Source: http://www.google.fr/patents/US8640253
Timestamp: 2017-11-25 09:40:11
Document Index: 484626339

Matched Legal Cases: ['§120', 'Application No. 07719535', 'Application No. 07719535', 'Application No. 102004040312', 'Application No. 0418565', 'Application No. 0418565', 'Application No. 0418565', 'Application No. 07719535', 'art 11', 'art 11', 'Application No. 200780020042', 'Application No. 2011', 'Application No. 2', 'Application No. 2', 'Application No. 2', 'Application No. 2', 'Application No. 2', 'Application No. 200780020042', 'Application No. 200780020042', 'Application No. 200780020042', 'Application No. 200780020042', 'Application No. 10', 'Application No. 2009', 'Application No. 0418565']

Brevet US8640253 - Method and apparatus for synchronizing an adaptable security level in an ... - Google Brevets
A method of communicating in a secure communication system, comprises the steps of assembling as message at a sender, then determining a security level, and including an indication of the security level in a header of the message. The message is then sent to a recipient....http://www.google.fr/patents/US8640253?utm_source=gb-gplus-shareBrevet US8640253 - Method and apparatus for synchronizing an adaptable security level in an electronic communication
Numéro de publication US8640253 B2
Numéro de demande US 13/551,869
Autre référence de publication CA2478274A1, CA2478274C, DE102004040312A1, US8245279, US9253161, US9774609, US20050081032, US20120284800, US20140181990, US20160127385
Numéro de publication 13551869, 551869, US 8640253 B2, US 8640253B2, US-B2-8640253, US8640253 B2, US8640253B2
Citations de brevets (67), Citations hors brevets (57), Classifications (11), Événements juridiques (3)
US 8640253 B2
generating a plurality of frames for communication destined to a recipient, each of the plurality of frames includes a header identifying a security level applied to associated data; and
dynamically updating security levels associated with the plurality of frames based on acknowledgement messages from the recipient indicating expected security levels,
wherein the plurality of frames includes a first frame and a second frame, and dynamically updating security levels comprises:
transmitting, to the recipient, the first frame including a first header and first data, the first header identifying a first security level applied to the first data;
receiving, from the recipient, an acknowledgement message identifying an expected security level;
determining a second security level different from the first security level based on the received expected security level; and
transmitting, to the recipient, a second frame including a second header and second data, the second header identifying the second security level applied to the second data.
2. The method of claim 1, wherein the second security level is a security level higher or lower than the first security level.
3. The method of claim 1, further comprising encrypting the first data in accordance with the first security level.
4. The method of claim 1, further comprising signing the first frame in accordance with the first security level.
transmitting the plurality of frames to a plurality of recipients including the recipient; and
dynamically updating security levels associated with the plurality of frames based on acknowledgement messages from the plurality of recipients indicating expected security levels.
6. The method of claim 5, where each security level is selected to satisfy the received expected security levels.
7. The method of claim 1, each of the expected security levels include a minimum security level of an associated recipient.
8. The method of claim 1, where each of the security levels is different.
wherein the plurality of frames includes a first frame and a second frame, and dynamically updating security levels includes:
10. The computer program product of claim 9, wherein the second security level is a security level higher or lower than the first security level.
11. The computer program product of claim 9, the operations further comprising encrypting the first data in accordance with the first security level.
12. The computer program product of claim 9, the operations further comprising signing the first frame in accordance with the first security level.
13. The computer program product of claim 9, the operations comprising:
dynamically modifying security levels associated with the plurality of frames based on acknowledgement messages from the plurality of recipients indicating expected security levels.
14. The computer program product of claim 13, each of the expected security levels include minimum security levels of an associated recipient.
15. The computer program product of claim 13, each security level is selected to satisfy the received expected security levels.
16. The computer program product of claim 9, each of the security levels is different.
generate a plurality of frames for communication destined to a recipient, each of the plurality of frames includes a header identifying a security level applied to associated data; and
dynamically update security levels associated with the plurality of frames based on acknowledgement messages from the recipient indicating expected security levels,
receiving, from the recipient, an acknowledgement message including information identifying an expected security level;
18. The computing device of claim 17, wherein the second security level is a security level higher or lower than the first security level.
