Identity Adapter and Method
AssigneeInvisinet Technologies, LLC
InventorJohn William Hayes
Life of this patent
Estimating the term…
Abstract
An identity adapter permits the enabling, the receiving, adapting, and sending of identity credentials using the appropriate secure communication mechanisms where one of the devices in the communication utilizes an archaic, obsolete, or rare communication protocol and identity credential. The identity adapter provides for secure communication between a first network device and a second network device, the first network device using a first security protocol, the second network device using a second security protocol using a first protocol module, an identity associator, a second protocol module, and a data proxy.
Claims46
An identity adapter for enabling secure communication between a first network device and a second network device, said first network device using a first security protocol, said second network device using a second security protocol, where said first security protocol is incomprehensible to said second network device, comprising
- a first protocol module, an identity associator, a second protocol module, and a data proxy,
- said first protocol module in communication with said data proxy,
- said first protocol module configured to communicate with said first network device,
- said second protocol module in communication with said data proxy,
- said data proxy in communication with said identity associator;
- said first protocol module configured to receive a first security protocol first communication from said first network device according to said first security protocol, said first security protocol first communication having a first communicated data and a first identity,
- said first protocol module configured to process said first security protocol first communication according to said first security protocol to extract said first communicated data and said first identity,
- said first protocol module configured to convey said first communicated data and said first identity to said data proxy,
- said data proxy configured to convey said first identity to said identity associator;
- said identity associator configured to select one of a plurality of potential identities as a second identity using said first identity in a selection criteria;
- said identity associator configured to communicate said second identity to said data proxy;
- said data proxy configured to store proxy state information including said first identity and said second identity;
- said data proxy configured to communicate said first communicated data and said second identity to said second protocol module;
- and
- said second protocol module configured to communicate said first communicated data and said second identity to said second network device using said second security protocol as a second security protocol first communication.
A method for enabling secure communication between a first network device and a second network device, said first network device using a first security protocol, said second network device using a second security protocol, where said first security protocol is incomprehensible to said second network device, comprising the steps of:
- providing an identity adapter having a first protocol module, a data proxy, an identity associator, and a second protocol module;
- communicating a first security protocol first communication to said identity adapter from said first network device, said first security protocol first communication including a first identity and first communicated data;
- processing by said first protocol module said first security protocol first communication to extract said first identity and said first communicated data;
- conveying from said first protocol module said first identity and said first communicated data to said data proxy;
- conveying from said data proxy said first identity to said identity associator;
- selecting by said identity associator a second identity from a plurality of potential identities using said first identity in a selection criteria;
- conveying from said identity associator said second identity to said data proxy;
- storing by said data proxy state information including said first identity and said second identity;
- conveying from said data proxy said second identity and said first communicated data to said second protocol module;
- communicating in said second protocol a second security protocol first communication from said second protocol module to said second network device, said second security protocol first communication including said second identity and said first communicated data.
A non-transitory program carrier device tangibly carrying computer-executable instructions for enabling secure communication between a first network device and a second network device, said first network device using a first security protocol, said second network device using a second security protocol, where said first security protocol is incomprehensible to said second network device, comprising the steps of:
- communicating a first security protocol first communication to said identity adapter from said first network device, said first security protocol first communication including a first identity and first communicated data;
- processing by a first protocol module said first security protocol first communication to extract said first identity and said first communicated data;
- conveying from said first protocol module said first identity and said first communicated data to a data proxy;
- conveying from said data proxy said first identity to an identity associator;
- selecting by said identity associator a second identity from a plurality of potential identities using said first identity in a selection criteria;
- conveying from said identity associator said second identity to said data proxy;
- storing by said data proxy state information including said first identity and said second identity;
- conveying from said data proxy said second identity and said first communicated data to a second protocol module;
- and
- communicating in said second protocol a second security protocol first communication from said second protocol module to said second network device, said second security protocol first communication including said second identity and said first communicated data.
Dependencies are inferred from the claim text.