End user circuit diversity auditing methods

• US 7,813,344 B2
• Filed: 12/17/2008
• Issued: 10/12/2010
• Est. Priority Date: 12/17/2008
• Status: Expired due to Fees

• Current Assignee: AT&T Intellectual Property I LP (AT&T, Inc.)
• Original Assignee: AT&T Intellectual Property I LP (AT&T, Inc.)
• Inventors: Cheswick, William
• Primary Examiner(s): Kumar; Pankaj
• Assistant Examiner(s): Foud; Hicham B
• Application Number:
  US12/337,039
• Publication Number:
  US 20100150153A1
• Time in Patent Office: 664 Days
• Field of Search: None
• US Class Current: 370/389
• CPC Class Codes: H04L 43/028 by filtering
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources

Abstract

A communications network circuit through which data packets are flowing is identified by detecting a first message data packet inserted into the data packet flow by a user, and determining an endpoint destination address of the detected data packet. The circuit using the endpoint destination address is identified and a second message data packet containing the circuit identification information is sent to the destination address. A covert timing channel may be created, and one or more data packets containing circuit identification information may be sent through the covert channel.

Claims

1. A method of identifying a communications network circuit through which data packets are flowing, the method comprising:

detecting a first message data packet in the data packet flow, wherein the first message data packet is inserted into the data packet flow by a user;

determining an endpoint destination address of the detected data packet;

identifying the circuit using the endpoint destination address;

determining if the circuit user is authorized to receive circuit identification information; and

then

sending a second message data packet to the destination address, wherein the second message data packet contains the circuit identification information.

2. The method of claim 1, wherein the circuit identification information contained in the second message data packet is encrypted, and the method further comprises decrypting the circuit identification information at the destination address.

3. The method of claim 2, further comprising requesting a service provider (SP) associated with the circuit to decrypt the circuit identification information at the destination address.

4. The method of claim 1, wherein the first and second message data packets are Internet Protocol (IP) packets.

5. The method of claim 4, wherein the first and second message data packets are Internet Control Message Protocol (ICMP) packets.

6. The method of claim 1, wherein the first message data packet is detected by a packet sniffer associated with the circuit.

7. A computer program product for identifying a communications network circuit through which user data packets are flowing, comprising a non-transitory computer readable storage medium having encoded thereon instructions that, when executed on a computer, cause the computer to:

detect a first message data packet in the data packet flow, wherein the first message data packet is inserted into the data packet flow by a user;

determine an endpoint destination address of the detected data packet;

identify the circuit using the endpoint destination address;

determine if the circuit user is authorized to receive the circuit identification information; and

then

send a second message data packet to the destination address, wherein the second message data packet contains the circuit identification information.

8. The computer program product of claim 7, wherein the computer readable storage medium has encoded thereon instructions that, when executed on a computer, causes the computer to decrypt encrypted circuit identification information contained in the second message data packet.