Secure distributed system for management of local community representation within network devices

• US 20070025360A1
• Filed: 04/13/2004
• Published: 02/01/2007
• Est. Priority Date: 04/11/2003
• Status: Abandoned Application

• Current Assignee: Thomson Licensing (Vantiva SA)
• Original Assignee: Thomson Licensing (Vantiva SA)
• Inventors: Heen, Olivier, Prigent, Nicolas, Bidan, Christophe, Andreaux, Jean-Pierre
• Application Number:
  US10/552,138
• Publication Number:
  US 20070025360A1
• Time in Patent Office: Days
• US Class Current: 370/397
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/0876 based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint
• CPC Class Codes: H04L 63/101 Access control lists [ACL]
• CPC Class Codes: H04L 63/104 Grouping of entities
• CPC Class Codes: H04L 63/123 received data contents, e.g. message integrity
• CPC Class Codes: H04L 67/34 involving the movement of software or configuration parameters network booting or remote initial program loading [RIPL] G06F9/4416

Abstract

A new system for creating and updating a secure community of devices in digital networks is disclosed. A device adapted to belong to a community of networked devices contains; a provable identity and/or means for generating and/or obtaining a provable identity; means adapted to store information about devices of the community having trust relationships with the device; means adapted to store information about devices not trusted by this device; and means for trust relationships synchronization.

Claims

1. A device adapted to belong to a community of networked devices, said device comprising:

a provable identity and/or means for generating and/or obtaining a provable identity;

means adapted to store information about devices of the community having trust relationships with said device;

means adapted to store information about devices not trusted by said device; and

means for trust relationships synchronization.

2. The device according to claim 1, wherein said means for storing information about devices not trusted by said device stores information comprising information about devices of the community having had trust relationships with said device in the past but not having anymore.

3. The device according to claim 1, wherein the information about devices comprises the provable identity of said devices.

4. The device according to claim 1, wherein said device is furthermore designed to store information comprising proofs received from other devices of the community that said device is trusted by other devices.

5. The device according to claim 1, wherein said means for trust relationship synchronization comprise means to exchange information with other devices of the community about devices trusted and/or not trusted by other devices of the community.

6. The device according to claim 1, wherein said device comprises:

a first object capable of containing identities of devices trusted by said device and trusting said device;

a second object capable of containing identities of devices trusted by said device; and

a third object capable of containing identities of devices distrusted by said device.

7. The device according to claim 6, wherein said device is able to modify the content of said first object and/or said second object and/or said third object as a function of information exchanged with other devices of the community.

8. The device according to claim 6, wherein said first object and/or said second object and/or said third object are furthermore able to contain cryptographic material.

9. The device according to claim 6, wherein said first device is furthermore able to banish another device of said community if the identity of said device to be banished is contained in the first or the second object of said first device, said banish operation comprising removing the identity of said device to be banished from said first or second object and inserting said identity in said third object of said first device.