Communications network with smart card

• US 7,571,257 B2
• Filed: 03/25/2002
• Issued: 08/04/2009
• Est. Priority Date: 07/31/2001
• Status: Active Grant

• Current Assignee: Callahan Cellular LLC (Intellectual Ventures LLC)
• Original Assignee: Momin Development Fund LLC (Intellectual Ventures LLC)
• Inventors: Guthery, Scott B.
• Primary Examiner(s): Donaghue; Larry D
• Application Number:
  US10/470,128
• Publication Number:
  US 20040249959A1
• Time in Patent Office: 2,689 Days
• Field of Search: 709/229, 709/250, 714/201, 714/160, 714/161
• US Class Current: 709/250
• CPC Class Codes: G06F 21/606 by securing the transmission between two devices or processes
• CPC Class Codes: G06F 2221/2153 Using hardware token as a secondary aspect
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 67/04 specially adapted for terminals or networks with limited capabilities; specially adapted for terminal portability
• CPC Class Codes: H04L 69/22 Parsing or analysis of headers
• CPC Class Codes: H04L 69/329 in the application layer [OSI layer 7]
• CPC Class Codes: H04L 9/40 Network security protocols
• CPC Class Codes: H04W 12/08 Access security

Abstract

Methods and systems are disclosed to enable a smart card having relatively low data rate and low computational power to control a high data rate communications channel without degradation of performance. The smart card and an associated monitor/interface, which can be implemented in a network access device, are interposed between transmitting and receiving nodes in a network, and configured to intervene when conditions of rules stored in the smart card are met. For example, the smart card can intervene when a packet header indicates sufficient change in information, such as the exceeding of a predefined threshold or a requirement for user authorization/authentication. In one mode of regulating packet flow, the smart card selectively enables or disables packet transmission, reception, or both, according to the rules stored therein. In another mode, the smart card, upon activation, provides rules and modifications for packet data, headers, or both. The rules and modifications can implement communication policies of the entity providing communication services to the user of the services, and can be stored in the smart card to prevent alteration or tampering.

Claims

1. A communication network for communicating information packets, said network comprising:

an information packet transmitter;

an information packet receiver;

a smart card;

a smart card interface coupled to said information packet transmitter or to said information packet receiver, said smart card interface adapted to electrically engage with said smart card; and

an information packet monitor coupled to said smart card interface, said information packet monitor adapted to monitor for predefined changes in said information packets;

wherein said smart card is normally in an inactive state, but is activated to regulate, based on content stored in said smart card, the communication of information packets when said predefined changes meet the conditions of a contingency rule stored in said smart card.

2. The communication network in claim 1, wherein said contingency rule comprises a predefined threshold.

3. The communication network in claim 1, wherein said smart card is activated to regulate the communication of said information packets by disabling said information packet transmitter.

4. The communication network in claim 1, wherein said smart card is activated to regulate the communication of said information packets by disabling said information packet receiver.

5. The communication network in claim 1, wherein said information packets comprise header blocks (“

headers”

) and data blocks (“

data”

), and wherein said smart card is further adapted to intercept transmitted information packets when activated, and re-transmit said information packets after modifying said information packet data.

6. The communication network in claim 1, wherein said information packets comprise header blocks (“

headers”

) and data blocks (“

data”

), and wherein said smart card is further adapted to intercept transmitted information packets when activated, and re-transmit said information packets after modifying said information packet headers.

7. The communication network in claim 5, wherein said modifying comprises decryption.

8. The communication network in claim 6, wherein said modifying comprises decryption.

9. The communication network in claim 1, wherein said information packet transmitter comprises a header compressor adapted to compress information packet headers prior to transmission of said information packets.

10. The communication network in claim 1, further comprising wireless communication link.

11. The communication network in claim 1, wherein said smart card is activated when the changes in said information packets indicate that authorization is needed to receive information packets thereafter, and continued transmission or reception is contingent upon a user entering an expected authorization code.

12. The communication network in claim 1, wherein said smart card is activated when the changes in said information packets indicate that said receiver is coupled to said communication network via an unauthorized communication source, and regulating said information packets comprises disabling said transmitter.

13. The communication network in claim 1, wherein said smart card is activated when the changes in said information packets indicate that said transmitter is coupled to said communication network via an unauthorized communication source, and regulating said information packets comprises disabling said receiver.

14. In a communication network, a method of communicating information packets, said method comprising the steps of:

via an information packet transmitter, transmitting information packets;

via an information packet receiver, receiving information packets;

via a smart card normally in an inactive state, monitoring for changes in said information packets; and

via said smart card, regulating, based on content stored in said smart card, the communication of information packets when said predefined changes meet the conditions of a contingency rule stored in said smart card.

15. The method in claim 14, wherein said contingency rule comprises reaching a predefined threshold.

16. The method in claim 14, wherein said regulating step comprises regulating the communication of said information packets by disabling said information packet transmitter.

17. The method in claim 14, wherein said regulating step comprises regulating the communication of said information packets by disabling said information packet receiver.

18. The method in claim 14, wherein said information packets comprise header blocks (“

headers”

) and data blocks (“

data”

), and said method further comprises the steps of;

via said smart card, intercepting transmitted information packets, and re-transmitting said information packets after modifying said information packet data.

19. The method in claim 14, wherein said information packets comprise header blocks (“

headers”

) and data blocks (“

data”

), and said method further comprises the steps of;

via said smart card, intercepting transmitted information packets, and re-transmitting said information packets after modifying said information packet headers.

20. The method in claim 18, wherein said modifying comprises decryption.

21. The method in claim 19, wherein said modifying comprises decryption.

22. The method in claim 14, further comprising the step of:

prior to transmitting said information packets, compressing information packet headers prior to transmission of said information packets.

23. The method in claim 14, further comprising the step of providing a wireless communication link.

24. The method in claim 14, further comprising the steps of:

activating said smart card when the changes in said information packets indicate that authorization is needed to receive information packets thereafter; and

making continued transmission or reception contingent upon a user entering an expected authorization code.

25. The method in claim 14, further comprising the steps of:

activating said smart card when the changes in said information packets indicate that said receiver is coupled to said communication network via an unauthorized communication source; and

regulating said information packets comprises disabling said transmitter.

26. The method in claim 14, further comprising the steps of:

activating said smart card when the changes in said information packets indicate that said transmitter is coupled to said communication network via an unauthorized communication source; and

regulating said information packets comprises disabling said receiver.