,705, (Feb. 16, 2006),13 pages.27"Non-Final Office Action", U.S. Appl. No. 10/401,241, (Jan. 25, 2007), 6 pages.28"Non-Final Office Action", U.S. Appl. No. 10/401,241, (Oct. 19, 2007), 7 pages.29"Non-Final Office Action", U.S. Appl. No. 10/882,079, (Apr. 16, 2009),10 pages.30"Non-Final Office Action", U.S. Appl. No. 10/882,079, (Aug. 24, 2007), 9 pages.31"Non-Final Office Action", U.S. Appl. No. 11/159,555, (Apr. 9, 2009),15 pages.32"Non-Final Office Action", U.S. Appl. No. 11/159,555, (Mar. 17, 2010),18 pages.33"Non-Final Office Action", U.S. Appl. No. 11/159,555, (Nov. 19, 2010), 22 pages.34"Non-Final Office Action", U.S. Appl. No. 11/170,296, (Dec. 3, 2008),14 pages.35"Notice of Allowance", U.S. Appl. No. 10/242,705, (Dec. 17, 2007),12 pages.36"Notice of Allowance", U.S. Appl. No. 10/401,241, (Apr. 25, 2008), 6 pages.37"Notice of Allowance", U.S. Appl. No. 10/882,079, (Jun. 24, 2010), 7 pages.38"Notice of Allowance", U.S. Appl. No. 10/882,079, (Mar. 4, 2011), 8 pages.39"Notice of Allowance", U.S. Appl. No. 10/882,079, (Nov. 12, 2010), 7 pages.40"Notice of Allowance", U.S. Appl. No. 11/170,296, (Sep. 21, 2009), 2 pages.41"Notice of Allowance", U.S. Appl. No. 11/170,296, (Sep. 22, 2009), 2 pages.42"PCT International Search Report", Application No. PCT/US06/25342, (Feb. 6, 2008), 3 pages.43"Publication Related to Pastry", retrieved from http://research.microsoft.com/~antr/Pastry/pubs.htm on Jun. 23, 2005, 2 pages.44"Quicktime Broadcaster", http://www.apple.com/quicktime/broadcaster/, (Jul. 1, 2005), 3 pages.45"Restriction Requirement", U.S. Appl. No. 10/401,241, (Oct. 10, 2006), 8 pages.46"Secure Hash Standard", Federal Information Processing Standards Publication 180-1, available at ,(Apr. 17, 1995),16 pages.47"Security and Mobile IPv6", IETF Proceedings, (Mar. 2001), 1 page.48"The Gnutella Protocol Specification v0.4", http://www.clip2.com; published in 2001 per http://www.peer-to-peer.info/biblioqraphy/clip22001gnutella, 10 pages.49"What is AOL Messenger", retrieved from on Jul. 1, 2005, 2 pages.50"Written Opinion for PCT/US2007/009887", (Oct. 22, 2007), 4 pages.51"Written Opinion for PCT/US2007/010092", (Oct. 15, 2007), 4 pages.52"Yahoo! Address Book explanation", retrieved from on Jul. 1, 2005, 2 pages.53"Foreign Issue Notification", Chinese Application No. 200510082279.3, (Jan. 26, 2011), 4 pages.54"Foreign Office Action", Chinese Application No. 200510082279.3, (Jun. 5, 2009), 11 pages.55"Foreign Office Action", Chinese Application No. 200510082279.3, (May 26, 2010), 7 pages.56"Foreign Office Action", European Application No. 05105417.9-1245, (Dec. 9, 2008), 7 pages.57"Foreign Office Action", European Application No. 05105417.9-1245, (Jun. 27, 2007), 7 pages.58"Foreign Office Action", European Application No. 05105417.9-1245, (Sep. 10, 2009), 6 pages.59"Foreign Office Action", Japanese Application No. 2005-184991, (Jul. 19, 2011), 6 pages.60"Foreign Office Action", Korean Application No. 10-2005-56988, (Jun. 28, 2011), 5 pages.61"IBM Lotus Instant Messaging and Web Conferencing", IBM Software�IBM Lotus Instant Messaging and Web Conferencing home page, (Apr. 19, 2005), 3 pages.62"IBM Workplace Collaboration Services Overview Guide", printed from ftp://ftp.lotus.com/pub/lotusweb/IGM�Workplace�collaboration�service�g224733301�118.pdf, (Jul. 1, 2005), 2 pages.63"ITU-T recommendation X.690, Information Technology�ASN.1 Encoding