Method for asymmetric security

• US 7,607,006 B2
• Filed: 09/23/2004
• Issued: 10/20/2009
• Est. Priority Date: 09/23/2004
• Status: Expired due to Fees

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Zhang, Kai Mike, Khangaonkar, Manoj, Ahuja, Pratima
• Primary Examiner(s): Vu; Kimyen
• Assistant Examiner(s): SHAN, APRIL YING
• Application Number:
  US10/948,000
• Publication Number:
  US 20060064736A1
• Time in Patent Office: 1,853 Days
• Field of Search: 380/270, 726/27, 726/24, 713/150, 713/151, 709/237, 705/79
• US Class Current: 713/151
• CPC Class Codes: G06Q 20/027 involving a payment switch or gateway
• CPC Class Codes: H04L 63/105 Multiple levels of security

Abstract

A method is disclosed for asymmetric security in data communications between two or more nodes. Asymmetric security within data communications refers to sending and receiving messages at different security levels. The method includes a receiving module, a transmission module, and a communication module. The receiving module receives a first message at a first security level from a first node. A security level may be defined by implementation of one or more security features, including encryption, digital signatures, and/or other security features. The transmission module transmits a second message at a second security level to the first node in response to receiving the first message. The first and second messages may be communicated during a single communication session. The communication module communicates the second security level to the first node. The communication may be directly between two nodes or may occur via a broker or other intermediate node.

Claims

1. A method for asymmetric message security, the method comprising:

receiving a first message at a second node, the first message received from a first node, the first message secured at a first security level, the first security level actively selected from a plurality of available security levels, the first security level selected in accordance with a sensitivity level of the first message, wherein the first node and the second node comprise a central processing unit and an electronic storage device;

processing the first message according to the first security level to make the first message usable by the second node;

selecting a second security level for a second message, the second security level is a different security level than the first security level, the second security level selected from the plurality of available security levels, the second security level selected in accordance with a sensitivity level of the second message, wherein the first security level and the second security level are selected to minimize use of security resources;

applying the selected second security level to the second message;

transmitting the second message at the second security level to the first node in response to receiving the first message, the first message and the second message together communicated within a single communication session; and

communicating the second security level to the first node.

2. The method of claim 1, further comprising coupling a security level indicator to the second message and communicating the security level indicator to the first node.

3. The method of claim 1, further comprising detecting the first security level of the first message and processing the first message.

4. The method of claim 1, further comprising applying a security feature to the second message according to the second security level.

5. The method of claim 1, further comprising defining a security level definition descriptive of the first security level and the second security level.

6. The method of claim 5, further comprising dynamically updating the security level definition during a current communication session.

7. The method of claim 6, further comprising communicating the updated security level definition to the first node during the current communication session.

8. The method of claim 1, further comprising communicating the second message in an asynchronous communication environment.