US 9,854,440 B2 · Method and system for peer-to-peer enforcement

Abstract

Methods and systems are provided for establishing dynamic peer-to-peer communications channels between terminals. A connection request for establishing a communications channel between a first terminal and second terminal may be intercepted. The first terminal and the second terminal may be connectable over secured communications channels to a secured network. Based on the intercepted connection request and/or network parameters obtained from the first and the second terminals, the terminals may be instructed to establish a peer-to-peer communications channel over a network distinct from the secured network. Security of the peer-to-peer communications channel may be maintained, such as by use of authentication and/or encryption in one or both of the first terminal and the second terminal.

Drawings

Drawings are temporarily unavailable. Open the PDF at USPTO

Drawings

Claims26

Dependent claims

A method, comprising:

in a network device:
intercepting a connection request transmitted from a first terminal to a second terminal over a secured network, wherein:
the secured network operates according to a particular security policy or particular security guidelines, and
access to the secure network is limited to secured devices;
obtaining from each of the first terminal and the second terminal, network parameters distinct to each of the first terminal and the second terminal, wherein the network parameters comprise parameters relating to one or more network interfaces of each of the first terminal and the second terminal;
determining, based on one or both of the connection request and the network parameters, a network distinct from the secured network;
and
transmitting an instruction to one or both of the first terminal and the second terminal to enforce a peer-to-peer communications channel between the first terminal and the second terminal over the network distinct from the secured network;
wherein:
the peer-to-peer communications channel is established using at least one public network;
the peer-to-peer communications channel between the first terminal and the second terminal is established over an ad-hoc network between the first terminal and the second terminal;
the peer-to-peer communications channel is established as a secured peer-to-peer communications channel, based on use of one or both of authentication and encryption in one or both of the first terminal and the second terminal;
and
one or both of an authentication key, for use in the authentication, and an encryption key, for use in the encryption, are provided by a central unit of the secured network to one or both of the first terminal and the second terminal, for use in ensuring secure communications.

11 more elements

A method, comprising:

in a network device:
intercepting a connection request transmitted from a first terminal to a second terminal over a secured network, wherein:
the secured network operates according to a particular security policy or particular security guidelines, and
access to the secure network is limited to secured devices;
obtaining from each of the first terminal and the second terminal, network parameters distinct to each of the first terminal and the second terminal, wherein the network parameters comprise parameters relating to one or more network interfaces of each of the first terminal and the second terminal;
determining, based on one or both of the connection request and the network parameters, a network distinct from the secured network;
and
transmitting an instruction to one or both of the first terminal and the second terminal to enforce a peer-to-peer communications channel between the first terminal and the second terminal over the network distinct from the secured network;
wherein:
the peer-to-peer communications channel is established between the first terminal and the second terminal as a secured peer-to-peer communications channel;
the peer-to-peer communications channel between the first terminal and the second terminal is established over an ad-hoc network between the first terminal and the second terminal;
one or both of an authentication key and an encryption key are provided by a central unit of the secured network to one or both of the first terminal and the second terminal, for use in ensuring secure communications;
a first secured communications channel is established between the first terminal and the secured network;
a second secured communications channel is established between the second terminal and the secured network;
and
the establishing of the first and the second secured communications channels comprises use of one or more of:
public access points for connecting terminals to public networks,
public communications channels between the public networks and the secured network,
authentication of the terminals, and
encryption of the first and second secured communications channels.

17 more elements

A system, comprising:

