US5822431A
Expired / Lapsed
US
⏱️ 0.0 years remaining
Virtual authentication network for secure processors
Assignee: Google Technology Holdings LLC
•
Filing: 1996-06-12
•
Granted: 1998-10-13
•
Expires: 2016-06-12
Abstract
Abstract The integrity of a group of secure processing elements in a communication system is ensured with a validation scheme. Member elements are checked by adjacent members to determine whether a member has been tampered with or operatively removed from a group. If a member is found to be untrustworthy, propagation of group characteristic information to that member will be halted. The group characteristic information defines the group, and is required by each group member in order to function. The untrustworthy member is therefore effectively exiled from the group. An efficient network topology minimizes inter-member message traffic while maintaining group robustness.
Inventors
- 👤 Eric Sprunk
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-10-31 12:59
CPC Classifications
H; H04; H04L; H04L63/00; H04L63/12; H04L63/126; G; G06; G06F; G06F21/00; G06F21/30; G06F21/44; G06F21/445; G06F21/50; G06F21/57; G06F2211/00; G06F2211/007; G06F2211/008
Claims Analysis
Total Claims: 22
Claim 1
Independent Claim
232 words
A communication system including at least first, second, and third processing members, comprising: a first virtual communication path for allowing said first member to communicate with said second member; a second virtual communication path for allowing said second member to communicate with said third member; a third virtual communication path for allowing said first member to communicate with said third member; first validating means for enabling the first member to validate the second member; means responsive to said first validating means for propagating a characteristic from said first member to said second member via said first virtual communication path if said second member meets a first validation criteria; second validating means for enabling the second member to validate the third member; means responsive to said second validating means for propagating said characteristic from said second member to said third member via said second virtual communication path if said third member meets a second validation criteria; third validating means for enabling the first member to validate the third member when said second member does not meet the first validation criteria; and means responsive to said third validating means for propagating said characteristic from said first member to said third member via said third virtual communication path if said third member meets a third validation criteria; wherein said characteristic provides information required by said first, second and third processing members to perform a function.
Claim 2
Dependent Claim
232 words
A communication system including at least first, second, and third processing members, comprising: a first virtual communication path for allowing said first member to communicate with said second member; a second virtual communication path for allowing said second member to communicate with said third member; a third virtual communication path for allowing said first member to communicate with said third member; first validating means for enabling the first member to validate the second member; means responsive to said first validating means for propagating a characteristic from said first member to said second member via said first virtual communication path if said second member meets a first validation criteria; second validating means for enabling the second member to validate the third member; means responsive to said second validating means for propagating said characteristic from said second member to said third member via said second virtual communication path if said third member meets a second validation criteria; third validating means for enabling the first member to validate the third member when said second member does not meet the first validation criteria; and means responsive to said third validating means for propagating said characteristic from said first member to said third member via said third virtual communication path if said third member meets a third validation criteria; wherein said characteristic provides information required by said first, second and third processing members to perform a function.
Claim 3
Dependent Claim
75 words
The system of claim 1, further comprising: exiling means responsive to said first validating means and at least one of said second and third validating means for exiling at least one of said second and third processing members by preventing the propagation of said characteristic to the exiled member; wherein said system is robust to the exiling of at least one member such that the remaining, non-exiled members can continue to communicate with one another.
Claim 4
Dependent Claim
152 words
The system of claim 1, wherein: said first validating means detects whether said second member has been operatively removed from said system; and at least one of said first and second validating means detects whether said third member has been operatively removed from said system; said system further comprising: exiling means responsive to said first validating means for exiling said second member when said second member has been operatively removed from said system by preventing the propagation of said characteristic to said second member; and exiling means responsive to at least one of said first and second validating means for exiling said third member when said third member has been operatively removed from said system by preventing the propagation of said characteristic to said third member; wherein said system is robust to the removal of at least one member such that the remaining, non-removed members can continue to communicate with one another.
Claim 5
Dependent Claim
55 words
The system of claim 1, wherein at least one of said first, second and third validating means includes counting means for determining when a number X of occurrences of said function have been performed; and, the validation of at least one of said second and third members is scheduled in response to said counting means.
Claim 6
Dependent Claim
38 words
The system of claim 1, wherein at least one of said first, second and third validating means is responsive to data which is known to both the member which is validating and the member which is being validated.
Claim 7
Dependent Claim
29 words
The system of claim 5, wherein said data which is known to both the member which is validating and the member which is being validated comprises a cryptographic key.
Claim 8
Dependent Claim
26 words
The system of claim 1, wherein each of said processing members possesses information that allows it to validate at least one other of said processing members.
Claim 9
Dependent Claim
16 words
The system of claim 7, wherein said information is a key of an asymmetric cryptographic algorithm.
Claim 10
Dependent Claim
16 words
The system of claim 1, wherein said processing members are arranged in a virtual ring topology.
Claim 11
Dependent Claim
31 words
The system of claim 1, wherein at least one of said first, second and third members belongs to two different networks, each of which is arranged in a virtual ring topology.
