METHOD AND APPARATUS FOR PROVIDING NOTIFICATION OF DETECTED ERROR CONDITIONS IN A NETWORK

• US 20150326605A1
• Filed: 07/06/2015
• Published: 11/12/2015
• Est. Priority Date: 07/31/2012
• Status: Active Grant

• Current Assignee: AT&T Intellectual Property I LP (AT&T, Inc.)
• Original Assignee: AT&T Intellectual Property I LP (AT&T, Inc.)
• Inventors: Small, David B., Spencer, Thomas IV
• Granted Patent: US 9,769,196 B2
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: G06F 21/00 Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
• CPC Class Codes: H04L 41/0654 using network fault recovery ring fault isolation or reconfiguration in loop networks without recovery actions by a network management system H04L12/437
• CPC Class Codes: H04L 41/0686 Additional information in the notification, e.g. enhancement of specific meta-data
• CPC Class Codes: H04L 63/1408 by monitoring network traffic monitoring network traffic per se H04L43/00
• CPC Class Codes: H04L 63/1441 Countermeasures against malicious traffic countermeasures against attacks on cryptographic mechanisms H04L9/002
• CPC Class Codes: H04L 69/16 Implementation or adaptation of Internet protocol [IP], of transmission control protocol [TCP] or of user datagram protocol [UDP]
• CPC Class Codes: H04W 12/122 Counter-measures against attacks; Protection against rogue devices
• CPC Class Codes: H04W 12/126 Anti-theft arrangements, e.g. protection against subscriber identity module [SIM] cloning

Abstract

Methods for managing a communication session in a communication network are disclosed. For example, a method includes detecting, by a first endpoint comprising at least one processor, an error condition associated with the communication session, sending, by the first endpoint, a notification of the error condition to a second endpoint that is using a transport layer session and receiving, by the first endpoint, a communication from the second endpoint, proposing a response to the error condition. Another method includes receiving, by a first endpoint comprising at least one processor, a notification of an error condition associated with the communication session, selecting, by the first endpoint, a response to the error condition, and sending, by the first endpoint, a communication to a second endpoint that is using a transport layer session, proposing a response to the error condition.

Claims

1. A method for managing a communication session, the method comprising:

detecting, by a first endpoint comprising at least one processor, an error condition associated with the communication session, wherein the first endpoint and a second endpoint are participating in the communication session;

sending, by the first endpoint, a notification of the error condition to the second endpoint using a first transport layer session management message of a transport layer session, wherein the communication session includes the transport layer session, wherein a header of the first transport layer session management message includes a record type, wherein the record type indicates that a payload of the first transport layer session management message contains session management information; and

receiving, by the first endpoint, a communication from the second endpoint via a second transport layer session management message of the transport layer session, wherein a header of the second transport layer session management message indicates that a payload of the second transport layer session management message contains session management information, the communication proposing a response to the error condition.

2. The method of claim 1, wherein the error condition comprises an attack on the communication session.

3. The method of claim 2, wherein the attack comprises an invalid re-anchor request.

4. The method of claim 2, wherein the attack comprises a denial of service attack.

5. The method of claim 1, wherein the response comprises switching to a different set of session identifiers for the transport layer session.

6. The method of claim 1, wherein the response comprises re-negotiating a session key for the transport layer session.

7. The method of claim 1, wherein the response comprises re-anchoring the transport layer session.

8. The method of claim 1, wherein the response comprises transferring the transport layer session to a different endpoint.

9. The method of claim 1, wherein the response comprises dropping the transport layer session.

10. The method of claim 1, wherein the response comprises continuing the transport layer session without a modification.

11. The method of claim 1, wherein the response comprises renegotiating a cryptographic algorithm for the transport layer session.

12. The method of claim 1, wherein the response comprises changing a frequency for renegotiating a session key for the transport layer session.

13. The method of claim 1, wherein the response comprises re-authenticating the first endpoint.

14. The method of claim 1, wherein the first transport layer session management message is encrypted using a session key of the transport layer session.

15. The method of claim 1, wherein the transport layer session comprises a transmission control protocol session that is identified by a requesting system session identifier and a serving system session identifier.

16. The method of claim 1, further comprising:

sending, by the first endpoint, a further communication via a third transport layer session management message of the transport layer session proposing a different response.

17. A method for managing a communication session, the method comprising:

receiving, by a first endpoint comprising at least one processor, a notification of an error condition associated with the communication session from a second endpoint, wherein the first endpoint and the second endpoint are participating in the communication session, wherein the notification of the error condition is received via a first transport layer session management message of a transport layer session, wherein a header of the first transport layer session management message includes a record type, wherein the record type indicates that a payload of the first transport layer session management message contains session management information, wherein the communication session includes the transport layer session;

selecting, by the first endpoint, a response to the error condition; and

sending, by the first endpoint, a communication to the second endpoint using a second transport layer session management message of the transport layer session, wherein a header of the second transport layer session management message indicates that a payload of the second transport layer session management message contains session management information, the communication proposing the response to the error condition.

18. A tangible computer-readable medium storing instructions which, when executed by at least one processor, cause the at least one processor to perform operations for managing a communication session, the operations comprising:

detecting, by a first endpoint comprising the at least one processor, an error condition associated with the communication session, wherein the first endpoint and a second endpoint are participating in the communication session;

sending, by the first endpoint, a notification of the error condition to the second endpoint using a first transport layer session management message of a transport layer session, wherein a header of the first transport layer session management message includes a record type, wherein the record type indicates that a payload of the first transport layer session management message contains session management information, wherein the communication session includes the transport layer session; and

receiving, by the first endpoint, a communication from the second endpoint via a second transport layer session management message of the transport layer session, wherein a header of the second transport layer session management message indicates that a payload of the second transport layer session management message contains session management information, the communication proposing a response to the error condition.

19. The tangible computer-readable medium of claim 18, wherein the response comprises switching to a different set of session identifiers for the transport layer session.

20. The tangible computer-readable medium of claim 18, wherein the response comprises re-negotiating a session key for the transport layer session.