Method and apparatus for securely establishing L3-SVC connections
AssigneeSound View Innovations, LLC
InventorCarl Rajsic
Life of this patent
Estimating the term…
Abstract
A system and method are provided for securely establishing Layer-3 SVCs or SPVCs across an ATM network. An originating multiservice switch that generates the connection setup message for the Layer-3 connection includes security information within the setup message, such as a Closed User Group Interlock Code. When the destination multiservice switch receives the setup message, it extracts the embedded security information and compares it with stored security information corresponding to the connection. The correspondence may be determined from the destination user. If the embedded security information matches the stored security information, the destination multiservice switch allows the connection to be established.
Claims17
A method of establishing a secure connection across a data network, the secure connection having a first endpoint at an egress port of a first multiservice switch (MSS) and a second endpoint at an ingress port of a second MSS, the method comprising:
- receiving, at the second MSS, a setup message including an embedded security data value;
- determining, based on a call scenario, an anticipated security data value, wherein the anticipated security data value indicates an embedded security data value expected to be included in the setup message for the setup message to pass a security check,
- wherein the anticipated security value is determined from a membership of a calling user and a destination user wherein at least one of the embedded security data value and the anticipated security data value are a closed user group interlock code;
- determining whether the embedded security data value matches the anticipated security data value;
- and
- if the embedded security data value matches the anticipated security data value, determining that the setup message passes the security check.
A method of establishing a secure connection across a data network, the secure connection having a first endpoint at an egress port of a first multiservice switch (MSS) and a second endpoint at an ingress port of a second MSS, the method comprising:
- receiving, at the first MSS, a connection attempt;
- generating, in response to the connection attempt, a setup message for establishing the secure connection;
- determining, based on a call scenario, a security data value wherein the security data value is a closed user group interlock code and wherein the security data value will be expected to be included in the setup message for the setup message to pass a security check performed by the second MSS, wherein the security check includes a comparison to an anticipated security value that is determined from a membership of a calling user and a destination user;
- inserting the security data value into the setup message;
- and
- transmitting the setup message toward the second MSS.
A multiservice switch (MSS) establishing a secure connection across a network, comprising:
- a port for receiving a setup message including an embedded security data value;
- a call controller configured to determine, based on a call scenario, an anticipated security data value, wherein the anticipated security data value indicates an embedded data value expected to be included in the setup message for the setup message to pass a security check,
- wherein the anticipated security value is determined from a membership of a calling user and a destination user and wherein at least one of the embedded security data value and the anticipated security data value are a closed user group interlock code;
- and
- a comparator configured to determine whether the embedded security data value matches the anticipated security data value,
- wherein the call controller is further configured to, if the embedded security data value matches the anticipated security data value, determine that the setup message passes the security check.
Dependencies are inferred from the claim text.