# US 9,438,592 B1 · System and method for providing unified transport and security protocols > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 9,438,592 B1 - Document ID: US9438592B1 - Status: Granted - Kind: B1 - Application number: 14/245,866 - Filed: 2014-04-04 - Granted: 2016-09-06 - Earliest claimed: 2009-10-28 - Assignees: Aunigma Network Security Group - Applicants: Aunigma Network Security Corp. - Inventors: Kenneth W. Garrard; Karl E. Elliott; Andy Huang - Web page: https://patentgrep.com/patent/US9438592B1 ## CPC - H04L 63/0869: {for achieving mutual authentication (cryptographic mechanisms or cryptographic arrangements for mutual authentication H04L9/3273)} - H04L 63/02: {for separating internal from external traffic, e.g. firewalls} - H04L 63/126: {the source of the received data} - H04L 63/1458: {Denial of Service} - H04L 67/104: Peer-to-peer [P2P] networks - H04L 69/166: IP fragmentation; TCP segmentation - H04L 69/16: Implementation or adaptation of Internet protocol [IP], of transmission control protocol [TCP] or of user datagram protocol [UDP] - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) ## Abstract The system and method described herein may provide unified transport and security protocols. In particular, the unified transport and security protocols may include a Secure Frame Layer transport and security protocol that includes stages for initially configuring a requester device and a responder device, identifying the requester device and the responder device to one another, and authenticating message frames communicated between the requester device and the responder device. Additionally, the unified transport and security protocols may further include a Secure Persistent User Datagram Protocol that includes modes for processing message frames received at the requester device and the responder device, recovering the requester device in response to packet loss, retransmitting lost packets sent between the requester device and the responder device, and updating location information for the requester device to restore a communications session between the requester device and the responder device. ## Claims ### Claim 1 A responder device for facilitating mutual authentication of data packets exchanged between the responder device and a requester device, the responder device comprising: a memory configured to store a first value, the first value uniquely corresponding to the requester device; and responder logic configured to execute on the responder device and cause the responder device to: receive a first set of one or more data packets from the requester device; authenticate the first set of one or more data packets are from the requester device by determining whether the first set of the one or more data packets include the first value as stored in the memory; discard the one or more data packets if the first set of the one or more data packets are not authenticated as being from the requester device; obtain one or more secrets included in the first set of the one or more data packets and calculate a second value based on the one or more secrets, the second value being calculated to facilitate the requester device to authenticate data packets are from the responder device; generate a second set of one or more data packets, the second set of the one or more data packets including the second value; transmit the second set of the one or more data packets to the requester device; update a location of the requester device in response to the first set of the one or more data packets including an update request; and cause the responder device to trigger a recovery mode in response to receiving a predetermined number of subsequent data packets are not authenticated as being from the requester device. ### Claim 2 (depends on 1) The responder device of claim 1, wherein the responder logic is further configured such that the first set of the one or more data packets are discarded without saving a state of the first set of the one or more data packets if the first set of the one or more data packets are not authenticated as being from the requester device. ### Claim 3 (depends on 1) The responder device of claim 1, wherein in the recovery mode, the responder logic is further configured to cause the responder device to: restore the first value to a previously calculated value; transmit the restored first value to the requester device; and authenticate subsequent data packets from the requester device by determining whether the subsequent data packets include the restored first value. ### Claim 4 (depends on 1) The responder device of claim 1, wherein the updated location of the requester device comprises one or more of an updated IP address or an updated port number. ### Claim 5 (depends on 1) The responder device of claim 1, wherein the responder logic is further configured to cause the responder device to: update the first value based on the one or more secrets in the first set of the one or more data packets; transmit the one or more secrets to the updated location of the requester device; receive a subsequent message frame from the requester device, the subsequent message frame including a third value; and resume mutual authentication between the responder device and the requester device in response to the third value included in the subsequent message frame matching the updated first value. ### Claim 6 (depends on 1) The responder device of claim 1, wherein the responder logic is further configured to cause the responder device to: update the first value based on the one or more secrets in the first set of one or more data packets; transmit a message frame to the requester device instructing the requester device to update the first value based on the one or more secrets in the first set of one or more data packets; and authenticate subsequent data packets from the requester device by determining whether the subsequent data packets have the updated first value therein. ### Claim 7 A method for facilitating mutual authentication of data packets exchanged between a responder device and a requester device, comprising: storing, at the responder device, a first value uniquely corresponding to the requester receiving, at the responder device, a first set of one or more data packets from the requester device; authenticating the first set of one or more data packets are from the requester device by determining whether the first set of the one or more data packets include the first value; discarding the one or more data packets if the first set of the one or more data packets are not authenticated as being from the requester device; obtaining one or more secrets included in the first set of the one or more data packets and calculating a second value based the one or more secrets, the second value being calculated to facilitate the requester device to authenticate data packets are from the responder device; generating a second set of one or more data packets, the second set of the one or more data packets including the second value; transmitting the second set of the one or more data packets to the requester device; updating a location of the requester device in response to the first set of the one or more data packets including an update request; and causing the responder device to trigger a recovery mode in response to receiving a predetermined number of subsequent data packets are not authenticated as being from the requester device. ### Claim 8 (depends on 7) The method of claim 7, wherein the first set of the one or more data packets are discarded without saving a state of the first set of the one or more data packets if the first set of the one or more data packets are not authenticated as being from the requester device. ### Claim 9 (depends on 7) The method of claim 7, wherein in the recovery mode, the method further comprising: restoring, at the responder device, the first value to a previously calculated value; transmitting the restored first value to the requester device; and authenticating subsequent data packets from the requester device by determining whether the subsequent data packets include the restored first value. ### Claim 10 (depends on 7) The method claim 7, wherein the updated location of the requester device comprises one or more of an updated IP address or an updated port number. ### Claim 11 (depends on 7) The method of claim 7, wherein the responder logic is further configured to cause the responder device to: update the first value based on the one or more secrets in the first set of the one or more data packets; transmit the one or more secrets to the updated location of the requester device; receive a subsequent message frame from the requester device, the subsequent message frame including a third value; and resume mutual authentication between the responder device and the requester device in response to the third value included in the subsequent message frame matching the updated first value. ### Claim 12 (depends on 7) The method claim 7, further comprising: updating the first value based on the one or more secrets in the first set of one or more data packets; transmitting a message frame to the requester device instructing the requester device to update the first value based on the one or more secrets in the first set of one or more data packets; and authenticating subsequent data packets from the requester device by determining whether the subsequent data packets have the updated first value therein.