NETWORK SECURITY SYSTEMS AND METHODS

• US 20200137116A1
• Filed: 08/07/2019
• Published: 04/30/2020
• Est. Priority Date: 02/14/2014
• Status: Active Grant

• Current Assignee: Intertrust Technologies Corporation (Fidelio Acquisition Co LLC)
• Original Assignee: Intertrust Technologies Corporation (Fidelio Acquisition Co LLC)
• Inventors: MAHER, David P., BOCCON-GIBOD, Gilles
• Granted Patent: US 10,880,335 B2
• Time in Patent Office: Days
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 2221/2149 Restricted operating environment
• CPC Class Codes: H04L 12/2803 Home automation networks
• CPC Class Codes: H04L 63/065 for group communications cryptographic mechanisms or cryptographic arrangements for key management involving conference or group key H04L9/0833
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227
• CPC Class Codes: H04L 67/1068 Discovery involving direct consultation or announcement among potential requesting and potential source peers
• CPC Class Codes: H04L 67/51 Discovery or management thereof, e.g. service location protocol [SLP] or web services
• CPC Class Codes: H04W 12/04 Key management, e.g. using generic bootstrapping architecture [GBA]
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 12/50 Secure pairing of devices
• CPC Class Codes: H04W 4/70 Services for machine-to-machine communication [M2M] or machine type communication [MTC]

Abstract

This disclosure relates to systems and methods for managing connected devices and associated network connections. In certain embodiments, trust, privacy, safety, and/or security of information communicated between connected devices may be established in part through use of security associations and/or shared group tokens. In some embodiments, these security associations may be used to form an explicit private network associated with the user. A user may add and/or manage devices included in the explicit private network through management of various security associations associated with the network'"'"'s constituent devices.

Claims

1-9. -9. (canceled)

10. A method of controlling an operation of a second connected device using a first connected device, the method comprising:

receiving, by a first connected device, a request to control an operation of a second connected device;

accessing, using information included in the request, explicit private network state information associated with the second connected device;

determining, based on the explicit private network state information associated with the second connected device, that first connected device may control the operation of the second connected device in accordance with the request;

generating, based on the determination, a command message configured to control the operation of the second device in accordance with the request; and

transmitting the command message to the second connected device.

11. The method of claim 10, wherein accessing the explicit private network state information associated with the second connected device comprises accessing explicit private network state information associated with the second connected device based on identification information associated with the second connected device included in the request.

12. The method of claim 11, wherein the identification information is further included in the explicit private network state information associated with the second connected device.

13. The method of claim 11, wherein the identification information is uniquely associated with the second connected device.

14. The method of claim 13, wherein the identification information comprises at least one of a device universally unique identifier and Internet protocol identification information.

15. The method of claim 11, wherein the identification information comprises a name assigned to the second connected device by an associated entity.

16. The method of claim 10, wherein the explicit private network state information associated with the second connected device comprises information relating to acceptable commands associated with the second connected device.

17. The method of claim 16, wherein determining that first connected device may control the operation of the second connected device in accordance with the request comprises determining that the request is associated with at least one acceptable command of the acceptable commands associated with the second device.

18. The method of claim 16, wherein generating the command message comprises generating the command message based, at least in part, on the information relating to acceptable commands associated with the second device.

19. The method of claim 10, wherein the explicit private network state information associated with the second connected device comprises information relating to acceptable data that may be communicated to the second connected device.

20. The method of claim 19, wherein generating the command message comprises generating the command message based, at least in part, on the information relating to acceptable data that may be communicated to the second connected device.

21. The method of claim 10, wherein the method further comprises:

receiving, by the first connected device, a response message from the second device generated by the second device in response to the command message.

22. The method of claim 21, wherein the method further comprises:

updating the explicit private network state information associated with the second connected device based, at least in part, on the response message.

23. The method of claim 10, wherein accessing the explicit private network state information associated with the second connected device comprises accessing the explicit private network state information associated with the second connected device from storage of the first connected device.

24. The method of claim 10, wherein accessing the explicit private network state information associated with the second connected device comprises accessing the explicit private network state information associated with the second connected device from a remote trusted service.

25. The method of claim 10, wherein the request to control the operation of the second connected device is received from a user interface of the first connected device.

26. The method of claim 10, wherein the request to control the operation of the second connected device is received from a communications interface of the first connected device from a third connected device.

27. The method of claim 10, wherein the first connected device comprises at least one of a smartphone, a tablet computer system, a desktop computer system, a laptop computer system, a wearable computing device, a connected vehicle, a telematics system, a security system, a home automation system, a connected thermostat, a connected heating system, a connected cooling system, a utility meter, a medical device, a gaming system, a network infrastructure system, a television, a speaker, and a digital camera.

28. The method of claim 10, wherein the second connected device comprises at least one of a smartphone, a tablet computer system, a desktop computer system, a laptop computer system, a wearable computing device, a connected vehicle, a telematics system, a security system, a home automation system, a connected thermostat, a connected heating system, a connected cooling system, a utility meter, a medical device, a gaming system, a network infrastructure system, a television, a speaker, and a digital camera.