US6317831B1
Expired / Lapsed
US
⏱️ 0.0 years remaining
Method and apparatus for establishing a secure connection over a one-way data path
Assignee: Unwired Planet LLC
•
Filing: 1998-09-21
•
Granted: 2001-11-13
•
Expires: 2018-09-21
Abstract
Abstract Improved techniques for facilitating secure data transfer over one-way data channels or narrowband channels are disclosed. Often, these channels are wireless channels provided by wireless data networks. The techniques enable cryptographic handshake operations for a one-way data channel to be performed over a companion two-way data channel so that the one-way data channel is able to effectively satisfy security protocols that require two-way communications for the cryptographic handshake operations. Once the cryptographic handshake operations are complete, data can be transmitted over the one-way data channel in a secure manner. Additionally, the techniques also enable the cryptographic handshake operations to be performed more rapidly because the two-way channel is typically a wideband channel. In which case, the use of a wideband channel instead of a narrowband channel for the cryptographic handshake operations results in latency reductions, regardless of whether the narrowband channel is a one-way channel or a two-way channel.
Inventors
- 👤 Peter F. King
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-11-04 13:56
CPC Classifications
H; H04; H04L; H04L63/00; H04L63/04; H04L63/0428; H04W; H04W12/00; H04W12/08; H04L63/18; H04L9/00; H04L9/08; H04L9/0816; H04L9/0819; H04L9/0827; H04W12/03; H04L2209/00; H04L2209/80; H04W12/04
Claims Analysis
Total Claims: 39
Claim 1
Independent Claim
95 words
A method for securely transmitting data between a client and a server over a narrowband channel, where the client and server are connectable by not only the narrowband channel but also by a wideband channel, said method comprising the acts of: connecting the client and server over the wideband channel; exchanging security information between the client and server over the wideband channel; encrypting data to be transmitted from the server to the client using the security information at the server; and transmitting the encrypted data from the server to the client over the narrowband channel.
Claim 2
Independent Claim
95 words
A method for securely transmitting data between a client and a server over a narrowband channel, where the client and server are connectable by not only the narrowband channel but also by a wideband channel, said method comprising the acts of: connecting the client and server over the wideband channel; exchanging security information between the client and server over the wideband channel; encrypting data to be transmitted from the server to the client using the security information at the server; and transmitting the encrypted data from the server to the client over the narrowband channel.
Claim 3
Dependent Claim
51 words
A method as recited in claim 1 , wherein said encrypting comprises: forming a server-side narrowband channel key block based at least in part on the security information at the server; and encrypting the data to be transmitted from the server to the client using the server-side narrowband channel key block.
Claim 4
Dependent Claim
66 words
A method as recited in claim 2 , wherein said method further comprises: forming a client-side narrowband channel key block based at least in part on the security information at the client; receiving the encrypted data that has been transmitted from the server to the client over the narrowband channel; and decrypting the encrypted data that has been received from the server over the narrowband channel.
Claim 5
Dependent Claim
34 words
A method as recited in claim 1 , wherein said method further comprises: transmitting different portions of the encrypted data from the server to the client over the narrowband channel and the wideband channel.
Claim 6
Dependent Claim
103 words
A method as recited in claim 4 , wherein said encrypting comprises: forming a server-side narrowband channel key block based at least in part on the security information at the server; forming a server-side wideband channel key block based at least in part on the security information at the server; encrypting the portion of the data to be transmitted from the server to the client over the narrowband channel using the server-side narrowband channel key block; and encrypting the portion of the data to be transmitted from the server to the client over the wideband channel using the server-side wideband channel key block.
Claim 7
Dependent Claim
132 words
A method as recited in claim 5 , wherein said method further comprises: forming a client-side narrowband channel key block based at least in part on the security information at the client; forming a client-side wideband channel key block based at least in part on the security information at the client; receiving the encrypted data that has been transmitted from the server to the client over the narrowband channel; decrypting the encrypted data that has been received from the server over the narrowband channel using the client-side narrowband channel key block; receiving the encrypted data that has been transmitted from the server to the client over the wideband channel; and decrypting the encrypted data that has been received from the server over the wideband channel using the client-side wideband channel key block.
Claim 8
Dependent Claim
46 words
A method as recited in claim 1 , wherein said method further comprises: encrypting data to be transmitted from the client to the server using the security information at the client; and transmitting the encrypted data from the client to the server over the narrowband channel.
Claim 9
Dependent Claim
70 words
A method as recited in claim 7 , wherein said encrypting of the data to be transmitted from the client to the server comprises: forming a client-side narrowband channel key block based at least in part on the security information at the client that was received over the wideband channel; and encrypting the data to be transmitted from the client to the server using the client-side narrowband channel key block.
