Patent US6108583A successfully refreshed from Google Patents.
US6108583A
Expired / Lapsed
US
⏱️ 0.0 years remaining
Adaptive data security system and method
Assignee: Georgia Tech Research Corp
•
Filing: 1998-10-28
•
Granted: 2000-08-22
•
Expires: 2018-10-28
Abstract
Abstract A system and method for data communication with adaptive security in which a send host transmits a data stream to a receive host in packets which contain an authentication data block with an authentication header and a signature block. The authentication header advantageously contains various fields including a verification type, a security algorithm, a minimum security level, a target security level, and an actual security level. The receive host adaptively performs verification of the data packets using varying security levels based in part on the availability of security operations per second (SOPS) in the receive host. Where a data stream in the receive host is delayed by a security processing bottleneck, the receive host may alter the verification type, security algorithm, or the actual security level to speed up the processing of the data stream by reducing the amount of security processing performed. The receive host further allocates the SOPS among the data streams received based on a priority assigned to each data stream.
Inventors
- 👤 Phyllis A. Schneck
- 👤 Karsten Schwan
- 👤 Santosh Chokhani
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-11-08 00:12
CPC Classifications
H; H04; H04L; H04L63/00; H04L63/10; H04L63/105; H04L63/12; H04L63/20; H04L69/00; H04L69/22
Claims Analysis
Total Claims: 49
Claim 1
Independent Claim
142 words
A send host employing adaptive security, comprising: a processor coupled to a data bus; a memory coupled to the data bus; an input device coupled to the data bus to input a desired security configuration for a data stream to be communicated to a receive host; an output device coupled to the data bus to display an actual security configuration for the data stream, the actual security configuration being received from the receive host; and adaptive security logic stored on the memory and executable by the processor, the adaptive security logic including logic to generate a plurality of data packets associated with the data stream, the data packets including an authentication data block with an authentication header containing the actual security configuration and a signature, the actual security configuration being based upon a number of available security operations in the receive host.
Claim 2
Dependent Claim
142 words
A send host employing adaptive security, comprising: a processor coupled to a data bus; a memory coupled to the data bus; an input device coupled to the data bus to input a desired security configuration for a data stream to be communicated to a receive host; an output device coupled to the data bus to display an actual security configuration for the data stream, the actual security configuration being received from the receive host; and adaptive security logic stored on the memory and executable by the processor, the adaptive security logic including logic to generate a plurality of data packets associated with the data stream, the data packets including an authentication data block with an authentication header containing the actual security configuration and a signature, the actual security configuration being based upon a number of available security operations in the receive host.
Claim 3
Dependent Claim
17 words
The send host of claim 1, wherein the desired security configuration is displayed on the output device.
Claim 4
Dependent Claim
17 words
The send host of claim 1, wherein the actual security configuration is displayed on the output device.
Claim 5
Dependent Claim
26 words
The send host of claim 1, wherein the minimum verification level in the authentication header indicates a minimum percentage of the data packets that are decrypted.
Claim 6
Dependent Claim
34 words
The send host of claim 1, wherein the minimum verification level in the authentication header indicates a minimum percentage of the data packets that are authenticated to verify a source of the data packets.
Claim 7
Dependent Claim
145 words
A send host employing adaptive security, comprising: a processor coupled to a data bus; a memory coupled to the data bus; an input device coupled to the data bus to input a desired security configuration for a data stream to be communicated to a receive host; an output device coupled to the data bus to display an actual security configuration for the data stream, the actual security configuration being received from the receive host; and adaptive security logic stored on the memory and executable by the processor, the adaptive security logic including: logic to generate a plurality of data packets associated with the data stream, the data packets including an authentication data block with an authentication header containing the actual security configuration and a signature; and security thermostat logic to control an actual security level, the actual security level being included in the authentication header.