19. The computing device of claim 17, the one or more processors configured to encrypt the first data in accordance with the first security level.
20. The computing device of claim 17, the one or more processors configured to sign the first frame in accordance with the first security level.
21. The computing device of claim 17, the one or more processors configured to:
transmit the plurality of frames to a plurality of recipients including the recipient; and
dynamically modify security levels associated with the plurality of frames based on acknowledgement messages from the plurality of recipients indicating expected security levels.
22. The computing device of claim 21, each of the expected security levels include a minimum security level of an associated recipient.
23. The computing device of claim 21, each security level is selected to satisfy the received expected security levels.
24. The computing device of claim 17, each of the security levels is different.
25. A security method for communicating in a communication network, the method comprising:
obtaining expected security level data for a plurality of correspondents, wherein the expected security level data indicate that two or more of the plurality of correspondents have different expected security levels;
determining, by operation of one or more processors, a group security level that is acceptable to all of the plurality of correspondents based on the expected security level data; and
obtaining a frame for transmission to the plurality of correspondents, the frame includes data and a header indicating a security level for the frame, wherein the security level for the frame meets the group security level.
26. The method of claim 25, wherein the correspondents are intermediate nodes in the communication network, the intermediate nodes are configured to forward the frame to one or more recipients.
27. The method of claim 25, wherein the correspondents are intended recipients of the frame.
28. The method of claim 25, wherein the expected security level data includes a set of expected security levels, and the method comprises:
an intermediate node in the communication network performing an ordering of the set; and
the intermediate node sending a result of the ordering to a sender of the frame.
29. The method of claim 28, wherein the ordering is a Cartesian product of a natural ordering for encryption and a natural ordering for authentication.
30. The method of claim 25, wherein the expected security level data includes a partial ordering of a set of expected security levels.
31. The method of claim 25, wherein the security level for the frame is either higher than the group security level or equal to the group security level.
32. A computer program product encoded on a tangible, non-transitory storage medium, the product comprising computer readable instructions for causing one or more processors to perform operations comprising:
determining, based on the expected security level data, a group security level that is acceptable to all of the plurality of correspondents; and
33. The computer program product of claim 32, wherein the correspondents are intermediate nodes in a communication network, and the intermediate nodes are configured to forward the frame to a recipient.
34. The computer program product of claim 32, wherein the correspondents are intended recipients of the frame.
35. The computer program product of claim 32, wherein the expected security level data includes a set of expected security levels, and the operations include:
performing an ordering of the set at an intermediate node in a communication network; and
sending a result of the ordering from the intermediate node to a sender of the frame.
36. The computer program product of claim 35, wherein the ordering is a Cartesian product of a natural ordering for encryption and a natural ordering for authentication.
37. The computer program product of claim 32, wherein the expected security level data includes a partial ordering of a set of expected security levels.
38. A computing device in a communication network, the computing device comprising:
one or more physical processors processor configured to:
obtain expected security level data for a plurality of correspondents, wherein the expected security level data indicate that two or more of the plurality of correspondents have different expected security levels;
determine, based on the expected security level data, a group security level that is acceptable to all of the plurality of correspondents; and
obtain a frame for transmission to the plurality of correspondents, the frame includes data and a header indicating a security level for the frame, wherein the security level for the frame meets the group security level.
39. The computing device of claim 38, wherein the computing device is a sender of the frame, and the correspondents are intermediate nodes in the communication network.
40. The computing device of claim 38, wherein the computing device is an intermediate node in a communication network, the correspondents are intended recipients of the frame, and obtaining the frame includes receiving the frame from a sender of the frame.
41. The computing device of claim 40, wherein the expected security level data includes a set of expected security levels, and the one or more processors are configured to:
send a result of the ordering to the sender of the frame.
42. The computing device of claim 41, wherein the ordering includes a Cartesian product of a natural ordering for encryption and a natural ordering for authentication.
43. The computing device of claim 38, wherein the expected security level data includes a partial ordering of a set of expected security levels.
