Secure anonymity in a media exchange network

• US 7,836,297 B2
• Filed: 09/30/2003
• Issued: 11/16/2010
• Est. Priority Date: 12/11/2002
• Status: Active Grant

• Current Assignee: Avago Technologies International Sales Pte Limited (Broadcom, Inc.)
• Original Assignee: Broadcom Corporation (Broadcom, Inc.)
• Inventors: Bennett, James, Karaoguz, Jeyhan
• Primary Examiner(s): Parthasarathy; Pramila
• Application Number:
  US10/675,774
• Publication Number:
  US 20040117661A1
• Time in Patent Office: 2,604 Days
• Field of Search: None
• US Class Current: 713/155
• CPC Class Codes: H04L 63/0421 Anonymous communication, i.e. the party's identifiers are hidden from the other party or parties, e.g. using an anonymizer
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 63/18 using different networks or channels, e.g. using out of band channels cryptographic mechanisms or cryptographic arrangements for key distribution involving distinctive intermediate devices or communication paths H04L9/0827; cryptographic mechanisms or cryptographic arrangements for authentication using a plurality of channels H04L9/3215
• CPC Class Codes: H04L 9/3263 involving certificates, e.g. public key certificate [PKC] or attribute certificate [AC]; Public key infrastructure [PKI] arrangements network architectures or network communication protocols for supporting authentication of entities using certificates in a packet data network H04L63/0823

Abstract

Secure communication of information in a communication network may comprise acquiring a security code from a second communication device by a first communication device and receiving media containing the security code such as a pin code from the first communication device. The security code may be translated into an IP address corresponding to the second communication device. The received media may be routed to the second communication device based on the IP address of the second communication device. In this regard, the IP address of the second communication device remains anonymous or unknown to the first communication device. A duration for which the security code is valid may be limited to a specific time period and/or for a particular number of uses. Notwithstanding, the security code may be acquired out-of-band.

Claims

1. A method for secure communication of information in a communication network, the method comprising:

receiving media containing a security code from a first communication device at a third communication device, wherein said security code is acquired by said first communication device from a second communication device;

translating said security code to an IP address corresponding to said second communication device at said third communication device; and

routing said received media to said second communication device based on said IP address of said second communication device, said IP address of said second communication device remaining anonymous to said first communication device.

2. The method according to claim 1, wherein said security code is a pin code.

3. The method according to claim 1, comprising limiting a duration for which said security code is valid to at least one of time and a number of uses.

4. The method according to claim 1, comprising obtaining said acquired security code out-of-band.

5. A machine-readable storage having stored thereon, a computer program having at least one code section for secure communication of information in a communication network, the at least one code section being executable by a machine for causing the machine to perform steps comprising:

receiving media containing a security code from a first communication device at a third communication device, wherein said security code is acquired by said first communication device from a second communication device;

translating said security code to an IP address corresponding to said second communication device at said third communication device; and

routing said received media to said second communication device based on said IP address of said second communication device, said IP address of said second communication device remaining anonymous to said first communication device.

6. The machine-readable storage according to claim 5, wherein said security code is a pin code.

7. The machine-readable storage according to claim 5, wherein said at least one code section comprises code for limiting a duration for which said security code is valid to at least one of time and a number of uses.

8. The machine-readable storage according to claim 5, wherein said at least one code section comprises code for obtaining said acquired security code out-of-band.

9. A system for secure communication of information in a communication network, the system comprising:

at least one processor receives media containing a security code from a first communication device at a third communication device, wherein said security code is acquired by said first communication device from a second communication device;

said at least one processor translates said security code to an IP address corresponding to said second communication device at said third communication device; and

said at least one processor routes said received media to said second communication device based on said IP address of said second communication device, said IP address of said second communication device remaining anonymous to said first communication device.

10. The system according to claim 9, wherein said security code is a pin code.

11. The system according to claim 9, wherein a duration for which said security code is valid is limited in at least one of time and a number of uses.

12. The system according to claim 9, wherein said acquired security code is obtained out-of-band.

13. The system according to claim 9, wherein said at least one processor is at least one of a server, a media exchange server and a proxy server.

14. A method for secure communication of information in a communication network, the method comprising:

receiving a security code from a first communication device desiring to communicate with a second communication device at a third communication device;

transferring security information associated with said second communication device from said third device to said first communication device;

receiving media along with at least a portion of said transferred security information from said first communication device at said third communication device;

if said security information from said first communication device is valid, transferring said received media from said third communication device to said second communication device; and

translating said at least a portion of said transferred security information received from said first communication device into an IP address of said second device at said third communication device, said transferring of said received media to said second communication device utilizing said IP address of said second communication device, said IP address of said second communication device remaining anonymous to said first communication device.

15. The method according to claim 14, wherein said security information is a one-time certificate.

16. The method according to claim 14, wherein said security information comprises at least one of a device ID, a public key, a code, a device number and a public key.