Claim 10
Dependent Claim
23 words
A method as recited in claim 1 , wherein at least a portion of the narrowband channel and the wideband channel are wireless.
Claim 11
Dependent Claim
22 words
A method as recited in claim 1 , wherein the narrowband channel has a bandwidth less than one-half of the wideband channel.
Claim 12
Dependent Claim
24 words
A method as recited in claim 1 , wherein the narrowband channel is a one-way channel, and the wideband channel is a two-way channel.
Claim 13
Dependent Claim
53 words
A method as recited in claim 1 , wherein said method further comprises: signing data to be transmitted from the server to the client based on the security information, and wherein said transmitting operates to transmits the encrypted data and the signed data from the server to the client over the narrowband channel.
Claim 14
Dependent Claim
24 words
A method as recited in claim 12 , wherein the narrowband channel is a one-way channel, and the wideband channel is a two-way channel.
Claim 15
Independent Claim
102 words
A method for transmitting data in a secure manner from a server to a client, said method comprising the acts of: exchanging security information between the client and the server over a two-way channel between the client and the server; encrypting data to be transmitted from the server to the client based on the security information; and transmitting the encrypted data from the server to the client over a one-way channel between the client and the server that carries data from the server to the client, wherein the two-way channel is a wideband channel, and the one-way channel is a narrowband channel.
Claim 16
Independent Claim
102 words
A method for transmitting data in a secure manner from a server to a client, said method comprising the acts of: exchanging security information between the client and the server over a two-way channel between the client and the server; encrypting data to be transmitted from the server to the client based on the security information; and transmitting the encrypted data from the server to the client over a one-way channel between the client and the server that carries data from the server to the client, wherein the two-way channel is a wideband channel, and the one-way channel is a narrowband channel.
Claim 17
Dependent Claim
21 words
A method as recited in claim 14 , wherein the security information includes at least a key and a random number.
Claim 18
Dependent Claim
20 words
A method as recited in claim 14 , wherein the security information further includes an identification of an encryption technique.
Claim 19
Dependent Claim
23 words
A method as recited in claim 14 , wherein at least a portion of the narrowband channel and the wideband channel are wireless.
Claim 20
Dependent Claim
32 words
A method as recited in claim 17 , wherein the wideband channel is provided by a circuit-switched data network, and the narrowband channel is provided by a one-way short message service network.
Claim 21
Independent Claim
93 words
A method for securely transmitting data between a client and a server over a narrowband channel, where the client and server are connectable by not only the narrowband channel but also by a wideband channel, said method comprising the acts of: connecting the client and server over the wideband channel; exchanging security information between the client and server over the wideband channel; signing data to be transmitted from the server to the client based on the security information, and transmitting the signed data from the server to the client over the narrowband channel.
Claim 22
Independent Claim
93 words
A method for securely transmitting data between a client and a server over a narrowband channel, where the client and server are connectable by not only the narrowband channel but also by a wideband channel, said method comprising the acts of: connecting the client and server over the wideband channel; exchanging security information between the client and server over the wideband channel; signing data to be transmitted from the server to the client based on the security information, and transmitting the signed data from the server to the client over the narrowband channel.
Claim 23
Dependent Claim
23 words
A method as recited in claim 19 , wherein at least a portion of the narrowband channel and the wideband channel are wireless.
Claim 24
Dependent Claim
24 words
A method as recited in claim 20 , wherein the narrowband channel is a one-way channel, and the wideband channel is a two-way channel.
Claim 25
Dependent Claim
124 words
A wireless communication system, comprising: a wired network having a plurality of server computers; a wireless carrier network operatively connected to said wired network, said wireless carrier network supporting a narrowband channel and a wideband channel; a network gateway coupled between said wired network and said wireless carrier network, said network gateway includes a secure connection processor that establishes a secure connection over the narrowband channel by exchanging security information over the wideband channel; and a plurality of wireless mobile devices that can exchange data with the server computers on said wired network via said wireless carrier network and said network gateway, wherein messages are supplied from said network gateway to said wireless mobile devices over the secure connection established over the narrowband channel.
Claim 26
Dependent Claim
124 words
A wireless communication system, comprising: a wired network having a plurality of server computers; a wireless carrier network operatively connected to said wired network, said wireless carrier network supporting a narrowband channel and a wideband channel; a network gateway coupled between said wired network and said wireless carrier network, said network gateway includes a secure connection processor that establishes a secure connection over the narrowband channel by exchanging security information over the wideband channel; and a plurality of wireless mobile devices that can exchange data with the server computers on said wired network via said wireless carrier network and said network gateway, wherein messages are supplied from said network gateway to said wireless mobile devices over the secure connection established over the narrowband channel.
