← Back to Patent Explorer
US6070245A Expired / Lapsed US ⏱️ 0.0 years remaining

Application interface method and system for encryption control

Assignee: International Business Machines Corp
•
Filing: 1997-11-25
•
Granted: 2000-05-30
•
Expires: 2017-11-25
📄 Original PDF 🌐 Google Patents 🔄 Sync Now

Abstract

Abstract A system and method is provided whereby a system or application programmer may control encryption on or off during a connection oriented session between a client and a server over the Internet/intranet. This is done by providing a keyword or command, such as a Data Description Specification (DDS) keyword or a User Defined Data Stream (UDDS), to insert into a data stream intended for the client an architecture command, the 5250 Write Single Structured Field (WSSF) architecture command carrying an unique structured field to indicate when encrypted mode should be made active or inactive.

Inventors

  • 👤 Thomas Edwin Murphy, Jr.
  • 👤 Paul Francis Rieth
  • 👤 Jeffrey Scott Stevens

Bibliographic Details

Application Number —
Jurisdiction US
Data Source google_patents
Last Synchronized 2026-11-07 21:50
CPC Classifications
H; H04; H04L; H04L63/00; H04L63/04; H04L69/00; H04L69/18; H04N; H04N21/00; H04N21/20; H04N21/23; H04N21/234; H04N21/2347; H04N21/23476; H04N21/40; H04N21/43; H04N21/44; H04N21/4405; H04N21/44055

