US5850449A — Secure network protocol system and method

Claim 1

Independent Claim 147 words

In a computer network having a plurality of network entities, a first one of the network entities comprising: an object generator to generate an object that has a source and a destination and includes an executable source method, an executable destination method, and data associated with the source and destination methods; a communications interface to transmit the generated object and to receive objects transmitted by other ones of the network entities, wherein at least a subset of the received objects each include source and destination methods and data associated with the source and destination methods; and an incoming object handler to handle the subset of the received objects, the incoming object handler including a source and destination verifier to execute the source and destination methods of one of the received objects with their associated data so as to verify the source and destination of the received object.

Claim 2

Dependent Claim 147 words

In a computer network having a plurality of network entities, a first one of the network entities comprising: an object generator to generate an object that has a source and a destination and includes an executable source method, an executable destination method, and data associated with the source and destination methods; a communications interface to transmit the generated object and to receive objects transmitted by other ones of the network entities, wherein at least a subset of the received objects each include source and destination methods and data associated with the source and destination methods; and an incoming object handler to handle the subset of the received objects, the incoming object handler including a source and destination verifier to execute the source and destination methods of one of the received objects with their associated data so as to verify the source and destination of the received object.

Claim 3

Dependent Claim 134 words

The one network entity of claim 1 wherein: the object generator includes a signature generator to (A) generate one or more digital signatures that each include a message digest generated by performing a predetermined function on corresponding contents of the generated object, (B) encrypt each message digest with a private encryption key, and (C) embed each digital signature in the generated object; the incoming object handler further includes a signature verifier to (A) decrypt each encrypted message digest in the one received object with a public encryption key, (B) for each encrypted message digest, generate a corresponding verifying message digest by performing the predetermined function on the corresponding contents of the one received object, and (C) compare each decrypted message digest with the corresponding verifying message digest to verify the one received object's contents.

Claim 4

Dependent Claim 77 words

The one network entity of claim 2, wherein: the one or more digital signatures of the generated object include a methods signature for methods and a data signature for data; the contents of the generated object corresponding to the message digest of the methods signature including the source and destination methods; and the contents of the generated object corresponding to the message digest of the data signature include the data associated with the source and destination methods.

Claim 5

Dependent Claim 65 words

The one network entity of claim 1, wherein: the generated object is an instance of an associated object class and includes an object header that identifies the object's class as a predefined "security" class; the incoming object handler further includes an object class screener to determine the one received object's class and reject the one received object when its class is not the "security" class.

Claim 6

Dependent Claim 61 words

The one network entity of claim 1, further including a virtual machine module to execute programs written in a predefined virtual machine language regardless of the first network entity's computer platform and operating system; wherein the source and destination methods are written in the predefined virtual machine language and executed by the source and destination verifier with the virtual machine module.

Claim 7

Dependent Claim 69 words

The one network entity of claim 1, wherein: the generated object further includes an executable main method and data associated with the main method; the incoming object handler further includes a main method executer to execute the main method of the one received object with its associated data to implement a desired function after the source and destination verifier verifies the source and destination of the one received object.

Claim 8

Dependent Claim 85 words

The one network entity of claim 6, further including a virtual machine module to execute programs written in a predefined virtual machine language regardless of the first network entity's computer platform and operating system; wherein the source and destination methods are written in the predefined virtual machine language and executed by the source and destination verifier with the virtual machine module; and the main method is written in the predefined virtual machine language and executed by the main method executer with the virtual machine module.

Claim 9

Dependent Claim 49 words

The one network entity of claim 1, wherein the communications interface includes means for re-transmitting the one received object to an identified one of the other network entities when the source and destination verifier verifies that the destination of the one received object is the identified other network entity.

Claim 10

Independent Claim 114 words

A method of managing communicating between network entities, comprising the steps of: at a first one of the network entities: generating an object that has a source and a destination and includes an executable source method, an executable destination method, and data associated with the source and destination methods; transmitting the generated object; receiving an object transmitted by another one of the network entities, the received data packet including source and destination methods and data associated with the source and destination methods; and handling the received object, including executing the source and destination methods of the received object with their associated data so as to verify the source and destination of the received object.