Rules: Specification of Basic Encoding Distinguished Encoding Rules (BER), Canonical Encoding Rules (CER) and Distinguished Encoding Rules (DER)", International Telecommunication Union, (Jul. 2002), 36 pages.64"Notice of Allowance", Chinese Application No. 200510082279.3, (Sep. 15, 2010), 4 pages.65"Publication Related to Pastry", retrieved from http://research.microsoft.com/�antr/Pastry/pubs.htm on Jun. 23, 2005, 2 pages.66"Secure Hash Standard", Federal Information Processing Standards Publication 180-1, available at <http://www.itl.nist.gov/fipspubs/fip180-1.htm>,(Apr. 17, 1995),16 pages.67"What is AOL Messenger", retrieved from <http://www.aol.com.au/site/website/aolproducts/aim/whatis.php> on Jul. 1, 2005, 2 pages.68"Yahoo! Address Book explanation", retrieved from <http://messenger.yahoo.com/addressbook.php> on Jul. 1, 2005, 2 pages.69Ajmani et al., "ConChord: Cooperative SDSI Certificate Storage and Name Resolution," First International Workshop on Peer-to-Peer Systems (IPTPS), Mar. 2002.70Anderson, R et al., "Security Policies", 43 pages.71Arkko, Jari et al., "Securing IPv6 Neighbor Discovery And Router Discovery", In Proc. 2002 ACM Workshop on Wireless Security (WiSe), (Sep. 2002), pp. 77-86.72Aura, T "Cryptographically Generated Addresses (CGA)", RFC 3972, (Mar. 2005), 21 pages.73Back, Adam "Hashcash-A Denial of Service Counter-Measure", (Aug. 1, 2002), 10 pages.74Back, Adam "The Hashcash Proof-of-Work Function", Draft-Hashcash-back-00, Internet-Draft Created, (Jun. 2003), 5 pages.75Back, Adam "Hashcash�A Denial of Service Counter-Measure", (Aug. 1, 2002), 10 pages.76Balfanz, Dirk et al., "Talking to Strangers: Authentication in Ad-Hoc Wireless Networks", In Symposium on Network and Distributed Systems Security, San Diego, CA; http://citeseer.ist.psu.edu/balfanz02talking.htm, (Mar. 11, 2002), 14 pages.77Balke et al., "Caching for Improved Retrieval in Peer-to-Peer Networks," L3S Research Center and University of Hannover, 6 pages; http://www.13s.de/apis/paper/gi-itg05.pdf (2005).78Bassi, et al., "Towards an IPv6-based Security Framework for Distributed Storage Resources", Communications and Multimedia Security CMS 2003, (Oct. 2, 2003), 9 pages.79Beaver, K., "Are P2P Applications Worth the Risk?" 2005 TechTarget, http://searchsecurity.techtarget.com/tip/1,289483,sid14-gci929175,00.html, 5 pages.80Beaver, K., "Are P2P Applications Worth the Risk?" 2005 TechTarget, http://searchsecurity.techtarget.com/tip/1,289483,sid14�gci929175,00.html, 5 pages.81Benantar, M "The Internet Public Key Infrastructure", IBM Systems Journal, vol. 40, No. 3, (2001), pp. 648-665.82Blaze, et al., "The Keynote Trust-Management System Version 2", IETF Network Working Group, (Sep. 1999), 38 pages.83Bouvin, Niels O., "Designing User Interfaces for Collaborative Web-Based Open Hypermedia", in Proceedings of the Eleventh ACM Conference on Hypertext and Hypermedia; San Antonio, TX, (2000), pp. 230-231.84Boyer, David et al., "Virtual Social Clubs: Meeting Places for the Internet Community", International Conference on Multimedia Computing and Systems; Florence, Italy, (Jun. 7-11, 1999), pp. 297-301.85Burrows, Martin et al., "A Logic of Authentication", Proceedings of the Royal Society of London Series A, 426, (1989), 51 pages.86Campbell, C., "Securing Your Peer-to-Peer Networks," TechTarget, Sep. 12, 