This application claims priority under 35 USC §120 to U.S. patent application Ser. No. 10/921,161, filed on Aug. 19, 2004, which claims priority to U.S. Patent Application Ser. No. 60/495,874, filed on Aug. 19, 2003, the entire contents of which are hereby incorporated by reference.
US5099517 * 29 juin 1990 24 mars 1992 Digital Equipment Corporation Frame status encoding for communication networks
US7107335 * 11 août 1999 12 sept. 2006 Alasi Di Arcieri Franco & C. S.A.S. Network access control device through fast recognition of application frames
US7447313 * 18 déc. 2001 4 nov. 2008 Irdeto Eindhoven B.V. Pointers to encrypted data in RTP header
US20020090086 * 18 déc. 2001 11 juil. 2002 Van Rijnsoever Bartholomeus Johannes Pointers to encrypted data in RTP header
1 "Transmission Control Protocol"; RFC 0973; Darpa Internet Program, Information Sciences Institute, University of Southern California, Sep. 1981.
5 Communication Pursuant to Article 94(4) EPC issued in European Application No. 07719535.2 on Mar. 8, 2013; 5 pages.
6 Communication Purusant to Article 94(4) EPC issued in European Application No. 07719535.2 on Feb. 17, 2012; 5 pages.
7 Dierks, T. et al.; "The TLS Protocol"; RFC 2246; IETF; Jan. 1999; pp. 23, 28-30.
8 Examination Report issued in German Application No. 102004040312.0 on Oct. 24, 2012; 15 pages.
9 Examination Report issued in U.K. Application No. 0418565.8 on Aug. 23, 2006; 3 pages.
10 Examination Report issued in U.K. Application No. 0418565.8 on Feb. 15, 2006; 2 pages.
11 Examination Report issued in U.K. Application No. 0418565.8 on Oct. 31, 2005; 7 pages.
12 Examiner's Answer to Appeal Brief issued in U.S. Appl. No. 10/921,161 on Feb. 21, 2012; 30 pages.
13 Extended European Search Report issued in European Patent Application No. 07719535.2 on May 13, 2011; 6 pages.
14 Hura et al.; "Data and Computer Communications: Networking and Internetworking"; CRC Press, 2001 pp. 337, 450, 453, 467, 471, 483, 484, 485, 489, 491, 526, 599, 609, 617, 618, 521, 937, 1086, 1117, 1118, 1132.
15 IEEE Standard 802.11; Standard for Telecommunications and Information Exchange between Systems-Local and Metropolitan Networks-Specific Requirements-Part 11: Wireless LAN Medium Access Control (MAC) and Physical Layer (PHY) Specifications; IEEE Press; 1999; pp. 34-41, 50-58.
16 IEEE Standard 802.11; Standard for Telecommunications and Information Exchange between Systems—Local and Metropolitan Networks—Specific Requirements—Part 11: Wireless LAN Medium Access Control (MAC) and Physical Layer (PHY) Specifications; IEEE Press; 1999; pp. 34-41, 50-58.
