Terminal And Method For Receiving Data In A Network

• US 20090024844A1
• Filed: 07/16/2008
• Published: 01/22/2009
• Est. Priority Date: 07/16/2007
• Status: Abandoned Application

• Current Assignee: Hewlett Packard Enterprise Development LP (Hewlett-Packard Enterprise Company)
• Original Assignee: Hewlett-Packard Development Company, L.P. (HP Inc.)
• Inventors: Sriram, Prashanth Pigileti
• Application Number:
  US12/174,405
• Publication Number:
  US 20090024844A1
• Time in Patent Office: Days
• US Class Current: 713/155
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263

Abstract

Terminal and Method for Receiving Data in a Network In embodiments of the present invention, a method of processing data in a network is provided. In the method, a terminal receives data from the network and is operated in two states. In the first state, in which the terminal is connected to the network, the terminal causes the data to be usable. In the second state, in which the terminal is not connected to the network, the terminal causes the data to be unusable.

Claims

1. A method of processing data in a network, said method comprising:

receiving data at a terminal from said network;

operating said terminal in a first state when said terminal is connected for communicating with said network, wherein said terminal renders said data usable; and

operating said terminal in a second state when said terminal is not connected for communicating with said network, wherein said terminal renders said data unusable.

2. A method according to claim 1, wherein said data comprises encrypted data.

3. A method according to claim 2, comprising receiving cryptographic information at said terminal from said network.

4. A method according to claim 3, comprising using said cryptographic information to decrypt said encrypted data when operating said terminal in said first state.

5. A method according to claim 4, comprising deleting said decrypted data in response to a transition from said first state to said second state.

6. A method according to claim 3, comprising deleting said cryptographic information in response to a transition from said first state to said second state.

7. A method according to claim 1, wherein said first state comprises a state wherein a communications connection has been established between the terminal and the network, wherein establishing the communications connection comprises providing an identifier of said terminal to the network.

8. A method according to claim 1, wherein said first state comprises a state wherein a user is logged-in to said network.

9. A method according to claim 1, wherein said second state comprises a state wherein a user is logged-out from said network.

10. A method according to claim 3, wherein said cryptographic information comprises a cipher and/or a key.

11. A method according to claim 4, wherein different cryptographic information is used depending on the security level of the data.

12. A method according to claim 4, wherein said data is decrypted in response to a request for said data.

13. A method according to claim 12, wherein, in response to a further request for said data when operating said terminal in said second state, said data is not decrypted.

14. A method according to claim 13, wherein, in response to said further request, said data is presented in an unusable form.

15. A method according to claim 4, wherein the decrypted data is encrypted and stored in an encrypted state.

16. A terminal for receiving data in a network, said terminal comprising;

a receiver for receiving cryptographic information from said network;

a first store for storing received cryptographic information;

a receiver for receiving encrypted data from said network;

a second store for storing received encrypted data;

a processor for decrypting said encrypted data using said cryptographic information; and

a third store for storing the decrypted data,

wherein said terminal is arranged such that said cryptographic information is not usable at said terminal when said terminal is not connected to said network.

17. A terminal according to claim 16, wherein said first store comprises a secure store which is not externally accessible.

18. A terminal according to claim 16, wherein said secure store is contained in an operating system of said terminal.

19. A terminal according to claim 16, wherein network comprises a server, and said cryptographic information is received from said server.

20. A method of accessing data in a network of computing entities, wherein data is transmitted between computing entities of the network in an encrypted state, said method comprising:

establishing a communications connection between a terminal and said network;

identifying the terminal to the network and, in response, receiving and storing cryptographic information in a first store of said terminal;

receiving encrypted data from said network and storing said encrypted data in a second store of said terminal;

decrypting said encrypted data using said cryptographic information and storing the decrypted data in a third store of said terminal; and

in response to any disconnection of the terminal from said network, rendering said decrypted information unusable at said terminal while said terminal is disconnected from said network.