IP Library › Granted Patent US 10,171,244
Granted Patent B2
US 10,171,244 · App. 15/831,323 · Granted Jan 1, 2019

Increased communication security

Inventor: Vishnu Sharma (Bhubaneswar, IN)
Assignee: Idaax Technologies Private Limited
H04L9/3242H04L9/0822H04L9/0825H04L9/0861H04L9/0866H04L9/3236H04L9/3239H04L51/00H04L63/0428H04L63/06H04L63/08H04L63/083H04L63/10H04L63/123H04L63/168
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 10,171,244
App. No.
15/831,323
Granted
Jan 1, 2019
Kind
B2
Abstract

A method of increasing communication security may include receiving, at a first computer system, a first message including a first data portion and a second data portion, wherein the first data portion is associated with a security token, wherein the first data portion includes a first instance of a session key, and wherein the second data portion includes a second instance of the session key. The method may also include performing, at the first computer system, message validation associated with the first message. The method may further include generating, if the first message is valid, a second message including the first data portion. The method may also include communicating, if the first message is valid, the second message from the first computer system for delivery to a second computer system.

Claims (63)

1. A method of increasing communication security, said method comprising:

communicating, from a first computer system, a unique identifier associated with a second computer system, wherein said communicating further comprises communicating said unique identifier for delivery to a third computer system;

receiving, at said first computer system from said third computer system, a first message including a first data portion and a second data portion, wherein said first data portion is associated with a security token, wherein said first data portion includes a first instance of a session key, and wherein said second data portion includes a second instance of said session key;

performing, at said first computer system, message validation associated with said first message;

if said first message is valid, generating a second message including said first data portion; and

if said first message is valid, communicating said second message from said first computer system for delivery to said second computer system.

2. The method of claim 1 , wherein said first data portion includes said security token, and wherein said security token includes a unique identifier associated with said first computer system, said unique identifier associated with said second computer system, expiration data associated with said security token, and said first instance of said session key.

3. The method of claim 1 further comprising:

generating, at said first computer system, a fourth message associated with communication between said first computer system and said second computer system, wherein said fourth message includes said unique identifier associated with said second computer system; and

wherein said communicating said unique identifier further comprises communicating said fourth message from said first computer system for delivery to said third computer system, and

wherein said receiving further comprises receiving said first message responsive to said communicating said unique identifier.

4. The method of claim 1 further comprising:

decrypting, at said first computer system, said second data portion using a key associated with said first computer system; and

storing said second instance of said session key at said first computer system.

5. The method of claim 1 , wherein said first message includes authentication data, and wherein said performing message validation further comprises performing message validation based on said authentication data.

6. The method of claim 1 further comprising:

generating authentication data using said second instance of said session key;

generating a fourth message including said authentication data; and

communicating said fourth message from said first computer system for delivery to said second computer system.

7. The method of claim 6 further comprising:

encrypting, using said second instance of said session key, data to generate encrypted data, wherein said data includes said authentication data, and

wherein said generating said fourth message further comprises including said encrypted data as a payload of said fourth message.

8. The method of claim 1 further comprising:

receiving, at said first computer system, a third message from said second computer system; and

performing, using said second instance of said session key, message validation associated with said third message.

9. The method of claim 8 , wherein said third message includes authentication data, and wherein said performing message validation further comprises performing message validation based on said authentication data, and further comprising:

if said third message is valid, performing at least one operation associated with said third message.

10. The method of claim 9 further comprising:

decrypting, using said second instance of said session key, a payload of said third message to access said authentication data, and

wherein said performing message validation further comprises performing message validation responsive to said decrypting.

11. The method of claim 1 , wherein said first message and said second message are Constrained Application Protocol (CoAP) messages.

12. The method of claim 1 , wherein said receiving said first message comprises receiving said first message using Datagram Transport Layer Security (DTLS), and wherein said communicating said second message comprises communicating said second message using DTLS.

13. An apparatus comprising:

means for communicating, from a first computer system, a unique identifier associated with a second computer system, wherein said means for communicating further comprises means for communicating said unique identifier for delivery to a third computer system;

means for receiving, at said first computer system from said third computer system, a first message including a first data portion and a second data portion, wherein said first data portion is associated with a security token, wherein said first data portion includes a first instance of a session key, and wherein said second data portion includes a second instance of said session key;

means for performing, at said first computer system, message validation associated with said first message;

if said first message is valid, means for generating a second message including said first data portion; and

if said first message is valid, means for communicating said second message from said first computer system for delivery to said second computer system.

14. The apparatus of claim 13 , wherein said first data portion includes said security token, and wherein said security token includes a unique identifier associated with said first computer system, said unique identifier associated with said second computer system, expiration data associated with said security token, and said first instance of said session key.

15. The apparatus of claim 13 further comprising:

means for generating, at said first computer system, a fourth message associated with communication between said first computer system and said second computer system, wherein said fourth message includes said unique identifier associated with said second computer system; and

wherein said means for communicating said unique identifier further comprises means for communicating said fourth message from said first computer system for delivery to said third computer system.

16. The apparatus of claim 13 further comprising:

means for decrypting, at said first computer system, said second data portion using a key associated with said first computer system; and

means for storing said second instance of said session key at said first computer system.

17. The apparatus of claim 13 , wherein said first message includes authentication data, and wherein said means for performing message validation further comprises means for performing message validation based on said authentication data.

18. The apparatus of claim 13 further comprising:

means for generating authentication data using said second instance of said session key;

means for generating a fourth message including said authentication data; and

means for communicating said fourth message from said first computer system for delivery to said second computer system.

19. The apparatus of claim 18 further comprising:

means for encrypting, using said second instance of said session key, data to generate encrypted data, wherein said data includes said authentication data, and

wherein said means for generating said fourth message further comprises means for including said encrypted data as a payload of said fourth message.

20. The apparatus of claim 13 further comprising:

means for receiving, at said first computer system, a third message from said second computer system; and

means for performing, using said second instance of said session key, message validation associated with said third message.

21. The apparatus of claim 20 , wherein said third message includes authentication data, and wherein said means for performing message validation further comprises means for performing message validation based on said authentication data, and further comprising:

means for performing, if said third message is valid, at least one operation associated with said third message.

22. The apparatus of claim 21 further comprising:

means for decrypting, using said second instance of said session key, a payload of said third message to access said authentication data, and

wherein said means for performing message validation further comprises means for performing message validation responsive to said decrypting.

23. The apparatus of claim 13 , wherein said first message and said second message are Constrained Application Protocol (CoAP) messages.

24. The apparatus of claim 13 , wherein said means for receiving said first message comprises means for receiving said first message using Datagram Transport Layer Security (DTLS), and wherein said means for communicating said second message comprises means for communicating said second message using DTLS.

Assignments (3)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Oct 17, 2024
From: IDAAX TECHNOLOGIES PRIVATE LIMITED
To: FEMTOMAX INC.
Reel/Frame 068921/0694 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Apr 16, 2018
From: EXILANT TECHNOLOGIES PRIVATE LIMITED
To: IDAAX TECHNOLOGIES PRIVATE LIMITED
Reel/Frame 045554/0262 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Dec 4, 2017
From: SHARMA, VISHNU
To: EXILANT TECHNOLOGIES PRIVATE LIMITED
Reel/Frame 044292/0513 →
Continuity (4)
Division 15215971 · Jul 21, 2016
Continuation 14470917 · Aug 27, 2014
Continuation In Part 14231625 · Mar 31, 2014
Related Publication 20180083784A1 · Mar 22, 2018