Method and apparatus for securely establishing l3-svc connections
AssigneesAlcatel, Alcatel Lucent, Sound View Innovations, LLC
InventorCarl Rajsic
Life of this patent
Estimating the term…
Abstract
A system and method are provided for securely establishing Layer-3 SVCs or SPVCs across an ATM network. An originating multiservice switch that generates the connection setup message for the Layer-3 connection includes security information within the setup message, such as a Closed User Group Interlock Code. When the destination multiservice switch receives the setup message, it extracts the embedded security information and compares it with stored security information corresponding to the connection. The correspondence may be determined from the destination user. If the embedded security information matches the stored security information, the destination multiservice switch allows the connection to be established.
Claims19
1-13. (canceled)
14-30. (canceled)
A method of establishing a secure connection across a data network, the secure connection having a first endpoint at a port of a first multiservice switch (MSS) and a second endpoint at a port of a second MSS, the method comprising:
- receiving, at the second MSS, a setup message including an embedded security data value;
- determining an anticipated security data value, wherein the anticipated security data value indicates an embedded security data value expected to be included in the setup message;
- wherein the anticipated security value is determined from a membership of a calling user and a destination user;
- wherein at least one of the embedded security data value and the anticipated security data value are encryption/decryption keys;
- determining that the setup message passes the security check if the embedded security data value matches the anticipated security data value.
The method of 31, further comprising:
- if the embedded security data value does not match the anticipated security data value, determining that the setup message does not pass the security check.
A method of establishing a secure connection across a data network, the secure connection having a first endpoint at a port of a first multiservice switch (MSS) and a second endpoint at a port of a second MSS, the method comprising:
- receiving, at the first MSS, a connection attempt;
- generating, in response to the connection attempt, a setup message for establishing the secure connection;
- determining a security data value wherein the security data value is an encryption/decryption key and wherein the security data value will be expected to be included in the setup message for the setup message to pass a security check performed by the second MSS, wherein the security check includes a comparison to an anticipated security value that is determined from a membership of a calling user and a destination user;
- inserting the security data value into the setup message;
- and
- transmitting the setup message toward the second MSS.
A multiservice switch (MSS) establishing a secure connection across a network, comprising:
- a port for receiving a setup message including an embedded security data value;
- a call controller configured to determine an anticipated security data value, wherein the anticipated security data value indicates an embedded data value expected to be included in the setup message for the setup message to pass a security check;
- wherein the anticipated security value is determined from a membership of a calling user and a destination user and wherein at least one of the embedded security data value and the anticipated security data value are encryption/decryption keys;
- and
- a comparator configured to determine whether the embedded security data value matches the anticipated security data value;
- wherein the call controller is further configured to, if the embedded security data value matches the anticipated security data value, determine that the setup message passes the security check.
Dependencies are inferred from the claim text.