SECURE MODEM GATEWAY CONCENTRATOR

• US 20100306529A1
• Filed: 08/06/2010
• Published: 12/02/2010
• Est. Priority Date: 12/30/2004
• Status: Active Grant

• Current Assignee: BCE Incorporated
• Original Assignee: BCE Incorporated
• Inventors: O'Brien, William G., Yeap, Tef Hin, Lou, Dafu
• Granted Patent: US 8,312,279 B2
• Time in Patent Office: Days
• US Class Current: 713/153
• CPC Class Codes: H04L 63/0442 wherein the sending and receiving network entities apply asymmetric encryption, i.e. different keys for encryption and decryption cryptographic mechanisms or cryptographic arrangements for public-key encryption H04L9/30
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 9/083 involving central third party, e.g. key distribution center [KDC] or trusted third party [TTP]
• CPC Class Codes: H04L 9/0844 with user authentication or key authentication, e.g. ElGamal, MTI, MQV-Menezes-Qu-Vanstone protocol or Diffie-Hellman protocols using implicitly-certified keys
• CPC Class Codes: H04L 9/0891 Revocation or update of secret information, e.g. encryption key update or rekeying
• CPC Class Codes: H04L 9/321 involving a third party or a trusted authority

Abstract

The present invention provides a method and system for secure access to computer equipment. An embodiment includes a secure access controller connected to a link between a transceiver (such as a modem) and the computer equipment. Public and private keys are used by the secure access controller and a remote user. The keys are provided to the secure access controller by an authentication server. Once the transceiver establishes a communication link with the user, the access controller uses these keys to authenticate packets issued by the user to the computer equipment. If the packet is authenticated, the access controller passes the packet to the computer equipment. Otherwise, the packet is discarded. Another embodiment includes a secure access controller having a plurality of ports for connection to a plurality of different pieces of computer equipment. The secure access controller thus intermediates communications between the modem and the plurality of different pieces of computer equipment.

Claims

1. A system comprising:

an authentication server, a client and an access controller interconnectable for communications therebetween;

said authentication server operable to deliver a first key to said client;

said access controller operable to store a second key complementary to said first key for encrypting at least a portion of communications between said client and said controller; and

,

said access controller including a plurality of ports each connectable to a computer;

said access controller operable to associate said second key with one of said ports;

said access controller further operable to pass instructions received from said client to the computer respective to said one of said ports according to a verification protocol utilizing said keys.

2-34. -34. (canceled)