2001, http://searchsecurity.techtarget.com/originalContent/0,289142,sid14-gci769396,00.html?MOTT=9.25.87Campbell, C., "Securing Your Peer-to-Peer Networks," TechTarget, Sep. 12, 2001, http://searchsecurity.techtarget.com/originalContent/0,289142,sid14�gci769396,00.html?MOTT=9.25.88Castro, Miguel et al., "Secure Routing for Structured Peer-to-Peer Overlay Networks", Proceedings of the 5th Usenix Symposium on Operating Systems Design and Implementation, Boston, MA. Retrieved from > on Mar. 11, 2011., (Dec. 2002), 33 pages.89Castro, Miguel et al., "Topology-Aware Routing in Structured Peer-to-Peer Overlay Networks", Technical Report MSR-TR-2002-82, Microsoft Research, Microsoft Corporation, retrieved from http://www.research.microsoft.com in 2009, (2009),19 pages.90Castro, Miguel et al., "Secure Routing for Structured Peer-to-Peer Overlay Networks", Proceedings of the 5th Usenix Symposium on Operating Systems Design and Implementation, Boston, MA. Retrieved from <<http://www.cs.rice.edu/�dwallach/pub/osdi2002.pdf>> on Mar. 11, 2011., (Dec. 2002), 33 pages.91Chen et al., "A Scalable Semantic Indexing Framework for Peer-to-Peer Information Retrieval," 8 pages; http://hdir2005.isti.cnr.it/camera-ready/7.Chen.pdf (2005).92Cheng, Lili et al., "Hutchworld: Lessons Learned. A Collaborative Project: Fred Hutchsinson Cancer Research Center & Microsoft Research", In Proceedings of Virtual World Conference 2000, Paris, France; http://research.microsoft.com/scg/papers/hutchvw2000.pdf, (Jun. 2000), pp. 1-12.93Cheng, P et al., "Design and Implementation of Modular Key Management Protocol and IP Secure Tunnel on AIX", (Jun. 1995), 15 pages.94Cheng, P. "An Architecture for the Internet Key Exchange Protocol", IBM Systems Journal, vol. 40, No. 3, (2001), pp. 721-746.95Cheng, P.C. et al., "A Security Architecture for the Internet Protocol", vol. 38 No. 1, (1998), pp. 42-60.96Cheung, Tony "Chatopus for Palm OS, Using IM Bots Jabber", Chatopus-Palm OS Instant Messaging Client for XMPP/Jabber; http://www.chatopus.com/articles/bots.html, (Oct. 20, 2002), 6 pages.97Chien, E., "Malicious Threats of Peer-to-Peer Networking," Symantec, http://enterprisesecurity.symantec.com/PDF/malicious-threats.pdf (Dec. 2001).98Chien, E., "Malicious Threats of Peer-to-Peer Networking," Symantec, http://enterprisesecurity.symantec.com/PDF/malicious�threats.pdf (Dec. 2001).99Clark, D. "IP Datagram Reassembly Algorithms", RFC 815 (Jul. 1982), 11 pages.100Cugola, et al., "Peer to Peer for Collaborative Applications", In proceedings ofthe 22nd International Conference on Distributed Computing Systems Workshops (ICDCS'02), (Jul. 2002), pp. 359-364.101Cugola, et al., "Peer to Peer for Collaborative Applications", In proceedings ofthe 22nd International Conference on Distributed Computing Systems Workshops (ICDCS'02), (Jul. 2002), pp. 359-364.102Dabek et al.,Building Peer-to-Peer Systems With Chord, a Distributed Lookup Serivce, at MIT Laboratory for Computer Science, 6 pages, at http://pdos.lcs.mit.edu/chord (May 2001).103Deering, S et al., "Version 6 (IPv6) Specification", RFC2460 (Dec. 1998), 35 pages.104DeFigueiredo et al., "Analysis of Peer-to-Peer Network Security Using Gnutella," http://www.cs.berkeley.edu/~daw/teaching/cs261-f02/reports/defig.pdf (2002).105DeFigueiredo et al., "Analysis of Peer-to-Peer Network Security Using Gnutella," http://www.cs.berkeley.edu/�daw/teaching/cs261-f02/reports/defig.pdf (2002).106Dorohonceanu, Bogdan