Authentication of remotely originating network messages

Details Authentication of remotely originating network messages Authentication of remotely originating network messages

2007-10-30

2007-10-30

Zand, Kambiz (Department: 2132)

Electrical computers and digital processing systems: support

Multiple computer communication using cryptography

Particular communication authentication technique

C713S155000, C713S170000, C380S252000, C726S002000, C726S005000

Reexamination Certificate

active

10180096

ABSTRACT:
A method and system for authenticating messages received from users across multiple remote devices are provided. A residential gateway authenticates a user using a modified digest authentication scheme by storing a sequence number in the nonce field. Access encryption keys and sequence number spaces may be assigned based on user or on user/remote device pairs. When sequence number spaces are assigned based on user, and the user uses multiple remote devices to access the residential gateway, the sequence number space may be divided into mini-sequence number spaces for each of the multiple remote devices. Access encryption may be two-tiered, such that a secondary key is generated based on a user's primary key, and the secondary key is only valid for a limited amount of time before it expires and a new secondary key must be generated.

REFERENCES:
patent: 5402490 (1995-03-01), Mihm, Jr.
patent: 5434918 (1995-07-01), Kung et al.
patent: 5506905 (1996-04-01), Markowski et al.
patent: 5546463 (1996-08-01), Caputo et al.
patent: 5594794 (1997-01-01), Eyer et al.
patent: 5696824 (1997-12-01), Walsh
patent: 5923758 (1999-07-01), Khamharn et al.
patent: 6144848 (2000-11-01), Walsh et al.
patent: 6167137 (2000-12-01), Marino et al.
patent: 2002/0073229 (2002-06-01), Hayashi
patent: 2002/0138848 (2002-09-01), Alao et al.
patent: 2003/0046391 (2003-03-01), Moreh et al.
S. Moyer et al., “Framework Draft for Networked Appliances using the Session Initiation Protocol”, Internet Engineering Task Force, Internet-Draft, Jun. 2001, pp. 1-25.
T. Wu, “The Secure Remote Password Protocol”, Proceedings of the 1998 Internet Society Network and Distributed System Security Symposium, San Diego, CA, Mar. 1998 (Printed from http://www-cs-studentds.standford.edu/˜tjw/srp
dss.html on May 30, 2002).
J. Franks, et al., “HTTP Authentication: Basic and Digest Access Authentication”, Network Working Group, RFC: 2617, Obsoletes: 2069, Category: Standards Track, Jun. 1999, pp. 1-34.
S. Kent et al., “Security Architecture for the Internet Protocol”, Network Working Group, RFC: 2401, Obsoletes: 1825, Category: Standards Track, Nov. 1998, pp. 1-62 (Printed from http://ww.ietf.org/rfc2401.txt?number=2401 on May 20, 2002).
S. Kent et al., “IP Authentication Header”, Networking Working Group, RFC: 2402, Obsoletes: 1826, Category: Standards Track, Nov. 1998, pp. 1-21 (Printed from http://www.ietf.org/rfc/rfc2402.txt?number=2402 on May 20, 2002.
S. Kent et al., “IP Encapsulating Security Payload (ESP)”, Networking Working Group, RFC: 2406, Obsoletes: 1827, Category: Standards Track, Nov. 1998, pp. 1-21 (Printed from http://www.ietf.org/rfc/rfc2406.txt?number=2406 on May 20, 2002).
J. Franks et al., “An Extension to HTTP: Digest Access Authentication”, Networking Working Group, RFC: 2069, Category: Standards Track, Jan. 1997, pp. 1-18.
HAVi: Home Audio Video Interoperability, 2 pages, printed from http://www.havi.org/ on May 30, 2002.
(OWASP), The Open Web Application Security Project, 3 pages, printed from http://www.owasp.org/asac/auth-session/replay.shtml on May 20, 2002.
Joseph Ashwood, “RE: proposed Nonce attribute”, 1 page, printed from http://lists.w3.org/Archives/Public/xml-encryption/2001Jul/0004.html on May 20, 2002.
Linuxsecurity.com Resources, 1 page, printed from http://www.linuxsecurity.com/dictionary/dict-330.html on May 20, 2002.
Nonce, 1 page, printed from http://wildesweb.com/glossary
once on May 20, 2002.
Nonce—a searchSecurity definition, 1 page, printed from http://www.searchsecurity.techtarget.com/sDefinition/0,,sid14—gci775421,00.html on May 20, 2002.
William Stallings, “Cryptography and Network Security: Principals and Practice, 2ndEdition”, Prentice Hall, 1999.

Affiliated with

Also associated with

Rating

Authentication of remotely originating network messages does not yet have a rating. At this time, there are no reviews or comments for this patent.

If you have personal experience with Authentication of remotely originating network messages, we encourage you to share that experience with our LandOfFree.com community. Your opinion is very important and Authentication of remotely originating network messages will most certainly appreciate the feedback.

Rate now

Comments { 0 }

Profile ID: LFUS-PAI-O-3827911