Information security system and method`

• US 20030037258A1
• Filed: 08/17/2001
• Published: 02/20/2003
• Est. Priority Date: 08/17/2001
• Status: Abandoned Application

• Current Assignee: Izchak Koren
• Original Assignee: Izchak Koren
• Inventors: Koren, Izchak
• Application Number:
  US09/932,259
• Publication Number:
  US 20030037258A1
• Time in Patent Office: Days
• US Class Current: 713/201
• CPC Class Codes: H04L 63/0209 Architectural arrangements, e.g. perimeter networks or demilitarized zones
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/1441 Countermeasures against malicious traffic countermeasures against attacks on cryptographic mechanisms H04L9/002

Abstract

A secured virtual communication space system for secured communications between a plurality of communication devices communicating over a network aimed at preventing malicious communication activities previously classified as unlawful. The system comprises a plurality of control devices protected from unauthorized tampering, each control device connected to a communication device. The control device is adapted to preclude any action or obligatory execute actions with one common aim to prevent any possibility of malicious activity launched from the particular communication device it is connected to. The precluded or obligatory executed actions consist of predetermined rules—collective security code common to all control devices. The system also comprises at least one of a plurality of service node adapted to communicate with each of the plurality of control devices as a third trusted party performing at least one of the following functions: each control device authentication, each control device efficiency testing, anti-virus, vulnerability patches and SVS protocols updating, new SVS Language temporary key supply, SVS routing functions.

Claims

1. A secured virtual communication space system for secured communications between a plurality of communication devices communicating over a network aimed at preventing malicious communication activities previously classified as unlawful, the system comprising:

a plurality of control devices protected from unauthorized tampering, each control device connected to a communication device, the control device adapted to preclude any action or obligatory execute actions with one common aim to prevent any possibility of malicious activity launched from the particular communication device it is connected to, said precluded or obligatory executed actions consisting of predetermined rules—

collective security code common to all control devices; and

at least one of a plurality of service node adapted to communicate with each of the plurality of control devices as a third trusted party performing at least one of the following functions;

each control device authentication,

each control device efficiency testing,

anti-virus, vulnerability patches and SVS protocols updating,

new SVS Language temporary key supply,

SVS routing functions.

2. The system of claim 1 wherein the communication devices include personal computers, local area network gateways, or servers.

3. The system of claim 1, wherein the control device is protected by physical means such as a sealed box.

4. The system of claim 1, wherein the control device electronic scheme architecture prevents any possibility of its program altering from outside the device.

5. The system of claim 1 wherein the control device operational program can not be altered by system user or by anyone else, creating independent status of this unit.

6. The system of claim 5, wherein the control device operational program includes a set of pre-formulated behavior rules,—

collective security code,—

which are fulfilled automatically and independently of the system operator will, using the independent status.

7. The system of claim 1, wherein the collective security code includes a personal identification provision including smart token, biometrics or personal data reference.

8. The system of claim 1, wherein the collective security code includes management provision, whereby local management security instructions are obligatory carried out by control device, as far as they don'"'"'t contradict other security code provisions.

9. The system of claim 1, wherein accordingly to collective security code the entire data under processing is encrypted in two crypto codes:

local data by personal code using personal control device cryptokey;

publicly circulating data by common for all participants language cryptocode using temporary cryptokey supplied to all control devices by said at least one of a plurality service nodes.

10. The system of claim 1, wherein according to the collective security code all data under processing is assigned by an integrity tag to ensure the data intact.

11. The system of claim 1, wherein according to the collective security code the control device is adapted to attach a cryptocode to each outgoing communication batch for its own identification.

12. The system of claim 1, wherein according to the collective security code the control device is adapted to attach a real name tag or anonymous tag to each outgoing communication batch for user'"'"'s authentication.

13. The system of claim 1, wherein according to the collective security code the control device is adapted to allow incoming information to be accessed if it is addressed to that particular control device or if it is tagged as accessible to all.

14. The system of claim 1, wherein according to the collective security code the control device is adapted to produce receipt confirmation communication on request.

15. The system of claim 1, wherein according to the collective security code the control device is adapted to control malicious code scanning on each incoming or outgoing communication message or any data under its control.

16. The system of claim 1, wherein according to the collective security code the control device is adapted to operate as an independent intermediary in negotiable relations between his user and third party, maintaining so-called “

Agreement Mode”

meaning to fulfill stated instructions until both parties call the Mode off.

17. The system of claim 1, wherein according to the collective security code the control device is adapted to prevent a denial-of-service attack by following communication restrictions declared by its correspondent, which affects it in particular, following communication timetable or stopping the communication attempts at all on its correspondent demand.

18. A control device for providing secured communications between a communication device, to which it is connected to, and a plurality of communication devices communicating over a network aimed at preventing malicious communication activities initiated at the communication device, by obeying a list of predetermined rules, which prevent any activity that was previously classified as unlawful.

19. The device of claim 18, wherein the control device is physically protected and sealed.

20. The device of claim 18, wherein the control device includes electronic scheme architecture preventing any possibility of its program altering from outside the unit.

