SECURING MULTIMEDIA NETWORK COMMUNICATION

• US 20080144824A1
• Filed: 12/18/2006
• Published: 06/19/2008
• Est. Priority Date: 12/18/2006
• Status: Active Grant

• Current Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.), Samsung Electronics Co. Ltd.
• Original Assignee: Samsung Electronics Co. Ltd., Palo Alto Research Center, Inc. (Xerox Holdings Corp.)
• Inventors: Smetters, Diana K., Balfanz, Dirk, Durfee, Glenn E., Stewart, Paul J.
• Granted Patent: US 8,023,654 B2
• Time in Patent Office: Days
• US Class Current: 380/257
• CPC Class Codes: H04K 1/00 Secret communication
• CPC Class Codes: H04L 63/14 for detecting or protecting against malicious traffic
• CPC Class Codes: H04L 63/1466 Active attacks involving interception, injection, modification, spoofing of data unit addresses, e.g. hijacking, packet injection or TCP sequence number attacks
• CPC Class Codes: H04L 9/3215 using a plurality of channels network architectures or network communication protocols using different networks H04L63/18
• CPC Class Codes: H04M 7/123 where the packet-switched network is an Internet Protocol Multimedia System-type network

Abstract

A method for securing human to human communication over a network includes receiving, by a first computer, an incoming authenticated data stream from a second computer over a first communication channel, the incoming authenticateed data stream having been computed using an incoming digital experiential data stream and a first imprint, and extracting the first imprint from the incoming authenticated data stream. The incoming authenticated data stream is then presented for sensory experience by a human. An outgoing digital experiential data stream is then input and the method computes a second imprint associated with the first computer and computes an outgoing authenticated data stream using the outgoing digital experiential data stream and the second imprint. A second communication channel is then secured from the first computer to the second computer using the first imprint, the second communication channel suitable for sending the outgoing authenticated data stream to the second computer.

Claims

1. A computer controlled method for securing human to human communication over a network, the method comprising:

receiving, by a first computer, an incoming authenticated data stream from a second computer over a first communication channel, the incoming authenticateed data stream having been computed using an incoming digital experiential data stream and a first imprint;

extracting the first imprint from the incoming authenticated data stream;

presenting the incoming authenticated data stream, the presenting suitable for sensory experience by a human;

inputting an outgoing digital experiential data stream;

computing a second imprint associated with the first computer;

computing an outgoing authenticated data stream using the outgoing digital experiential data stream and the second imprint;

securing a second communication channel from the first computer to the second computer using the first imprint, the second communication channel suitable for sending the outgoing authenticated data stream to the second computer.

2. The computer controlled method of claim 1, wherein securing the second communication channel comprises encryption with the first imprint extracted from the incoming authenticated data stream.

3. The computer controlled method of claim 1, wherein securing the second communication channel comprises ensuring that a cryptographic hash of a key previously received for encrypting the second communication channel matches the first imprint extracted from the incoming authenticated data stream.

4. The computer controlled method of claim 1, wherein securing the second communication channel comprises ensuring that a cryptographic hash of a key previously received for authenticating messages in a key agreement protocol matches the first imprint extracted from the incoming authenticated data stream.

5. The computer controlled method of claim 1, wherein presenting the authenticated data stream comprises presenting the authenticated data stream such that tampering with the imprint degrades presentation of the authenticated data stream.

6. The computer controlled method of claim 5, the method comprising allowing a human to terminate the connection on such recognition of degradation of the authenticated data stream.

7. The computer controlled method of claim 1, wherein the imprints comprise one of a key, a cryptographic hash of a key, key information, a nonce, a certificate;

with or without error correction

8. The computer controlled method of claim 1, wherein computing the second imprint comprises:

using a digital key having a predetermined number of bits, dividing a portion the outgoing digital experiential data stream into segments, each segment corresponding to one of the predetermined number of bits; and

for each segment;

dividing a frequency band of the segment into number of subbands; and

transmitting one of either a first combination of subbands to encode a one or a second set of subbands to encode a zero.

9. The computer controlled method of claim 1, wherein extracting the first imprint comprises:

analyzing a frequency band of a portion of the incoming experiential data stream to determine the absence or presence of a number of subbands for each segment of the incoming data stream;

determining if the segment contains a first combination of subbands or a second combination of subbands;

setting a bit corresponding to each segment to a one if a received combination of subbands is the first combination of subbands, and setting the bit to a zero if the received combination of subbands is the second combination of subbands, producing an impring having a predetermined number of bits.

10. The computer controlled method of claim 1, the method comprising:

determining that the first imprint extracted from the incoming authenticated data stream does not match a previously received key associated with the second computer; and

performing a suitable response that comprises one of terminating the connection, alerting the user.

11. The computer controlled method of claim 1, the method further comprising using timestamps on packets of the incoming authenticated data stream to determine a position of a bit in the first imprint.

14. The computer controlled method of claim 11, wherein securing the first communication channel comprises ensuring that a cryptographic hash of the key previously provided to the sender for encrypting the first communication channel matches the second imprint extracted from the incoming authenticated data stream.

12. A computer controlled method for securing human to human communication over a network, the method comprising:

initiating, at a sender, a connection with a recipient over network;

generating an authenticated outgoing experiential stream having a first imprint;

transmitting the authenticated outgoing experiential stream through a first communication channel;

receiving, over a second communication channel, an authenticated incoming experiential stream secured using the first imprint;

extracting a second imprint from the authenticated incoming experiential stream;

securing the first communication channel using the second imprint; and

transmitting the authenticated outgoing experiential stream through the first communication channel.

13. The computer controlled method of claim 12, wherein generating the authenticated outgoing experiential stream having a first imprint comprises using a cryptographic hash of a key previously provided to the recipient from the sender and extracting a second imprint comprises extracting a cryptographic hash of a key previously provided to the sender from the recipient.

15. The computer controlled method of claim 12, wherein securing the first communication channel comprises ensuring that a cryptographic hash of a key previously provided to the sender for authenticating a key exchange protocol matches the second imprint extracted from the incoming authenticated data stream.

16. The computer controlled method of claim 12, wherein securing the first communication channel comprises encryption with the second imprint extracted from the incoming authenticated data stream.

17. The computer controlled method of claim 12, wherein generating an outgoing authenticated data stream comprises:

dividing a frequency band of a portion of the outgoing data stream into number of subbands, each portion corresponding to a bit in an imprint having a predetermined number of bits;

for each portion, transmitting either a first combination of subbands to encode a one or a second set of subbands to encode a zero;

performing the dividing and transmitting for a number of portions of the data stream, wherein the number of portions corresponds to the predetermined number of bits.

18. The computer controlled method of claim 12, wherein extracting the second imprint comprises:

analyzing a frequency band of a portion of the incoming experiential data stream to determine the absence or presence of a number of subbands for each segment of the incoming data stream;

determining if the segment contains a first combination of subbands or a second combination of subbands;

setting a bit corresponding to each segment to a one if a received combination of subbands is the first combination of subbands, and setting the bit to a zero if the received combination of subbands is the second combination of subbands, producing an impring having a predetermined number of bits.

19. The computer controlled method of claim 12, wherein generating an outgoing authenticated data stream having the first imprint comprising imprinting each bit of the imprint over several phonemes.