Claim 12
Dependent Claim
23 words
The system of claim 10, wherein one of said two different networks is a subset of the other of said two different networks.
Claim 13
Dependent Claim
44 words
The system of claim 1, wherein: said system comprises at least four processing members; virtual communication paths are arranged between non-adjacent pairs of said processing members to allow communication therebetween; and said system is robust to the failure of at least two processing members.
Claim 14
Independent Claim
250 words
A method for enabling first, second and third processing members of a communication system to securely communicate with one another, comprising the steps of: (a) generating a first validation message for use by said first member; communicating said first validation message from said first member to said second member via a first virtual communication path for use in determining the trustworthiness of said second member; and propagating a characteristic from said first member to said second member if said second member is found to be trustworthy by said first member; (b) if said second member is found to be trustworthy by said first member: generating a second validation message for use by said second member; communicating said second validation message from said second member to said third member via a second virtual communication path for use in determining the trustworthiness of said third member; and propagating said characteristic from said second member to said third member if said third member is found to be trustworthily by said second member; and (c) if said second member is not found to be trustworthy by said first member: generating a third validation message for use by said first member; communicating said third validation message from said first member to said third member via a third virtual communication path for use in determining the trustworthiness of said third member; and propagating said characteristic from said first member to said third member if said third member is found to be trustworthy by said first member.
Claim 15
Independent Claim
250 words
A method for enabling first, second and third processing members of a communication system to securely communicate with one another, comprising the steps of: (a) generating a first validation message for use by said first member; communicating said first validation message from said first member to said second member via a first virtual communication path for use in determining the trustworthiness of said second member; and propagating a characteristic from said first member to said second member if said second member is found to be trustworthy by said first member; (b) if said second member is found to be trustworthy by said first member: generating a second validation message for use by said second member; communicating said second validation message from said second member to said third member via a second virtual communication path for use in determining the trustworthiness of said third member; and propagating said characteristic from said second member to said third member if said third member is found to be trustworthily by said second member; and (c) if said second member is not found to be trustworthy by said first member: generating a third validation message for use by said first member; communicating said third validation message from said first member to said third member via a third virtual communication path for use in determining the trustworthiness of said third member; and propagating said characteristic from said first member to said third member if said third member is found to be trustworthy by said first member.
Claim 16
Dependent Claim
196 words
The method of claim 13 comprising the further steps of: (a) generating a first reply message in response to said first validation message for use by said second member; and communicating said first reply message from said second member to said first member, said first member using said reply message and said first validation message to attempt to validates said second member; (b) if said second member is found to be trustworthy by said first member: generating a second reply message in response to said second validation message for use by said third member; and communicating said second reply message from said third member to said second member, said second member using said second reply message and said second validation message to attempt to validate said third member; and (c) if said second member is not found to be trustworthy by said first member: generating a third reply message in response to said third validation message for use by said third member; and communicating said third reply message from said third member to said first member, said first member using said third reply message and said third validation message to attempt to validate said third member.
Claim 17
Dependent Claim
18 words
The method of claim 13, wherein said characteristic provides information required by said members to perform a function.
Claim 18
Dependent Claim
60 words
The method of claim 13, comprising the further step of: determining when a number X of occurrences of said function have been performed for at least one of said first, second and third members; wherein the validation of at least one of said second and third members is repeated when said number X of occurrences of said function is reached.
Claim 19
Dependent Claim
105 words
The method of claim 13, comprising the further steps of: exiling said second member from said system by not allowing said characteristic to be propagated to said second member if said second member is not found to be trustworthy by said first member; and exiling said third member from said system by not allowing said characteristic to be propagated to said third member if said third-member is not found to be trustworthy by said first or second member; wherein said system is robust to the exiling of at least one exiled member such that the remaining, non-exiled members can continue to communicate with one another.
Claim 20
Dependent Claim
78 words
The method of claim 13, comprising the further step of: detecting whether said second member has been operatively removed from said system, and, if so, exiling said second member from said system by not allowing said characteristic to be propagated to said second member; detecting whether said third member has been operatively removed from said system, and, if so, exiling said third member from said system by not allowing said characteristic to be propagated to said third member.
Claim 21
Dependent Claim
44 words
The system of claim 1, wherein: said system comprises at least eight processing members; virtual communication paths are arranged between non-adjacent pairs of said processing members to allow communication therebetween; and said system is robust to the failure of at least three processing members.
Claim 22
Dependent Claim
44 words
The method of claim 13, wherein: said system comprises at least eight processing members; virtual communication paths are arranged between non-adjacent pairs of said processing members to allow communication therebetween; and said system is robust to the failure of at least three processing members.
References Cited (Backward Citations)
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 2001-10-12 | 2002-04-13 | 2002-10-13 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 2005-10-12 | 2006-04-13 | 2006-10-13 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2009-10-12 | 2010-04-13 | 2010-10-13 | $7700.00 | Window Closed / Lapsed |