et al., "A Desktop Design for Synchronous Collaboration", in Proceedings of the Graphics Interface'99 (GI'99); Kingston, Ontario, Canada, (Jun. 1999), 9 pages.107Druschel et al., PAST: A large-scale, persistent peer-to-peer storage utility, at Rice University and Microsoft Research, 6 pages (Nov. 2001).108Dryer, D.C. "At What Cost Pervasive? A Social Computing View of Mobile Computing Systems", IBM Research: vol. 38, No. 4, Pervasive Computing, (1999), 25 pages.109Duhr, Peter "Oberflachenelemente in interaktiven and kooperativen anwendungen", Universitat Oldenburg, Department of Information Systems Thesis, (Aug 2000), 107 pages.110Eastlake, "Domain Name System Security Extensions", IETF Network Working Group, (Mar. 1999), 44 pages.111Ellison, C., et al., Simple Public Key Certificate, (Internet Draft 1999), at http://www.world.std.com/~cme/spki.txt (Aug. 6, 2001).112Ellison, C., et al., Simple Public Key Certificate, (Internet Draft 1999), at http://www.world.std.com/�cme/spki.txt (Aug. 6, 2001).113Ellison, C., et al., SPKI Certificate Theory, (The Internet Society 1999), at http://www.ietf.org/rfc/rfc2693.txt?number=2693 (Aug. 6, 2001).114Ellison, C., SPKI Requirements, (The Internet Society 1999), at http://www.ietf.org/rfc/rfc2692.txt?number=2692 (Aug. 6, 2001).115Erdelsky, P., The Birthday Paradox, EFG, at http://www.efgh.com/math/birthday.htm (Mar. 8, 2002).116Farnham, Shelly et al., "Supporting Sociability in a Shared Browser", In Proceedings of Interact Conference, Tokyo, Japan;http://research.microsoft.com/scg/papers/sharedbrowsinginteract.pdf, (Jul. 2001), pp. 1-8.117Ferguson, et al., "Network Ingress Filtering: Defeating Denial of Service Attacks Which Employ IP Source Address Spoofing", IETF Network Working Group, (May 2000), 10 pages.118Garcia, Octavio et al., "Extending a Collaborative Architecture to Support Emotional Awareness". EBAA '99�Workshop on Emotion-Based Agent Architectures, (May 2, 1999), pp. 46-52.119Gehrmann, C et al., "Manual Authentication for Wireless Devices", (Jan. 23, 2004), pp. 1-9.120Greenberg, Saul "Collaborative Interfaces for the Web", in Human Factors and Web Development, (Forsythe, et al., eds.) Chapter 18, LEA Press, (1997), pp.241-253.121Greenberg, Saul et al., "Using a Room Metaphor to Ease Transitions in Groupware", University of Calgary, Department of Computer Science, Research Report 98/611/02, (1998), 32 pages.122Gutwin, Carl "Workspace Awareness in Real-Time Distributed Groupware", The University of Calgary, Department of Computer Science, Ph.D. Thesis, (Dec 1997), 292 pages.123Handley, M et al., "SIP: Session Initiation Protocol", Retrieved from:<ftp://ftp.isl.edu/in-notes/rfc2543.txt> on Aug. 26, 2004, (Mar. 1999), 143 pages.124Harkins, D et al., "The Internet Key Exchange (IKE)", Network Working Group RFC 2409, (Nov. 98), 39 pages.125Higginson, P. et al., "Development of Router Clusters to Provide Fast Failover in IP Networks", Digital Technical Journal vol. 9, No. 3, (1997), pp. 32-41.126Hinden, et al., "IP Version 6 Addressing Architecture", (25 pages),Feb. 2, 2001.127Hinden, et al., "IP Version 6 Working Group Minutes", Minneapolis IETF, (Mar. 18, 2002), 13 pages.128Housley et al., "Internet X.509 Public Key Infrastructure Certificate and CRL Profile." Network Working Group (Jan. 1999), pp. 1-121, retrieved from http://www..ietf.org/rfc/rfc2459.txt?number=2459 Sep. 18, 