17 International Search Report from International Application No. PCT/CA2007/000608; dated Aug. 28, 2007; 4 pages
18 Kent, S. et al.; "IP Authentication Header"; RFC 2402; IETF; Nov. 1998; 21 pages.
19 Kent, S. et al.; "Security Architecture for the Internet Protocol"; RFC 2401; IETF; Nov. 1998; 62 pages.
20 Notice of Allowance issued in Chinese Application No. 200780020042.X on May 6, 2013; 4 pages.
21 Notice of Allowance issued in Japanese Application No. 2011-251567 on Apr. 23, 2013; 3 pages.
22 Notice of Allowance issued in U.S. Appl. No. 10/921,161 on Apr. 12, 2012; 9 pages.
23 Office Action issued in Canadian Application No. 2,434,992 on Dec. 5, 2012; 2 pages.
24 Office Action issued in Canadian Application No. 2,434,992 on Sep. 14, 2011; 3 pages.
25 Office Action issued in Canadian Application No. 2,478,274 on Feb. 3, 2012; 2 pages.
26 Office Action issued in Canadian Application No. 2,478,274 on Mar. 14, 2013; 3 pages.
27 Office Action issued in Canadian Application No. 2,644,015 on May 23, 2012; 3 pages.
28 Office Action issued in Chinese Application No. 200780020042.X on Aug. 13, 2012; 9 pages.
29 Office Action issued in Chinese Application No. 200780020042.X on Dec. 17, 2012; 7 pages.
30 Office Action issued in Chinese Application No. 200780020042.X on Jan. 14, 2004; 10 pages.
31 Office Action issued in Chinese Application No. 200780020042.X on Mar. 21, 2012; 10 pages.
32 Office Action issued in Korean Application No. 10-2008-7027745 on Jun. 28, 2013; 6 pages.
33 Office Action issued in U.S. Appl. No. 10/885,115 on Aug. 22, 2007; 10 pages.
34 Office Action issued in U.S. Appl. No. 10/885,115 on Jan. 21, 2011; 13 pages.
35 Office Action issued in U.S. Appl. No. 10/885,115 on Jul. 1, 2013; 17 pages.
36 Office Action issued in U.S. Appl. No. 10/885,115 on Jun. 23, 2008; 13 pages.
37 Office Action issued in U.S. Appl. No. 10/885,115 on Jun. 4, 2010; 13 pages.
38 Office Action issued in U.S. Appl. No. 10/885,115 on May 8, 2009; 18 pages.
39 Office Action issued in U.S. Appl. No. 10/885,115 on Oct. 11, 2011; 14 pages.
40 Office Action issued in U.S. Appl. No. 10/885,115 on Oct. 2, 2009; 16 pages.
41 Office Action issued in U.S. Appl. No. 10/885,115 on Oct. 27, 2008; 16 pages.
42 Office Action issued in U.S. Appl. No. 10/921,161 on Aug. 18, 2010; 27 pages.
43 Office Action issued in U.S. Appl. No. 10/921,161 on Dec. 9, 2009; 25 pages.
44 Office Action issued in U.S. Appl. No. 10/921,161 on Jan. 27, 2011; 30 pages.
45 Office Action issued in U.S. Appl. No. 10/921,161 on Mar. 25, 2008; 24 pages.
46 Office Action issued in U.S. Appl. No. 10/921,161 on Nov. 25, 2008; 30 pages.
47 Office Action issued in U.S. Appl. No. 11/735,055 on Dec. 11, 2012; 15 pages.
48 Office Action issued in U.S. Appl. No. 11/735,055 on Dec. 22, 2010; 14 pages.
49 Office Action issued in U.S. Appl. No. 11/735,055 on Feb. 17, 2012; 14 pages.
50 Office Action issued in U.S. Appl. No. 11/735,055 on Jul. 13, 2010; 21 pages.
51 Office Action issued in U.S. Appl. No. 11/735,055 on May 24, 2013; 16 pages.
52 Official Action issued in Japanese Application No. 2009-504535 on Aug. 17, 2011; 9 pages.
53 Search Report from GB Application No. GB0623685.5; dated Mar. 15, 2007; 1 page.
54 Search Report issued in U.K. Application No. 0418565.8 on Jan. 25, 2005; 4 pages.
55 Specification of the Bluetooth System; Specification vol. 1-Core, Version 1.0B; Dec. 1, 1999; p. 160.
56 Specification of the Bluetooth System; Specification vol. 1—Core, Version 1.0B; Dec. 1, 1999; p. 160.
57 Sung et al.; "Design and Evaluation of Adaptive Secure Protocol for E-Commerce"; Proceedings of the Tenth International Conference on Computer Communications and Networks, Oct. 15-17, 2001, Arizona, U.S.A. pp. 32-39.
Classification internationale H04L12/22, H04L29/06, H04L12/56, H04L9/00
Classification coopérative H04L63/04, H04L63/123, H04L63/0876, H04L63/162, H04L63/105, H04L63/0428
Free format text: ASSIGNMENT OF ASSIGNORS INTEREST;ASSIGNOR:STRUIK, MARINUS;REEL/FRAME:030448/0851