Mutual secure communications
AssigneeComcast Cable Communications, LLC
InventorsAsad Haque, Ahmad Douglas, Ahmad Altamimi, Liesheng Long
Life of this patent
Estimating the term…
Abstract
A sending device may send data intended for a target device. An intermediate device may intercept the data sent from the sending device and forward the communications to the target device. Security data (e.g., a security certificate for authentication) along with an encrypted version of the security data may be sent at the application layer such that it passes from the sending device, through the intermediate device, and to the target device without being analyzed or modified by the intermediate device. The target device may use the encrypted security data and the security data to verify the identity of the sending device.
Claims19
A method comprising:
- determining, by a sending device, a target device for receipt of data;
- determining, by the sending device, certificate data associated with the sending device;
- encrypting the certificate data, using a public key associated with the target device, to generate encrypted certificate data that comprises an encrypted version of the certificate data;
- generating, by the sending device, request data comprising:
- the certificate data;
- and
- the encrypted certificate data comprising the encrypted version of the certificate data;
- sending, by the sending device, the request data;
- and
- establishing, based on the request data, a secure communication channel.
A method comprising:
- receiving, by a target device and from an intermediate device, request data comprising:
- certificate data associated with a sending device;
- and
- encrypted certificate data comprising an encrypted version of the certificate data;
- decrypting the encrypted certificate data using a private key associated with the target device to obtain decrypted certificate data;
- validating the request data based on the decrypted certificate data and the certificate data;
- and
- verifying an identity of the sending device based on the certificate data.
A method comprising:
- determining, by a sending device, an encrypted digital signature based on certificate data associated with the sending device;
- generating, by the sending device, request data comprising the encrypted digital signature;
- establishing a secure communication channel between the sending device and an intermediate device, wherein the secure communication channel comprises a HyperText Transfer Protocol (HTTP) session encrypted using Transport Layer Security (TLS);
- sending, by the sending device, to the intermediate device, and via the secure communication channel, the request data;
- receiving, by a target device and from the intermediate device, the request data;
- decrypting, by the target device, the encrypted digital signature to extract the certificate data;
- validating the certificate data;
- and
- validating the request data based on the validated certificate data.
Dependencies are inferred from the claim text.