2003.129Housley, et al., "Internet X.509 Public Key Infrastructure Certificate and Certificate Revocation List (CRL) Profile", IETF Network Working Group, (Apr. 2002), 121 pages.130Housley, R "Using Advanced Encryption Standard (AES) CCM Mode with Ipsec Encapsulating Security Payload (ESP", Comments: 4309, (Dec. 2005), 13 pages.131Huitema, "Ipv6 The New Internet Protocol", Prentice Hall PTR, ISBN 0-13-850505-5, (1998), 10 pages.132International Search Report for PCT/US2007/010092 mailed Oct. 15, 2007.133J. Schlyter & W. Griffin, "Using DNS To Securely Publish Secure Shell (SSH) Key Fingerprints,"The Internet Society (2006), ftp://ftp.rfc-editor.org/in-notes/rfc4255.txt, dated Oct. 2, 2006, 9 pages.134Jianming Lv et al., "WonGoo: A Pure Peer-to-Peer Full Text Information Retrieval System Based On Semantic Overlay Networks;" Institute of Computing Technology Chinese Academy of Sciences Beijing, China; Proceeding of the Third IEEE International Symposium on Network Computing and Applications (NCA '04); dated Apr. 2004; 8 pages; http://portal.acm.org/citation.cfm?id=1025126.1025936.135Johnson, et al., "Mobility Support in IPv6", (Nov. 17, 2000),115 pages.136Joseffson, S et al., "The Base16, Base32, and Base64 Data Encodings", IETF Standard, Internet Engineering Task Force, IETF, CH, (Jul. 2003), 14 pages.137Karn, et al., "Photuris: Session-Key Management Protocol", IETF Network Working Group, (Mar. 1999), 75.138Kaufman, C "Internet Key Exchange (IKEv2) Protocol", RFC 4306, (Dec. 2005), 93 pages.139Kempf, et al., "Threat Analysis for IPv6 Public Multi-Access Links", draft-kempf-ipng-netaccesss-threats-00.txt, (Nov. 2001), 8 pages.140Kent, C et al., "Fragmentation Considered Harmful", Computer Communication Review (Association of Computer Machinery), 25(1), (Jan. 1995),13 pages.141Kent, et al., "IP Encapsulating Security Payload (ESP)", Network Working Group, Comments 4303, (Dec. 2005), 42 pages.142Kent, S "IP Authentication Header", Network Working Group, Comments: 4302, (Dec. 2005), 35 pages.143Kent, S "Security Architecture for the Internet Protocol", Network Working Group, Comments: 4301, (Dec. 2005),102 pages.144Kent, S et al., "IP Encapsulating Security Payload (ESP)", Network Working Group RFC 2406, 9Nov. 1998), 21 pages.145Kent, S. "Security Architecture for the Internet Protocol", Retrieved from: <http://rfc.net/rfc2401.html> on Aug. 7, 2007, RFC2401 Network Working Group, (Nov. 1998), 66 pages.146Kim et al., "A Secure Platform for Peer-to-Peer Computing in the Internet," Proceedings of the 35th Hawaii International Conference on System Sciences, IEEE Computer Society, 2002, pp. 3948-3957.147Kindberg, Tim "Mushroom: A Framework for Collaboration and Interaction Across the Internet", Proceedings of the Fifth ERCIM Workshop on CSCW and the Web(St. Augustin, Germany), (Feb. 1996), 11 pages.148Kollock, Peter et al., "Managing the Virtual Commons: Cooperation and Conflict in Computer Communities", University of California, Los Angeles; http://research.microsoft.com/scg/papers/KollockCommons.htm, (1996), 18 pages.149Kollock, Peter et al., "The Economies of Online Cooperation: Gifts and Public Goods in Cyberspace", Communities in Cyberspace; http://www.sscnet.ucla.edu/soc/faculty/kollock/papers/economies.htm, (1998), pp. 1-17.150Koskiahde, T "Security in Mobile IPv6", (Apr. 18, 2002), pp. 1-16.151Laganier, J "Using IKE with IPv6 Cryptographically