a network device, the network device being operable to:
intercept a connection request transmitted from a first terminal to a second terminal over a secured network, wherein:
the secured network operates according to a particular security policy or particular security guidelines, and
access to the secure network is limited to secured devices, and
obtain from each of the first terminal and the second terminal network parameters distinct to each of the first terminal and the second terminal, wherein the network parameters comprise parameters relating to one or more network interfaces of each of the first terminal and the second terminal;
determine, based on one or both of the connection request and the network parameters, a network distinct from the secured network;
and
transmit an instruction to one or both of the first terminal and the second terminal to enforce a peer-to-peer communications channel between the first terminal and the second terminal over the network distinct from the secured network;
wherein:
the peer-to-peer communications channel is established using at least one public network;
the peer-to-peer communications channel between the first terminal and the second terminal is established over an ad-hoc network between the first terminal and the second terminal;
one or both of an authentication key and an encryption key are provided by a central unit of the secured network to one or both of the first terminal and the second terminal, for use in ensuring secure communications;
and
the peer-to-peer communications channel is established between the first terminal and the second terminal as a secured peer-to-peer communications channel based on use of one or both of authentication and encryption in one or both of the first terminal and the second terminal.

11 more elements

A system, comprising:

a network device, the network device being operable to:
intercept a connection request transmitted from a first terminal to a second terminal over a secured network, wherein:
the secured network operates according to a particular security policy or particular security guidelines, and
access to the secure network is limited to secured devices, and
obtain from each of the first terminal and the second terminal network parameters distinct to each of the first terminal and the second terminal, wherein the network parameters comprise parameters relating to one or more network interfaces of each of the first terminal and the second terminal;
determine, based on one or both of the connection request and the network parameters, a network distinct from the secured network;
and
transmit an instruction to one or both of the first terminal and the second terminal to enforce a peer-to-peer communications channel between the first terminal and the second terminal over the network distinct from the secured network;
wherein:
the peer-to-peer communications channel is established between the first terminal and the second terminal as a secured peer-to-peer communications channel;
the peer-to-peer communications channel between the first terminal and the second terminal is established over an ad-hoc network between the first terminal and the second terminal;
one or both of an authentication key and an encryption key are provided by a central unit of the secured network to one or both of the first terminal and the second terminal, for use in ensuring secure communications;
a first secured communications channel is established between the first terminal and the secured network;
a second secured communications channel is established between the second terminal and the secured network;
and
the establishing of the first and the second secured communications channels comprises use of one or more of:
public access points for connecting terminals to public networks,
public communications channels between the public networks and the secured network,
authentication of the terminals, and
encryption of the first and second secured communications channels.

17 more elements

A method, comprising:

in a network device:
intercepting a connection request transmitted from a first terminal to a second terminal over a secured network, wherein:
the secured network operates according to a particular security policy or particular security guidelines, and
access to the secure network is limited to secured devices;
obtaining from each of the first terminal and the second terminal, network parameters distinct to each of the first terminal and the second terminal, wherein the network parameters comprise parameters relating to one or more network interfaces of each of the first terminal and the second terminal;
determining, based on one or both of the connection request and the network parameters, a network distinct from the secured network;
and
transmitting an instruction to one or both of the first terminal and the second terminal to enforce a peer-to-peer communications channel between the first terminal and the second terminal over the network distinct from the secured network;
wherein:
the peer-to-peer communications channel is established using at least one public network;
the first terminal comprises a first network interface and the second terminal comprises a second network interface, and the peer-to-peer communications channel is established directly between the first network interface of the first terminal and the second network interface of the second terminal;
the peer-to-peer communications channel is established as a secured peer-to-peer communications channel, based on use of one or both of authentication and encryption in one or both of the first terminal and the second terminal;
and
one or both of an authentication key, for use in the authentication, and an encryption key, for use in the encryption, are provided by a central unit of the secured network to one or both of the first terminal and the second terminal, for use in ensuring secure communications.

11 more elements

A method, comprising:

