Managing security in messaging protocol communications

• US 10,193,839 B2
• Filed: 11/28/2016
• Issued: 01/29/2019
• Est. Priority Date: 11/28/2016
• Status: Active Grant

• Current Assignee: Amazon Technologies, Inc. (Amazon.com, Inc.)
• Original Assignee: Amazon Technologies, Inc. (Amazon.com, Inc.)
• Inventors: Tandon, Ambuj, Kuo, Calvin Yue-Ren, Turow, Jonathan I., Brooker, Marc John, Sorenson, III, James Christopher, McClenahan, Weili Zhong, Rafn, Mark Edward
• Primary Examiner(s): Luu, Le H
• Application Number:
  US15/362,751
• Publication Number:
  US 20180152401A1
• Time in Patent Office: 792 Days
• CPC Class Codes: H04L 41/0803 Configuration setting
• CPC Class Codes: H04L 51/18 Commands or executable codes
• CPC Class Codes: H04L 51/212 using filtering or selective blocking
• CPC Class Codes: H04L 51/214 using selective forwarding
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 63/105 Multiple levels of security
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227
• CPC Class Codes: H04L 63/205 involving negotiation or determination of the one or more network security mechanisms to be used, e.g. by negotiation between the client and the server or between peers or by selection according to the capabilities of the entities involved negotiation of communication capabilities H04L69/24

Abstract

Systems and methods are described for management of data transmitted between computing devices in a communication network. An administrative component can configure one or more devices in the communication path of messages to be exchanged by devices to interpret codes embedded in the communication messages. A receiving device can review incoming messages for security information. The receiving devices can then process the message based on the security information to determine how the communication message will be routed or otherwise processed.

Claims

1. A computer-implemented method for managing the execution of commands on a computing device utilizing a messaging protocol comprising:

receiving, at a message processing service, from an administrative client device, information related to configuration of message processing functionality to publish messages to a subset of registered devices to receive messages published in accordance with a topic, wherein the messages are formed in accordance with the MQ Telemetry Transport protocol;

receiving, by the message processing service, a received message from a device, wherein the received message includes a topic portion that includes one or more levels associated with subject matter descriptors;

identifying, by the message processing service, a set of recipient devices registered to receive messages based on the topic portion of the messages;

processing, by the message processing service, the received message to identify a security identifier and additional information to select a subset of the recipient devices based on evaluation of at least one of a set of business rules or routing tables; and

publishing, by the message processing service, the processed received message based, at least in part, on the processing of the received message.

2. The method as recited in claim 1, wherein processing, by the message processing service, the received message includes obtaining at least one piece of additional information.

3. The method as recited in claim 1, wherein the subset of recipient devices correspond to a coordinated device and wherein the received message corresponds to instructions to execute a task by a coordinated device.

4. The method as recited in claim 1 further comprising parsing, by the message processing information, the message to obtain the security identifier and additional information.

5. A system for managing communications utilizing a message protocol comprising:

a message processing service implemented on at least one computing device having a processor and a memory, the remote command service configured to receive and publish messages formed in accordance with a messaging protocol,

wherein the message processing service is configured to;

receive an incoming message corresponding to a topic portion, the topic portion identifying a subject matter of the incoming message, wherein a set of recipient devices are registered to receive messages associated with the topic of the incoming message;

process the incoming message according to a message security configuration to identify a subset of the recipient devices, wherein the message security configuration corresponds to evaluation of security information included in the incoming message; and

publish the processed incoming message to the identified subset of the recipient devices.

6. The system as recited in claim 5 further comprising an administrative client device configured to configure the message processing service by associating one or more routing tables as part of the message security information.

7. The system as recited in claim 5, wherein the message processing service processes the incoming message by evaluating security criteria associated with the set of recipient devices and excluding at least one recipient device based on evaluation of the security criteria.

8. The system as recited in claim 5, wherein the message processing service processes the incoming message by evaluating security criteria associated with the set of recipient devices and selecting at least one recipient device based on evaluation of the security criteria.

9. The system as recited in claim 8, wherein the message processing service selects a single recipient device to receive the incoming message.

10. The system as recited in claim 5, wherein the incoming message corresponds to a network service.

11. The system as recited in claim 10, wherein the set of recipient devices corresponds to individual devices in a set of coordinated device networks.

12. The system as recited in claim 5, wherein the messaging protocol comprises the MQ Telemetry Transport protocol.

13. A computer-implemented method for managing messages utilizing message protocols comprising:

receiving messages formed in accordance with a messaging protocol, the messages corresponding to a topic, the topic including a subject matter description, wherein a set of recipient devices are registered to receive messages associated with the topic; and

processing security information included in the received messages according to a security processing configuration to manage access to a subset of the set of recipient devices.

14. The computer-implemented method as recited in claim 13, wherein processing the received messages includes selecting a subset of possible recipients for individual messages.

15. The computer-implemented method as recited in claim 13, wherein the message processing configurations include at least one of a business rule or routing table and wherein processing the received messages including evaluating the at least one business rule or routing table.

16. The computer-implemented method as recited in claim 15, wherein evaluating the at least one of a business rule or routing table includes evaluating the security information included in the received messages according to the at least one business rule or routing table.

17. The computer-implemented method as recited in claim 16, wherein the security information includes an identifier and a password embedded in the received messages.

18. The computer-implemented method as recited in claim 13 further comprising obtaining the security processing configuration from an administrative component.

19. The computer-implemented method as recited in claim 13, processing the security information included in the received messages according to a security processing configuration includes processing the security information included in the received messages without external network communication access.

20. The computer-implemented method as recited in claim 13, wherein the subset of recipient devices includes two or more recipient devices.