17. The method according to claim 14, wherein said security code is transferred out-of-band between said first communication device and said second communication device.

18. The method according to claim 14, comprising temporarily storing said received media until said security information received from said first communication device is validated.

19. A machine-readable storage having stored thereon, a computer program having at least one code section for secure communication of information in a communication network, the at least one code section being executable by a machine for causing the machine to perform steps comprising:

receiving a security code from a first communication device desiring to communicate with a second communication device at a third communication device;

transferring security information associated with said second communication device from said third device to said first communication device;

receiving media along with at least a portion of said transferred security information from said first communication device at said third communication device;

if said security information from said first communication device is valid, transferring said received media from said third communication device to said second communication device; and

translating said at least a portion of said transferred security information received from said first communication device into an IP address of said second device at said third communication device, said transferring of said received media to said second communication device utilizing said IP address of said second communication device, said IP address of said second communication device remaining anonymous to said first communication device.

20. The machine-readable storage according to claim 19, wherein said security information is a one-time certificate.

21. The machine-readable storage according to claim 19, wherein said security information comprises at least one of a device ID, a public key, a code, a device number and a public key.

22. The machine-readable storage according to claim 19, wherein said security code is transferred out-of-band between said first communication device and said second communication device.

23. The machine-readable storage according to claim 19, wherein said at least one code section comprises code for temporarily storing said received media until said security information received from said first communication device is validated.

24. A system for secure communication of information in a communication network, the system comprising:

at least one processor at a third communication device that receives a security code from a first communication device desiring to communicate with a second communication device;

said at least one processor transfers security information associated with said second communication device from said third communication device to said first communication device;

said at least one processor receives media along with at least a portion of said transferred security information from said first communication device at said third communication device;

if said security information from said first communication device is valid, transferring said received media from said third communication device to said second communication device; and

said at least one processor translates said at least a portion of said transferred security information received from said first communication device into an IP address of said second device at said third communication device, said transferring of said received media to said second communication device utilizing said IP address of said second device, said IP address of said second communication device remaining anonymous to said first communication device.

25. The system according to claim 24, wherein said security information is a one-time certificate.

26. The system according to claim 24, wherein said security information comprises at least one of a device ID, a public key, a code, a device number and a public key.

27. The system to claim 24, wherein said security code is transferred out-of-band between said first communication device and said second communication device.

28. The system according to claim 24, wherein said at least one processor temporarily stores said received media until said security information received from said first communication device is validated.

29. The system according to claim 24, wherein said at least one processor is at least one of a server, a media exchange server and a proxy server.

30. A method for secure communication of information in a communication network, the method comprising:

receiving media containing a security code from a first communication device, wherein said security code is acquired by said first communication device from a second communication device; and

translating said security code received from said first communication device into an IP address of said second device at said third communication device, and transferring of said received media from said third communication device to said second communication device utilizing said IP address of said second device, said IP address of said second communication device remaining anonymous to said first communication device.

31. The method according to claim 30, wherein said security code is a pin code.

32. The method according to claim 30, comprising limiting a duration for which said security code is valid to at least one of time and a number of uses.

33. The method according to claim 30, comprising obtaining said acquired security code out-of-band.

34. A machine-readable storage having stored thereon, a computer program having at least one code section for secure communication of information in a communication network, the at least one code section being executable by a machine for causing the machine to perform steps comprising:

receiving media containing a security code from a first communication device, wherein said security code is acquired by said first communication device from a second communication device; and

translating said security code received from said first communication device into an IP address of said second device at said third communication device, and transferring of said received media from said third communication device to said second communication device utilizing said IP address of said second device, said IP address of said second communication device remaining anonymous to said first communication device.

35. The machine-readable storage according to claim 34, wherein said security code is a pin code.

36. The machine-readable storage according to claim 34, wherein said at least one code section comprises code for limiting a duration for which said security code is valid to at least one of time and a number of uses.

37. The machine-readable storage according to claim 34, wherein said at least one code section comprises code for obtaining said acquired security code out-of-band.

38. A system for secure communication of information in a communication network, the system comprising:

at least one processor at a third communication device receives media containing a security code from a first communication device, wherein said security code is acquired by said first communication device from a second communication device; and

said at least one processor translates said security code received from said first communication device into an IP address of said second device at said third communication device, and transferring of said received media from said third communication device to said second communication device utilizing said IP address of said second device, said IP address of said second communication device remaining anonymous to said first communication device.

39. The system according to claim 38, wherein said security code is a pin code.

40. The system according to claim 38, wherein a duration for which said security code is valid is limited in at least one of time and a number of uses.

41. The system according to claim 38, wherein said acquired security code is obtained out-of-band.

42. The system according to claim 38, wherein said at least one processor is at least one of a server, a media exchange server and a proxy server.