21. The device of claim 18, wherein its operational program can not be altered by system user or by anyone else, creating independent status of this unit.

22. The device of claim 18, wherein its operational program includes a set of pre-formulated behavior rules,—

collective security code,—

which are fulfilled automatically and independently of the system operator will, using the independent status of claim 21.

23. The device of claim 22, wherein the collective security code includes personal identification provision, which is optional, however, if the user chooses this option the procedure will include smart token, biometrics and personal data reference.

24. The device of claim 22, wherein the collective security code includes management provisions, whereby local management security instructions are obligatory carried out by control device, as far as they don'"'"'t contradict the other security code provisions.

25. The device of claim 22, wherein according to the collective security code the entire data under processing is encrypted in two crypto codes:

local data by personal control device cryptokey;

publicly circulating data by common for all participants language cryptocode using temporary cryptokey supplied to all control devices by at least one of a plurality of service nodes.

26. The device of claim 22, wherein according to the collective security code all the data under processing is assigned by an integrity tag to ensure the data intact.

27. The device of claim 22, wherein according to the collective security code the control device is adapted to attach a cryptocode to each outgoing communication batch for its own identification.

28. The device of claim 22, wherein according to the collective security code the control device is adapted to attach a real name tag or anonymous tag to each outgoing communication batch for user'"'"'s authentication.

29. The device of claim 22, wherein according to the collective security code the control device is adapted to allow incoming information to be accessed if it is addressed to that control device or if it is tagged as accessible to all.

30. The device of claim 22, wherein according to the collective security code the control device is adapted to produce receipt confirmation communication on request.

31. The device of claim 22, wherein according to the collective security code the control device is adapted to control malicious code scanning on each incoming or outgoing communication message or any data under its control.

32. The device of claim 22, wherein according to the collective security code the control device is adapted to operate as an independent intermediary in negotiable relations between its corresponding communication device and third party, in order to fulfill stated instructions until both parties call the mode off.

33. The device of claim 22, wherein according to the collective security code the control device is adapted to prevent a denial-of-service attack by following communication restrictions declared by its correspondent, which affects it in particular following communication timetable or stopping the communication attempts at all if the correspondent insists on it.

34. A method for providing a secured virtual communication space system for secured communications between a plurality of communication devices communicating over a network aimed at preventing malicious communication activities previously classified as unlawful, the method comprising:

providing a plurality of control devices protected from unauthorized tampering each control device connected to a communication device, the control device adapted to prevent communication activity that was previously classified as unlawful, by obeying a list of predetermined rules, a collective security code common to all control devices; and

providing at least one of a plurality of service nodes adapted to communicate with each of the plurality of control devices, governed by a list of predetermined rules and operating under the collective security code, and

governing communications between the communication devices through the control devices barring unlawful information attacks.

35. The method of claim 34, wherein the communication devices include personal computers, local area network gateways, or servers.

36. The method of claim 34, wherein the space is accessible only by and through the control device.

37. The method of claim 34, wherein the collective security code provisions include a list of unauthorized actions, and list of actions that need to be taken in order to prevent any known information attack launch.

38. The method of claim 34, wherein the collective security code includes a personal identification provision, which is optional including smart token, biometrics or personal data reference.

39. The method of claim 34, wherein the collective security code includes management provision, whereby local management security instructions are obligatory carried out by control device, as far as they don'"'"'t contradict other security code provisions.

40. The method of claim 34, wherein according to the collective security code the entire data under processing is encrypted in two crypto codes:

local data by personal code using personal control device cryptokey;

publicly circulating data by common for all participants language cryptocode using temporary cryptokey supplied to all control devices by at least one of a plurality of service nodes.

41. The method of claim 34, wherein according to the collective security code all the data under processing is assigned by an integrity tag to ensure the data intact.

42. The method of claim 34, wherein according to the collective security code the control device is adapted to attach a cryptocode to each outgoing communication batch for its own identification.

43. The method of claim 34, wherein according to the collective security code the control device is adapted to attach a real name tag or anonymous tag to each outgoing communication batch for user'"'"'s authentication.

44. The method of claim 34, wherein according to the collective security code the control device is adapted to allow incoming information to be accessed if it is addressed to that control device or if it is tagged as accessible to all.

45. The method of claim 34, wherein according to the collective security code the control device is adapted to produce receipt confirmation communication on request.

46. The method of claim 34, wherein according to the collective security code the control device is adapted to control malicious code scanning on each incoming or outgoing communication message or any data under its control.

47. The method of claim 34, wherein according to the collective security code the control device is adapted to operate as an independent intermediary in negotiable relations between the corresponding communication device and a third party, fulfilling stated instructions until both parties call the mode off.

48. The method of claim 34, wherein according to the collective security code the control device is adapted to prevent a denial-of-service attack by following communication restrictions declared by its correspondent, which affects it in particular following communication timetable or stopping the communication attempts at all on its correspondent demand.