Claim 8
Dependent Claim
145 words
A send host employing adaptive security, comprising: a processor coupled to a data bus; a memory coupled to the data bus; an input device coupled to the data bus to input a desired security configuration for a data stream to be communicated to a receive host; an output device coupled to the data bus to display an actual security configuration for the data stream, the actual security configuration being received from the receive host; and adaptive security logic stored on the memory and executable by the processor, the adaptive security logic including: logic to generate a plurality of data packets associated with the data stream, the data packets including an authentication data block with an authentication header containing the actual security configuration and a signature; and security thermostat logic to control an actual security level, the actual security level being included in the authentication header.
Claim 9
Dependent Claim
137 words
A send host employing adaptive security, comprising: a processor coupled to a data bus; a memory coupled to the data bus; an input device coupled to the data bus to input a desired security configuration for a data stream to be communicated to a receive host; an output device coupled to the data bus to display an actual security configuration for the data stream, the actual security configuration being received from the receive host; and adaptive security logic stored on the memory and executable by the processor, the adaptive security logic including: logic to generate a plurality of data packets associated with the data stream, the data packets including an authentication data block with an authentication header containing the actual security configuration and a signature; and logic to place a minimum security level in the authentication header.
Claim 10
Dependent Claim
137 words
A send host employing adaptive security, comprising: a processor coupled to a data bus; a memory coupled to the data bus; an input device coupled to the data bus to input a desired security configuration for a data stream to be communicated to a receive host; an output device coupled to the data bus to display an actual security configuration for the data stream, the actual security configuration being received from the receive host; and adaptive security logic stored on the memory and executable by the processor, the adaptive security logic including: logic to generate a plurality of data packets associated with the data stream, the data packets including an authentication data block with an authentication header containing the actual security configuration and a signature; and logic to place a minimum security level in the authentication header.
Claim 11
Dependent Claim
151 words
A send host employing adaptive security, comprising: a processor coupled to a data bus; a memory coupled to the data bus; an input device coupled to the data bus to input a desired security configuration for a data stream to be communicated to a receive host; an output device coupled to the data bus to display an actual security configuration for the data stream, the actual security configuration being received from the receive host; and adaptive security logic stored on the memory and executable by the processor, the adaptive security logic including logic to generate a plurality of data packets associated with the data stream, the data packets including an authentication data block with an authentication header containing the actual security confirmation and a signature, wherein the desired security configuration comprises a desired verification type, a minimum security level, a target security level, a security algorithm, and an actual security level.
Claim 12
Dependent Claim
151 words
A send host employing adaptive security, comprising: a processor coupled to a data bus; a memory coupled to the data bus; an input device coupled to the data bus to input a desired security configuration for a data stream to be communicated to a receive host; an output device coupled to the data bus to display an actual security configuration for the data stream, the actual security configuration being received from the receive host; and adaptive security logic stored on the memory and executable by the processor, the adaptive security logic including logic to generate a plurality of data packets associated with the data stream, the data packets including an authentication data block with an authentication header containing the actual security confirmation and a signature, wherein the desired security configuration comprises a desired verification type, a minimum security level, a target security level, a security algorithm, and an actual security level.
Claim 13
Dependent Claim
158 words
A receive host employing adaptive security, comprising: a processor coupled to a data bus; a memory coupled to the data bus; a data communications interface coupled to the data bus, the data communications interface being configured to receive at least one data stream comprising a number of data packets, the data packets including an authentication data block, the authentication data block having an authentication header and a signature; and adaptive security logic stored on the memory and executable by the processor, the adaptive security logic including logic including: logic to decompose the authentication header in the data packets; logic to perform a variable percentage verification on the data packets from the data stream; and logic to determine an actual verification percentage performed based on a number of available security operations in the receive host, a minimum security level, and a target security level, the minimum security level and the target security level being contained in the authentication header.
Claim 14
Dependent Claim
158 words
A receive host employing adaptive security, comprising: a processor coupled to a data bus; a memory coupled to the data bus; a data communications interface coupled to the data bus, the data communications interface being configured to receive at least one data stream comprising a number of data packets, the data packets including an authentication data block, the authentication data block having an authentication header and a signature; and adaptive security logic stored on the memory and executable by the processor, the adaptive security logic including logic including: logic to decompose the authentication header in the data packets; logic to perform a variable percentage verification on the data packets from the data stream; and logic to determine an actual verification percentage performed based on a number of available security operations in the receive host, a minimum security level, and a target security level, the minimum security level and the target security level being contained in the authentication header.