Claim 11

Independent Claim 114 words

A method of managing communicating between network entities, comprising the steps of: at a first one of the network entities: generating an object that has a source and a destination and includes an executable source method, an executable destination method, and data associated with the source and destination methods; transmitting the generated object; receiving an object transmitted by another one of the network entities, the received data packet including source and destination methods and data associated with the source and destination methods; and handling the received object, including executing the source and destination methods of the received object with their associated data so as to verify the source and destination of the received object.

Claim 12

Dependent Claim 128 words

The method of claim 9, wherein: the step of generating the object includes (A) generating one or more digital signatures that each include a message digest generated by performing a corresponding predetermined function on corresponding contents of the generated object, (B) encrypting each message digest with a private encryption key, and (C) embedding each digital signature in the generated object; the step of handling the received object further includes (A) decrypting an encrypted message digest in the received object with a public encryption key, (B) for each decrypted message digest, generating a corresponding verifying message digest by performing the predetermined function on the corresponding contents of the received object, and (C) comparing each decrypted message digest with the corresponding verifying message digest to verify the received object's contents.

Claim 13

Dependent Claim 75 words

The method of claim 10, wherein: the one or more digital signatures of the generated object include a methods signature for methods and a data signature for data; the contents of the generated object corresponding to the message digest of the methods signature include the source and destination methods; and the contents of the generated object corresponding to the message digest of the data signature include the data associated with the source and destination methods.

Claim 14

Dependent Claim 60 words

The method of claim 9, wherein: the generated object is an instance of an associated object class and includes an object header that identifies the object's class as a predefined "security" class; and the step of handling the received object further includes determining the received object's class and rejecting the received object when its class is not the "security" class.

Claim 15

Dependent Claim 61 words

The method of claim 9, wherein: the generated object further includes an executable main method and data associated with the main method; and the step of handling the received object further includes executing the main method of the received object with its associated data to implement a desired function after the source and destination of the received packet have been verified.

Claim 16

Dependent Claim 106 words

In a computer network having a plurality of network entities, a first one of the network entities comprising: a communications interface to receive objects transmitted by other ones of the network entities, wherein at least a subset of the received objects each include source and destination methods and data associated with the source and destination methods; and an incoming object handler to handle the subset of the received objects, the incoming object handler including a source and destination verifier to execute the source and destination methods of each received object with their associated data so as to verify the source and destination of the received object.

Claim 17

Dependent Claim 106 words

In a computer network having a plurality of network entities, a first one of the network entities comprising: a communications interface to receive objects transmitted by other ones of the network entities, wherein at least a subset of the received objects each include source and destination methods and data associated with the source and destination methods; and an incoming object handler to handle the subset of the received objects, the incoming object handler including a source and destination verifier to execute the source and destination methods of each received object with their associated data so as to verify the source and destination of the received object.

Claim 18

Dependent Claim 120 words

The one network entity of claim 14 wherein: the subset of received objects each include an embedded digital signature, the digital signature for a received object including a message digest encrypted with a private encryption key, the message digest corresponding to a result produced by performing a predetermined function on corresponding contents of the received object; and the incoming object handler includes a signature verifier to (A) decrypt the encrypted message digest in the received object with a public encryption key, (B) generate a corresponding verifying message digest by performing the predetermined function on the corresponding contents of the received object, and (C) compare the decrypted message digest with the corresponding verifying message digest to verify the received object's contents.

Claim 19

Dependent Claim 68 words

The one network entity of claim 14, wherein: the generated object further includes an executable main method and data associated with the main method; and the incoming object handler further includes a main method executer to execute the main method of the received object with its associated data to implement a desired function after the source and destination verifier verifies the source and destination of the received object.

Claim 20

Dependent Claim 86 words

In a computer network having a plurality of network entities, a first one of the network entities comprising: an object generator to generate an object that has a source and a destination and includes an executable source method, an executable destination method, and data associated with the source and destination methods; wherein the source and destination methods, when executed by a receiving network entity, verify the source and destination of the object; and a communications interface to transmit the generated object to the receiving network entity.

Claim 21

Dependent Claim 86 words

In a computer network having a plurality of network entities, a first one of the network entities comprising: an object generator to generate an object that has a source and a destination and includes an executable source method, an executable destination method, and data associated with the source and destination methods; wherein the source and destination methods, when executed by a receiving network entity, verify the source and destination of the object; and a communications interface to transmit the generated object to the receiving network entity.

