Network with secure communications sessions
OwnerMinhtam C. Nguyeninventor
Life of this patent
Estimating the term…
Abstract
A system which uses three way password authentication, and s.sup.3 DES to encrypt different portions of a logon packet with different keys based on the nature of the communications link. Nodes attached to a particular LAN can have one level of security for data transfer within the LAN while data transfers between LANs on a private network can have a second level of security and LANs connected via public networks can have a third level of security. The level of security can optionally be selected by the user. Data transfers between nodes of a network are kept in separate queues to reduce queue search times and enhance performance. Each session maintains its own key dependent s.sup.3 DES S-boxes to enhance security.
Claims20
A method of securely transmitting packet data between a client and a server with packets encrypted by S-box data, including the steps of:
- using at least one communication channel to transmit packets between at least one client and a server;
- encrypting in the client a first logon packet including information identifying the client source system and transmitting the first logon packet to the server;
- decrypting the first logon packet in the server;
- encrypting a second logon packet in the server with client authenticating information and transmitting the second logon packet to the client;
- decrypting the second logon packet in the client;
- encrypting in the client a third logon packet with session information and transmitting the second logon packet to the server;
- decrypting the third logon packet in the server;
- encrypting a fourth logon packet in the server with session information and transmitting the fourth logon packet to the client;
- and
- decrypting the fourth logon packet in the client;
- transmitting encrypted data packets between the client and server which are encrypted using S-box encryption;
- whereby the client and server can establish secure communications by bi-directionally transmitting encrypted data.
Dependencies are inferred from the claim text.