in a network device:
intercepting a connection request transmitted from a first terminal to a second terminal over a secured network, wherein:
the secured network operates according to a particular security policy or particular security guidelines, and
access to the secure network is limited to secured devices;
obtaining from each of the first terminal and the second terminal, network parameters distinct to each of the first terminal and the second terminal, wherein the network parameters comprise parameters relating to one or more network interfaces of each of the first terminal and the second terminal;
determining, based on one or both of the connection request and the network parameters, a network distinct from the secured network;
and
transmitting an instruction to one or both of the first terminal and the second terminal to enforce a peer-to-peer communications channel between the first terminal and the second terminal over the network distinct from the secured network;
wherein:
the peer-to-peer communications channel is established between the first terminal and the second terminal as a secured peer-to-peer communications channel;
the first terminal comprises a first network interface and the second terminal comprises a second network interface, and the peer-to-peer communications channel is established directly between the first network interface of the first terminal and the second network interface of the second terminal;
one or both of an authentication key and an encryption key are provided by a central unit of the secured network to one or both of the first terminal and the second terminal, for use in ensuring secure communications;
a first secured communications channel is established between the first terminal and the secured network;
a second secured communications channel is established between the second terminal and the secured network;
and
the establishing of the first and the second secured communications channels comprises use of one or more of:
public access points for connecting terminals to public networks,
public communications channels between the public networks and the secured network,
authentication of the terminals, and
encryption of the first and second secured communications channels.

17 more elements

A system, comprising:

a network device, the network device being operable to:
intercept a connection request transmitted from a first terminal to a second terminal over a secured network, wherein:
the secured network operates according to a particular security policy or particular security guidelines, and
access to the secure network is limited to secured devices, and
obtain from each of the first terminal and the second terminal network parameters distinct to each of the first terminal and the second terminal, wherein the network parameters comprise parameters relating to one or more network interfaces of each of the first terminal and the second terminal;
determine, based on one or both of the connection request and the network parameters, a network distinct from the secured network;
and
transmit an instruction to one or both of the first terminal and the second terminal to enforce a peer-to-peer communications channel between the first terminal and the second terminal over the network distinct from the secured network;
wherein:
the peer-to-peer communications channel is established using at least one public network;
the first terminal comprises a first network interface and the second terminal comprises a second network interface, and the peer-to-peer communications channel is established directly between the first network interface of the first terminal and the second network interface of the second terminal;
one or both of an authentication key and an encryption key are provided by a central unit of the secured network to one or both of the first terminal and the second terminal, for use in ensuring secure communications;
and
the peer-to-peer communications channel is established between the first terminal and the second terminal as a secured peer-to-peer communications channel based on use of one or both of authentication and encryption in one or both of the first terminal and the second terminal.

11 more elements

A system, comprising:

a network device, the network device being operable to:
intercept a connection request transmitted from a first terminal to a second terminal over a secured network, wherein:
the secured network operates according to a particular security policy or particular security guidelines, and
access to the secure network is limited to secured devices, and
obtain from each of the first terminal and the second terminal network parameters distinct to each of the first terminal and the second terminal, wherein the network parameters comprise parameters relating to one or more network interfaces of each of the first terminal and the second terminal;
determine, based on one or both of the connection request and the network parameters, a network distinct from the secured network;
and
transmit an instruction to one or both of the first terminal and the second terminal to enforce a peer-to-peer communications channel between the first terminal and the second terminal over the network distinct from the secured network;
wherein:
the peer-to-peer communications channel is established between the first terminal and the second terminal as a secured peer-to-peer communications channel;
the first terminal comprises a first network interface and the second terminal comprises a second network interface, and the peer-to-peer communications channel is established directly between the first network interface of the first terminal and the second network interface of the second terminal;
one or both of an authentication key and an encryption key are provided by a central unit of the secured network to one or both of the first terminal and the second terminal, for use in ensuring secure communications;
a first secured communications channel is established between the first terminal and the secured network;
a second secured communications channel is established between the second terminal and the secured network;
and
the establishing of the first and the second secured communications channels comprises use of one or more of:
public access points for connecting terminals to public networks,
public communications channels between the public networks and the secured network,
authentication of the terminals, and
encryption of the first and second secured communications channels.

17 more elements

Dependencies are inferred from the claim text.

Description4,777 words

Summary1,645 words

#Field of the Invention

#The present invention relates to a method and a system for establishing a dynamic communications channel between a first terminal and a second terminal, wherein the first terminal is connected over a first secured communications channel to a secured network, and wherein the second terminal is connected over a second secured communications channel to the secured network.

