US6594763B1
Expired / Lapsed
US
⏱️ 0.0 years remaining
Object-based security system
Assignee: Sprint Communications Co LP
•
Filing: 2001-09-25
•
Granted: 2003-07-15
•
Expires: 2021-09-25
Abstract
Abstract The invention authenticates processes and inter-process messaging. In some examples of the invention, security is performed in three layers—the application layer, the middleware layer, and the transport layer. Some examples of the invention include software products. One software product comprises security software and middleware software stored on a software storage medium. The security software directs a processor to receive a log-in request for a process, generate a request to authenticate the process, transfer the request to authenticate the process, receive a security association for the process, and transfer the security association. The middleware software directs the processor to receive the security association from the security software, receive a message from the process, insert the security association into the message, and transfer the message. Another software product comprises security software stored on a software storage medium. The security software directs a processor to receive a request to authenticate a process, authenticate the process, generate a security association for the process, store the security association, transfer the security association, receive the security association extracted from a message, and check the security association extracted from the message with the stored security association to authenticate the message.
Inventors
- 👤 Ashraf T. Madoukh
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-11-05 21:12
CPC Classifications
H; H04; H04L; H04L63/00; H04L63/04; H04L63/0428; H04L63/0442; G; G06; G06F; G06F21/00; G06F21/30; G06F21/44; G06F21/445; H04L63/08; H04L63/0823; H04L63/083
Claims Analysis
Total Claims: 42
Claim 1
Independent Claim
105 words
A software product for secure communications using a computer system, the software product comprising: message interface software configured to direct the computer system to transfer messages between Graphical User Interface (GUI) software and security software and between the GUI software and transport software, to provide the GUI software with language-neutral method calls to the security software, to insert first security associations into the messages transferred from the computer system, to extract second security associations from the messages received by the computer system, and to transfer the second security associations for authentication by a security system; and a storage media that stores the message interface software.
Claim 2
Dependent Claim
105 words
A software product for secure communications using a computer system, the software product comprising: message interface software configured to direct the computer system to transfer messages between Graphical User Interface (GUI) software and security software and between the GUI software and transport software, to provide the GUI software with language-neutral method calls to the security software, to insert first security associations into the messages transferred from the computer system, to extract second security associations from the messages received by the computer system, and to transfer the second security associations for authentication by a security system; and a storage media that stores the message interface software.
Claim 3
Dependent Claim
31 words
The software product of claim 1 wherein the message interface software is configured to direct the computer system to store information indicating ports, Internet addresses, and object identifiers for software objects.
Claim 4
Dependent Claim
25 words
The software product of claim 1 wherein the message interface software is configured to direct the computer system to implement an Interface Description Language (IDL).
Claim 5
Dependent Claim
22 words
The software product of claim 1 wherein the message interface software is configured to direct the computer system to implement Microsoft DCOM.
Claim 6
Dependent Claim
16 words
The software product of claim 1 wherein a portion of the messages are CORBA exception messages.
Claim 7
Dependent Claim
79 words
The software product of claim 1 further comprising the transport software configured to direct the computer system to transfer the messages between the message interface software and a communication network, to insert the first security associations into the messages transferred from computer system, and to extract the second security associations from the messages received by the computer system, and transfer the second security associations for authentication by a security system, and wherein the storage media stores the transport software.
Claim 8
Dependent Claim
65 words
The software product of claim 6 wherein the message interface software is configured to direct the computer system to insert a first portion of the first security associations into the messages transferred from the computer system, and wherein the transport software is configured to direct the computer system to insert a second portion of the first security associations into the messages transferred from computer system.
Claim 9
Dependent Claim
37 words
The software product of claim 6 wherein the GUI software is configured to direct the computer system to provide Internet access and the transport software is configured to direct the computer system to implement an Internet Protocol.
Claim 10
Dependent Claim
63 words
The software product of claim 1 further comprising the security software configured to direct the computer system to receive a password from the GUI software through the message interface, decrypt a private key with the password, encrypt a result with the private key, and transfer the encrypted result for authentication by the security system, and wherein the storage media stores the security software.
Claim 11
Dependent Claim
31 words
The software product of claim 1 wherein the GUI software is configured to direct the computer system to provide an employee with access to an employer communication network over the Internet.
Claim 12
Dependent Claim
29 words
The software product of claim 1 wherein the GUI software is configured to direct the computer system to provide a customer with access to a service over the Internet.
Claim 13
Dependent Claim
32 words
The software product of claim 1 wherein the GUI software is configured to direct the computer system to provide a network customer with access to a communication network manager over the Internet.
Claim 14
Independent Claim
101 words
A method of operating a computer system for secure communications, the method comprising: transferring messages through a message interface between a Graphical User Interface (GUI) and a security process and between the GUI and a transport interface; in the message interface, providing the GUI software with language-neutral method calls to the security software; in the message interface, inserting first security associations into the messages transferred from the computer system; in the message interface, extracting second security associations from the messages received by the computer system; and transferring the second security associations from the message interface for authentication by a security system.
Claim 15
Independent Claim
101 words
A method of operating a computer system for secure communications, the method comprising: transferring messages through a message interface between a Graphical User Interface (GUI) and a security process and between the GUI and a transport interface; in the message interface, providing the GUI software with language-neutral method calls to the security software; in the message interface, inserting first security associations into the messages transferred from the computer system; in the message interface, extracting second security associations from the messages received by the computer system; and transferring the second security associations from the message interface for authentication by a security system.
