NETWORK SECURITY SYSTEMS AND METHODS

• US 20150237071A1
• Filed: 02/17/2015
• Published: 08/20/2015
• Est. Priority Date: 02/14/2014
• Status: Active Grant

• Current Assignee: Intertrust Technologies Corporation (Fidelio Acquisition Co LLC)
• Original Assignee: Intertrust Technologies Corporation (Fidelio Acquisition Co LLC)
• Inventors: MAHER, David P., BOCCON-GIBOD, Gilles
• Granted Patent: US 9,973,535 B2
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 2221/2149 Restricted operating environment
• CPC Class Codes: H04L 12/2803 Home automation networks
• CPC Class Codes: H04L 63/065 for group communications cryptographic mechanisms or cryptographic arrangements for key management involving conference or group key H04L9/0833
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227
• CPC Class Codes: H04L 67/1068 Discovery involving direct consultation or announcement among potential requesting and potential source peers
• CPC Class Codes: H04L 67/51 Discovery or management thereof, e.g. service location protocol [SLP] or web services
• CPC Class Codes: H04W 12/04 Key management, e.g. using generic bootstrapping architecture [GBA]
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 12/50 Secure pairing of devices
• CPC Class Codes: H04W 4/70 Services for machine-to-machine communication [M2M] or machine type communication [MTC]

Abstract

This disclosure relates to systems and methods for managing connected devices and associated network connections. In certain embodiments, trust, privacy, safety, and/or security of information communicated between connected devices may be established in part through use of security associations and/or shared group tokens. In some embodiments, these security associations may be used to form an explicit private network associated with the user. A user may add and/or manage devices included in the explicit private network through management of various security associations associated with the network'"'"'s constituent devices.

Claims

1. A method of managing a first connected device comprising:

receiving, at a communications interface of a first connected device from a second connected device associated with a first entity, a request to update a security association record stored in a non-transitory computer readable storage medium included in the first connected device;

determining, based on the security association record, that the first connected device is not associated with an entity;

receiving, at the communications interface of the first connected device from the second connected device, a first group token associated with the first entity;

updating the security association record to indicate that the first connected device is associated with the first entity;

receiving a message from a third connected device, the message comprising a second group token;

determining that the first group token and the second group token are the same; and

updating the security association record to indicate that the third connected device is associated with the first entity.

2. The method of claim 1, wherein the first communications interface comprises a proximal field communications interface.

3. The method of claim 2, wherein the proximal field communications interface comprises a near field communications (“

NFC”

) interface.

4. The method of claim 1, wherein the first entity comprises a user.

5. The method of claim 1, wherein the first entity comprises a group of users.

6. The method of claim 1, wherein the first entity comprises an organization.

7. The method of claim 1, wherein updating the security association record to indicate that the first connected device is associated with the first entity further comprises storing the group token in the security association record.

8. The method of claim 1, wherein at least one of the group token and the second group token comprises cryptographic keys.

9. The method of claim 1, wherein the second connected device comprises a smartphone.