IP Library › Granted Patent US 9,854,440

Granted Patent B2

US 9,854,440 · App. 14/325,898 · Granted Dec 26, 2017

Method and system for peer-to-peer enforcement

View Patent ↗

Loading inventors, assignments & file history…

Monitor This Case

Get email alerts when status or documents change.

Order Certified Copies

Most orders are placed with the USPTO same day — all within 24 business hours.

Order via The Patent Place →

Pre-filled with this patent's details

Quick Facts

Patent No.: US 9,854,440
App. No.: 14/325,898
Granted: Dec 26, 2017
Kind: B2

External Links

USPTO Patent Center↗ Full Patent PDF↗

Abstract

Methods and systems are provided for establishing dynamic peer-to-peer communications channels between terminals. A connection request for establishing a communications channel between a first terminal and second terminal may be intercepted. The first terminal and the second terminal may be connectable over secured communications channels to a secured network. Based on the intercepted connection request and/or network parameters obtained from the first and the second terminals, the terminals may be instructed to establish a peer-to-peer communications channel over a network distinct from the secured network. Security of the peer-to-peer communications channel may be maintained, such as by use of authentication and/or encryption in one or both of the first terminal and the second terminal.

Claims (146)

1. A method, comprising:

in a network device:

intercepting a connection request transmitted from a first terminal to a second terminal over a secured network, wherein:

the secured network operates according to a particular security policy or particular security guidelines, and

access to the secure network is limited to secured devices;

obtaining from each of the first terminal and the second terminal, network parameters distinct to each of the first terminal and the second terminal, wherein the network parameters comprise parameters relating to one or more network interfaces of each of the first terminal and the second terminal;

determining, based on one or both of the connection request and the network parameters, a network distinct from the secured network; and

transmitting an instruction to one or both of the first terminal and the second terminal to enforce a peer-to-peer communications channel between the first terminal and the second terminal over the network distinct from the secured network;

wherein:

the peer-to-peer communications channel is established using at least one public network;

the peer-to-peer communications channel between the first terminal and the second terminal is established over an ad-hoc network between the first terminal and the second terminal;

the peer-to-peer communications channel is established as a secured peer-to-peer communications channel, based on use of one or both of authentication and encryption in one or both of the first terminal and the second terminal; and

one or both of an authentication key, for use in the authentication, and an encryption key, for use in the encryption, are provided by a central unit of the secured network to one or both of the first terminal and the second terminal, for use in ensuring secure communications.

2. The method according to claim 1 , comprising searching for the network that is distinct from the secured network for supporting the peer-to-peer communications channel based on one or both of the connection request and the network parameters.

3. The method according to claim 1 , wherein the first terminal comprises a first network interface and the second terminal comprises a second network interface, and the peer-to-peer communications channel is established directly between the first network interface of the first terminal and the second network interface of the second terminal.

4. A method, comprising:

in a network device:

intercepting a connection request transmitted from a first terminal to a second terminal over a secured network, wherein:

the secured network operates according to a particular security policy or particular security guidelines, and

access to the secure network is limited to secured devices;

determining, based on one or both of the connection request and the network parameters, a network distinct from the secured network; and

wherein:

the peer-to-peer communications channel is established between the first terminal and the second terminal as a secured peer-to-peer communications channel;

the peer-to-peer communications channel between the first terminal and the second terminal is established over an ad-hoc network between the first terminal and the second terminal;

one or both of an authentication key and an encryption key are provided by a central unit of the secured network to one or both of the first terminal and the second terminal, for use in ensuring secure communications;

a first secured communications channel is established between the first terminal and the secured network;

a second secured communications channel is established between the second terminal and the secured network; and

the establishing of the first and the second secured communications channels comprises use of one or more of:

public access points for connecting terminals to public networks,

public communications channels between the public networks and the secured network,

authentication of the terminals, and

encryption of the first and second secured communications channels.

5. The method according to claim 4 , comprising searching for the network that is distinct from the secured network for supporting the peer-to-peer communications channel based on one or both of the connection request and the network parameters.

6. The method according to claim 4 , wherein the peer-to-peer communications channel is established using at least one public network.

7. The method according to claim 4 , wherein the first terminal comprises a first network interface and the second terminal comprises a second network interface, and the peer-to-peer communications channel is established directly between the first network interface of the first terminal and the second network interface of the second terminal.

8. A system, comprising:

a network device, the network device being operable to:

intercept a connection request transmitted from a first terminal to a second terminal over a secured network, wherein:

the secured network operates according to a particular security policy or particular security guidelines, and

access to the secure network is limited to secured devices, and

obtain from each of the first terminal and the second terminal network parameters distinct to each of the first terminal and the second terminal, wherein the network parameters comprise parameters relating to one or more network interfaces of each of the first terminal and the second terminal;

determine, based on one or both of the connection request and the network parameters, a network distinct from the secured network; and

transmit an instruction to one or both of the first terminal and the second terminal to enforce a peer-to-peer communications channel between the first terminal and the second terminal over the network distinct from the secured network;

wherein:

the peer-to-peer communications channel is established using at least one public network;

the peer-to-peer communications channel between the first terminal and the second terminal is established over an ad-hoc network between the first terminal and the second terminal;

the peer-to-peer communications channel is established between the first terminal and the second terminal as a secured peer-to-peer communications channel based on use of one or both of authentication and encryption in one or both of the first terminal and the second terminal.

9. The system according to claim 8 , wherein the secured network comprises a central unit configured to provide one or both of an authentication key and an encryption key to one or both of the first terminal and the second terminal, for use in ensuring secure communications.

