Method and apparatus for providing an adaptable security level in an electronic communication

• US 20050076197A1
• Filed: 07/07/2004
• Published: 04/07/2005
• Est. Priority Date: 07/07/2003
• Status: Active Grant

• Current Assignee: Blackberry Limited
• Original Assignee: Certicom Corporation (Blackberry Limited)
• Inventors: Struik, Marinus
• Granted Patent: US 8,862,866 B2
• Time in Patent Office: Days
• US Class Current: 713/151
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/105 Multiple levels of security
• CPC Class Codes: H04L 63/123 received data contents, e.g. message integrity
• CPC Class Codes: H04L 63/162 at the data link layer
• CPC Class Codes: H04L 63/164 at the network layer
• CPC Class Codes: H04L 9/00 Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
• CPC Class Codes: H04L 9/088 Usage controlling of secret information, e.g. techniques for restricting cryptographic keys to pre-authorized uses, different access levels, validity of crypto-period, different key- or password length, or different strong and weak cryptographic algorithms network architectures or network communication protocols for using time-dependent keys in a packet data network H04L63/068
• CPC Class Codes: H04W 12/02 Protecting privacy or anonymity, e.g. protecting personally identifiable information [PII]
• CPC Class Codes: H04W 12/67 Risk-dependent, e.g. selecting a security level depending on risk profiles

Abstract

A method of communicating in a secure communication system, comprises the steps of assembling a message at a sender, then determining a security level, and including an indication of the security level in a header of the message. The message is then sent to a recipient.

Claims

1. A method of communicating between a pair of correspondent in a data communication system comprising the steps of assembly a data stream at one of said correspondents having at least one frame having a header and data, incorporating in said frame and indication of a security level associated with said frame, and forwarding said data stream to said other correspondent.

2. A method according to claim 1 including the step of including an indication of a mode of security operation is said header.

3. A method according to claim 1 including the step of including an indication of key size in said header.

4. A method according to claim 1 including the step of determining a minimum security level to satisfy all of the recipients including an indication of such security level in said header.

6. A method according to claim 2 wherein said mode of security operation includes encryption of said data.

7. A method according to claim 2 wherein said mode of operation includes signing of said data.

5. A method according to claim I wherein a recipient of said data stream examines said indication of security level and rejects said frame if it does not attain a minimum level.

8. A method of communicating in a secure communication system, wherein each communication is divided into a plurality of frames, and each frame includes an indication of a security level, thereby allowing each frame to have a different security level to adapt to the nature of each frame.

9. A method according to claim 8 wherein said indication of security level includes an indication of mode of operation and an indication of key size.

10. A method according to claim 8 wherein said indication is selected based upon the content of data in said frame.