Claim 15
Dependent Claim
46 words
The receive host of claim 9, wherein the logic to determine an actual security level further comprises logic to determine the number of available security operations by examining the at least one data stream received by the data communications interface for a non-critical processor time usage.
Claim 16
Dependent Claim
66 words
The receive host of claim 9, wherein the adaptive security logic further comprises: logic to perform a delayed verification on a bundle of data packets from the data stream; and logic to enable one of the delayed verification and the variable percentage verification based on a verification type field contained in the authentication header and on the number of available security operations in the receive host.
Claim 17
Dependent Claim
56 words
The receive host of claim 9, wherein the adaptive security logic further comprises logic to maintain a resource tracking table which indicates the number of security operations required to accomplish the minimum security level, the target security level, and the actual security level, as well as a priority level of the at least one data stream.
Claim 18
Dependent Claim
35 words
The receive host of claim 9, wherein the logic to perform a variable percentage verification on the data packets from the data stream further comprise logic to decrypt a variable percentage of the data packets.
Claim 19
Dependent Claim
35 words
The receive host of claim 9, wherein the logic to perform a variable percentage verification on the data packets from the data stream further comprise logic to authenticate a variable percentage of the data packets.
Claim 20
Dependent Claim
106 words
A send host employing adaptive security, comprising: means for inputting a desired security configuration for a data stream to be communicated to a receive host; means for displaying the desired security configuration and an actual security configuration for the data stream, the actual security configuration being received from the receive host; and means for generating a plurality of data packets associated with the data stream, the data packets including a data block and an authentication data block having an authentication header containing the actual security configuration and a signature the actual security configuration being based upon a number of available security operations in the receive host.
Claim 21
Dependent Claim
106 words
A send host employing adaptive security, comprising: means for inputting a desired security configuration for a data stream to be communicated to a receive host; means for displaying the desired security configuration and an actual security configuration for the data stream, the actual security configuration being received from the receive host; and means for generating a plurality of data packets associated with the data stream, the data packets including a data block and an authentication data block having an authentication header containing the actual security configuration and a signature the actual security configuration being based upon a number of available security operations in the receive host.
Claim 22
Dependent Claim
123 words
A receive host employing adaptive security, comprising: means for receiving at least one data stream comprising a number of data packets, the data packets including an authentication data block, the authentication data block having an authentication header and a signature; means for decomposing the authentication header in the data packets; means for performing a percentage based verification on the data packets from the data stream; means for determining an actual security level performed based on a number of available security operations, a minimum security level, and a target security level, and a desired actual security level, the minimum security level and the target security level being contained in the authentication header; and means for communicating the actual security level to a send host.
Claim 23
Dependent Claim
123 words
A receive host employing adaptive security, comprising: means for receiving at least one data stream comprising a number of data packets, the data packets including an authentication data block, the authentication data block having an authentication header and a signature; means for decomposing the authentication header in the data packets; means for performing a percentage based verification on the data packets from the data stream; means for determining an actual security level performed based on a number of available security operations, a minimum security level, and a target security level, and a desired actual security level, the minimum security level and the target security level being contained in the authentication header; and means for communicating the actual security level to a send host.
Claim 24
Dependent Claim
45 words
The receive host of claim 16, wherein the means for determining an actual security level further comprises means for determining the number of available security operations by examining a resource tracking table for a non-critical processor time usage of at least one existing data stream.
Claim 25
Dependent Claim
61 words
The receive host of claim 16, further comprising: means for performing a delayed verification on a bundle of data packets from the data stream; and means for enabling one of the delayed verification and the variable percentage verification based on a verification type field contained in the authentication header and on the number of available security operations in the receive host.
