Device for validating a message conveyed via a network
AssigneeSeraph Security, Inc.
InventorsNorman Schibuk, Boris Lukashev, Steve Graham
Life of this patent
Estimating the term…
Abstract
A validation device in a communication network is configured to communicate control information bidirectionally via a control plane of the network and access message data via a production plane of the network. The validation device receives key data via the control plane, and accesses a message received via the production plane by a message receiving device. The message includes a signature derived from the first key data. The validation device uses the first key data to check validity of the signature.
Claims12
A validation device of a data validation system in a communication network comprising a bidirectional control plane, and a bidirectional and/or uni-directional message production plane, the data validation system further comprising a message sending device at a first network location, a message receiving device at a second network location in the production plane, a signer device configured to communicate control information bidirectionally via the control plane and access message data via the production plane, and a network key manager configured to convey first key data uniquely associated with the signer device via the control plane, wherein the control plane is independent from the production plane, the validation device comprising:
- a processor and a memory configured to store non-transitory instructions that, when executed by the processor, perform the steps of:
- communicating control information bidirectionally via the control plane and access message data via the production plane;
- receiving the first key data via the control plane;
- accessing a message received at the message receiving device from the message sending device via the production plane, wherein the message comprises message data and a signature comprising the first key data;
- and
- using the first key data to check a validity of the signature.
A network key manager device for a data validation system in a communication network comprising a bidirectional control plane, and a bidirectional and/or uni-directional message production plane, the data validation system further comprising a message sending device at a first network location and a message receiving device at a second network location in the production plane, wherein the control plane is independent from the production plane, the system further comprising a signer device configured to communicate control information bidirectionally via the control plane and access message data via the production plane, and a validation device configured to communicate control information bidirectionally via the control plane and access message data via the production plane, they network key manager comprising:
- a processor and a memory configured to store non-transitory instructions that, when executed by the processor, perform the step of conveying first key data uniquely associated with the signer device to the signer device and the validation device via the control plane.
A signer device of a data validation system in a communication network comprising a bidirectional control plane and a bidirectional and/or uni-directional message production plane, the data validation system further comprising a message sending device at a first network location, a message receiving device at a second network location in the production plane, and a network key manager configured to convey first key data uniquely associated with the signer device via the control plane, wherein the control plane is independent from the production plane, the signer device comprising:
- a processor and a memory configured to store non-transitory instructions that, when executed by the processor, perform the steps of:
- communicating control information bidirectionally via the control plane;
- receiving the first key data via the control plane;
- accessing via the production plane a message from the message sending device comprising message data for transmission via the production plane,
- producing using the first key data a signature associated with and unique to the signer device;
- and
- attaching the signature to the message.
Dependencies are inferred from the claim text.