Patent US6353891B1 successfully refreshed from Google Patents.
US6353891B1
Expired / Lapsed
US
⏱️ 0.0 years remaining
Control channel security for realm specific internet protocol
Assignee: HP Inc
•
Filing: 2000-08-09
•
Granted: 2002-03-05
•
Expires: 2020-08-09
Abstract
Abstract Systems and methods for implementing security with RSIP are disclosed. In a first security system and method, authentication is provided with a combination of a userid and HMAC parameters. The userid parameter identifies the sender and the HMAC parameters are used with a shared key that only the sender and recipient know. Integrity is also provided by the HMAC parameters. Replay protection is provided by a replay counter, and reflection attacks are prevented by the fact that in the RSIP protocol, each entity plays the role of either a host or a gateway, and each RSIP control message can be sent by either a host or a gateway, but not both. Liveness is provided by a combination of the replay counters, userids, host and gateway cookies, and the shared key. The use of cookies allows the shared key to be used between two different sessions, even if the replay counter is reset. In a second security system and method, authentication is provided by a certificate exchange, with a combination of a userid and signed hash parameters. The userid parameter identifies the sender, and it is easy to verify that the signed hash has been signed by the proper sender. Integrity is also provided by the signed hash parameters.
Inventors
- 👤 Michael S. Borella
- 👤 David A. Grabelsky
- 👤 Dan Nessett
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-11-08 22:24
CPC Classifications
H; H04; H04L; H04L63/00; H04L63/04; H04L63/0428; G; G06; G06F; G06F21/00; G06F21/30; G06F21/31; G06F21/33; H04L61/00; H04L61/09; H04L61/25; H04L61/2503; H04L61/256; H04L61/2564; H04L63/08; H04L63/0823
Claims Analysis
Total Claims: 22
Claim 1
Independent Claim
99 words
A network security system comprising: a private network having at least one host device; a gateway connecting the private network to a public network, the gateway being in communication with the at least one host device; and a control channel between the at least one host device and the gateway, the control channel having a first phase that negotiates a first security parameter and a second security parameter, the control channel also having a second phase that uses the first security parameter and the second security parameter for communication between the at least one host device and the gateway.
Claim 2
Dependent Claim
99 words
A network security system comprising: a private network having at least one host device; a gateway connecting the private network to a public network, the gateway being in communication with the at least one host device; and a control channel between the at least one host device and the gateway, the control channel having a first phase that negotiates a first security parameter and a second security parameter, the control channel also having a second phase that uses the first security parameter and the second security parameter for communication between the at least one host device and the gateway.
Claim 3
Dependent Claim
30 words
The network of claim 1 wherein the gateway provides the at least one host device with an Internet Protocol address that can be used to communicate with the public network.
Claim 4
Dependent Claim
20 words
The network of claim 2 wherein the gateway uses a Realm Specific Internet Protocol to provide the Internet Protocol address.
Claim 5
Dependent Claim
21 words
The network of claim 1 wherein the first phase is a registration phase, and the second phase is an assignment phase.
Claim 6
Dependent Claim
25 words
The network of claim 1 wherein the first security parameter is a security method parameter, and the second security parameter is an authentication type parameter.
Claim 7
Dependent Claim
41 words
The network of claim 5 wherein the security method parameter is one of a Pre-shared Session Key parameter and a Public Key Infrastructure parameter, and the authentication type parameter is one of a Message-Digest Algorithm 5 and a Secure Hash Algorithm-1.
Claim 8
Dependent Claim
28 words
The network of claim 1 wherein the first security parameter is a Pre-Shared Session Key parameter, and the second security parameter is a Hash-based Message Authentication Code parameter.
Claim 9
Dependent Claim
21 words
The network of claim 7 wherein the control channel further comprises a userid, at least one cookie, and a replay counter.
Claim 10
Dependent Claim
33 words
The network of claim 1 wherein the first security parameter is a Public Key Infrastructure parameter, and the second security parameter is one of a Message-Digest Algorithm 5 and a Secure Hash Algorithm-1.
Claim 11
Dependent Claim
25 words
The network of claim 9 wherein the control channel further comprises a userid, at least one cookie, a replay counter, and a signed hash parameter.
Claim 12
Independent Claim
108 words
A method for network security between a private network and a public network, the method comprising the steps of: providing at least one host device on the private network, and a gateway in communication with the at least one host device; connecting the private network and the public network with the gateway; setting up a control channel between the at least one host device and the gateway; negotiating a first security parameter and a second security parameter in a first phase; and using the first security parameter and the second security parameter in a second phase for communication between the at least one host device and the gateway.
Claim 13
Independent Claim
108 words
A method for network security between a private network and a public network, the method comprising the steps of: providing at least one host device on the private network, and a gateway in communication with the at least one host device; connecting the private network and the public network with the gateway; setting up a control channel between the at least one host device and the gateway; negotiating a first security parameter and a second security parameter in a first phase; and using the first security parameter and the second security parameter in a second phase for communication between the at least one host device and the gateway.
Claim 14
Dependent Claim
35 words
The method of claim 11 further comprising the step of providing the at least one host device with an Internet Protocol address from the gateway that can be used to communicate with the public network.
Claim 15
Dependent Claim
26 words
The method of claim 12 further comprising the step of using a Realm Specific Internet Protocol to enable the gateway to provide the Internet Protocol address.
Claim 16
Dependent Claim
26 words
The method of claim 11 further comprising the step of using a registration phase for the first phase, and an assignment phase for the second phase.
Claim 17
Dependent Claim
30 words
The method of claim 11 further comprising the step of using a security method parameter for the first security parameter, and an authentication type parameter for the second security parameter.
Claim 18
Dependent Claim
47 words
The method of claim 15 further comprising the step of using one of a Pre-shared Session Key parameter and a Public Key Infrastructure parameter for the security method parameter, and using one of a Message-Digest Algorithm 5 and a Secure Hash Algorithm-1 for the authentication type parameter.
Claim 19
Dependent Claim
33 words
The method of claim 11 further comprising the step of using a Pre-Shared Session Key parameter for the first security parameter, and a Hash-based Message Authentication Code parameter for the second security parameter.
Claim 20
Dependent Claim
25 words
The method of claim 17 further comprising the step of providing the control channel with a userid, at least one cookie, and a replay counter.
Claim 21
Dependent Claim
38 words
The method of claim 11 further comprising the step of using a Public Key Infrastructure parameter for the first security parameter, and one of a Message-Digest Algorithm 5 and a Secure Hash Algorithm-1 for the second security parameter.
Claim 22
Dependent Claim
29 words
The method of claim 19 further comprising the step of providing the control channel with a userid, at least one cookie, a replay counter, and a signed hash parameter.
References Cited (Backward Citations)
US5159592A
Cited
US5227778A
Cited
US5526489A
Cited
US5636216A
Cited
US5550984A
Cited
US5867660A
Cited
US5812819A
Cited
US5793763A
Cited
US5708655A
Cited
US5872847A
Cited
US5950195A
Cited
US6011782A
Cited
US6079021A
Cited
US6134591A
Cited
US6055236A
Cited
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 2005-03-04 | 2005-09-03 | 2006-03-05 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 2009-03-04 | 2009-09-03 | 2010-03-05 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2013-03-04 | 2013-09-03 | 2014-03-05 | $7700.00 | Window Closed / Lapsed |