Device and Method for Secured Communication

• US 20090292816A1
• Filed: 05/19/2009
• Published: 11/26/2009
• Est. Priority Date: 05/21/2008
• Status: Active Grant

• Current Assignee: Uniloc 2017 LLC (FIG LLC (d/b/a Fortress Investment Group LLC))
• Original Assignee: Uniloc USA, Inc. (Uniloc Corporation Pty. Limited)
• Inventors: Etchegoyen, Craig S., Davis, Bradley C., Harjanto, Dono
• Granted Patent: US 8,812,701 B2
• Time in Patent Office: Days
• US Class Current: 709/229
• CPC Class Codes: H04L 63/0272 Virtual private networks
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/1408 by monitoring network traffic monitoring network traffic per se H04L43/00
• CPC Class Codes: H04L 67/125 involving control of end-device applications over a network

Abstract

Devices and methods are provided for securing communication between a traffic management center (TMC) and a traffic controller via utilization of a field security device. In one embodiment, the field security device transmits a device identifier to the TMC upon being powered up or connected to the traffic controller. The device identifier is generally based on a combination of user-configurable and non-user-configurable parameters of the field security device. In response to the TMC authenticating the device identifier, the field security device establishes a secure private network (SPN) between the field security device and the TMC.

Claims

1. A field security device for providing a secure private network (SPN) between a field traffic controller and a traffic management center (TMC), comprising:

a first connector for interfacing with the field traffic controller;

a communication module;

at least one processor operative coupled to the first connector and the communication module; and

a memory module operatively coupled to the at least one processor and comprising executable code for the at least one processor to;

access a public network via the communication module;

locate an authentication server of the TMC via the public network;

send a device identifier to the authentication server via the communication module, the device identifier being based on a combination of at least one user-configurable parameter and at least one non-user-configurable parameter of the field security device; and

in response to the authentication server authenticating the device identifier from the field security device, establish the SPN between the field security device and the TMC, wherein the established SPN tunnels across at least one segment of the public network.

2. The field security device of claim 1, wherein the at least one non-user-configurable parameter comprises at least one of CPU ID, CPU model, CPU manufacturer, and CPU voltage for the field security device.

3. The field security device of claim 1, wherein the at least one non-user-configurable parameter is based on a carbon degradation characteristic of a computer chip of the field security device.

4. The field security device of claim 1, wherein the at least one non-user-configurable parameter is based on a silicone degradation characteristic of a computer chip of the field security device.

5. The field security device of claim 1, wherein the at least one user-configurable parameter comprises one of hard disk volume name, user name, device name, user password, and hard disk initialization date for the field security device.

6. The field security device of claim 1, wherein the device identifier is generated by utilizing at least one irreversible transformation of the at least one user-configurable parameter and the at least one non-user-configurable parameter of the field security device.

7. The field security device of claim 6, wherein the device identifier is generated by utilizing a cryptographic hash function on the at least one user-configurable parameter and the at least one non-user-configurable parameter of the field security device.

8. The field security device of claim 1, wherein the communication module is adapted for wireless communication.

9. The field security device of claim 1, wherein the public network comprises the public Internet.

10. The field security device of claim 1, wherein the public network comprises a wireless communication network, the wireless communication network implementing at least one of CDMA and GSM standards.

11. The field security device of claim 1, wherein the public network comprises a wireless communication network, the wireless communication network implementing at least one of 802.11a, 802.11b, 802.11g, 802.11n, and 802.11p standards.

12. The field security device of claim 1, wherein the traffic controller comprises a traffic signal.

13. The field security device of claim 1, wherein the traffic controller comprises a surveillance camera.

14. The field security device of claim 1, wherein the traffic controller is housed in a field traffic cabinet.

15. The field security device of claim 14, wherein the field security device is adapted to be housed in the field traffic cabinet.

16. The field security device of claim 1, wherein the first connector comprises a receiving port.

17. An authentication server for providing a secure private network (SPN) between a traffic management center (TMC) and a field security device, the field security device being in operative communication with a field traffic controller, comprising:

a communication module adapted to receive a device identifier over a public network from the field security device, the device identifier being based on a combination of at least one user-configurable parameter and at least one non-user-configurable parameter of the field security device;

at least one processor operatively coupled to the communication module; and

a memory module operatively coupled to the at least one processor and comprising executable code for the at least one processor to;

in response to the communication module receiving the device identifier from the field security device, access a database of authorized device identifiers corresponding to known field security devices; and

in response to the received device identifier matching one of the authorized device identifiers, establish the SPN between the field security device and the TMC, wherein the established SPN tunnels across at least one segment of the public network.

18. The server of claim 17, wherein the authentication server is located at the TMC.

19. The server of claim 17, wherein the communication module is adapted for wireless communication.

20. The server of claim 17, wherein the public network comprises the public Internet.

21. A network device for securely communicating with a traffic management center (TMC), comprising:

a communication module adapted to access a public network;

at least one processor operatively coupled to the communication module; and

a memory module operatively coupled to the at least one processor and comprising executable code for the at least one processor to;

access the public network via the communication module;

locate an authentication server of the TMC via the public network;

send a device identifier to the authentication server via the communication module, the device identifier being based on a combination of at least one user-configurable parameter and at least one non-user-configurable parameter of the network device; and

in response to the authentication server authenticating the device identifier from the network device, establish a secure private network (SPN) between the network device and the TMC, wherein the established SPN tunnels across at least one segment of the public network.

22. The network device of claim 21, wherein the network device comprises one of a laptop computer or a mobile phone.

23. The network device of claim 21, wherein the at least one non-user-configurable parameter comprises at least one of CPU ID, CPU model, CPU manufacturer, and CPU voltage for the network device.

24. The network device of claim 21, wherein the at least one non-user-configurable parameter is based on a carbon degradation characteristic of a computer chip of the network device.

25. The network device of claim 21, wherein the at least one non-user-configurable parameter is based on a silicone degradation characteristic of a computer chip of the network device.

26. The network device of claim 21, wherein the at least one user-configurable parameter comprises one of hard disk volume name, user name, device name, user password, and hard disk initialization date for the network device.

27. The network device of claim 21, wherein the device identifier is generated by utilizing at least one irreversible transformation of the at least one user-configurable parameter and the at least one non-user-configurable parameter of the network device.

28. The network device of claim 27, wherein the device identifier is generated by utilizing a cryptographic hash function on the at least one user-configurable parameter and the at least one non-user-configurable parameter of the network device.

29. The network device of claim 21, wherein the communication module is adapted for wireless communication.

30. The network device of claim 21, wherein the public network comprises the public Internet.

31. A method for providing a secure private network (SPN) between a device and a traffic management center (TMC), comprising:

accessing a public network;

locating an authentication server of the TMC via the public network;

sending a device identifier for the device to the authentication server via the communication module, the device identifier being based on a combination of at least one user-configurable parameter and at least one non-user-configurable parameter of the device; and

in response to the authentication server authenticating the device identifier, establishing the SPN between the TMC and the device, wherein the established SPN tunnels across at least one segment of the public network.

32. The method of claim 31, wherein establishing the SPN comprises establishing the SPN between the TMC and a field security apparatus.

33. The method of claim 31, wherein establishing the SPN comprises establishing the SPN between the TMC and a network device.