Network Security Using Trust Validation

• US 20100262706A1
• Filed: 04/08/2010
• Published: 10/14/2010
• Est. Priority Date: 04/10/2009
• Status: Active Grant

• Current Assignee: Raytheon Company (Rtx Corporation)
• Original Assignee: Raytheon Company (Rtx Corporation)
• Inventors: Volpe, Mark, Rodriguez, Ricardo J.
• Granted Patent: US 8,850,043 B2
• Time in Patent Office: Days
• US Class Current: 709/229
• CPC Class Codes: G06F 2211/009 Trust
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 63/101 Access control lists [ACL]
• CPC Class Codes: H04L 63/105 Multiple levels of security
• CPC Class Codes: H04L 9/3234 involving additional secure or trusted devices, e.g. TPM, smartcard, USB or software token network architectures or network communication protocols for supporting authentication of entities using an additional device in a packet data network H04L63/0853

Abstract

In certain embodiments, a method includes receiving a communication session request from a requesting node. The communication session request is received via a network facilitating communication among a number of nodes. A number of trust level values associated with the requesting node are accessed. Each of the number of trust level values is received from one of the number of nodes. The method further includes determining, based on a voting technique and the accessed trust level values associated with the requesting node, a validated trust level associated with the requesting node. The method further includes determining, based on the validated trust level associated with the requesting node, whether to allow the communication session request received from the requesting node.

Claims

1. A method, comprising:

receiving a communication session request from a requesting node, the communication session request being received via a network facilitating communication among a plurality of nodes;

accessing a plurality of trust level values associated with the requesting node, each of the plurality of trust level values being received from one of the plurality of nodes;

determining, based on a voting technique and the accessed trust level values associated with the requesting node, a validated trust level associated with the requesting node; and

determining, based on the validated trust level associated with the requesting node, whether to allow the communication session request received from the requesting node.

2. The method of claim 1, wherein the network facilitating communication among a plurality of nodes comprises a wireless ad hoc network.

3. The method of claim 1, wherein:

the plurality of nodes include one or more primary nodes; and

the plurality of nodes include one or more secondary nodes, the one or more secondary nodes being operable to communicate with one another via at least one primary node.

4. The method of claim 1, wherein the voting technique comprises the application of a 3m+1 solution, wherein “

m”

defines a quantity of potentially compromised nodes.

5. The method of claim 1, wherein

the communication session request includes a trust level value associated with the requesting node;

and

determining whether to allow the communication session request received from the requesting comprises;

determining that the validated trust level associated with the requesting node differs from the trust level value associated with the requesting node included in the communication session request; and

denying the communication session request.

6. The method of claim 5, comprising communicating the validated trust level to one or more of plurality of nodes in response to the determination that the validated trust level value associated with the requesting node differs from the trust level associated with the requesting node included in the communication session request.

7. The method of claim 1, wherein:

the communication session request includes a trust level value associated with the requesting node; and

determining whether to allow the communication session request received from the requesting comprises;

determining that the validated trust level associated with the requesting node is the same as the trust level value associated with the requesting node included in the communication session request; and

allowing the communication session request.

9. The system of claim 1, wherein the network facilitating communication among a plurality of nodes comprises a wireless ad hoc network.

10. The system of claim 1, wherein:

the plurality of nodes include one or more primary nodes; and

the plurality of nodes include one or more secondary nodes, the one or more secondary nodes being operable to communicate with one another via at least one primary node.

11. The system of claim 1, wherein the voting technique comprises the application of a 3m+1 solution, wherein “

m”

defines a quantity of potentially compromised nodes.

12. The system of claim 1, wherein:

the communication session request includes a trust level value associated with the requesting node; and

determining whether to allow the communication session request received from the requesting comprises;

determining that the validated trust level associated with the requesting node differs from the trust level value associated with the requesting node included in the communication session request; and

denying the communication session request.

13. The method of claim 5, wherein the one or more processing units are operable to communicate the validated trust level to one or more of the plurality of nodes in response to the determination that the validated trust level associated with the requesting node differs from the trust level value associated with the requesting node included in the communication session request.

14. The system of claim 1, wherein:

the communication session request includes a trust level value associated with the requesting node; and

determining whether to allow the communication session request received from the requesting comprises;

determining that the validated trust level value associated with the requesting node is the same as the trust level associated with the requesting node included in the communication session request; and

allowing the communication session request.

16. The software of claim 1, wherein the network facilitating communication among a plurality of nodes comprises a wireless ad hoc network.

17. The software of claim 1, wherein:

the plurality of nodes include one or more primary nodes; and

the plurality of nodes include one or more secondary nodes, the one or more secondary nodes being operable to communicate with one another via at least one primary node.

18. The method of claim 1, wherein the voting technique comprises the application of a 3m+1 solution, wherein “

m”

defines the quantity of potential compromised nodes.

19. The software of claim 1, wherein:

the communication session request includes a trust level value associated with the requesting node; and

determining whether to allow the communication session request received from the requesting comprises;

determining that the validated trust level associated with the requesting node differs from the trust level value associated with the requesting node included in the communication session request; and

denying the communication session request.

20. The software of claim 5, comprising communicating the validated trust level to one or more of the plurality of nodes in response to the determination that the validated trust level associated with the requesting node differs from the trust level value associated with the requesting node included in the communication session request.

21. The software of claim 1, wherein:

the communication session request includes a trust level value associated with the requesting node; and

determining whether to allow the communication session request received from the requesting comprises;

determining that the validated trust level associated with the requesting node is the same as the trust level value associated with the requesting node included in the communication session request; and

allowing the communication session request.

8. A system, comprising:

one or more processing units operable to;

receive a communication session request from a requesting node, the communication session request being received via a network facilitating communication among a plurality of nodes;

access a plurality of trust level values associated with the requesting node, each of the plurality of trust level values being received from one of the plurality of nodes;

determining, based on a voting technique and the accessed trust level values associated with the requesting node, a validated trust level associated with the requesting node; and

determine, based on the validated trust level associated with the requesting node, whether to allow the communication session request received from the requesting node.

15. A computer-readable medium encoded with software, the software operable when executed to perform operation comprising:

receiving a communication session request from a requesting node, the communication session request being received via a network facilitating communication among a plurality of nodes;

accessing a plurality of trust level values associated with the requesting node, each of the plurality of trust level values being received from one of the plurality of nodes;

determining, based on a voting technique and the accessed trust level values associated with the requesting node, a validated trust level associated with the requesting node; and

determining, based on the validated trust level associated with the requesting node, whether to allow the communication session request received from the requesting node.