Generated Address", Network Working Group, Internet-Draft, (Feb. 24, 2003), pp. 1-14.152Laganier, J "Using IKE with IPv6 Cryptology Generated Address", Network Working Group, Internet-Draft, (Jul. 8, 2007), 21 pages.153Lai et al., Measuring Link Bandwidths Using a Deterministic Model of Packet Delay, at Department of Computer Science at Stanford University, 13 pages (Oct. 2000).154Langley, A., The Freenet Protocol, The Free Network Project, at http://freenet.sourceforge.net/index/php?page=protocol (May 21, 2001).155Lee, Jang H., et al., "Supporting Multi-User Multi-Applet Workspaces in CBE", In Proceedings of the ACM 1996 Conference on Computer Supported Cooperative Work; Cambridge, MA, (1996), pp. 344-353.156Link, B et al., "RTP Payload Format for AC-3 Audio", RFC 4148 (Oct. 2005), 13 pages.157Liscano, Ramiro "Presence and Awareness Services", Ramiro Liscano, Professor, SITE, University of Ottawa, Available at <http://read.pudn.com/downloads103/doc/comm/421942/PresenceAwarenessServices.pdf>,(Jun. 11, 2003), 89 pages.158Maughan, et al., "Internet Security Association and Key Management Protocol (ISAKMP)", The Internet Society, RFC 2408, (Nov. 1998), 81 pages.159Mazieres et al., "Separating Key Management from File System Security," Operating Systems Review ACM, vol. 33, No. 5, Dec. 1999, pp. 124-139.160Mazieres, et al., "Separating Key Management From File System Security", Operating Systems Review ACM, vol. 33, No. 5, (Dec. 1999), pp. 124-139.161McCune, Jonathan M., et al., "Seeing-Is-Believing: Using Camera Phones for Human-Verifiable Authentication", School of Computer Science, Carnegie MEllon University, Available at <http://reports-archive.adm.cs.cmu.edu/anon/2004/CMU-CS-04-174.pdf>, (Nov. 2004), pp. 1-20.162Mills, "Simple Network Time Protocol (SNMP) Version 4 for IPv6 and OSI", RFC2030, (Oct. 1996), 19 pages.163Montenegro, et al., "Statistically Unique and Cryptographically Verifiable Identifiers and Addresses", In Proc. ISOC Symposium on Network and Distributed System Security (NDSS 2002), San Diego, (Feb. 2002), 13 pages.164Moskowitz, "Host Identity Payload and Protocol", available at <http://tools.ietf.org/html/draft-moskowitz-hip-04>, (Jul. 2001), 18 pages.165Narten, et al., "Neighbor Discovery For IP Version 6 (IPv6)", IETF Network Working Group, (Dec. 1998), 87 pages.166Narten, et al., "Privacy Extensions for Stateless Address Autoconfiguration in IPv6", IETF Network Working Group, (Jan. 2001),16 pages.167Nikander, "A Scaleable Architecture for IPv6 Address Ownership", Internet Draft, (Mar. 2001), 27 pages.168Nikander, et al., "Binding Authentication Key Establishment Protocol for Mobile IPv6", Draft perkins-bake-o1-txt, (Jul. 2, 2001), 42 pages.169Nikander, et al., "Threat Models Introduced by Mobile IPv6 and Requirements for Security in Mobile IPv6", draft-team-mobileipmipv6-sec-regts-00.txt, (Sep. 24, 2001), 32 pages.170Nir, Y "Repeated Authentication in Internet Key Exchange (IKEv2) Protocol", RFC 4478, (Apr. 2006), 6 pages.171Nordmark, "Allocating bit in IID for Mobile IPv6", http://ietf.org/jproceedings/02mar/slides/ipv6-13.pdf, (Mar. 2002), 8 pages.172Nordmark, "Reserving Space in the Interface ID", http://ietf.org/proceedings/02mar/slides/ipv6-14.pdf, (Mar. 2002), 6 pages.173Okazaki, et al., "Securing Mipv6 Binding Updates Using Address Based Keys (Abks)", Internet-Draft, (Oct. 2002), 25 pages.174O'Shea, et