Method, system, network and computer program product for securing administrative transactions over a network

• US 20070071241A1
• Filed: 11/27/2003
• Published: 03/29/2007
• Est. Priority Date: 11/27/2003
• Status: Active Grant

• Current Assignee: Telecom Italia S.p.A.
• Original Assignee: Telecom Italia S.p.A.
• Inventors: De Lutiis, Paolo, Leone, Manuel, Caprella, Ettore, Zaccone, Pier
• Granted Patent: US 7,636,848 B2
• Time in Patent Office: Days
• US Class Current: 380/270
• CPC Class Codes: H04L 41/28 Restricting access to network management systems or functions, e.g. using authorisation function to access network configuration
• CPC Class Codes: H04L 63/0442 wherein the sending and receiving network entities apply asymmetric encryption, i.e. different keys for encryption and decryption cryptographic mechanisms or cryptographic arrangements for public-key encryption H04L9/30
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 63/126 the source of the received data

Abstract

Communication between an administrator device and an administered device in a network is arranged in the form of a chain of digitally signed communication items including messages sent from an originator device to a recipient device. Each message has an associated respective digitally signed receipt, and the originator device is configured not to send a new item toward the recipient device in the absence of a respective digitally signed receipt for a previously sent item. With at least one, and preferably by both of the administrator device and the administered device, there is stored a history record of communication items exchanged therebetween. The history record is agreed upon and signed by both the administrator device and the administered device.

Claims

1-28. -28. (canceled)

29. A method of arranging communication between an administrator device and an administered device in a network, comprising the steps of:

arranging said communication in the form of a chain of digitally signed communication items including messages sent from an originator device to a recipient device, each said message having associated a respective digitally signed receipt; and

configuring said originator device not to send a new item toward said recipient device in the absence of a respective digitally signed receipt for a previously sent item.

30. The method of claim 29, comprising the steps of:

detecting at said originator device a respective digitally signed receipt item from said recipient device having failed to reach the originator device within a given time span after a message item has been issued by said originator device; and

asking said recipient device for a signed statement indicating at least one of a last message item received and a last message item sent by said recipient device.

31. The method of claim 29, comprising the step of storing with at least one of said administrator devices and said administered devices, a history record of communication items exchanged therebetween, said history record being agreed upon and signed by both said administrator device and said administered device.

32. The method of claim 29, comprising the step of carrying out at said originator device a session closing step mentioning at least one of a last message item received and a last message item sent by said recipient device.

33. The method of claim 29, comprising the step of keeping with said originator device an indication of an on-going communication session as a pending session until a signed receipt item is received from said recipient device.

34. The method of claim 29, comprising the step of inserting in said communication items, payload data and administrative commands accompanied by respective digital signatures.

35. The method of claim 29, comprising the step of causing said recipient device to verify digital signatures for validity.

36. The method of claim 29, comprising the step of creating digital signatures under the full control of the device issuing such signatures.

37. The method of claim 29, comprising the step of associating secure digital signature evidence with said digitally signed messages and receipts.

38. The method of claim 37, wherein said secure digital signature evidence is in the form of RSA class digital signatures.

39. The method of claim 29, comprising the steps of arranging communication between a set of administrator devices and a given administered device and permitting at least one administrator device in said set to hide its identity to said administered device.

40. The method of claim 39, comprising the step of hiding the identity of said at least one administrator device to said administered device by using at least one of group signatures or pseudonym digital certificates.

41. The method of claim 39, comprising the step of resuming a session interrupted in the absence of a receipt provided by said at least one administrator hiding its identity to a message sent by said given administered device, wherein said session is resumed by said at least one administrator hiding its identity.

56. A computer program product, loadable in the memory of at least one computer, and comprising software code portions capable of performing the steps of the method of any one of claims 29-41.

42. A system of an administrator device and an administered device in a network, said administrator device and administered device being configured for communication in the form of a chain of digitally signed communication items including messages sent from an originator device to a recipient device, each said message having associated a respective digitally signed receipt, and wherein said originator device is configured not to send a new item toward said recipient device in the absence of a respective digitally signed receipt for a previously sent item.

43. The system of claim 42, wherein:

said originator device is configured for detecting a respective digitally signed receipt item from said recipient device having failed to reach the originator device within a given time span after a message item has been issued by said originator device; and

asking said recipient device for a signed statement indicating at least one of a last message item received and a last message item sent by said recipient device.

44. The system of claim 42, comprising, data items stored with at least one of said administrator device and said administered device, and comprising a history record of communication items exchanged therebetween, said history record being agreed upon and signed by both said administrator device and said administered device.

45. The system of claim 42, wherein said originator device is configured for carrying out a session closing step mentioning at least one of a last message item received and a last message item sent by said recipient device.

46. The system of claim 42, wherein said originator device is configured for keeping an indication of an on-going communication session as a pending session until a signed receipt item is received from said recipient device.

47. The system of claim 42, wherein said originator device is configured for inserting in said communication items payload data and administrative commands accompanied by respective digital signatures.

48. The system of claim 42, wherein said recipient device is configured for verifying said digital signatures for validity.

49. The system of claim 42, comprising means for creating said digital signatures, said means being assigned acting under the full control of the device issuing such signatures.

50. The system of claim 42, wherein there is a configuration for associating secure digital signature evidence with said digitally signed messages and receipts.

51. The system of claim 50, wherein said secure digital signature evidence is in the form of RSA class digital signatures.

52. The system of claim 42, comprising a set of administrator devices and a given administered device, wherein at least one administrator device in said set is configured to hide its identity to said administered device.

53. The system of claim 52, wherein said at least one administrator device is configured for hiding its identity to said administered device by using at least one of group signatures or pseudonym digital certificates.

54. The system of claim 52, wherein said at least one administrator hiding its identity is configured for resuming a session interrupted in the absence of a receipt provided by said at least one administrator hiding its identity to a message sent by said given administered device.

55. A communication network comprising a system according to any one of claims 42-54.