Dynamic segregated secure data connection

• US 10,044,780 B2
• Filed: 08/26/2015
• Issued: 08/07/2018
• Est. Priority Date: 08/26/2015
• Status: Active Grant

• Current Assignee: AT&T Mobility II LLC (AT&T, Inc.)
• Original Assignee: AT&T Intellectual Property I LP (AT&T, Inc.), AT&T Mobility II LLC (AT&T, Inc.)
• Inventors: Dowlatkhah, Sangar, Lau, Erie Lai Har
• Primary Examiner(s): Sall, El Hadji
• Assistant Examiner(s): Kassa, Elizabeth
• Application Number:
  US14/836,550
• Publication Number:
  US 20170063949A1
• Time in Patent Office: 1,077 Days
• Field of Search: 709219
• CPC Class Codes: H04L 63/00 Network architectures or network communication protocols for network security cryptographic mechanisms or cryptographic arrangements for secret or secure communication H04L9/00; network architectures or network communication protocols for wireless network security H04W12/00; security arrangements for protecting computers or computer systems against unauthorised activity G06F21/00
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 63/166 at the transport layer
• CPC Class Codes: H04L 65/60 Network streaming of media packets
• CPC Class Codes: H04L 65/61 for supporting one-way streaming services, e.g. Internet radio
• CPC Class Codes: H04L 69/03 Protocol definition or specification protocol conformance testing H04L1/244
• CPC Class Codes: H04W 4/50 Service provisioning or reconfiguring

Abstract

A system can perform operations including receiving a first data stream from a first device, wherein the first data stream is associated with an active session between the first device and a mobile network and wherein the first data stream is associated with a first incoming port. The system can also receive a second data stream from the first device, wherein the second data stream is associated with the active session, and wherein the second data stream is associated with a second incoming port. The system can also determine a third port and a fourth port that are outgoing ports that respectively correspond to the first and second ports. The system can also transmit the first data stream to a second device via the third port and transmit the second data stream to a third device via the fourth port.

Claims

1. A system, comprising:

a processor; and

a memory that stores executable instructions that, when executed by the processor, facilitate performance of operations, comprising;

receiving a first data stream from a first device, wherein the first data stream is associated with an active session between the first device and a mobile network and wherein the first data stream is associated with a first incoming port;

receiving a second data stream from the first device, wherein the second data stream is associated with the active session, wherein the second data stream is associated with a second incoming port, and wherein the first data stream and the second data stream are received concurrently;

determining, based on an indicator in the first data stream, that the first data stream corresponds to a first connection type associated with personal healthcare information, and the second data stream corresponds to a second connection type;

determining a third port and a fourth port that are outgoing ports that respectively correspond to the first and second ports based on a configuration file that indicates the outgoing ports for respective connection types;

transmitting the first data stream to a second device via the third port; and

transmitting the second data stream to a third device via the fourth port.

2. The system of claim 1, wherein the first data stream and the second data stream are associated with a first application executed by the first device.

3. The system of claim 1, wherein the first data stream is associated with a first application executed by the first device and the second data stream is associated with a second application executed by the first device that is different from the first application.

4. The system of claim 1, wherein the first data stream and the second data stream are received via a secure connection, wherein the secure connection utilizes a transport layer security protocol.

5. The system of claim 1, wherein the operations further comprise:

sending a data stream connection request to the second device and to the third device via the third port and the fourth port.

6. The system of claim 5, wherein the operations further comprise:

establishing traffic protocol connections for the first data stream and the second data stream in response to receiving affirmative responses to the data stream connection request from the second device and the third device.

7. The system of claim 1, wherein the operations further comprise:

determining the first incoming port and the second incoming port based on an application associated with the first data stream and the second data stream.

8. The system of claim 1, wherein the operations further comprise:

determining the first incoming port and the second incoming port based on a type of content of the first data stream or the second data stream.

9. The system of claim 1, wherein the second device is selected based on the third port and the third device is selected based on the fourth port.

10. A method, comprising:

receiving, by a network device comprising a processor, a first data stream and a second data stream concurrently from first user equipment, wherein the first data stream and the second data stream are associated with a packet data protocol context and the first data stream is received at a first port of the network device and the second data stream is received at a second port of the network device;

determining, by the network device, based on an indicator in the first data stream, that the first data stream corresponds to a first connection type associated with personal healthcare information, and the second data stream corresponds to a second connection type different than the first connection type;

determining, by the network device, a third port of the network device and a fourth port of the network device that are outgoing ports that respectively correspond to the first port and the second port based on a configuration file that indicates the outgoing ports for respective connection types; and

transmitting, by the network device, the first data stream to second user equipment via the third port, and the second data stream to third user equipment via the fourth port.

11. The method of claim 10, wherein the first data stream and the second data stream are associated with a first application executed by the first user equipment.

12. The method of claim 10, wherein the first data stream is associated with a first application of the first user equipment and the second data stream is associated with a second application of the first user equipment.

13. The method of claim 10, further comprising:

transmitting, by the network device, data stream connection requests to the second user equipment and the third user equipment via the third port and the fourth port.

14. The method of claim 13, further comprising:

facilitating, by the network device, traffic protocol connections for the first data stream and the second data stream in response to receiving affirmative responses to the data stream connection requests from the second user equipment and the third user equipment.

15. The method of claim 10, further comprising:

determining, by the network device, the first port and the second port based on an application associated with the first data stream and the second data stream.

16. The method of claim 10, further comprising:

determining, by the network device, the first incoming port and the second incoming port based on a first type of content of the first data stream or a second type of content of the second data stream.

17. The method of claim 10, wherein the first data stream is associated with a first service provided by an application and the second data stream is associated with a second service provided by the application.

18. A non-transitory machine-readable storage medium, comprising executable instructions that, when executed by a processor, facilitate performance of operations, comprising:

receiving a first data stream and a second data stream simultaneously from a first user equipment, wherein the first data stream and the second data stream are associated with a packet data protocol context and the first data stream is received at a first port and the second data stream is received at a second port;

determining, based on an indicator in the first data stream, that the first data stream corresponds to a first connection type associated with electronic personal healthcare information, and the second data stream corresponds to a second connection type;

determining a third port and a fourth port that are outgoing ports that respectively correspond to the first port and the second port based on a configuration file that indicates the outgoing ports for respective connection types; and

transmitting the first data stream to a second user equipment via the third port, and the second data stream to a third user equipment via the fourth port.

19. The non-transitory machine-readable storage medium of claim 18, wherein the operations further comprise:

transmitting a data stream connection request to the second user equipment and the third user equipment via the third port and the fourth port; and

facilitating traffic protocol connections for the first data stream and the second data stream in response to receiving affirmative responses from the second user equipment and the third user equipment.

20. non-transitory The machine-readable storage medium of claim 18, wherein the operations further comprise:

determining the first port and the second port based on an application associated with the first data stream and the second data stream.