10. A system, comprising:

a network device, the network device being operable to:

intercept a connection request transmitted from a first terminal to a second terminal over a secured network, wherein:

the secured network operates according to a particular security policy or particular security guidelines, and

access to the secure network is limited to secured devices, and

determine, based on one or both of the connection request and the network parameters, a network distinct from the secured network; and

wherein:

the peer-to-peer communications channel is established between the first terminal and the second terminal as a secured peer-to-peer communications channel;

the peer-to-peer communications channel between the first terminal and the second terminal is established over an ad-hoc network between the first terminal and the second terminal;

a first secured communications channel is established between the first terminal and the secured network;

a second secured communications channel is established between the second terminal and the secured network; and

the establishing of the first and the second secured communications channels comprises use of one or more of:

public access points for connecting terminals to public networks,

public communications channels between the public networks and the secured network,

authentication of the terminals, and

encryption of the first and second secured communications channels.

11. The system according to claim 10 , wherein the network device is operable to search for the network that is distinct from the secured network for supporting the peer-to-peer communications channel based on one or both of the connection request and the network parameters.

12. The system according to claim 10 , wherein each of the first terminal and the second terminal is operable to establish the peer-to-peer communications channel using at least one public network.

13. The system according to claim 10 , wherein one or both of an authentication key and an encryption key are provided by a central unit of the secured network to one or both of the first terminal and the second terminal, for use in ensuring secure communications.

14. The system according to claim 10 , wherein the first terminal comprises a first network interface and the second terminal comprises a second network interface, and the peer-to-peer communications channel is established directly between the first network interface of the first terminal and the second network interface of the second terminal.

15. A method, comprising:

in a network device:

intercepting a connection request transmitted from a first terminal to a second terminal over a secured network, wherein:

the secured network operates according to a particular security policy or particular security guidelines, and

access to the secure network is limited to secured devices;

determining, based on one or both of the connection request and the network parameters, a network distinct from the secured network; and

wherein:

the peer-to-peer communications channel is established using at least one public network;

the first terminal comprises a first network interface and the second terminal comprises a second network interface, and the peer-to-peer communications channel is established directly between the first network interface of the first terminal and the second network interface of the second terminal;

16. The method according to claim 15 , comprising searching for the network that is distinct from the secured network for supporting the peer-to-peer communications channel based on one or both of the connection request and the network parameters.

17. A method, comprising:

in a network device:

intercepting a connection request transmitted from a first terminal to a second terminal over a secured network, wherein:

the secured network operates according to a particular security policy or particular security guidelines, and

access to the secure network is limited to secured devices;

determining, based on one or both of the connection request and the network parameters, a network distinct from the secured network; and

wherein:

the peer-to-peer communications channel is established between the first terminal and the second terminal as a secured peer-to-peer communications channel;

a first secured communications channel is established between the first terminal and the secured network;

a second secured communications channel is established between the second terminal and the secured network; and

the establishing of the first and the second secured communications channels comprises use of one or more of:

public access points for connecting terminals to public networks,

public communications channels between the public networks and the secured network,

authentication of the terminals, and

encryption of the first and second secured communications channels.

18. The method according to claim 17 , comprising searching for the network that is distinct from the secured network for supporting the peer-to-peer communications channel based on one or both of the connection request and the network parameters.

19. The method according to claim 17 , wherein the peer-to-peer communications channel is established using at least one public network.

20. A system, comprising:

a network device, the network device being operable to:

intercept a connection request transmitted from a first terminal to a second terminal over a secured network, wherein:

the secured network operates according to a particular security policy or particular security guidelines, and

access to the secure network is limited to secured devices, and

determine, based on one or both of the connection request and the network parameters, a network distinct from the secured network; and

wherein:

the peer-to-peer communications channel is established using at least one public network;

21. The system according to claim 20 , wherein the secured network comprises a central unit configured to provide one or both of an authentication key and an encryption key to one or both of the first terminal and the second terminal, for use in ensuring secure communications.

22. The system according to claim 20 , wherein each of the first terminal and the second terminal is operable to establish an ad-hoc network between the first terminal and the second terminal.

23. A system, comprising:

a network device, the network device being operable to:

intercept a connection request transmitted from a first terminal to a second terminal over a secured network, wherein:

the secured network operates according to a particular security policy or particular security guidelines, and

access to the secure network is limited to secured devices, and

determine, based on one or both of the connection request and the network parameters, a network distinct from the secured network; and

wherein:

the peer-to-peer communications channel is established between the first terminal and the second terminal as a secured peer-to-peer communications channel;

a first secured communications channel is established between the first terminal and the secured network;

a second secured communications channel is established between the second terminal and the secured network; and

the establishing of the first and the second secured communications channels comprises use of one or more of:

public access points for connecting terminals to public networks,

public communications channels between the public networks and the secured network,

authentication of the terminals, and

encryption of the first and second secured communications channels.

24. The system according to claim 23 , wherein the network device is operable to search for the network that is distinct from the secured network for supporting the peer-to-peer communications channel based on one or both of the connection request and the network parameters.

25. The system according to claim 23 , wherein each of the first terminal and the second terminal is operable to establish the peer-to-peer communications channel using at least one public network.

26. The system according to claim 23 , wherein one or both of an authentication key and an encryption key are provided by a central unit of the secured network to one or both of the first terminal and the second terminal, for use in ensuring secure communications.

Assignments (1)

ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Jun 23, 2022

From: SWISSCOM AG

To: INTERDIGITAL CE PATENT HOLDINGS, SAS

Reel/Frame 060435/0001 →