PEER-TO-PEER SECURITY PROTOCOL APPARATUS, COMPUTER PROGRAM, AND METHOD

• US 20170357819A1
• Filed: 06/10/2016
• Published: 12/14/2017
• Est. Priority Date: 06/10/2016
• Status: Active Grant

• Current Assignee: Digital14 LLC
• Original Assignee: Dark Matter LLC
• Inventors: Sherkin, Alexander, Singh, Ravi, Matovsky, Michael, Chin, Eugene
• Granted Patent: US 10,754,968 B2
• Time in Patent Office: Days
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: H04L 2463/062 applying encryption of the keys cryptographic mechanisms or cryptographic arrangements for key distribution using key encryption key H04L9/0822
• CPC Class Codes: H04L 63/0442 wherein the sending and receiving network entities apply asymmetric encryption, i.e. different keys for encryption and decryption cryptographic mechanisms or cryptographic arrangements for public-key encryption H04L9/30
• CPC Class Codes: H04L 63/06 for supporting key management in a packet data network cryptographic mechanisms or cryptographic arrangements for key management H04L9/08
• CPC Class Codes: H04L 63/061 for key exchange, e.g. in peer-to-peer networks cryptographic mechanisms or cryptographic arrangements for key agreement H04L9/0838
• CPC Class Codes: H04L 63/123 received data contents, e.g. message integrity
• CPC Class Codes: H04L 63/166 at the transport layer
• CPC Class Codes: H04L 9/0897 involving additional devices, e.g. trusted platform module [TPM], smartcard or USB

Abstract

An apparatus, computer program, and method are afforded for providing a peer-to-peer security protocol. In operation, a message is identified that is directed from a first peer device to a second peer device. Further, the message is copied, so that a copy of the message is caused to be sent to an auditing server.

Claims

1. A computer program product comprising computer executable instructions stored on a non-transitory computer readable medium that when executed by a processor instruct the processor to:

identify a message that is directed from a first peer device to a second peer device;

copying the message; and

cause a copy of the message to be sent to an auditing server.

2. The computer program product of claim 1, wherein the computer program product is further configured such that the identifying, the creating, and the causing are performed by a routing server.

3. The computer program product of claim 1, wherein the computer program product is further configured for receiving, at the auditing server, a first public key and a first private key of a first key pair.

4. The computer program product of claim 3, wherein the computer program product is further configured such that, before being received at the auditing server, the first private key of the first key pair is encrypted utilizing a second public key of a second key pair including a second private key and the second public key.

5. The computer program product of claim 4, wherein the computer program product is further configured such that the first private key of the first key pair is encrypted utilizing a third key pair for obtaining a symmetric key.

6. The computer program product of claim 4, wherein the computer program product is further configured such that the first public key of the first key pair is accessible by the auditing server.

7. The computer program product of claim 6, wherein the computer program product is further configured such that the first public key of the first key pair is stored by the auditing server in association with a peer identifier.

8. The computer program product of claim 4, wherein the computer program product is further configured such that the second private key of the second key pair is inaccessible by the auditing server.

9. The computer program product of claim 8, wherein the computer program product is further configured such that the second private key of the second key pair is stored separate from the auditing server.

10. The computer program product of claim 8, wherein the computer program product is further configured such that the second private key of the second key pair is stored in a hardware security module.

11. The computer program product of claim 1, wherein the computer program product is further configured such that, prior to the message being delivered to the second peer device, the message is encrypted utilizing a first public key of a first key pair associated with the second peer device.

12. The computer program product of claim 1, wherein the computer program product is further configured such that, prior to the message being delivered to the second peer device, a communication is initiated with the auditing server.

13. The computer program product of claim 12, wherein the computer program product is further configured such that the communication includes the copy of the message.

14. The computer program product of claim 13, wherein the computer program product is further configured such that the message is encrypted by the auditing server.

15. The computer program product of claim 14, wherein the computer program product is further configured such that the encrypted message is stored by the auditing server.

16. The computer program product of claim 12, wherein the computer program product is further configured such that, the delivery of the message to the second peer device is conditioned upon a response to the communication from the auditing server.

17. The computer program product of claim 1, wherein the computer program product is further configured such that the message that is sent to the second peer device and the copy of the message to be sent to the auditing server, are identical.

18. The computer program product of claim 1, wherein the computer program product is further configured such that the copy of the message to be sent to the auditing server cannot be decrypted without a separately stored private key.

19. An apparatus, comprising:

a first server configured to;

identify a message that is directed from a first peer device to a second peer device;

copying the message; and

cause a copy of the message to be sent to a second server.

20. A method, comprising:

identifying, utilizing a first server, a message that is directed from a first peer device to a second peer device;

copying, utilizing the first server, the message; and

causing, utilizing the first server, a copy of the message to be sent to a second server.