METHOD AND APPARATUS FOR ENHANCING SECURITY IN NETWORK-BASED DATA COMMUNICATION

• US 20100180121A1
• Filed: 01/09/2009
• Published: 07/15/2010
• Est. Priority Date: 01/09/2009
• Status: Abandoned Application

• Current Assignee: Alcatel-Lucent SA (Nokia Corporation)
• Original Assignee: Alcatel-Lucent SA (Nokia Corporation)
• Inventors: Chow, Stanley Taihai, McNamee, Kevin
• Application Number:
  US12/351,193
• Publication Number:
  US 20100180121A1
• Time in Patent Office: Days
• US Class Current: 713/175
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/1441 Countermeasures against malicious traffic countermeasures against attacks on cryptographic mechanisms H04L9/002
• CPC Class Codes: H04L 63/1483 service impersonation, e.g. phishing, pharming or web spoofing detection of rogue wireless access points H04W12/12

Abstract

Various embodiments of a method and associated equipment for enhancing security in a network-based data communication are provided. In one embodiment, the method includes: a) maintaining at least access to data which a transmitting user may selectively transmit, b) providing a submit control associated with a recipient user to which the data may be selectively transmitted, c) in response to the transmitting user activating the submit control, presenting information to the transmitting user that identifies the recipient user to which the data is about to be sent, and d) in response to the transmitting user activating a verification control, transmitting the data to the recipient user. In one embodiment, the associated equipment includes a first computing device associated with a transmitting user, a second computing device associated with a recipient user; and a communication network through which the first computing device can operatively communicate with the second computing device.

Claims

1. A method of enhancing security in a network-based data communication, the method including:

a) maintaining at least access to data which a transmitting user may selectively transmit;

b) providing a submit control associated with a recipient user to which the data may be selectively transmitted;

c) in response to the transmitting user activating the submit control, presenting information to the transmitting user that identifies the recipient user to which the data is about to be sent; and

d) in response to the transmitting user activating a verification control, transmitting the data to the recipient user.

2. The method of claim 1, further including:

e) maintaining the data in one or more text fields of a web page, the web page also including the submit control.

3. The method of claim 1, further including:

e) presenting at least one of a domain name, a uniform resource locater (URL), and an internet protocol (IP) address associated with the recipient user to the transmitting user.

4. The method of claim 1, further including:

e) presenting a registered name associated with the recipient user to the transmitting user.

5. The method of claim 1, further including:

e) presenting a dialog box to the transmitting user, the dialog box including the information identifying the recipient user and the verification control.

6. The method of claim 1, further including:

e) in response to the transmitting user activating the submit control, transmitting an authentication request to the recipient user;

f) receiving a private authentication response from the recipient user; and

g) comparing the private authentication response to at least one previously determined public identification certificate for the recipient user;

wherein the information presented to the transmitting user in c) is based at least in part on the comparing in g).

7. The method of claim 6 wherein the private authentication response includes at least one of a private key, a RealName, a checksum, a trade name, a trademark, a logo, an image, an audio recording, a video recording, and text information associated with the recipient user.

8. The method of claim 1, further including:

e) in response to the transmitting user activating the submit control, transmitting an authentication request to at least one certificate registry to obtain any previously determined public authentication certificates associated with the recipient user; and

f) receiving at least one public authentication certificate from the at least one certificate registry;

wherein the information presented to the transmitting user in c) is based at least in part on the at least one public authentication certificate.

9. The method of claim 8 wherein each public authentication certificate includes at least one of a public key, a RealName, a checksum, a trade name, a trademark, a logo, an image, an audio recording, a video recording, and text information associated with the recipient user.

10. An apparatus for enhancing security in a network-based data communication, the apparatus including:

a first computing device associated with a transmitting user, the first computing device including a submit control, a display device, and a verification control;

a second computing device associated with a recipient user; and

a communication network through which the first computing device can operatively communicate with the second computing device;

wherein the first computing device maintains at least access to data which the transmitting user may selectively transmit, the submit control is associated with the recipient user to which the data may be selectively transmitted, the display device displays information to the transmitting user that identifies the recipient user to which the data is about to be sent in response to the transmitting user activating the submit control, and the first computing device transmits the data to the recipient user in response to the transmitting user activating the verification control.

11. The apparatus of claim 10, the first computing device further including:

a web browser displaying a web page on the display device, the web page maintaining the data in one or more text fields and including the submit control.

12. The apparatus of claim 10 wherein the first computing device transmits a first authentication request associated with the recipient user to the second computing device in response to the transmitting user activating the submit control, receives a private authentication response associated with the recipient user from the second computing device, and compares the private authentication response to at least one previously determined public identification certificate for the recipient user, the information displayed on the display device identifying the recipient user being based at least in part on the comparing.

13. The apparatus of claim 12 wherein the private authentication response includes at least one of a private key, a RealName, a checksum, a trade name, a trademark, a logo, an image, an audio recording, a video recording, and text information associated with the recipient user.

14. The apparatus of claim 12, further including:

at least one certificate registry, each certificate registry in operative communication with the first and second computing devices via the communication network;

wherein the first computing device transmits an authentication request to at least one certificate registry to obtain any previously determined public authentication certificates associated with the recipient user and receives at least one public authentication certificate from the at least one certificate registry.

15. The apparatus of claim 14 wherein each public authentication certificate includes at least one of a public key, a RealName, a checksum, a trade name, a trademark, a logo, an image, an audio recording, a video recording, and text information associated with the recipient user.

16. A method of enhancing security in a network-based data communication, the method including:

a) maintaining data which a transmitting user may selectively transmit in one or more text fields of a web page;

b) providing a submit control in the web page associated with a recipient user to which the data may be selectively transmitted;

c) in response to the transmitting user activating the submit control, presenting at least one of a registered name, a domain name, a uniform resource locater (URL), and an internet protocol (IP) address in a dialog box to the transmitting user that identifies the recipient user to which the data is about to be sent; and

d) in response to the transmitting user activating a verification control associated with the dialog box, transmitting the data to the recipient user.

17. The method of claim 16, further including:

e) in response to the transmitting user activating the submit control, transmitting a first authentication request to the recipient user;

f) receiving a private authentication response from the recipient user; and

g) comparing the private authentication response to at least one previously determined public identification certificate for the recipient user;

wherein the information presented to the transmitting user in c) is based at least in part on the comparing in g).

18. The method of claim 17 wherein the private authentication response includes at least one of a private key, a RealName, a checksum, a trade name, a trademark, a logo, an image, an audio recording, a video recording, and text information associated with the recipient user.

19. The method of claim 17, further including:

h) transmitting a second authentication request to at least one certificate registry to obtain any previously determined public authentication certificates associated with the recipient user; and

i) receiving at least one public authentication certificate from the at least one certificate registry.

20. The method of claim 19 wherein each public authentication certificate includes at least one of a public key, a RealName, a checksum, a trade name, a trademark, a logo, an image, an audio recording, a video recording, and text information associated with the recipient user.