Collaboration of resources in a distributed environment using credentials and encryption keys

• US 20030217266A1
• Filed: 05/15/2002
• Published: 11/20/2003
• Est. Priority Date: 05/15/2002
• Status: Abandoned Application

• Current Assignee: Intel Corporation
• Original Assignee: Intel Corporation
• Inventors: Dohrmann, Steve, Epp, Edward C.
• Application Number:
  US10/146,844
• Publication Number:
  US 20030217266A1
• Time in Patent Office: Days
• US Class Current: 713/163
• CPC Class Codes: H04L 63/0435 wherein the sending and receiving network entities apply symmetric encryption, i.e. same key used for encryption and decryption cryptographic mechanisms or cryptographic arrangements for symmetric key encryption H04L9/06
• CPC Class Codes: H04L 63/0442 wherein the sending and receiving network entities apply asymmetric encryption, i.e. different keys for encryption and decryption cryptographic mechanisms or cryptographic arrangements for public-key encryption H04L9/30
• CPC Class Codes: H04L 63/065 for group communications cryptographic mechanisms or cryptographic arrangements for key management involving conference or group key H04L9/0833
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32

Abstract

A collaboration of resources in a distributed environment using credentials and encryption keys is described. According to one embodiment of the invention, a first resource entity receives a communication from a second resource entity over a network. The communication is decrypted with a secret and includes a set of one or more credential and a contact identifier of the second resource entity. The second resource entity is allowed to access a resource on the first resource entity based on the one or more credentials associated with the contact identifier.

Claims

1. A machine-readable medium having instructions to cause a machine to perform a method comprising:

receiving an encrypted communication from a member of a collaboration group, the communication includes a set of one or more credentials and a contact identifier associated with at least one of the set of one or more credentials;

decrypting the communication with a secret key; and

providing access to a resource based on the credentials associated with the contact identifier.

2. The machine-readable medium of claim 1 wherein the secret key is a unique encryption key used by each member of the collaboration group to provide trusted communications.

3. The machine-readable medium of claim 1 wherein the secret key is a symmetrical key shared by members of the collaboration group.

4. The machine-readable medium of claim 1 wherein the secret key is a public key portion of a public-private key pair.

5. The machine-readable medium of claim 1 wherein the secret key is a private key portion of a public-private key pair.

6. The machine-readable medium of claim 1 wherein the members of the collaboration group communicate via collaboration software.

7. A resource management system comprising:

a network;

a first resource entity being a member of a collaboration group; and

a second resource entity receiving a first communication over the network from the first resource entity, the first communication including a request to become a member of the collaboration group, receiving a second communication containing a secret key, the secret key enabling members of the collaboration group to perform trusted communications.

8. The system of claim 7 wherein the secret key is a symmetrical key.

9. The system of claim 7 wherein the secret key is a public key portion of a public-private key pair.

10. The system of claim 7 wherein the first communication comprises a set of one or more credentials describing the roles of the second resource entity within the collaboration group.

11. The system of claim 10 wherein the set of one or more credentials allow the second resource entity to delegate authority to members in the collaboration group.

12. The system of claim 7 wherein upon joining the collaboration group, the second resource entity receives a third communication from the first resource entity to access a resource controlled by the second resource entity, the third communication includes a set of one or more credentials of the first resource entity and a contact identifier of the first resource entity, the second resource entity to allow access to the resource based on the credentials of the first resource entity associated with the contact identifier.

13. The system of claim 12 wherein the third communication is decrypted with the secret key.

14. The system of claim 12 wherein the contact identifier is the public portion of a public-private key pair.

15. A resource management system comprising:

a network;

a first resource entity being a member of a collaboration group; and

a second resource entity being a member of the collaboration group, the second resource entity receiving a communication over the network from the first resource entity, the communication including a request to access a resource on the second resource entity, the communication includes a contact identifier and a set of one or more credentials, the second resource entity allows access to the resource entity based on the credentials associated with the contact identifier.

16. The system of claim 15 further comprising the second resource entity decrypting the communication from the first resource entity with a secret key.

17. The system of claim 16 wherein the secret key is a symmetrical key.

18. The system of claim 15 wherein the contact identifier is the public portion of a public-private key pair.

19. The system of claim 15 wherein the communication includes a digital signature of the first resource entity and the second resource entity authenticates the credentials of the first resource entity based on the digital signature of the first resource entity.

20. A collaboration apparatus comprising:

a means for receiving a communication from a member of a collaboration group requesting to access a resource, the communication to include a set of one or more credentials and a contact identifier associated with at least one of the set of one or more credientials;

a means for decrypting the communication based on a secret key; and

a means for allowing access to the resource based on the credentials associated with the contact identifier.

21. The apparatus of claim 20 wherein the secret key is a symmetrical key.

22. The apparatus of claim 20 wherein the members of the collaboration group each include the secret key to provide trusted communications.

23. The apparatus of claim 20 wherein the contact identifier is the public portion of a public-private key pair.

24. The apparatus of claim 20 further comprising a means to authenticate the set of credentials based on a digital signature of the member of the collaboration group requesting to access the resource, the digital signature being included in the communication.

25. The apparatus of claim 20 wherein the members of the collaboration group communication via collaboration software.

26. A collaboration apparatus comprising:

a receiver to receive a communication from a member of a collaboration group requesting to access a resource, the communication to include a set of one or more credentials and a contact identifier associated with at least one of the set of one or more credentials;

a decrypting component to decrypt the communication based on a secret key; and

a processor to allow access to the resource based on the credentials associated with the contact identifier.

27. The apparatus of claim 26 wherein the secret key is a symmetrical key.

28. The apparatus of claim 26 further comprising authenticating the set of credentials based on a digital signature of the member of the collaboration group requesting to access the resource, the digital signature being included in the communication.

29. The apparatus of claim 26 wherein the contact identifier is the public portion of a public-private key.

30. The apparatus of claim 26 wherein the members of the collaboration group communication via collaboration software.