Peer-to-peer authentication for real-time collaboration

• US 20040054885A1
• Filed: 09/18/2002
• Published: 03/18/2004
• Est. Priority Date: 09/18/2002
• Status: Active Grant

• Current Assignee: AI-CORE TECHNOLOGIES, LLC (Ascend Innovation Management, LLC)
• Original Assignee: Colligo Networks, Inc. (Olbia Software Inc.)
• Inventors: Bartram, Linda Ruth, Sawadsky, Nicholas, Schumacher, Steven Joseph, Blackstock, Michael, Chesser, Mark Miller
• Granted Patent: US 7,392,375 B2
• Time in Patent Office: Days
• US Class Current: 713/152
• CPC Class Codes: H04L 2209/80 Wireless network architectures or network communication protocols for wireless network security H04W12/00
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 67/104 Peer-to-peer [P2P] networks
• CPC Class Codes: H04L 9/3265 using certificate chains, trees or paths; Hierarchical trust model

Abstract

A peer-to-peer collaborative network system is described. The peer-to-peer collaborative network system uses an authentication system with multiple levels of authentication. This allows some collaboration applications to allow a collaboration with a high authentication level, but not to allow a collaboration with a lower level of authentication. Other collaborative applications can allow a collaboration with the lower level of authentication.

Claims

1. Peer-to-peer network software for a unit connectable to a peer-to-peer network comprising:

collaborative application software adapted to allow collaboration between units on the peer-to-peer network; and

authentication software adapted to produce an authentication level indication concerning the identity of another unit in the peer-to-peer network, wherein the possible authentication levels include a high authentication level and a low authentication level, the low authentication level being some evidence of unit authentication, wherein the collaborative application software uses the authentication level indication to decide whether to allow a collaboration with another unit, wherein at least one collaborative application allows a collaboration with another unit when the authentication level indication is high but does not allow a collaboration with another unit when the authentication level indication is low.

2. The peer-to-peer network software of claim 1 wherein the collaboration applications include a chat application.

3. The peer-to-peer network software of claim 1 wherein the collaboration applications includes file sharing.

4. The peer-to-peer network software of claim 1 wherein the collaboration application includes resource sharing.

5. The peer-to-peer network software of claim 1 wherein the collaboration applications includes a database synchronization application.

6. The peer-to-peer network software of claim 1 wherein at least one collaboration application allows collaboration when the authentication level indication is low.

7. The peer-to-peer network of claim 1 wherein the user can specify authentication levels required of other peers.

8. The peer-to-peer network software of claim 1 wherein there are more than two authentication levels.

9. The peer-to-peer network software of claim 8 wherein the authentication level indications from least to most secure include simple acceptance, fingerprint comparison, out-of-band certificate comparison, and certificate authority confirmation.

10. The peer-to-peer network software of claim 1 wherein the authentication level indication is stored along with an identifier for another unit.

11. The peer-to-peer network software of claim 1 wherein the authentication level indication can be subsequently upgraded by re-authentication of the peer using a more secure authentication approach.

12. The peer-to-peer software of claim 1 wherein implicit authentication is allowed.

13. A method comprising:

producing an authentication level indication concerning the identity of another unit in a peer-to-peer network, wherein the possible authentication levels include a high authentication level and a low authentication level, the low authentication level being some evidence of unit authentication; and

using the authentication level indication to decide whether to allow a collaboration with another unit, wherein at least one collaborative application allows a collaboration when the authentication level indication is high but does not allow a collaboration when the authentication level indication is low.

14. The method of claim 13 wherein when the authentication level indication is low there is a collaborative application that allows for collaboration.

15. The method of claim 13 wherein there are more than two authentication levels.

16. The method of claim 13 wherein the authentication levels correspond to simple acceptance, fingerprint comparison, out-of-band certificate comparison, and certificate authentication confirmation.

17. The method of claim 13 wherein the authentication level indication is stored along with an identifier for the other unit.

18. The method of claim 13 wherein the method allows for implicit authorization.

19. The method of claim 13 wherein the collaboration application includes file sharing.

20. The method of claim 13 wherein the collaboration application includes resource sharing.

21. The method of claim 13 wherein the user can specify authentication levels required of other peers.

22. The method of claim 13 wherein the authentication level indication can be subsequently upgraded by re-authentication of the peer using a more secure authentication approach.

23. A computer-readable medium containing a program that executes the following procedure:

producing an authentication level indication concerning the identity of another unit in a peer-to-peer network, wherein the possible authentication levels include a high authentication level and a low authentication level, the low authentication level being some evidence of unit authentication; and

using the authentication level indication to decide whether to allow a collaboration with another unit, wherein at least one collaborative application allows a collaboration when the authentication level indication is high but does not allow a collaboration when the authentication level indication is low.

24. The computer readable medium containing a program of claim 23 wherein when the authentication level indication is low there is a collaborative application that allows for collaboration.

25. The computer readable medium containing a program that executes a procedure of claim 23 wherein the procedure is such that there are more than two authentication levels.

26. The computer readable medium containing a program that executes a procedure of claim 23 wherein the authentication level indication is stored along with an identifier for the other unit.

27. The computer readable medium containing a program that executes a procedure of claim 23 wherein the authentication levels correspond with simple acceptance, fingerprint comparison, out-of-band certificate comparison, and certificate authority confirmation.

28. The computer readable medium containing a program that executes a procedure of claim 23 wherein the procedure allows for implicit authorization of units.

29. The computer readable medium containing a program of claim 23 wherein the collaboration application includes file sharing.

30. The computer readable medium containing a program of claim 23 wherein the collaboration application includes resource sharing.

31. The computer readable medium containing a program of claim 23 wherein the user can specify authentication levels required of other peers

32. The computer readable medium containing a program of claim 23 wherein the authentication level indication can be subsequently upgraded by re-authentication of the peer using a more secure authentication approach.