Claim 26
Independent Claim
232 words
A method for communicating a data stream employing adaptive security, comprising the steps of: identifying a desired verification type, a desired security algorithm, a minimum security level, a target security level, and a desired actual security level in a send host for communicating a data stream from the send host to a receive host; determining an actual verification type, an actual security algorithm, and an actual security level in the receive host based on the desired verification type, desired security algorithm, minimum security level, target security level, and a number of available security operations; communicating the actual verification type, the actual security algorithm, and the actual security level from the receive host to the send host; generating a plurality of data packets associated with the data stream in the send host, the data packets having an authentication data block with an authentication header, the authentication header containing the actual verification type, actual security algorithm, minimum security level, the target security level, and the actual security level; verifying the data packets using percentage based verification if the actual verification type is percentage based verification, the percentage based verification being performed at the actual security level which is greater than or equal to the minimum security level and less than or equal to the target security level; and performing a delayed verification on the data packets if the actual verification type is delayed verification.
Claim 27
Independent Claim
232 words
A method for communicating a data stream employing adaptive security, comprising the steps of: identifying a desired verification type, a desired security algorithm, a minimum security level, a target security level, and a desired actual security level in a send host for communicating a data stream from the send host to a receive host; determining an actual verification type, an actual security algorithm, and an actual security level in the receive host based on the desired verification type, desired security algorithm, minimum security level, target security level, and a number of available security operations; communicating the actual verification type, the actual security algorithm, and the actual security level from the receive host to the send host; generating a plurality of data packets associated with the data stream in the send host, the data packets having an authentication data block with an authentication header, the authentication header containing the actual verification type, actual security algorithm, minimum security level, the target security level, and the actual security level; verifying the data packets using percentage based verification if the actual verification type is percentage based verification, the percentage based verification being performed at the actual security level which is greater than or equal to the minimum security level and less than or equal to the target security level; and performing a delayed verification on the data packets if the actual verification type is delayed verification.
Claim 28
Dependent Claim
23 words
The method of claim 19, further comprising the step of altering the actual security level in the send host using a security thermostat.
Claim 29
Dependent Claim
51 words
The method of claim 19, further comprising the step of identifying the number of available security operations by identifying a number of non-critical security operations employed by a plurality of second data streams received by the receive host, and by identifying a number of unused security operations in the receive host.
Claim 30
Dependent Claim
117 words
A computer program embodied on a computer-readable medium for operation in a send host to facilitate data communication with adaptive security, comprising: logic to input a desired security configuration for a data stream to be communicated to a receive host; logic to display a desired security configuration and an actual security configuration for the data stream, the actual security configuration being received from the receive host; and logic to generate a plurality of data packets associated with the data stream, the data packets including an authentication data block having an authentication header containing the actual security configuration and a signature, the actual security configuration being based upon a number of available security operations in the receive host.
Claim 31
Dependent Claim
117 words
A computer program embodied on a computer-readable medium for operation in a send host to facilitate data communication with adaptive security, comprising: logic to input a desired security configuration for a data stream to be communicated to a receive host; logic to display a desired security configuration and an actual security configuration for the data stream, the actual security configuration being received from the receive host; and logic to generate a plurality of data packets associated with the data stream, the data packets including an authentication data block having an authentication header containing the actual security configuration and a signature, the actual security configuration being based upon a number of available security operations in the receive host.
Claim 32
Dependent Claim
136 words
A computer program embodied on a computer-readable medium for operation in a receive host to facilitate data communication with adaptive security, comprising: logic to receive at least one data stream comprising a number of data packets, the data packets including an authentication data block, the authentication data block having an authentication header and a signature; logic to decompose the authentication header in the data packets; logic to perform a percentage based verification on the data packets from the data stream; logic to determine an actual security level performed based on a number of available security operations in a receive host, a minimum security level, and a target security level, the minimum security level and the target security level being contained in the authentication header; and logic to communicate the actual security level to a send host.
Claim 33
Dependent Claim
136 words
A computer program embodied on a computer-readable medium for operation in a receive host to facilitate data communication with adaptive security, comprising: logic to receive at least one data stream comprising a number of data packets, the data packets including an authentication data block, the authentication data block having an authentication header and a signature; logic to decompose the authentication header in the data packets; logic to perform a percentage based verification on the data packets from the data stream; logic to determine an actual security level performed based on a number of available security operations in a receive host, a minimum security level, and a target security level, the minimum security level and the target security level being contained in the authentication header; and logic to communicate the actual security level to a send host.
