Peer-to-peer authentication for real-time collaboration

• US 7,392,375 B2
• Filed: 09/18/2002
• Issued: 06/24/2008
• Est. Priority Date: 09/18/2002
• Status: Active Grant

• Current Assignee: AI-CORE TECHNOLOGIES, LLC (Ascend Innovation Management, LLC)
• Original Assignee: Colligo Networks, Inc. (Olbia Software Inc.)
• Inventors: Bartram, Linda Ruth, Chesser, Mark Miller, Sawadsky, Nicholas, Schumacher, Steven Joseph, Blackstock, Michael
• Primary Examiner(s): Moazzami, Nasser
• Assistant Examiner(s): Cervetti, David Garcia
• Application Number:
  US10/245,303
• Publication Number:
  US 20040054885A1
• Time in Patent Office: 2,106 Days
• Field of Search: 726/3, 713/152
• US Class Current: 713/152
• CPC Class Codes: H04L 2209/80 Wireless
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 67/104 Peer-to-peer [P2P] networks
• CPC Class Codes: H04L 9/3265 using certificate chains, trees or paths; Hierarchical trust model

Abstract

A peer-to-peer collaborative network system is described. The peer-to-peer collaborative network system uses an authentication system with multiple levels of authentication. This allows some collaboration applications to allow a collaboration with a high authentication level, but not to allow a collaboration with a lower level of authentication. Other collaborative applications can allow a collaboration with the lower level of authentication.

Claims

1. A device connectable to a peer-to-peer network, the device comprising:

a memory; and

a processor configured to;

allow collaboration between units on the peer-to-peer network; and

produce an authentication level indication concerning the identity of another unit in the peer-to-peer network, the authentication level indication relating to the security of the process used to perform the authentication, wherein the possible authentication levels include a high authentication level and a low authentication level, the low authentication level being some evidence of unit authentication, wherein the processor is configured to use the authentication level indication to decide whether to allow a collaboration with another unit, wherein at least one collaborative application allows a collaboration with another unit when the authentication level indication is high but does not allow a collaboration with another unit when the authentication level indication is low.

2. The device of claim 1 wherein the processor is further configured to execute a chat application.

3. The device of claim 1 wherein the processor is further configured to perform file sharing.

4. The device of claim 1 wherein the processor is further configured to perform resource sharing.

5. The device of claim 1 wherein the processor is further configured to execute a database synchronization application.

6. The device of claim 1 wherein the processor is further configured to allow collaboration when the authentication level indication is low.

7. The device of claim 1 wherein the processor is further configured to receive from the user an indication of authentication levels required of other peers.

8. The device of claim 1 wherein there are more than two authentication levels.

9. The device of claim 8 wherein the authentication levels correspond to simple acceptance, digital certificate fingerprint comparison, out-of-band certificate comparison, and certificate authority confirmation.

10. The device of claim 1 wherein the authentication level indication is stored along with an identifier for another unit.

11. The device of claim 1 wherein the authentication level indication can be subsequently upgraded by re-authentication of the peer using a more secure authentication approach.

12. The device of claim 1 wherein implicit authentication is allowed.

13. A method comprising:

producing an authentication level indication concerning the identity of another unit in a peer-to-peer network, wherein the possible authentication levels include a high authentication level and a low authentication level, the authentication level indication relating to the security of the process used to perform the authentication, the low authentication level being some evidence of unit authentication; and

using the authentication level indication to decide whether to allow a collaboration with another unit, wherein at least one collaborative application allows a collaboration when the authentication level indication is high but does not allow a collaboration when the authentication level indication is low.

14. The method of claim 13 wherein when the authentication level indication is low there is a collaborative application that allows for collaboration.

15. The method of claim 13 wherein there are more than two authentication levels.

16. The method of claim 13 wherein the authentication levels correspond to simple acceptance, digital certificate fingerprint comparison, out-of-band certificate comparison, and certificate authentication confirmation.

17. The method of claim 13 wherein the authentication level indication is stored along with an identifier for the other unit.

18. The method of claim 13 wherein the method allows for implicit authorization.

19. The method of claim 13 wherein the collaboration application includes file sharing.

20. The method of claim 13 wherein the collaboration application includes resource sharing.

21. The method of claim 13 wherein the user can specify authentication levels required of other peers.

22. The method of claim 13 wherein the authentication level indication can be subsequently upgraded by re-authentication of the peer using a more secure authentication approach.

23. A computer-readable medium containing a program that executes the following procedure:

producing an authentication level indication concerning the identity of another unit in a peer-to-peer network, wherein the possible authentication levels include a high authentication level and a low authentication level, the authentication level indication relating to the security of the process used to perform the authentication, the low authentication level being some evidence of unit authentication; and

using the authentication level indication to decide whether to allow a collaboration with another unit, wherein at least one collaborative application allows a collaboration when the authentication level indication is high but does not allow a collaboration when the authentication level indication is low.

24. The computer readable medium containing a program of claim 23 wherein when the authentication level indication is low there is a collaborative application that allows for collaboration.

25. The computer readable medium containing a program that executes a procedure of claim 23 wherein the procedure is such that there are more than two authentication levels.

26. The computer readable medium containing a program that executes a procedure of claim 23 wherein the authentication level indication is stored along with an identifier for the other unit.

27. The computer readable medium containing a program that executes a procedure of claim 23 wherein the authentication levels correspond to simple acceptance, digital certificate fingerprint comparison, out-of-band certificate comparison, and certificate authority confirmation.

28. The computer readable medium containing a program that executes a procedure of claim 23 wherein the procedure allows for implicit authorization of units.

29. The computer readable medium containing a program of claim 23 wherein the collaboration application includes file sharing.

30. The computer readable medium containing a program of claim 23 wherein the collaboration application includes resource sharing.

31. The computer readable medium containing a program of claim 23 wherein the user can specify authentication levels required of other peers.

32. The computer readable medium containing a program of claim 23 wherein the authentication level indication can be subsequently upgraded by re-authentication of the peer using a more secure authentication approach.

33. A device comprising:

means for producing an authentication level indication concerning the identity of another unit in a peer-to-peer network, wherein the possible authentication levels include a high authentication level and a low authentication level, the authentication level indication relating to the security of the process used to perform the authentication, the low authentication level being some evidence of unit authentication; and

means for using the authentication level indication to decide whether to allow a collaboration with another unit, wherein at least one collaborative application allows a collaboration when the authentication level indication is high but does not allow a collaboration when the authentication level indication is low.

34. The device of claim 33 wherein when the authentication level indication is low there is a collaborative application that allows for collaboration.

35. The device of claim 33 wherein there are more than two authentication levels.

36. The device of claim 33 wherein the authentication levels correspond to simple acceptance, digital certificate fingerprint comparison, out-of-band certificate comparison, and certificate authentication confirmation.

37. The device of claim 33 wherein the authentication level indication is stored along with an identifier for the other unit.

38. The device of claim 33 wherein the device is further configured to allow for implicit authorization.

39. The device of claim 33 wherein the collaboration application includes file sharing.

40. The device of claim 33 wherein the collaboration application includes resource sharing.

41. The device of claim 33 wherein the device is further configured to accept a specification of authentication levels required of other peers.

42. The method of claim 33 wherein the authentication level indication can be subsequently upgraded by re-authentication of the peer using a more secure authentication approach.