US 6,959,393 B2 · System and method for secure message-oriented network communications

Abstract

The present invention provides a message-oriented middleware solution for securely transmitting messages and files across public networks unencumbered by intervening network barriers implemented as security measures. It also provides a dynamic, dedicated, application level VPN solution that is facilitated by the message-oriented middleware. Standard encryption algorithms are used to minimize the threat of eavesdropping and an Open-Pull Protocol (OPP) that allows target nodes to pull and verify the credentials of requestors prior to the passing of any data. Messaging can be segregated into multiple and distinct missions that all share the same nodes. The security network's architecture is built to resist and automatically recover from poor, slow, and degrading communications channels. Peers are identifiable by hardware appliance, software agent, and personally identifiable sessions. The security network provides a dynamic, private transport for sensitive data over existing non-secure networks without the overhead and limited security associated with traditional VPN solutions.

Claims28

Dependent claims

A method for secure message-oriented communications between nodes in a network, comprising the steps of:

deploying at least one key authority within the network;
deploying a plurality of rendezvous peers in the network having a plurality of nodes and associating a group of the plurality of network nodes with each rendezvous peer;
validating connecting rights of each rendezvous peer and the network nodes by the at least one key authority using public-private key pairs, uniform resource identifiers, IP addresses and lists of rendezvous peers stored within the at least one key authority;
controlling network node access to the network by each rendezvous peer associated with a controlled group of network nodes;
establishing an open pull protocol connection between each requesting node of the network and a single rendezvous peer by providing the at least one key authority of each requesting node for validation of connection rights;
and
exchanging secure message-oriented communications between the validated nodes of the network via message channels on the rendezvous peers using public key infrastructure techniques facilitated by the at least one key authority.

4 more elements

A system for secure message-oriented communications between nodes in a network, comprising:

means for deploying at least one key authority within the network;
means for deploying a plurality of rendezvous peers in the network having a plurality of nodes and associating a group of the plurality of network nodes with each rendezvous peer;
means for validating connecting rights of each rendezvous peer and the network nodes by the at least one key authority using public-private key pairs, uniform resource identifiers, IP addresses and lists of rendezvous peers stored within the at least one key authority;
means for controlling network node access to the network by each rendezvous peer associated with a controlled group of network nodes;
means for establishing an open pull protocol connection between each requesting node of the network and a single rendezvous peer by providing the at least one key authority of each reciuesting node for validation of connection rights;
and
means for exchanging secure message-oriented communications between the validated nodes of the network via message channels on the rendezvous peers using public key infrastructure techniques facilitated by the at least one key authority.

4 more elements

Dependencies are inferred from the claim text.

System and method for secure message-oriented network communications

Life of this patent

System and method for secure message-oriented network communications

Life of this patent

Abstract

Claims28