SOCIAL DEVICE SECURITY IN A SOCIAL NETWORK

• US 20130091540A1
• Filed: 02/14/2012
• Published: 04/11/2013
• Est. Priority Date: 10/08/2011
• Status: Active Grant

• Current Assignee: Avago Technologies International Sales Pte Limited (Broadcom, Inc.)
• Original Assignee: Broadcom Corporation (Broadcom, Inc.)
• Inventors: Chen, Sherman (Xuemin), Kellerman, Marcus C., Diab, Wael W., Rajakarunanayake, Yasantha N., Bennett, James D.
• Granted Patent: US 9,100,453 B2
• Time in Patent Office: Days
• US Class Current: 726/1
• CPC Class Codes: H04L 63/02 for separating internal from external traffic, e.g. firewalls
• CPC Class Codes: H04L 63/0209 Architectural arrangements, e.g. perimeter networks or demilitarized zones
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/104 Grouping of entities
• CPC Class Codes: H04L 65/403 Arrangements for multi-party communication, e.g. for conferences data switching systems for conference H04L12/18; arrangements for connecting several subscribers to a common circuit, i.e. affording conference facilities H04M3/56; television conferencing systems H04N7/15
• CPC Class Codes: H04L 67/303 Terminal profiles
• CPC Class Codes: H04L 67/306 User profiles
• CPC Class Codes: H04W 12/041 Key generation or derivation
• CPC Class Codes: H04W 12/0431 Key distribution or pre-distribution; Key agreement
• CPC Class Codes: H04W 12/0433 Key management protocols
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 4/21 for social networking applications

Abstract

A social network (SNET) is divided into one or more circles employing separate security secrets, e.g. keys, for communication between members. A device can be a member of more than one circle, and store different keys for each of those circles in separate, restricted portions of memory. When a member leaves a circle, new keys can be generated and distributed to the remaining members. Before and after joining a circle, a level of trust associated with the device or human member can be determined based on third party trust verification and a trust history. A requirement for multiple current circle members to vouch for the prospective member can be imposed as a condition of membership. Each circle can be assigned different trust and access levels, and authorization to receive information can be checked before transmitting information between circles.

Claims

1. A secure social network infrastructure having a plurality of circles, each of the plurality of circles being defined by at least a first member, the secure social network infrastructure being supported by a communication network, the secure social network infrastructure comprising:

a social user device that supports both communication pathway security and a human member;

a social networking system that supports communication pathway security in communicating with the social user device via the communication network;

the social networking system having a security requirement associated with a first circle of the plurality of circles;

the social networking system configured to attempt to authenticate both the human member and the social user device, the authentication of the social user device being based at least in part on the security requirement associated with the first circle of the plurality of circles; and

the social networking system further configured to determine, based on a result of the authentication attempt, access rights for both the social user device and the human member to the first circle of the plurality of circles.

2. The secure social network infrastructure of claim 1, wherein, if the authentication attempt at least partially fails, the social networking system provides partial access to the first circle of the plurality of circles.

3. The secure social network infrastructure of claim 1, wherein the authentication attempt associated with the social user device involves a security key related exchange.

4. The secure social network infrastructure of claim 1, wherein, if the authentication attempt at least partially fails, the social networking system attempts to interact with a second human member.

5. The secure social network infrastructure of claim 1, wherein a second human member can trigger a further authentication attempt.

6. The secure social network infrastructure of claim 1, wherein at least a portion of the authentication attempt is repeated in an attempt to maintain authentication security over time.

7. The secure social network infrastructure of claim 1, wherein the social networking system provides virtual private networking support for the first circle of the plurality of circles.

8. The secure social network infrastructure of claim 1, wherein the social networking system provides firewall service support for the first circle of the plurality of circles.

9. Device circuitry used in a first device member of a social network circle, the social networking circle being hosted by a social networking system, the social networking circle having a second device member, the device circuitry comprising:

communication interface circuitry through which both authenticity as a device member and authorized participation in the social networking circle are established;

processing circuitry that manages secure communication relating to the second device member via the social networking circle; and

the processing circuitry configured to utilize the social networking circle to set up a secure communication pathway to the second device member via the communication interface circuitry.

10. The device circuitry of claim 9, wherein the secure communication pathway flows through the social networking system.

11. The device circuitry of claim 9, wherein the secure communication pathway is managed via the social networking system, but carried out in a point to point manner.

12. The device circuitry of claim 9, wherein the secure communication pathway is established after first establishing first circle security with the first device member and first circle security with the second device member.

13. A social network infrastructure supporting a first device, a second device, and a first human member via a communication network, the social network infrastructure comprising:

a social networking system supporting a plurality of circles, a first circle of the plurality of circles being established by the first human member, and the first device being an established member of the first circle;

the social networking system, to service an attempt to dock the first device in the first circle, configured to perform a first secure interaction with the first device, the first secure interaction being associated with the first device for participation in the first circle; and

the social networking system, to service an invitation to add the second device as a member of the first circle, configured to perform a second secure interaction with the second device, the second secure interaction being associated with initial establishment of participation in the first circle.

14. The social network infrastructure of claim 13, wherein the second secure interaction is based at least in part on support from a trusted authority.

15. The social network infrastructure of claim 13, wherein established members of the first circle communicate using communications encrypted using a circle key.

16. A method for use by a social network device, the method comprising:

requesting social network docking;

receiving secure authentication interaction;

providing secure authentication processing;

receiving confirmation of docking into a first social circle within a social network, the social network having a plurality of social circles; and

interacting via the first social circle using at least a first security key.

17. The method of claim 16, wherein the docking also includes a second social circle, and wherein the method further comprises interacting via the second social circle using at least a second security key.

18. The method of claim 17, further comprising attempting to securely maintain the first key and the second key.

19. The method of claim 16, further comprising attempting to securely maintain a plurality of security secrets associated with the plurality of social network circles.

20. The method claim 19, wherein at least a first of the plurality of security secrets being used to assist in authenticating members of the first circle.

21. The method of claim 16, wherein the at least the first security key comprises a plurality of keys corresponding to elements of the first social circle.

22. The method of claim 21, wherein the elements comprise at least one member device.

23. The method of claim 21, wherein the elements comprise at least one service.