#Description of the Related Art

Brief description of the drawings2 figures

#A more complete appreciation of the invention and many of the attendant advantages thereof will be readily obtained as the same becomes better understood by reference to the following detailed description when considered in connection with the accompanying drawings, wherein:

#FIG. 1 is a block diagram of a system according to an embodiment of the present invention; and

#FIG. 2 is a sequence diagram of a system according to an embodiment of the present invention.

Detailed description3,057 words

#Referring now to the drawings, wherein like reference numerals designate identical or corresponding parts throughout the several views.

#FIG. 1 shows a block diagram representing schematically an example of system for establishing a dynamic peer-to-peer communications channel between a first terminal (1) and a second terminal (2) according to an embodiment of the present invention.

#In FIG. 1, the reference numeral 1 refers to a first terminal, and the reference numeral 2 refers to a second terminal. The first terminal 1 and the second terminal 2 preferably are portable mobile devices with at least one network interface. The reference numeral 3 refers to network interfaces of the first terminal 1 and the reference numeral 4 refers to network interfaces of the second terminal 2. Network interfaces of terminals 1,2, such as for example of notebooks or laptops, may comprise a network interface 3,4 for connecting to a wired network, e.g. according to an IEEE 802.3 Ethernet Standard, a network interface for connecting to distant networks over a Public Switched Telephone Network, e.g. by means of a modem, a network interface for connecting to a Wireless Local Area Network, e.g. according to a IEEE 802.11 standard, network interface for connecting to a GSM (Global System Mobile) or UMTS (Universal Mobile Telecommunications System) based mobile network, as web as a network interface for directly connecting to closely located devices e.g. according to a Bluetooth or a IrDA (Infrared Data Association) standard.

Facts

Application

14/325,898Filed 8 Jul 2014 · continuation

Priority

EP 0510229422 Mar 2005

Published

US 2015/0024713 A122 Jan 2015

Granted

26 Dec 2017

Term ended

6 Oct 2026

Estimated · how

20 years from earliest known nonprovisional domestic filing plus recorded patent term adjustment, including 198 days of adjustment. Maintenance-fee lapses, terminal disclaimers and statutory extensions have not been checked. The continuity chain may be incomplete; this is not an enforceability determination.

Classification9 codes

H04W 12/06
Security arrangements; Authentication; Protecting privacy or anonymity: authentication
H04L 63/0428
For providing a confidential data exchange among entities communicating through data packet networks: wherein the data content is protected, e.g.…
H04L 63/08
Network architectures or network communication protocols for network security: for authentication of entities
H04W 12/0431
Using a trusted network node as an anchor: key distribution or pre-distribution; Key agreement

Family

Application11/385,663Parent of this continuation · filed 22 Mar 2006

Application12/840,902Parent of this continuation · filed 21 Jul 2010

US 7,840,205 B2Parent of this continuation · filed 23 Nov 2010

Application13/536,486Parent of this continuation · filed 28 Jun 2012

US 2015/0024713 A1Pre-grant publication · published 22 Jan 2015

US 8,774,764 B2Parent of this continuation

US 8,233,883 B2Parent of this continuation

Application13/536,486Parent of this continuation

Application12/840,902Parent of this continuation

US 2006/0221996 A1Published application

US 2010/0285776 A1Published application

US 2012/0270526 A1Published application

US 9,854,440 B2This patent

From the US filing history. Foreign family members aren’t listed.

Timeline

22 Mar 2005Priority claimedEP 05102294
8 Jul 2014Application filedUS 14/325,898
22 Jan 2015PublishedUS 2015/0024713 A1
26 Dec 2017GrantedUS 9,854,440 B2
23 Jun 2022Assigned to Interdigital Ce Patent Holdings, SASassignment of assignor's interest
6 Oct 2026Term endedEstimated, includes 198 days of adjustment

Method and system for peer-to-peer enforcement

Life of this patent

Method and system for peer-to-peer enforcement

Life of this patent

Life of this patent

Abstract

Drawings

Drawings

Claims26

Description4,777 words

Drawings

Classification9 codes

Life of this patent

Description4,777 words