METHOD AND APPARATUS FOR PROVIDING NOTIFICATION OF DETECTED ERROR CONDITIONS IN A NETWORK

• US 20180007083A1
• Filed: 09/18/2017
• Published: 01/04/2018
• Est. Priority Date: 07/31/2012
• Status: Active Grant

• Current Assignee: AT&T Intellectual Property I LP (AT&T, Inc.)
• Original Assignee: AT&T Intellectual Property I LP (AT&T, Inc.)
• Inventors: Small, David B., Spencer, IV, Thomas
• Granted Patent: US 10,397,268 B2
• Time in Patent Office: Days
• CPC Class Codes: G06F 21/00 Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
• CPC Class Codes: H04L 41/0654 using network fault recovery ring fault isolation or reconfiguration in loop networks without recovery actions by a network management system H04L12/437
• CPC Class Codes: H04L 41/0686 Additional information in the notification, e.g. enhancement of specific meta-data
• CPC Class Codes: H04L 63/1408 by monitoring network traffic monitoring network traffic per se H04L43/00
• CPC Class Codes: H04L 63/1441 Countermeasures against malicious traffic countermeasures against attacks on cryptographic mechanisms H04L9/002
• CPC Class Codes: H04L 69/16 Implementation or adaptation of Internet protocol [IP], of transmission control protocol [TCP] or of user datagram protocol [UDP]
• CPC Class Codes: H04W 12/122 Counter-measures against attacks; Protection against rogue devices
• CPC Class Codes: H04W 12/126 Anti-theft arrangements, e.g. protection against subscriber identity module [SIM] cloning

Abstract

Methods for managing a communication session in a communication network are disclosed. For example, a method includes detecting, by a first endpoint comprising at least one processor, an error condition associated with the communication session, sending, by the first endpoint, a notification of the error condition to a second endpoint that is using a transport layer session and receiving, by the first endpoint, a communication from the second endpoint, proposing a response to the error condition. Another method includes receiving, by a first endpoint comprising at least one processor, a notification of an error condition associated with the communication session, selecting, by the first endpoint, a response to the error condition, and sending, by the first endpoint, a communication to a second endpoint that is using a transport layer session, proposing a response to the error condition.

Claims

1. A first endpoint for managing a communication session, the first endpoint comprising:

a processor; and

a computer-readable medium storing instructions which, when executed by the processor, cause the processor to perform operations, the operations comprising;

detecting an error condition associated with the communication session, wherein the first endpoint and a second endpoint are participating in the communication session;

sending a notification of the error condition to the second endpoint using a first transport layer session management message of a transport layer session, wherein the communication session includes the transport layer session, wherein a header of the first transport layer session management message includes a record type, wherein the record type indicates that a payload of the first transport layer session management message contains session management information; and

receiving a communication from the second endpoint via a second transport layer session management message of the transport layer session, the communication proposing a response to the error condition.

2. The first endpoint of claim 1, wherein the error condition comprises an attack on the communication session.

3. The first endpoint of claim 2, wherein the attack comprises an invalid re-anchor request.

4. The first endpoint of claim 2, wherein the attack comprises a denial of service attack.

5. The first endpoint of claim 1, wherein the response comprises switching to a different set of session identifiers for the transport layer session.

6. The first endpoint of claim 1, wherein the response comprises re-negotiating a session key for the transport layer session.

7. The first endpoint of claim 1, wherein the response comprises re-anchoring the transport layer session.

8. The first endpoint of claim 1, wherein the response comprises transferring the transport layer session to a different endpoint.

9. The first endpoint of claim 1, wherein the response comprises dropping the transport layer session.

10. The first endpoint of claim 1, wherein the response comprises continuing the transport layer session without a modification.

11. The first endpoint of claim 1, wherein the response comprises renegotiating a cryptographic algorithm for the transport layer session.

12. The first endpoint of claim 1, wherein the response comprises changing a frequency for renegotiating a session key for the transport layer session.

13. The first endpoint of claim 1, wherein the response comprises re-authenticating the first endpoint.

14. The first endpoint of claim 1, wherein the first transport layer session management message is encrypted using a session key of the transport layer session.

15. The first endpoint of claim 1, wherein the transport layer session comprises a transmission control protocol session that is identified by a requesting system session identifier and a serving system session identifier.

16. The first endpoint of claim 1, the operations further comprising:

sending a further communication via a third transport layer session management message of the transport layer session proposing a different response.

17. A first endpoint for managing a communication session, the first endpoint comprising:

a processor; and

a computer-readable medium storing instructions which, when executed by the processor, cause the processor to perform operations, the operations comprising;

receiving a notification of an error condition associated with the communication session from a second endpoint, wherein the first endpoint and the second endpoint are participating in the communication session, wherein the notification of the error condition is received via a first transport layer session management message of a transport layer session, wherein a header of the first transport layer session management message includes a record type, wherein the record type indicates that a payload of the first transport layer session management message contains session management information, wherein the communication session includes the transport layer session;

selecting a response to the error condition; and

sending a communication to the second endpoint using a second transport layer session management message of the transport layer session, the communication proposing the response to the error condition.

18. The first endpoint of claim 17, wherein the attack comprises an invalid re-anchor request, or a denial of service attack.

19. The first endpoint of claim 17, wherein the response comprises at least one of:

switching to a different set of session identifiers for the transport layer session, re-negotiating a session key for the transport layer session, re-anchoring the transport layer session, transferring the transport layer session to a different endpoint, dropping the transport layer session, or continuing the transport layer session without a modification.

20. A tangible computer-readable medium storing instructions which, when executed by a first endpoint comprising at least one processor, cause the at least one processor to perform operations for managing a communication session, the operations comprising:

receiving a notification of an error condition associated with the communication session from a second endpoint, wherein the first endpoint and the second endpoint are participating in the communication session, wherein the notification of the error condition is received via a first transport layer session management message of a transport layer session, wherein a header of the first transport layer session management message includes a record type, wherein the record type indicates that a payload of the first transport layer session management message contains session management information, wherein the communication session includes the transport layer session;

selecting a response to the error condition; and

sending a communication to the second endpoint using a second transport layer session management message of the transport layer session, the communication proposing the response to the error condition.