Back to results
US 6,661,896 B1Granted
Computer network security system and method
OwnerHoward S. Barnettinventor
Life of this patent
Estimating the term…
Abstract
A method and system for maintaining computer network security allows for changeable encryption keys used by each individual work station to be looked up by a server. The server will have numerous logical interfaces corresponding to the active encryption keys, and information is routed through the appropriate interface depending upon which work station is communicating with the server. Each encryption key is encrypted into a transport key for transmission as part of each information packet.
Claims16
A method for secured transmission in a computer network between a work station and a server, comprising in combination the steps of:
- initializing a predetermined number of logical interfaces in the server;
- installing a software logical interface into the work station;
- entering a predetermined character phrase into the work station;
- generating a unique key and a transport key from the character phrase;
- initializing an encryption algorithm using the character phrase and the transport key;
- encrypting by the work station of data and including the encrypted data in a first encoded packet for transmission from the work station to the server;
- including the transport key in the first encoded packet;
- transmitting the first encoded packet to the server from the work station;
- receiving the first encoded packet by the server;
- reading the transport key by the server;
- comparing the transport key with a list of transport keys corresponding to server logical interfaces;
- and
- if the transport key matches with a key for a server logical interface, then decrypting by the server of the encrypted data in the first encoded packet using that logical interface.
10 more elements
A method for secured transmission between a first computer and a second computer, comprising in combination the steps of:
- selecting a unique key for the first computer;
- initializing an encryption algorithm using the unique key;
- encrypting the unique key into a transport key by the first computer;
- encrypting by the first computer of data and included the encrypted data in a first encoded packet for transmission;
- including the transport key in the first encoded packet;
- transmitting the first encoded packet to the second computer from the first computer;
- receiving the first encoded packet by the second computer;
- reading the transport key by the second computer;
- comparing the transport key with a list of transport keys corresponding to logical interfaces in the second computer;
- and
- if the transport key matches with a key for a logical interface in the second computer, then decrypting by the second computer of the data in the first encoded packet using that logical interface.
8 more elements
A computer network comprising a plurality of computers functionally connected by a network medium, wherein a first computer of the plurality comprises in combination:
- a unique key program;
- a software logical interface;
- an encryption algorithm for use by the logical interface with a unique key to encrypt data for inclusion in encoded packets for transmission or to decrypt data from received encoded packets;
- a driver for receiving and transmitting encoded packets, which packets also include a transport key in order to communicate with a second computer of the plurality, wherein the transport key is logically related to the unique key used with the logical interface;
- wherein the second computer logically comprises in combination:
- a network interface for receiving and transmitting encoded packets, which encoded packets include both the transport key and encrypted data;
- a data base containing information regarding transport keys which can be used by other computers in the network;
- a predetermined number of logical interfaces, one logical interface corresponding to each transport key;
- a number of unique encryption algorithms, each encryption algorithm for use by any logical interface with the unique key to decrypt data from a received encoded packet or encrypt data for inclusion in an encoded packet for transmission;
- a program routine for comparing the transport key received from the first computer with a list of transport keys corresponding to the logical interfaces in the second computer and if the transport key matches with a key for a logical interface, then selecting that logical interface for decrypting of data from a received encoded packet.
7 more elements
A method for secured transmissions of data between a plurality of systems using a predetermined plurality of protection algorithms and a plurality of transport keys corresponding to the plurality of algorithms, comprising in combination the steps of:
- selecting by a first system from the plurality of systems of an algorithm from the plurality of protection algorithms;
- processing the data using the selected protection algorithm;
- selecting a transport key which indicates which protection algorithm is used wherein the transport key is logically related to a unique key used with an algorithm;
- transmitting the processed data and the selected transport key to at least one system of the plurality of systems;
- receiving the transmitted data and the selected transport key by the at least one system;
- reading the selected transport key by the at least one system;
- comparing the selected transport key with a list of transport keys from the plurality of transport keys which are accessible to the at least one system;
- and
- if the selected transport key matches with a transport key from the list, then restoring the data by the at least one system using the reverse of the selected algorithm.
6 more elements
A system in communication with a plurality of systems, comprising in combination:
- a predetermined plurality of protection algorithms;
- a plurality of transport keys corresponding to the plurality of algorithms wherein a transport key is logically related to a unique key used with an algorithm;
- means for selecting an algorithm from the plurality of protection algorithms;
- means for processing the data using the selected protection algorithm;
- means for selecting a transport key which indicates which protection algorithm is used;
- and
- means for transmitting the processed data and the selected transport key to at least one system of the plurality of systems, wherein the at least one system can restore the data if it has access to the selected transport key and the selected algorithm.
4 more elements
A method for secured transmissions among a plurality of computers through the same physical interface, comprising in combination the steps of:
- selecting a unique key and a transport key for each computer transmission which is to be secure;
- encrypting data using the unique key and including the encrypted data in an encoded packet for transmission;
- including the transport key in the encoded packet;
- transmitting the encoded packet over the physical interface to each computer which is intended to receive the secured transmission;
- receiving the encoded packet from the physical interface by each intended receiving computer;
- reading the transport key by each intended receiving computer;
- comparing the transport key with a list of transport keys corresponding to logical interfaces in each intended receiving computer;
- and
- if the transport key matches with a key for a logical interface;
- wherein the transport key is logically related to the unique key used with the logical interface in an intended receiving computer, then decrypting by that computer of the encrypted data in the encoded packet using that logical interface.
7 more elements
A computer for use in a computer network having a plurality of computers functionally connected by a network medium, comprising in combination:
- a network interface for receiving and transmitting encoded packets which include encrypted data;
- a data base containing information regarding transport keys which can be used by other computers in the network;
- a predetermined number of logical interfaces, one logical interface corresponding to each transport key;
- a number of unique encryption algorithms, each encryption algorithm for use by any logical interface with a unique key associated with each logical interface to decrypt data from a received encoded packet or encrypt data for inclusion in an encoded packet for transmission, wherein the transport key is logically related to the unique key used with a logical interface;
- a program routine for comparing the transport key received from another computer of the plurality, with a list of transport keys corresponding to the logical interfaces in the computer and if the transport key matches with a key for a logical interface, then selecting that logical interface for decrypting of data from a received encoded packet.
2 more elements
Dependencies are inferred from the claim text.