Claims Analysis

Total Claims: 20
Claim 1
Independent Claim 141 words
Method for controlling encryption mode selectively in a first mode and a second mode during a connection oriented session between a server application and a client workstation, comprising the steps of: establishing said session in said first mode; while communicating a data stream from said server application to said client workstation in said first mode detecting an encrypt structured field in said data stream; responsive to said encrypt structured field: flushing old data in the data stream prior to said encrypt structure field to said client workstation in said first mode; switching mode on the communication link between said server application and said client workstation to said second mode; removing said encrypt structured field from said data stream; and thereafter, communicating new data in said data stream subsequent to said encrypt structured field to said client workstation in said second mode.
Claim 2
Dependent Claim 141 words
Method for controlling encryption mode selectively in a first mode and a second mode during a connection oriented session between a server application and a client workstation, comprising the steps of: establishing said session in said first mode; while communicating a data stream from said server application to said client workstation in said first mode detecting an encrypt structured field in said data stream; responsive to said encrypt structured field: flushing old data in the data stream prior to said encrypt structure field to said client workstation in said first mode; switching mode on the communication link between said server application and said client workstation to said second mode; removing said encrypt structured field from said data stream; and thereafter, communicating new data in said data stream subsequent to said encrypt structured field to said client workstation in said second mode.
Claim 3
Dependent Claim 34 words
The method of claim 1, said first mode selectively being encryption on mode or encryption off mode, and said second mode being the other of said encryption on mode or said encryption off mode.
Claim 4
Dependent Claim 33 words
The method of claim 1, said encrypt structured field including a parameter specifying length, further comprising the step of switching mode on said communication link after transmitting new data of said specified length.
Claim 5
Dependent Claim 133 words
System for controlling encryption mode during a connection oriented session between a server application and a client workstation, comprising: a server application; a display data stream file; a virtual terminal associated with said client workstation; an interactive subsystem for generating from said server application and said display data stream file a data stream for putting to said virtual terminal; a virtual terminal manager for formatting said data stream for communication to said client workstation; and said virtual terminal manager being responsive to an encrypt structured field in said data stream to transmit old data in said data stream to said client workstation, to initiate changing of the encryption mode, to remove said encrypt structured field from said data stream, and thereafter to communicate new data in said data stream to said client workstation.
Claim 6
Dependent Claim 133 words
System for controlling encryption mode during a connection oriented session between a server application and a client workstation, comprising: a server application; a display data stream file; a virtual terminal associated with said client workstation; an interactive subsystem for generating from said server application and said display data stream file a data stream for putting to said virtual terminal; a virtual terminal manager for formatting said data stream for communication to said client workstation; and said virtual terminal manager being responsive to an encrypt structured field in said data stream to transmit old data in said data stream to said client workstation, to initiate changing of the encryption mode, to remove said encrypt structured field from said data stream, and thereafter to communicate new data in said data stream to said client workstation.
Claim 7
Dependent Claim 128 words
System for switching encryption mode during a connection oriented session between a server application and a client workstation, comprising: a server application; a virtual terminal associated with said client workstation; an interactive subsystem for generating from said server application a data stream for putting to said virtual terminal; a virtual terminal manager for formatting said data stream for communication to said client workstation; and said virtual terminal manager being responsive to a user defined mode controlling command in said data stream to transmit old data in said data stream to said client workstation, to initiate switching of the encryption mode, to remove said switching command from said data stream, and thereafter to communicate new data in said data stream to said client workstation in the switched encryption mode.
Claim 8
Dependent Claim 128 words
System for switching encryption mode during a connection oriented session between a server application and a client workstation, comprising: a server application; a virtual terminal associated with said client workstation; an interactive subsystem for generating from said server application a data stream for putting to said virtual terminal; a virtual terminal manager for formatting said data stream for communication to said client workstation; and said virtual terminal manager being responsive to a user defined mode controlling command in said data stream to transmit old data in said data stream to said client workstation, to initiate switching of the encryption mode, to remove said switching command from said data stream, and thereafter to communicate new data in said data stream to said client workstation in the switched encryption mode.
Claim 9
Dependent Claim 153 words
A program storage device readable by a machine, tangibly embodying a program of instructions executable by a machine to perform method steps for setting encryption mode during a connection oriented session between a server application and a client workstation, said method steps comprising: establishing said session in a first mode; while communicating a data stream from said server application to said client workstation in said first mode detecting an encrypt mode command in said data stream from said application; responsive to said encrypt mode command: flushing old data in the data stream prior to said encrypt mode command to said client workstation; switching encryption mode on the communication link between said server application and said client workstation to a second mode; removing said encrypt mode command from said data stream; and thereafter, communicating new data in said data stream subsequent to said encrypt mode command to said client workstation in said second mode.
Claim 10
Dependent Claim 153 words
A program storage device readable by a machine, tangibly embodying a program of instructions executable by a machine to perform method steps for setting encryption mode during a connection oriented session between a server application and a client workstation, said method steps comprising: establishing said session in a first mode; while communicating a data stream from said server application to said client workstation in said first mode detecting an encrypt mode command in said data stream from said application; responsive to said encrypt mode command: flushing old data in the data stream prior to said encrypt mode command to said client workstation; switching encryption mode on the communication link between said server application and said client workstation to a second mode; removing said encrypt mode command from said data stream; and thereafter, communicating new data in said data stream subsequent to said encrypt mode command to said client workstation in said second mode.
Claim 11
Dependent Claim 78 words
An article of manufacture comprising: a computer usable medium having computer readable program code means embodied therein for toggling encryption mode between a first mode and a second mode during a connection oriented session between a server application and a client workstation, the computer readable program means in said article of stream; and computer readable program code means for causing a computer to communicate new data in said data stream to said client workstation in said second mode.
Claim 12
Dependent Claim 78 words
An article of manufacture comprising: a computer usable medium having computer readable program code means embodied therein for toggling encryption mode between a first mode and a second mode during a connection oriented session between a server application and a client workstation, the computer readable program means in said article of stream; and computer readable program code means for causing a computer to communicate new data in said data stream to said client workstation in said second mode.
Claim 13
Dependent Claim 256 words
