US 6,889,328 B1 · Method and apparatus for secure communication

Abstract

Secure communication is provided for entities in one or more networks. It is determined whether security measures needed for the communication exist between the entities. If such measures do not exist, the security measures are established, and the communication is initiated. The security measures include security bindings including information needed for the secure communication. Security measures are established between entities in one or more networks based on predetermined security requirements and on a determined needed security level. The security level needed may be determined based on whether the entities are in the same network or in different networks and/or on the information being transmitted. Security bindings are established between the entities depending on the information to be transmitted and/or the network to which the entities belong. The security bindings include information identifying the security binding, encryption information, authentication information, integrity information, a list of addressees or group of addressees included in the security bindings, and/or information regarding the lifetime of the security bindings. The encryption, authentication, and integrity may be specified at a parameter level.

Claims26

Dependent claims

A method for establishing security bindings between a sending network entity and a receiving network entity, the method comprising:

sending, by the sending network entity, a first security binding request to a first authentication entity wherein the first security binding request includes requested security binding parameters;
determining, by the first authentication entity, proposed security bindings parameters for the sending network entity;
sending, by the first authentication entity, a second security binding request to a second authentication entity, wherein the security binding request includes identification information for the receiving network entity and proposed security binding parameters;
determining, by the second authentication entity, whether the proposed security binding parameters are applicable to the receiving network entity;
sending, by the second authentication entity, to the first authentication entity an indication of which proposed security binding parameters are acceptable;
sending, by the first authentication entity, a response to the sending network entity indicating the accepted security binding parameters;
and
determining, by the sending network entity, whether the accepted security binding parameters are sufficient, if yes, then sending an security binding acceptance indication to the receiving network entity via the first authentication entity and the second authentication entity.

5 more elements

A system for establishing security bindings between a sending network entity and a receiving network entity, the system comprising:

a means for sending, by the sending network entity, a first security binding request to a first authentication entity wherein the first security binding request includes requested security binding parameter;
a means for determining, by the first authentication entity, proposed security bindings parameters for the sending network entity;
a means for sending, by the first authentication entity, a second security binding request to a second authentication entity, wherein the security binding request includes identification information for the receiving network entity and proposed security binding parameters;
a means for determining, by the second authentication entity, whether the proposed security binding parameters are applicable to the receiving network entity;
a means for sending, by the second authentication entity, to the first authentication entity an indication of which proposed security binding parameters are acceptable;
a means for sending, by the first authentication entity, a response to the sending network entity indicating the accepted security binding parameters;
and
a means for determining, by the sending network entity, whether the accepted security binding parameters are sufficient, if yes, then sending an security binding acceptance indication to the receiving network entity via the first authentication entity and the second authentication entity.

5 more elements

Dependencies are inferred from the claim text.

Method and apparatus for secure communication

Life of this patent

Method and apparatus for secure communication

Life of this patent

Abstract

Claims26