Systems and methods for implementing data communication with security tokens
AssigneeDomanicom Corporation
InventorsSin-Min Chang, Santanu Das
Life of this patent
Estimating the term…
Abstract
Network endpoints performing security token procedures are disclosed and described herein. Embodiments include a first endpoint performing functions comprising: (i) receiving a service token and a traffic token via a token distribution network, (ii) using identification data for a second endpoint obtained from the service token and a key obtained from the traffic token to generate one or more packets comprising a data payload, and (iii) transmitting one or more of the generated packets to the second endpoint via a data network that is separate from the token distribution network.
Claims20
Tangible, non-transitory computer-readable media comprising instructions encoded therein, wherein the instructions, when executed by one or more processors, cause a first endpoint to perform a method comprising:
- receiving a service token via a token distribution network, wherein the service token comprises identification data for a second endpoint;
- receiving a traffic token via the token distribution network, wherein the traffic token comprises a key required for data communications between the first endpoint and the second endpoint;
- determining that a requirement exists to transmit a data payload from the first endpoint to the second endpoint;
- and
- in response to determining that the requirement exists to transmit the data payload from the first endpoint to the second endpoint, using the identification data for the second endpoint in the service token and the key from the traffic token to generate one or more packets comprising the data payload;
- and
- transmitting one or more of the generated packets to the second endpoint via a data network that is separate from the token distribution network.
A first endpoint device comprising:
- one or more processors;
- and
- tangible, non-transitory computer-readable memory comprising instructions encoded therein, wherein the instructions, when executed by one or more processors, cause the first endpoint to perform functions comprising:
- receiving one or more tokens via a token distribution network, wherein the one or more tokens comprise identification data for a second endpoint and an encryption key;
- determining that a requirement exists to transmit a data payload from the first endpoint to the second endpoint;
- in response to determining that the requirement exists to transmit the data payload from the first endpoint to the second endpoint, using the identification data for the second endpoint and the encryption key to generate one or more packets comprising the data payload;
- and
- transmitting one or more of the generated packets to the second endpoint via a data network that is separate from the token distribution network.
A system comprising:
- a first endpoint communicatively coupled to a data network and a token distribution network that is separate from the data network;
- a second endpoint communicatively coupled to the data network and the token distribution network;
- wherein the first endpoint is configured to (i) receive one or more tokens via the token distribution network, wherein the one or more tokens comprise identification data for the second endpoint and a first encryption key, (ii) use the identification data for the second endpoint and the first encryption key to generate one or more packets, wherein and individual packet comprises an IP header, encrypted header extension data, and at least a portion of an encrypted data payload, wherein the encrypted data payload comprises data intended for the second endpoint, and (iii) transmit one or more of the generated packets to the second endpoint via the data network.
Dependencies are inferred from the claim text.