Computer system

• US 20080301783A1
• Filed: 02/25/2003
• Published: 12/04/2008
• Est. Priority Date: 07/29/2002
• Status: Active Grant

• Current Assignee: Oracle International Corporation (Oracle Corporation)
• Original Assignee: Oracle International Corporation (Oracle Corporation)
• Inventors: Douglas, David C., Traub, Kenneth R., Bernardi, Linda, Hatanaka, Iwao, Abrutyn, Scott D.
• Granted Patent: US 7,853,983 B2
• Time in Patent Office: Days
• US Class Current: 726/5
• CPC Class Codes: H04L 61/50 Address allocation
• CPC Class Codes: H04L 63/0492 by using a location-limited connection, e.g. near-field communication or limited proximity of entities
• CPC Class Codes: H04L 67/125 involving control of end-device applications over a network
• CPC Class Codes: H04L 67/52 specially adapted for the location of the user terminal
• CPC Class Codes: H04W 12/02 Protecting privacy or anonymity, e.g. protecting personally identifiable information [PII]

Abstract

A computer architecture for enterprise device applications provides a real-time, bi-directional communication layer for device communication. An identity-based communications layer provides for secure, end-to-end telemetry and control communications by enabling mutual authentication and encryption between the devices and the enterprise. A unique identity is assigned to each device, user and application to provide security services. Telemetry data is communicated between a data producing device and a data receiving device. The telemetry data sent from the data producing device is identified using the identity identifier of the data producing device.

Claims

1. A method for communicating data from a telemetry transmitter to a telemetry receiver, the method comprising:

associating an identity identifier with the telemetry transmitter, the identity identifier being independent of a network address of the telemetry transmitter and being unique across all telemetry transmitters; and

sending a telemetry data element from the telemetry transmitter to the telemetry receiver, the telemetry data element including the identity identifier of the telemetry transmitter, a data element identifier that is unique across all data elements sent by the telemetry transmitter, and a client data element comprising transmitter-defined data;

wherein the data element identifier comprises a generation number and a sequence number, and identifies a period that the telemetry transmitter was active by having the generation number incremented when the telemetry transmitter becomes active and by having the sequence number reset when the telemetry transmitter becomes active.

2. The method of claim 1 wherein the telemetry data element is sent using an identity-based communications layer situated between a network layer and an application layer.

3. The method of claim 2 wherein the identity identifier comprises an identity identifier for a composite identity, the composite identity being associated with two or more other identity identifiers.

4. The method of claim 3 wherein the composite identity is associated with an authentication credential.

5. The method of claim 3 further comprising creating the composite identity only when each of the two or more other identity identifiers associated with the composite identity have been authenticated.

6. The method of claim 3 wherein at least one of the two or more other identity identifiers associated with the composite identity comprises an identity identifier for another composite identity.

7. The method of claim 1 wherein the generation number is incremented by one and the sequence number is reset to zero.

8. The method of claim 7 wherein the telemetry transmitter becomes active after being powered up.

9. The method of claim 8 wherein a next value to be used for the generation number is held in a persistent store associated with the identity identifier.

10. The method of claim 9 wherein the persistent store is implemented as non-volatile memory of the telemetry transmitter.

11. The method of claim 9 wherein the persistent store is implemented by a second computer system on the network, the second computer system holding generation numbers for one or more identity identifiers.

12. The method of claim 8 wherein the telemetry receiver detects missing telemetry data elements by detecting gaps in the series of received sequence numbers.

13. The method of claim 1 wherein the telemetry receiver performs a processing operation on the client data element when a telemetry data element is received.

14. The method of claim 1 further comprising storing the telemetry data when the telemetry data is received by the telemetry receiver.

15. The method of claim 14 further comprising performing a processing operation on the received telemetry data element.

16. The method of claim 15 further comprising:

receiving multiple telemetry data elements; and

detecting missing telemetry data elements by detecting gaps in the series of received data element identifiers.

17. The method of claim 1 wherein security information is associated with the identity identifier of the telemetry transmitter, the method further comprising using the security information to authenticate the telemetry transmitter.

18. A computer-readable medium having embodied thereon a computer program configured to communicate data from a telemetry transmitter to a telemetry receiver, the medium comprising one or more code segments, when executed by a processor, configured to:

associate an identity identifier with the telemetry transmitter, the identity identifier being independent of a network address of the telemetry transmitter and being unique across all telemetry transmitters producers; and

send a telemetry data element from the telemetry transmitted to the telemetry receiver, the telemetry data element including the identity identifier of the telemetry transmitter, a data element identifier that is unique across all data elements sent by the telemetry transmitter, and a client data element comprising transmitter-defined data;

wherein the data element identifier comprises a generation number and a sequence number, and identifies a period that the telemetry transmitter was active by having the generation number incremented when the telemetry transmitter becomes active and by having the sequence number reset when the telemetry transmitter becomes active.

19. The medium of claim 18 wherein the telemetry data element is sent using an identity-based communications layer situated between a network layer and an application layer.

20. The medium of claim 19 wherein the identity identifier comprises an identity identifier for a composite identity, the composite identity being associated with two or more other identity identifiers.

21. The medium of claim 20 wherein the composite identity is associated with an authentication credential.

22. The medium of claim 18 wherein the generation number is incremented by one and the sequence number is reset to zero.

23. The medium of claim 18 wherein the one or more code segments are further configured to perform a processing operation on the received telemetry data element.

24. The medium of claim 23 wherein the one or more code segments are further configured to:

receive multiple telemetry data elements; and

detect missing telemetry data elements by detecting gaps in the series of received data element identifiers.

25. The medium of claim 18 wherein:

security information is associated with the identity identifier of the data producer, and

the one or more code segments are further configured to use the security information to authenticate the telemetry transmitter.

26. A system for communicating data from a data producer to a telemetry transmitter, the system comprising a processor connected to a storage device and one or more input/output devices, wherein the processor is configured to:

associate an identity identifier with the telemetry transmitter the identity identifier being independent of a network address of the telemetry transmitter and being unique across all telemetry transmitters; and

send a telemetry data element from the telemetry transmitter to the telemetry receiver, the telemetry data element including the identity identifier of the telemetry transmitter, a data element identifier that is unique across all data elements sent by the telemetry transmitter, and a client data element comprising transmitter-defined data;

wherein the data element identifier comprises a generation number and a sequence number, and identifies a period that the telemetry transmitter was active by having the generation number incremented when the telemetry transmitter becomes active and by having the sequence number reset when the telemetry transmitter becomes active.

27. The system of claim 26 wherein the telemetry data element is sent using an identity-based communications layer situated between a network layer and an application layer.

28. The system of claim 27 wherein the identity identifier comprises an identity identifier for a composite identity, the composite identity being associated with two or more other identity identifiers.

29. The system of claim 28 wherein the composite identity is associated with an authentication credential.

30. The system of claim 26 wherein the generation number is incremented by one and the sequence number is reset to zero.

31. The system of claim 26 wherein the processor is further configured to perform a processing operation on the received telemetry data element.

32. The system of claim 31 wherein the processor is further configured to:

receive multiple telemetry data elements; and

detect missing telemetry data elements by detecting gaps in the series of received data element identifiers.

33. The system of claim 26 wherein:

security information is associated with the identity identifier of the telemetry transmitter, and

the processor is configured to use the security information to authenticate the telemetry transmitter.