IP Library Granted Patent US 7,086,086
Granted Patent B2
US 7,086,086 · App. 10/299,167 · Granted Aug 1, 2006

System and method for maintaining N number of simultaneous cryptographic sessions using a distributed computing environment

View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 7,086,086
App. No.
10/299,167
Granted
Aug 1, 2006
Kind
B2
Abstract

An N session distributed architecture provides a software solution to the major computational challenges faced with providing secure communication. A registration entity is identified as the session arbitrator through which N devices on a network dynamically participate in establishing, maintaining and destroying cryptographic sessions. Session keys are generated by one or more devices registered with the registration server. Multiparty key agreement and device (or another form of) authentication is used to pass session keys and security policies to all parties involved in the encrypted session. Network discovery techniques are used to discover parties that will participate in the secure communications. All sessions appear to be local to the arbitration server, however individual sessions are maintained by several devices operating as a collective. Encrypted stream partitioning and computational resource allocation to decrypt the individual partitions in such way as to ensure system stability with increasing session demands is introduced in the architecture. This provides a cryptographic system architecture with encryption/decryption processing power limited only by the number of participants in the collective and network bandwidth or latency.

Claims (3)

1. A network discovery system for discovering nodes and for configuring or monitoring security policies on multi-vendor routers, firewalls (personal and corporate), intrusion detection systems, anti-virus, certificate authorities, RADIUS, LDAP servers and other security endpoints, in a distributed network of computers comprising:

a distributed automaton running on the network comprising M agents for servicing N number of simultaneous cryptographic sessions such that bandwidth and number of sessions are scalable by the M agents and latency is potentially reducible to zero; one or more discovering agents or other devices communicating with the M agents for reading address resolution protocol (ARP) information from nodes or from gateways/routers over the network and for reporting said ARP or other feedback information back to a main server; and

a main server responsive to ARP or other feedback information communicated from the discovering agents and for directing the discovering agents to invoke security policy deployment, enforcement, device quarantine, or data gathering at a selected node, such that portions of the bandwidth are equally divided among the M agents for processing, and the agents combine the processing power of all computers connected to the system to service the configuring and monitoring of security policies.

Assignments (2)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Oct 31, 2014
From: ZITOVAULT, INC.
To: ZITOVAULT, LLC.
Reel/Frame 034084/0200 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Oct 21, 2014
From: ELLIS, ALONZO
To: ZITOVAULT, INC.
Reel/Frame 033992/0077 →
Continuity (2)
Continuation In Part 0925988500 · Feb 27, 1999
Related Publication 20030074584A1 · Apr 17, 2003