Claim 34
Dependent Claim
50 words
The computer program embodied on a computer-readable medium of claim 23, wherein the logic to determine the actual security level further comprises logic to determine the number of available security operations by examining a resource tracking table for a non-critical processor time usage of at least one existing data stream.
Claim 35
Dependent Claim
66 words
The computer program embodied on a computer-readable medium of claim 23, further comprising: logic to perform a delayed verification on a bundle of data packets from the data stream; and logic to enable one of the delayed verification and the variable percentage verification based on a verification type field contained in the authentication header and on the number of available security operations in the receive host.
Claim 36
Dependent Claim
127 words
A computer program embodied in a modulated data signal for transmission across a network, the computer program being for operation in a send host to facilitate data communication with adaptive security, comprising: logic to input a desired security configuration for a data stream to be communicated to a receive host; logic to display the desired security configuration and an actual security configuration for the data stream, the actual security configuration being received from the receive host; and logic to generate a plurality of data packets associated with the data stream, the data packets including an authentication data block having an authentication header containing the actual security configuration and a signature, the actual security configuration being based upon a number of available security operations in the receive host.
Claim 37
Dependent Claim
127 words
A computer program embodied in a modulated data signal for transmission across a network, the computer program being for operation in a send host to facilitate data communication with adaptive security, comprising: logic to input a desired security configuration for a data stream to be communicated to a receive host; logic to display the desired security configuration and an actual security configuration for the data stream, the actual security configuration being received from the receive host; and logic to generate a plurality of data packets associated with the data stream, the data packets including an authentication data block having an authentication header containing the actual security configuration and a signature, the actual security configuration being based upon a number of available security operations in the receive host.
Claim 38
Dependent Claim
141 words
A computer program embodied in a modulated data signal for transmission across a network, the computer program being for operation in a receive host to facilitate data communication with adaptive security, comprising: logic to receive at least one data stream comprising a number of data packets, the data packets including an authentication data block, the authentication data block having an authentication header and a signature; logic to decompose the authentication header in the data packets; logic to perform a percentage based verification on the data packets from the data stream; logic to determine an actual security level performed based on a number of available security operations, a minimum security level, and a target security level, the minimum security level, the target security level being contained in the authentication header; and logic to communicate the actual security level to a send host.
Claim 39
Dependent Claim
141 words
A computer program embodied in a modulated data signal for transmission across a network, the computer program being for operation in a receive host to facilitate data communication with adaptive security, comprising: logic to receive at least one data stream comprising a number of data packets, the data packets including an authentication data block, the authentication data block having an authentication header and a signature; logic to decompose the authentication header in the data packets; logic to perform a percentage based verification on the data packets from the data stream; logic to determine an actual security level performed based on a number of available security operations, a minimum security level, and a target security level, the minimum security level, the target security level being contained in the authentication header; and logic to communicate the actual security level to a send host.
Claim 40
Dependent Claim
51 words
The computer program embodied in a modulated data signal of claim 27, wherein the logic to determine an actual security level further comprises logic to determine the number of available security operations by examining said at least one data stream received by the input device for a non-critical processor time usage.
Claim 41
Dependent Claim
61 words
The computer program embodied in a modulated data signal of claim 27, further comprising: logic to perform a delayed verification on a bundle of data packets from the data stream; and logic to enable one of the delayed verification and the variable percentage verification based on the number of available security operations and on a verification type in the authentication header.
Claim 42
Dependent Claim
104 words
A send host employing adaptive security, comprising: logical circuitry to input a desired security configuration for a data stream to be communicated to a receive host; logical circuitry to receive an actual security configuration for the data stream, the actual security configuration being received from the receive host, the actual security configuration being based upon a number of available security operations in the receive host; and logical circuitry to generate a plurality of data packets associated with the data stream, the data packets including a data block and an authentication data block having an authentication header containing the actual security configuration and a signature.
