Apparatus and methods for providing secured communication

• US 7,392,387 B2
• Filed: 02/26/2007
• Issued: 06/24/2008
• Est. Priority Date: 08/30/2002
• Status: Expired due to Term

• Current Assignee: Xerox Corporation (Xerox Holdings Corp.)
• Original Assignee: Xerox Corporation (Xerox Holdings Corp.)
• Inventors: Swinehart, Daniel C., Balfanz, Dirk, Smetters, Diana, Stewart, Paul
• Primary Examiner(s): Lanier; Benjamin E.
• Assistant Examiner(s): Nobahar; Abdulhakim
• Application Number:
  US11/679,166
• Publication Number:
  US 20070204149A1
• Time in Patent Office: 484 Days
• Field of Search: 713/158, 713/153, 713/168, 380/277, 380/284, 726/4, 726/26, 726/29, 705/64
• US Class Current: 713/168
• CPC Class Codes: G06Q 20/382 insuring higher security of transaction
• CPC Class Codes: H04L 12/1818 Conference organisation arrangements, e.g. handling schedules, setting up parameters needed by nodes to attend a conference, booking network resources, notifying involved parties
• CPC Class Codes: H04L 63/0492 by using a location-limited connection, e.g. near-field communication or limited proximity of entities
• CPC Class Codes: H04L 63/065 for group communications cryptographic mechanisms or cryptographic arrangements for key management involving conference or group key H04L9/0833
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 63/104 Grouping of entities
• CPC Class Codes: H04L 63/18 using different networks or channels, e.g. using out of band channels cryptographic mechanisms or cryptographic arrangements for key distribution involving distinctive intermediate devices or communication paths H04L9/0827; cryptographic mechanisms or cryptographic arrangements for authentication using a plurality of channels H04L9/3215
• CPC Class Codes: H04L 67/12 specially adapted for proprietary or special-purpose networking environments, e.g. medical networks, sensor networks, networks in vehicles or remote metering networks
• CPC Class Codes: H04L 69/329 in the application layer [OSI layer 7]
• CPC Class Codes: H04L 9/40 Network security protocols

Abstract

Authentication information is generated for a group where members within a group are able to communicate with each other, but a non-members is not able to participate in that communication. The authentication information provides the determination of whether the member belongs to the group.

Claims

1. A securing device, comprising:

a logic unit to generate authentication information for a group; and

a transmitter to transmit authentication information to a potential member, wherein the receipt of the authentication information by the potential member designates the potential member as a member to the group and the member uses the authentication information to secure communication with another member in the group;

a reset application stored in a memory;

the logic unit to generate a reset signal using the reset application; and

the transmitter to transmit the reset signal to the member, wherein the receipt of the reset signal by the member revokes the authentication information of the member.

2. The securing device of claim 1, further comprising:

a controller device interface to interface the securing device to at least one controller device.

3. The securing device of claim 2, wherein the controller device includes a user interface that provides communication with the securing device.

4. The securing device of claim 2, wherein the controller device interface is adapted to communicate with another device through the network medium.

5. The securing device of claim 1, wherein the securing device is integrated with a controller device.

6. The securing device of claim 1, wherein the logic unit generates a trusted group and designates a controller device as a member of the trusted group.

7. The securing device of claim 1, further comprising:

a biometric input.

8. The securing device of claim 7, wherein the biometric input is used to generate authentication information.

9. The securing device of claim 7, wherein the biometric input is used to secure data in a memory of the securing device.

10. The securing device of claim 7, wherein the biometric input authenticates the user allowed to use the securing device.

11. The securing device of claim 1, wherein the logic unit generates audit information.

12. The securing device of claim 1, wherein the authentication information uses cryptographic credential protocol.

13. A method, comprising:

generating a first authentication information for a group;

sending the first authentication information to a first potential member through a communication medium, wherein the receipt of the first authentication information by the first potential member designates the first potential member as a member of the group

providing a reset application stored in a memory;

generating a reset signal using the reset application; and

transmitting the reset signal to the member through the communication medium, wherein the receipt of the reset signal by the member revokes the authentication information of the member.

14. The method of claim 13, further comprising:

communicating a pre-authentication information to the first potential member using the location limited channel.

15. The method of claim 13, further comprising:

generating a plurality of groups; and

selecting the group from the plurality of groups to which the first potential member is to be added.

16. The method of claim 13, further comprising:

communicating with another member of the group through the communication medium using the first authentication information to secure the communication.

17. The method of claim 13, further comprising:

generating a second authentication information for a trusted group;

sending the second authentication information to a second potential member, wherein the receipt of the second authentication information by the second potential member designates the potential member as a member of the trusted group.

18. The method of claim 13, further comprising:

initiating a secure communication with a third member;

sending ownership information to the third member, wherein the receipt of the ownership information by the third member designates the third member as a co-owner of the group.

19. The method of claim 13, further comprising:

revoking authentication information from a fourth member;

adding the revoked authentication information of the fourth member in a list of revoked members; and

conveying the list of revoked members to other members of the group.