Claim 27
Dependent Claim
129 words
A mobile device capable of connecting to a network of computers through a wireless link, said mobile device comprising: a display screen that displays graphics and text; a message buffer that temporarily stores a message from a computer on the network of computers, the message having a service identity associated therewith; an application that utilizes the message received from the computer on the network of computers; and a cryptographic controller that controls encryption or signature of outgoing messages and controls the decryption or authentication of incoming messages, said cryptographic controller operates to establish a secure connection over which it receives the incoming messages by using a narrowband channel, wherein a companion wideband channel is used to exchange security information needed to establish the secure connection over the narrowband channel.
Claim 28
Dependent Claim
129 words
A mobile device capable of connecting to a network of computers through a wireless link, said mobile device comprising: a display screen that displays graphics and text; a message buffer that temporarily stores a message from a computer on the network of computers, the message having a service identity associated therewith; an application that utilizes the message received from the computer on the network of computers; and a cryptographic controller that controls encryption or signature of outgoing messages and controls the decryption or authentication of incoming messages, said cryptographic controller operates to establish a secure connection over which it receives the incoming messages by using a narrowband channel, wherein a companion wideband channel is used to exchange security information needed to establish the secure connection over the narrowband channel.
Claim 29
Dependent Claim
29 words
A mobile device as recited in claim 23 , wherein said application is a browser application that permits a user to retrieve information from the computers on the network.
Claim 30
Dependent Claim
109 words
A computer readable medium including computer program code for securely transmitting data between a client and a server over a narrowband channel, where the client and server are connectable by not only the narrowband channel but also by a wideband channel, said computer readable medium comprises: computer program code for connecting the client and server over the wideband channel; computer program code for exchanging security information between the client and server over the wideband channel; computer program code for cryptographically processing data to be transmitted using the security information; and computer program code for transmitting the cryptographically processed data from the server to the client over the narrowband channel.
Claim 31
Dependent Claim
109 words
A computer readable medium including computer program code for securely transmitting data between a client and a server over a narrowband channel, where the client and server are connectable by not only the narrowband channel but also by a wideband channel, said computer readable medium comprises: computer program code for connecting the client and server over the wideband channel; computer program code for exchanging security information between the client and server over the wideband channel; computer program code for cryptographically processing data to be transmitted using the security information; and computer program code for transmitting the cryptographically processed data from the server to the client over the narrowband channel.
Claim 32
Dependent Claim
55 words
A computer readable medium as recited in claim 25 , wherein said computer program code for cryptographically processing comprises: computer program code for forming a narrowband channel key block based at least in part on the security information; and computer program code for encrypting the data to be transmitted using the narrowband channel key block.
Claim 33
Dependent Claim
40 words
A computer readable medium as recited in claim 26 , wherein said computer program code for cryptographically processing further comprises: computer program code for signing data to be transmitted from the server to the client based on the security information.
Claim 34
Dependent Claim
42 words
A computer readable medium as recited in claim 26 , wherein at least a portion of the narrowband channel and the wideband channel are wireless, and wherein the narrowband channel is a one-way channel, and the wideband channel is a two-way channel.
Claim 35
Dependent Claim
107 words
A computer readable medium including computer program code for transmitting data in a secure manner from a server to a client, said computer readable medium comprising: computer program code for exchanging security information between the client and the server over a wireless, wideband channel between the client and the server; computer program code for cryptographically processing data to be transmitted from the server to the client based on the security information; and computer program code for transmitting the cryptographically processed data from the server to the client over a wireless, narrowband channel between the client and the server that carries data from the server to the client.
Claim 36
Dependent Claim
107 words
A computer readable medium including computer program code for transmitting data in a secure manner from a server to a client, said computer readable medium comprising: computer program code for exchanging security information between the client and the server over a wireless, wideband channel between the client and the server; computer program code for cryptographically processing data to be transmitted from the server to the client based on the security information; and computer program code for transmitting the cryptographically processed data from the server to the client over a wireless, narrowband channel between the client and the server that carries data from the server to the client.
Claim 37
Dependent Claim
34 words
A computer readable medium as recited in claim 29 , wherein said computer program code for cryptographically processing the data to be transmitted performs at least one of encrypting and signing of the data.
Claim 38
Dependent Claim
28 words
A computer readable medium as recited in claim 29 , wherein the wireless, wideband channel is a two-way channel, and the wireless, narrowband channel is a one-way channel.
Claim 39
Dependent Claim
36 words
A computer readable medium as recited in claim 31 , wherein the wireless, wideband channel is provided by a circuit-switched data network, and the wireless, narrowband channel is provided by a one-way short message service network.
References Cited (Backward Citations)
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 2004-11-12 | 2005-05-14 | 2005-11-13 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 2008-11-12 | 2009-05-14 | 2009-11-13 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2012-11-12 | 2013-05-14 | 2013-11-13 | $7700.00 | Window Closed / Lapsed |