Claim 43
Dependent Claim
104 words
A send host employing adaptive security, comprising: logical circuitry to input a desired security configuration for a data stream to be communicated to a receive host; logical circuitry to receive an actual security configuration for the data stream, the actual security configuration being received from the receive host, the actual security configuration being based upon a number of available security operations in the receive host; and logical circuitry to generate a plurality of data packets associated with the data stream, the data packets including a data block and an authentication data block having an authentication header containing the actual security configuration and a signature.
Claim 44
Dependent Claim
128 words
A receive host employing adaptive security, comprising: logical circuitry to receive at least one data stream comprising a number of data packets, the data packets including an authentication data block, the authentication data block having an authentication header and a signature; logical circuitry to decompose the authentication header in the data packets; logical circuitry to perform a percentage based verification on the data packets from the data stream; logical circuitry to determine an actual security level performed based on a number of available security operations, a minimum security level, and a target security level, and a desired actual security level, the minimum security level and the target security level being contained in the authentication header; and logical circuitry to communicate the actual security level to a send host.
Claim 45
Dependent Claim
128 words
A receive host employing adaptive security, comprising: logical circuitry to receive at least one data stream comprising a number of data packets, the data packets including an authentication data block, the authentication data block having an authentication header and a signature; logical circuitry to decompose the authentication header in the data packets; logical circuitry to perform a percentage based verification on the data packets from the data stream; logical circuitry to determine an actual security level performed based on a number of available security operations, a minimum security level, and a target security level, and a desired actual security level, the minimum security level and the target security level being contained in the authentication header; and logical circuitry to communicate the actual security level to a send host.
Claim 46
Dependent Claim
113 words
A receive host employing adaptive security, comprising: a processor coupled to a data bus; a memory coupled to the data bus; and a data communications interface electrically coupled to the data bus, the data communications interface being configured to receive at least one data stream comprising a number of data packets; adaptive security logic stored on the memory and executable by the processor, the adaptive security logic including: logic to determine a number of available security operations in the receive host; and logic to allocate the number of available security operations in the receive host to perform a verification of a number of the data packets in the at least one data stream.
Claim 47
Dependent Claim
113 words
A receive host employing adaptive security, comprising: a processor coupled to a data bus; a memory coupled to the data bus; and a data communications interface electrically coupled to the data bus, the data communications interface being configured to receive at least one data stream comprising a number of data packets; adaptive security logic stored on the memory and executable by the processor, the adaptive security logic including: logic to determine a number of available security operations in the receive host; and logic to allocate the number of available security operations in the receive host to perform a verification of a number of the data packets in the at least one data stream.
Claim 48
Dependent Claim
44 words
The receive host of claim 32, wherein the logic to determine a number of available security operations in the receive host further comprises logic to determine the number of available security operations based upon a priority assigned to the at least one data stream.
Claim 49
Dependent Claim
32 words
The receive host of claim 32, wherein the logic to determine a number of available security operations in the receive host further comprises logic to determine a number of non-critical security operations.
References Cited (Backward Citations)
US4771391A
Cited
US4965827A
Cited
US5107415A
Cited
US5005137A
Cited
US5477531A
Cited
US5627972A
Cited
US5490252A
Cited
US5481735A
Cited
US5586260A
Cited
US5761438A
Cited
US5566310A
Cited
US5541852A
Cited
US5544322A
Cited
US5511122A
Cited
US5627970A
Cited
US5623601A
Cited
US5715397A
Cited
US5550984A
Cited
US5590197A
Cited
US5737535A
Cited
US5642360A
Cited
US5689566A
Cited
US5764921A
Cited
US5768536A
Cited
US5793763A
Cited
US5784571A
Cited
US5784572A
Cited
US5784578A
Cited
US5727159A
Cited
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 2003-08-22 | 2004-02-21 | 2004-08-22 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 2007-08-22 | 2008-02-21 | 2008-08-22 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2011-08-22 | 2012-02-21 | 2012-08-22 | $7700.00 | Window Closed / Lapsed |