US 2016/0112381 A1 · Computer Implemented System and Method for Secure Session Establishment and Encrypted Exchange of Data

Abstract

A system(s) and method(s) for secure session establishment and secure encrypted exchange of data is disclosed. The system satisfies authentication requirement of general networking/communication systems. It provides an easy integration with systems already using schemes like DTLS-PSK. The system follows a cross layer approach in which session establishment is performed in a lightweight higher layer like the application layer. The system then passes resultant parameters of such session establishment including the session keys to a lower layer. The lower layer like the transport layer is then used by the system to perform channel encryption to allow exchange of encrypted data based on a cross layer approach, over a secure session. As the exchange of data becomes the responsibility of the lower layer like the transport layer, the data is protected from replay attacks since the transport layer record encryption mechanism provides that kind of protection.

Claims21

Dependent claims

A computer implemented system operating within a network for lightweight secure session establishment and secure encrypted data exchange between a plurality of client devices and a plurality of servers, said system comprising:

components for secure session establishment grouped in an application layer associated with said network, wherein said components for secure session establishment comprise:
a first key generator, a first random number generator and a second random number generator configured in each of said client devices, and a third random number generator and a second key generator configured in each of the plurality of servers;
said configuration of the components grouped in the application layer adapted to facilitate secure session establishment between the client devices and the servers by mutual authentication;
and
components for secure encrypted data exchange grouped in a transport layer associated with said network, wherein said components for secure encrypted data exchange comprise:
a session key tuple creator having a session initialization vector creator, said session key tuple creator configured to create and transmit a session key tuple, to mutually authenticated client devices and servers;
said configuration of components grouped in the transport layer adapted to enable secure encrypted data exchange between the client devices and the servers based on a cross layer approach.

4 more elements

A computer implemented method operating within a network for lightweight secure session establishment and secure encrypted data exchange between a plurality of client devices and a plurality of servers, said method comprising the following steps:

grouping components in an application layer associated with said network for providing secure session establishment, wherein said step of providing secure session establishment comprises the following steps:
generating and transmitting secret keys to the servers and the client devices prior to establishing a secure session between a client device and a server in said method;
initiating, from a client device a session with a server and authenticating the server using said transmitted secret key, thereby establishing a secure session for data exchange between the server and the client device by mutual authentication;
receiving, at a server, a session initiation request from a client device and, identifying and authenticating the client device using said transmitted secret key;
and
configuring the components grouped in the application layer for facilitating secure session establishment for data exchange between the client devices and the servers by mutual authentication;
and
grouping components in the transport layer associated with said network for providing secure encrypted data exchange, wherein said step of providing secure encrypted data exchange comprises the following steps:
creating and transmitting a session key tuple to mutually authenticated client devices and servers;
configuring the components grouped in the transport layer for enabling secure encrypted data exchange between the client devices and the servers based on a cross layer approach.

7 more elements

Dependencies are inferred from the claim text.

Computer Implemented System and Method for Secure Session Establishment and Encrypted Exchange of Data

Life of this patent

Computer Implemented System and Method for Secure Session Establishment and Encrypted Exchange of Data

Life of this patent

Abstract

Claims21