Claim 16
Dependent Claim
31 words
The method of claim 13 wherein providing the GUI with the language-neutral method calls to the security process comprises storing information indicating ports, Internet addresses, and object identifiers for software objects.
Claim 17
Dependent Claim
25 words
The method of claim 13 wherein providing the GUI with the language-neutral method calls to the security process comprises implementing an Interface Description Language (IDL).
Claim 18
Dependent Claim
22 words
The method of claim 13 wherein providing the GUI with the language-neutral method calls to the security process comprises implementing Microsoft DCOM.
Claim 19
Dependent Claim
15 words
The method of claim 13 wherein a portion of the messages are CORBA exception messages.
Claim 20
Dependent Claim
71 words
The method of claim 13 further comprising: transferring the messages through the transport interface between the message interface and a communication network; in the transport interface, inserting the first security associations into the messages transferred from computer system; in the transport interface, extracting the second security associations from the messages received by the computer system; and transferring the second security associations from the transport interface for authentication by a security system.
Claim 21
Dependent Claim
62 words
The method of claim 18 wherein inserting the first security associations into the messages transferred from the computer system comprises: in the message interface, inserting a first portion of the first security associations into the messages transferred from the computer system; and in the transport interface, inserting a second portion of the first security associations into the messages transferred from computer system.
Claim 22
Dependent Claim
32 words
The method of claim 18 wherein transferring the messages through the message interface and the transport interface between the GUI and the communication network comprises providing Internet access using an Internet Protocol.
Claim 23
Dependent Claim
58 words
The method of claim 13 further comprising: in the security process, receiving a password from the GUI through the message interface; in the security process, decrypting a private key with the password; in the security process, encrypting a result with the private key; and transferring the encrypted result from the security process for authentication by the security system.
Claim 24
Dependent Claim
24 words
The method of claim 13 wherein the GUI is configured to provide an employee with access to an employer communication network over the Internet.
Claim 25
Dependent Claim
22 words
The method of claim 13 wherein the GUI is configured to provide a customer with access to a service over the Internet.
Claim 26
Dependent Claim
25 words
The method of claim 13 wherein the GUI is configured to provide a network customer with access to a communication network manager over the Internet.
Claim 27
Dependent Claim
102 words
A communication system comprising: a session manager configured to exchange network control messages with user systems, process the network control messages to control communication services for the user systems, insert first security associations in two different layers of the network control messages transferred to the user systems, extract second security associations from the two different layers of the network control messages received from the user systems; and a security system configured to exchange security messages with the user systems to authenticate the user systems, and to process the second security associations to authenticate the network control messages received from the user systems.
Claim 28
Dependent Claim
102 words
A communication system comprising: a session manager configured to exchange network control messages with user systems, process the network control messages to control communication services for the user systems, insert first security associations in two different layers of the network control messages transferred to the user systems, extract second security associations from the two different layers of the network control messages received from the user systems; and a security system configured to exchange security messages with the user systems to authenticate the user systems, and to process the second security associations to authenticate the network control messages received from the user systems.
Claim 29
Dependent Claim
16 words
The communication system of claim 25 wherein one of the layers comprises a network transport layer.
Claim 30
Dependent Claim
17 words
The communication system of claim 25 wherein one of the layers comprises a language-neutral message interface layer.
Claim 31
Dependent Claim
16 words
The communication system of claim 25 wherein one of the layers comprises an Internet Protocol layer.
Claim 32
Dependent Claim
16 words
The communication system of claim 25 wherein one of the layers comprises a Microsoft DCOM layer.
Claim 33
Dependent Claim
15 words
The communication system of claim 25 wherein one of the layers comprises a CORBA layer.
Claim 34
Dependent Claim
23 words
The communication system of claim 25 wherein the security system is configured to generate the first security associations and the second security associations.
Claim 35
Independent Claim
96 words
A method of operating a communication system, the method comprising: exchanging security messages with user systems to authenticate the user systems; exchanging network control messages with user systems and processing the network control messages to control communication services for the user systems; inserting first security associations in two different layers of the network control messages transferred to the user systems; extracting second security associations from the two different layers of the network control messages received from the user systems; and processing the second security associations to authenticate the network control messages received from the user systems.
Claim 36
Independent Claim
96 words
A method of operating a communication system, the method comprising: exchanging security messages with user systems to authenticate the user systems; exchanging network control messages with user systems and processing the network control messages to control communication services for the user systems; inserting first security associations in two different layers of the network control messages transferred to the user systems; extracting second security associations from the two different layers of the network control messages received from the user systems; and processing the second security associations to authenticate the network control messages received from the user systems.
Claim 37
Dependent Claim
15 words
The method of claim 32 wherein one of the layers comprises a network transport layer.
Claim 38
Dependent Claim
16 words
The method of claim 32 wherein one of the layers comprises a language-neutral message interface layer.
Claim 39
Dependent Claim
15 words
The method of claim 32 wherein one of the layers comprises an Internet Protocol layer.
Claim 40
Dependent Claim
15 words
The method of claim 32 wherein one of the layers comprises a Microsoft DCOM layer.
Claim 41
Dependent Claim
14 words
The method of claim 32 wherein one of the layers comprises a CORBA layer.
Claim 42
Dependent Claim
17 words
The method of claim 32 further comprising generating the first security associations and the second security associations.
References Cited (Backward Citations)
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 2006-07-14 | 2007-01-13 | 2007-07-15 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 2010-07-14 | 2011-01-13 | 2011-07-15 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2014-07-14 | 2015-01-13 | 2015-07-15 | $7700.00 | Window Closed / Lapsed |