al., "Child-Proof Authentication for MIPv6 (CAM)", ACM Computer Communications Review 31(2), (Apr. 2001), 5 pages.175Perkins, "IP Mobility Support", RFC2002, (Oct. 1996), 74 pages.176Red-Black Tree, National Institute of Standards and Technology, at http://www.nist.gov/dads/HTML/redblack.html (Mar. 5, 2002).177Roe, et al., "Authentication of Mobile IPv6 Binding Updates and Acknowledgments", Internet Draft IETF Mobile IP Working Group, (Feb. 2002), 23 pages.178Rowstron et al., Pastry: Scalable, distributed object location and routing for large-scale peer-to-peer systems, at Microsoft Research, Ltd., St. George House and Rice University, 20 pages (Nov. 2001).179Rowstron et al., SCRIBE: The design of a large-scale event notification infrastructure, at Microsoft Research, Ltd., St. George House and Rice University, 20 pages (2001).180Rowstron et al., Storage management and caching in PAST, a large-scale, persistent peer-to-peer storage utility, at Microsoft Research, Ltd., St. George House and Rice University, 14 pages (2001).181Savola, "Security of IPv6 Routing Header and Home Address Options", Internet Draft, IETF, (Dec. 2002),18 pages.182Shamir, "Identity-Based Cryptosystems and Signature Schemes", In Advances in Cryptology: Proc. CRYPTO 84, vol. 196 of LNCS., (1998), pp. 47-53.183Shannon, C et al., "Characteristics of Fragmented IP Traffic on Internet Links", Internet Measurement Conference, (2001), pp. 83-97.184Tannenbaum, AS "Computer Networks", Chapter 4, Prentice-Hall, (1989), 76 pages.185Thomas, "Binding Updates Security", draft-thomas-mobileip-bu-sec-00.txt, (Nov. 2, 2001),13 pages.186Thomson, et al., "IPv6 Stateless Address Autoconfiguration", RFC1971, http://www.ietf.org/rfc1971.txt, (Apr. 11, 2006), 22 pages.187Thomson, et al., "IPv6 Stateless Address Autoconfiguration", RFC2462, (Dec. 1998), 24 pages.188Van De Snapschout, JLA "The Sliding Window Protocol Revisited", Formal Aspects of Computing, vol. 7, (1995), pp. 3-17.189Written Opinion for PCT/US2007/010092 mailed Oct. 15, 2007.Referenced byCiting PatentFiling datePublication dateApplicantTitleUS8660257 *Dec 23, 2009Feb 25, 2014Bce Inc.Method and system for configuring a contact database associated with a userUS20100158226 *Dec 23, 2009Jun 24, 2010Jonathan Allan ArsenaultMethod and system for configuring a contact database associated with a userUS20120311339 *Aug 8, 2012Dec 6, 2012David IrvineMethod for storing data on a peer-to-peer network* Cited by examinerClassifications U.S. Classification713/150, 713/175, 713/193, 713/165, 713/168International ClassificationH04L29/00Cooperative ClassificationH04L2209/80, H04L9/3247, H04L9/3236, H04L63/0823European ClassificationH04L9/32S, H04L63/08CLegal EventsDateCodeEventDescriptionFeb 28, 2012CCCertificate of correctionMay 22, 2006ASAssignmentOwner name: MICROSOFT CORPORATION, WASHINGTONFree format text: ASSIGNMENT OF ASSIGNORS INTEREST;ASSIGNORS:SIDHU, GURSHARAN S.;HORTON, NOAH;SINGHAL, SANDEEP K.;REEL/FRAME:017653/0336;SIGNING DATES FROM 20060420 TO 20060421Free format text: ASSIGNMENT OF ASSIGNORS INTEREST;ASSIGNORS:SIDHU, GURSHARAN S.;HORTON, NOAH;SINGHAL, SANDEEP K.;SIGNING DATES FROM 20060420 TO 20060421;REEL/FRAME:017653/0336RotateOriginal ImageGoogle Home - Sitemap - USPTO Bulk Downloads - Privacy Policy - Terms of Service - About Google Patents - Send FeedbackData provided by IFI CLAIMS Patent Services©2012 Google