Claim 22

Dependent Claim 63 words

The one network entity of claim 17, wherein: the generated object includes an embedded digital signature, the digital signature including a message digest encrypted with a private encryption key, the message digest corresponding to a result produced by performing a predetermined function on corresponding contents of the object; and the digital signature enables the receiving network entity to verify the received object's contents.

Claim 23

Dependent Claim 51 words

The one network entity of claim 17, wherein: the generated object further includes an executable main method and data associated with the main method; wherein the main method, when executed by the receiving network entity, implements a desired function after the source and destination of the received object have been verified.

Claim 24

Dependent Claim 92 words

A computer data signal embodied in a carrier wave, comprising: instructions for receiving objects transmitted by network entities, wherein at least a subset of the received objects each include source and destination methods and data associated with the source and destination methods; and an incoming object handler to handle the subset of the received objects, the incoming object handler including a source and destination verifier to execute the source and destination methods of each received object with their associated data so as to verify the source and destination of the received object.

Claim 25

Dependent Claim 92 words

A computer data signal embodied in a carrier wave, comprising: instructions for receiving objects transmitted by network entities, wherein at least a subset of the received objects each include source and destination methods and data associated with the source and destination methods; and an incoming object handler to handle the subset of the received objects, the incoming object handler including a source and destination verifier to execute the source and destination methods of each received object with their associated data so as to verify the source and destination of the received object.

Claim 26

Dependent Claim 120 words

The computer data signal of claim 20, wherein the subset of received objects each include an embedded digital signature, the digital signature for a received object including a message digest encrypted with a private encryption key, the message digest corresponding to a result produced by performing a predetermined function on corresponding contents of the received object; and the incoming object handler includes a signature verifier to (A) decrypt the encrypted message digest in the received object with a public encryption key, (B) generate a corresponding verifying message digest by performing the predetermined function on the corresponding contents of the received object, and (C) compare the decrypted message digest with the corresponding verifying message digest to verify the received object's contents.

Claim 27

Dependent Claim 68 words

The computer data signal of claim 20, wherein: the generated object further includes an executable main method and data associated with the main method; and the incoming object handler further includes a main method executer to execute the main method of the received object with its associated data to implement a desired function after the source and destination verifier verifies the source and destination of the received object.

Claim 28

Dependent Claim 76 words

A computer data signal embodied in a carrier wave, comprising: an object generator to generate an object that has a source and a destination and includes an executable source method, an executable destination method, and data associated with the source and destination methods; wherein the source and destination methods, when executed by a receiving network entity, verify the source and destination of the object; and instructions for transmitting the generated object to the receiving network entity.

Claim 29

Dependent Claim 76 words

A computer data signal embodied in a carrier wave, comprising: an object generator to generate an object that has a source and a destination and includes an executable source method, an executable destination method, and data associated with the source and destination methods; wherein the source and destination methods, when executed by a receiving network entity, verify the source and destination of the object; and instructions for transmitting the generated object to the receiving network entity.

Claim 30

Dependent Claim 63 words

The computer data signal of claim 23, wherein: the generated object includes an embedded digital signature, the digital signature including a message digest encrypted with a private encryption key, the message digest corresponding to a result produced by performing a predetermined function on corresponding contents of the object; and the digital signature enables the receiving network entity to verify the received object's contents.

Claim 31

Dependent Claim 51 words

The computer data signal of claim 23, wherein: the generated object further includes an executable main method and data associated with the main method; wherein the main method, when executed by the receiving network entity, implements a desired function after the source and destination of the received object have been verified.

Annuity Stage	Window Opens	Payment Deadline	Surcharge Period Until	Estimated Fee	Status
3.5 Years (Year 4)	2001-12-14	2002-06-15	2002-12-15	$2000.00	Window Closed / Lapsed
7.5 Years (Year 8)	2005-12-14	2006-06-15	2006-12-15	$3760.00	Window Closed / Lapsed
11.5 Years (Year 12)	2009-12-14	2010-06-15	2010-12-15	$7700.00	Window Closed / Lapsed

Secure network protocol system and method

Abstract

Inventors

Bibliographic Details

Claims Analysis

References Cited (Backward Citations)

USPTO Annuity & Maintenance Windows

Assigned Categories & Tags

Assign Category Tag