Communications Network with Smart Card

• US 20090320104A1
• Filed: 07/21/2009
• Published: 12/24/2009
• Est. Priority Date: 07/31/2001
• Status: Active Grant

• Current Assignee: Callahan Cellular LLC (Intellectual Ventures LLC)
• Original Assignee: Momin Development Fund LLC (Intellectual Ventures LLC)
• Inventors: Guthery, Scott B.
• Granted Patent: US 8,316,157 B2
• Time in Patent Office: Days
• US Class Current: 726/4
• CPC Class Codes: G06F 21/606 by securing the transmission between two devices or processes
• CPC Class Codes: G06F 2221/2153 Using hardware token as a secondary aspect
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 67/04 specially adapted for terminals or networks with limited capabilities; specially adapted for terminal portability
• CPC Class Codes: H04L 69/22 Parsing or analysis of headers
• CPC Class Codes: H04L 69/329 in the application layer [OSI layer 7]
• CPC Class Codes: H04L 9/40 Network security protocols
• CPC Class Codes: H04W 12/08 Access security

Abstract

Methods and systems are disclosed to enable a smart card having relatively low data rate and low computational power to control a high data rate communications channel without degradation of performance. The smart card and an associated monitor/interface, which can be implemented in a network access device, are interposed between transmitting and receiving nodes in a network, and configured to intervene when conditions of rules stored in the smart card are met. For example, the smart card can intervene when a packet header indicates sufficient change in information, such as the exceeding of a predefined threshold or a requirement for user authorization/authentication. In one mode of regulating packet flow, the smart card selectively enables or disables packet transmission, reception, or both, according to the rules stored therein. In another mode, the smart card, upon activation, provides rules and modifications for packet data, headers, or both. The rules and modifications can implement communication policies of the entity providing communication services to the user of the services, and can be stored in the smart card to prevent alteration or tampering.

Claims

1-26. -26. (canceled)

27. A smart card, comprising:

a smart card memory configured to store at least one contingency rule; and

a regulator, configured to regulate an information packet in a communication network, based on a predefined change in the information packet, the predefined change satisfying the at least one contingency rule.

28. The smart card of claim 27, wherein the at least one contingency rule comprises a predefined threshold.

29. The smart card of claim 27, wherein the regulator is configured to regulate the information packet by disabling an information packet transmitter.

30. The smart card of claim 27, wherein the regulator is configured to regulate the information packet by disabling an information packet receiver.

31. The smart card of claim 27, wherein the information packet comprises a data block, and wherein the regulator is configured to regulate the information packet by:

intercepting the information packet,

modifying the data block, and

re-transmitting the information packet with the modified data block.

32. The smart card of claim 31, wherein modifying the data block comprises decrypting the data block.

33. The smart card of claim 27, wherein the information packet comprises a header block, and wherein the regulator is configured to regulate the information packet by:

intercepting the information packet,

modifying the header block, and

re-transmitting the information packet with the modified header block.

34. The smart card of claim 33, wherein modifying the header block comprises decrypting the header block.

35. The smart card of claim 27, wherein the regulator is further configured to:

determine that an authorization code is required;

responsive to determining the authorization code is required, receive the authorization code; and

responsive to the authorization code being a correct authorization code, transfer the information packet.

36. The smart card of claim 35, wherein the regulator is further configured to:

responsive to determining the authorization code is not required, transfer the information packet.

37. The smart card of claim 35, wherein the regulator is further configured to:

responsive to determining the authorization code is not the correct authorization code, rejecting the information packet.

38. The smart card of claim 37, wherein rejecting the information packet comprises disabling an information packet transmitter.

39. The smart card of claim 37, wherein rejecting the information packet comprises modifying the information packet.

40. A smart card, comprising:

a smart card memory configured to store at least one rejection rule; and

a monitor, configured to;

receive packet header information;

determine that the packet header information indicates a packet header is compressed;

responsive to determining that the packet header is not compressed, determining that the at least one rejection rule has been satisfied; and

responsive to determining the at least one rejection rule has been satisfied, taking an action regarding a packet associated with the packet header information.

41. The smart card of claim 40, wherein the at least one rejection rule comprises a reference to an improper access site.

42. The smart card of claim 40, wherein the action regarding the packet comprises disabling a network access device from transmitting the packet.

43. The smart card of claim 40, wherein the action regarding the packet comprises:

altering the packet to be in a usable form; and

transmitting the altered packet.

44. The smart card of claim 43, wherein altering the packet comprises altering a header of the packet.

45. The smart card of claim 43, wherein altering the packet comprises altering data of the packet.

46. The smart card of claim 43, wherein altering the packet comprises decrypting the packet.