Back to results
US 9,866,383 B2Granted
Key management for privacy-ensured conferencing
AssigneeCisco Technology, Inc.
InventorsK. Tirumaleswar Reddy, Daniel G. Wing
Life of this patent
Estimating the term…
Abstract
In one embodiment, a device in a network establishes a trust relationship between the device and a key management service. The device receives keying information from the key management service based on the established trust relationship. The device applies a digital signature to media data for a conference using the keying information, whereby the device is designated as a speaker of the conference. The device provides the signed media data to one or more conference participant devices. The one or more conference participant devices use the signed media data to validate that the media data was signed by the designated speaker of the conference.
Claims18
A method, comprising:
- establishing, by a device in a network designated as a speaker of a conference, a trust relationship between the device and a key management service by exchanging data establishing the identity of the device;
- sending, by the device, a conference ticket request to the key management service requesting a ticket and keying information for the conference;
- receiving, at the device, an issued ticket and keying information from the key management service based on the established trust relationship;
- applying, by the device, a digital signature to media data provided during the conference using the keying information, wherein the device as the designated speaker of the conference originates the media data and wherein the signed media data includes the issued ticket;
- and
- providing, by the device, the signed media data to one or more conference participant devices during the conference, wherein the one or more conference participant devices use the signed media data to validate that the media data was signed by the designated speaker of the conference by providing ticket information extracted from the signed media data to the key management service and receiving validation information including the keying information from the key management service validating that the sender of the media data is the designated speaker of the conference and the one or more participant devices are an authorized conference participant.
3 more elements
A method, comprising:
- receiving, at a device in a network, media data provided during a conference that is signed by a sender of the media data originated by a designated speaker of the conference using keying information and an issued ticket received by the designated speaker from a key management service based on an established trust relationship between the designated speaker and the key management service, wherein a digital signature is applied to the media data;
- extracting, by the device, ticket information from the received media data;
- providing, by the device, the extracted ticket information to the key management service to determine whether the sender of the media data is the designated speaker of the conference;
- and
- receiving, at the device, validation information including the keying information from the key management service to validate whether the sender of the media data is the designated speaker of the conference and the device is an authorized conference participant.
2 more elements
An apparatus, comprising:
- one or more network interfaces to communicate with a network;
- a processor coupled to the network interfaces and configured to execute one or more processes;
- and
- a memory configured to store a process executable by the processor, the process when executed configured to:
- establish a trust relationship between the device designated as a speaker of a conference and a key management service by exchanging data establishing the identity of the device;
- send a conference ticket request to the key management service requesting a ticket and keying information for the conference;
- receive an issued ticket and keying information from the key management service based on the established trust relationship;
- apply a digital signature to media data provided during the conference using the keying information, wherein the apparatus as the designated speaker of the conference originates the media data and wherein the signed media data includes the issued ticket;
- and
- providing the signed media data to one or more conference participant devices during the conference, wherein the one or more conference participant devices use the signed media data to validate that the apparatus is the designated speaker of the conference by providing ticket information extracted from the signed media data to the key management service and receiving validation information including the keying information from the key management service validating that the sender of the media data is the designated speaker of the conference and the one or more participant devices are an authorized conference participant.
7 more elements
Dependencies are inferred from the claim text.