US 10,476,851 B1Granted

Unbounded sessions for secure communications

AssigneeCentri Technology, Inc.

InventorsWilliam Joseph Adams, Luis Gerardo Paris, Aldo Jose Nunez

Life of this patent

Estimating the term…

Loading patent…

Abstract

Embodiments are directed towards encoding and transmitting data over a homogeneous network, heterogeneous network or without a network using secure sessions. An application generates a payload that includes information associated with the application and a another application. An encoding engine obtains a session bundle and the payload from the application. A message package that includes an encoded version of the payload such that the payload may be encoded based on the session bundle and the payload. The message package may be provided to the application. The application may select a communication facility to send the message package to the other application. The other application employs its communication facility to receive the message package from the application. The decoding engine may decode the message package based on a second session bundle. The decoding engine may provide the payload of the decoded message package to the other application.

Claims30

Dependent claims

A method for encoding data over one or more networks or communications mechanisms using one or more processors of a network computer that execute instructions to perform the method, comprising:

instantiating a first application to perform actions, including:
generating a payload that includes information associated with the first application and a second application;
and
instantiating an encoding engine to perform actions, including:
obtaining a first session bundle and the payload from the first application, wherein the first session bundle corresponds to a secure session;
generating a message package that includes an encoded version of the payload, wherein the payload is encoded based on the first session bundle and the payload;
and
providing the message package to the first application;
and
selecting one or more of a plurality of communication facilities available to the first application to send the message package to the second application, wherein two or more types of the communication facilities provide different modes of communication over different types of communication media, and wherein the different modes of communication include one or more manual actions that are performed with the message package to manually traverse one or more physical air gaps between two or more networks and to enable the secure session to continue communicating the message package to the second application on the one or more networks;
and
instantiating the second application to perform actions, including:
employing one or more of the plurality of communication facilities that are available to the second application to receive the message package from the first application;
and
instantiating a decoding engine to perform actions, including:
decoding the message package based on a second session bundle that is associated with the secure session, wherein state information associated with the secure session is discarded;
and
providing the payload of the decoded message package without the state information for the secure session to the second application.

15 more elements

A processor readable non-transitory storage media that includes instructions for encoding data over one or more networks or communications mechanisms using one or more computers, wherein execution of the instructions by the one or more network computers perform the method comprising:

instantiating a first application to perform actions, including:
generating a payload that includes information associated with the first application and a second application;
and
instantiating an encoding engine to perform actions, including:
obtaining a first session bundle and the payload from the first application, wherein the first session bundle corresponds to a secure session;
generating a message package that includes an encoded version of the payload, wherein the payload is encoded based on the first session bundle and the payload;
and
providing the message package to the first application;
and
selecting one or more of a plurality of communication facilities available to the first application to send the message package to the second application, wherein two or more types of the communication facilities provide different modes of communication over different types of communication media, and wherein the different modes of communication include one or more manual actions that are performed with the message package to manually traverse one or more physical air gaps between two or more networks and to enable the secure session to continue communicating the message package to the second application on the one or more networks;
and
instantiating the second application to perform actions, including:
employing one or more of the plurality of communication facilities that are available to the second application to receive the message package from the first application;
and
instantiating a decoding engine to perform actions, including:
decoding the message package based on a second session bundle that is associated with the secure session, wherein state information associated with the secure session is discarded;
and
providing the payload of the decoded message package without the state information for the secure session to the second application.

15 more elements

A system for encoding data, comprising:

one or more network computers, comprising:
a transceiver that communicates over one or more networks;
a memory that stores at least instructions;
and
one or more processors that execute instructions that perform actions, including:
instantiating a first application to perform actions, including:
generating a payload that includes information associated with the first application and a second application;
and
instantiating an encoding engine to perform actions, including:
obtaining a first session bundle and the payload from the first application, wherein the first session bundle corresponds to a secure session;
generating a message package that includes an encoded version of the payload, wherein the payload is encoded based on the first session bundle and the payload;
and
providing the message package to the first application;
and
selecting one or more of a plurality of communication facilities available to the first application to send the message package to the second application, wherein two or more types of the communication facilities provide different modes of communication over different types of communication media, and wherein the different modes of communication include one or more manual actions that are performed with the message package to manually traverse one or more physical air gaps between two or more networks and to enable the secure session to continue communicating the message package to the second application on the one or more networks;
and one or more client computers, comprising:
a transceiver that communicates over the one or more networks;
a memory that stores at least instructions;
and
one or more processors that execute instructions that perform actions, including:
instantiating the second application to perform actions, including:
employing one or more of the plurality of communication facilities that are available to the second application to receive the message package from the first application;
and
instantiating a decoding engine to perform actions, including:
decoding the message package based on a second session bundle that is associated with the secure session, wherein state information associated with the secure session is discarded;
and
providing the payload of the decoded message package without the state information for the secure session to the second application.

24 more elements

A network computer for encoding data, comprising:

a transceiver that communicates over a network;
a memory that stores at least instructions;
and
one or more processors that execute instructions that perform actions, including:
instantiating a first application to perform actions, including:
generating a payload that includes information associated with the first application and a second application;
and
instantiating an encoding engine to perform actions, including:
obtaining a first session bundle and the payload from the first application, wherein the first session bundle corresponds to a secure session;
generating a message package that includes an encoded version of the payload, wherein the payload is encoded based on the first session bundle and the payload;
and
providing the message package to the first application;
and
selecting one or more of a plurality of communication facilities available to the first application to send the message package to the second application, wherein two or more types of the communication facilities provide different modes of communication over different types of communication media, and wherein the different modes of communication include one or more manual actions that are performed with the message package to manually traverse one or more physical air gaps between two or more networks and to enable the secure session to continue communicating the message package to the second application on the one or more networks;
and instantiating the second application to perform actions, including:
employing one or more of the plurality of communication facilities that are available to the second application to receive the message package from the first application;
and
instantiating a decoding engine to perform actions, including:
decoding the message package based on a second session bundle that is associated with the secure session, wherein state information associated with the secure session is discarded;
and
providing the payload of the decoded message package without the state information for the secure session to the second application.

18 more elements

Dependencies are inferred from the claim text.

Facts

Application: 15/967,474Filed 30 Apr 2018
Published: US 2019/0334876 A131 Oct 2019
Granted: 12 Nov 2019
Term ends: Not estimatedThe source records don’t support an estimate.

Classification7 codes

H04L 63/0428
For providing a confidential data exchange among entities communicating through data packet networks: wherein the data content is protected, e.g.…
G06F 21/602
Protecting data: providing cryptographic facilities or services
G06F 21/606
Protecting data: by securing the transmission between two devices or processes
H04L 63/0435
Wherein the data content is protected, e.g. by encrypting or encapsulating the payload: wherein the sending and receiving network entities apply…