Method for controlling encryption mode during a connection oriented session between a server application having an associated screen display data stream (DDS) file and a client workstation, comprising the steps of: establishing said session in a first encryption mode; communicating a data stream from said server application to said client workstation; putting an encrypt mode command in said data stream from said application or screen DDS file, said encrypt mode command separating old data and new data in said data stream; responsive to said encrypt mode command: flushing said old data in the data manufacture comprising: computer readable program code means for causing a computer to establish said session in said first mode; computer readable program code means for causing a computer to communicate a data stream from said server application to said client workstation in said first mode; computer readable program code means for causing a computer to put an encrypt mode command in said data stream from said application; computer readable program code means for causing a computer responsive to said encrypt mode command to: flush old data in the data stream to said client workstation; switch encryption mode on the communication link between said server application and said client workstation to said second mode; remove said encrypt mode command from said data stream to said client workstation; and thereafter switching encryption mode to a second encryption mode on the communication link between said server application and said client workstation; and thereafter communicating said new data in said data stream to said client workstation.
Claim 14
Dependent Claim 256 words
Method for controlling encryption mode during a connection oriented session between a server application having an associated screen display data stream (DDS) file and a client workstation, comprising the steps of: establishing said session in a first encryption mode; communicating a data stream from said server application to said client workstation; putting an encrypt mode command in said data stream from said application or screen DDS file, said encrypt mode command separating old data and new data in said data stream; responsive to said encrypt mode command: flushing said old data in the data manufacture comprising: computer readable program code means for causing a computer to establish said session in said first mode; computer readable program code means for causing a computer to communicate a data stream from said server application to said client workstation in said first mode; computer readable program code means for causing a computer to put an encrypt mode command in said data stream from said application; computer readable program code means for causing a computer responsive to said encrypt mode command to: flush old data in the data stream to said client workstation; switch encryption mode on the communication link between said server application and said client workstation to said second mode; remove said encrypt mode command from said data stream to said client workstation; and thereafter switching encryption mode to a second encryption mode on the communication link between said server application and said client workstation; and thereafter communicating said new data in said data stream to said client workstation.
Claim 15
Dependent Claim 122 words
System for controlling encryption mode during a connection oriented session between a server application and a client workstation, comprising: a server application; a display data stream file; a virtual terminal associated with said client workstation; an interactive subsystem for generating from said server application and said display data stream file a data stream for putting to said virtual terminal; a virtual terminal manager for formatting said data stream for communication to said client workstation; and said virtual terminal manager being responsive to an encrypt command in said data stream to transmit old data in said data stream to said client workstation, to initiate changing of the encryption mode, and thereafter to communicate new data in said data stream to said client workstation.
Claim 16
Dependent Claim 122 words
System for controlling encryption mode during a connection oriented session between a server application and a client workstation, comprising: a server application; a display data stream file; a virtual terminal associated with said client workstation; an interactive subsystem for generating from said server application and said display data stream file a data stream for putting to said virtual terminal; a virtual terminal manager for formatting said data stream for communication to said client workstation; and said virtual terminal manager being responsive to an encrypt command in said data stream to transmit old data in said data stream to said client workstation, to initiate changing of the encryption mode, and thereafter to communicate new data in said data stream to said client workstation.
Claim 17
Dependent Claim 119 words
System for switching encryption mode during a connection oriented session between a server application and a client workstation, comprising: a server application; a virtual terminal associated with said client workstation; an interactive subsystem for generating from said server application a data stream for putting to said virtual terminal; a virtual terminal manager for formatting said data stream for communication to said client workstation; and said virtual terminal manager being responsive to a user defined mode controlling command in said data stream to transmit old data in said data stream to said client workstation, to initiate switching of the encryption mode, and thereafter to communicate new data in said data stream to said client workstation in the switched encryption mode.
Claim 18
Dependent Claim 119 words
System for switching encryption mode during a connection oriented session between a server application and a client workstation, comprising: a server application; a virtual terminal associated with said client workstation; an interactive subsystem for generating from said server application a data stream for putting to said virtual terminal; a virtual terminal manager for formatting said data stream for communication to said client workstation; and said virtual terminal manager being responsive to a user defined mode controlling command in said data stream to transmit old data in said data stream to said client workstation, to initiate switching of the encryption mode, and thereafter to communicate new data in said data stream to said client workstation in the switched encryption mode.
Claim 19
Dependent Claim 149 words
Method for controlling encryption mode during a connection oriented session between a server application and a client workstation, comprising the steps of: establishing said session by connecting said client workstation to said server application with encryption off; communicating a data stream from said server application to said client workstation, said data stream including an encrypt structured field, said encrypt structured field including an encryption on keyword followed by a password field followed by an encryption off keyword; upon detecting said encryption on keyword, flushing old data before said keyword in the data stream from said server to said client workstation; switching encryption mode on the communication link between said server application and said client workstation by renegotiating said connection to have encryption on; removing said encrypt structured field from said data stream; and thereafter, communicating new data subsequent to said keyword in said data stream to said client workstation.
Claim 20
Dependent Claim 149 words
Method for controlling encryption mode during a connection oriented session between a server application and a client workstation, comprising the steps of: establishing said session by connecting said client workstation to said server application with encryption off; communicating a data stream from said server application to said client workstation, said data stream including an encrypt structured field, said encrypt structured field including an encryption on keyword followed by a password field followed by an encryption off keyword; upon detecting said encryption on keyword, flushing old data before said keyword in the data stream from said server to said client workstation; switching encryption mode on the communication link between said server application and said client workstation by renegotiating said connection to have encryption on; removing said encrypt structured field from said data stream; and thereafter, communicating new data subsequent to said keyword in said data stream to said client workstation.

References Cited (Backward Citations)

US5175766A Cited
US5224166A Cited
US5892826A Cited

USPTO Annuity & Maintenance Windows

Annuity Stage Window Opens Payment Deadline Surcharge Period Until Estimated Fee Status
3.5 Years (Year 4) 2003-05-30 2003-11-29 2004-05-30 $2000.00 Window Closed / Lapsed
7.5 Years (Year 8) 2007-05-30 2007-11-29 2008-05-30 $3760.00 Window Closed / Lapsed
11.5 Years (Year 12) 2011-05-30 2011-11-29 2012-05-30 $7700.00 Window Closed / Lapsed

Assigned Categories & Tags

No categories assigned to this patent yet.

Assign Category Tag