Portable computerized device adapted for ad hoc security associations

• US 7,917,630 B2
• Filed: 07/11/2007
• Issued: 03/29/2011
• Est. Priority Date: 07/30/1996
• Status: Expired due to Fees

• Current Assignee: Round Rock Research LLC
• Original Assignee: Round Rock Research LLC
• Inventors: Holden, James M, Levin, Stephen E, Nickel, James O, Wrench, Edwin H
• Primary Examiner(s): VU, VIET DUY
• Application Number:
  US11/776,418
• Publication Number:
  US 20080016226A1
• Time in Patent Office: 1,357 Days
• Field of Search: 709/217, 709/219, 709/227, 709/228, 709/237, 709/250
• US Class Current: 709/227
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/606 by securing the transmission between two devices or processes
• CPC Class Codes: G06F 21/85 interconnection devices, e.g. bus-connected or in-line devices
• CPC Class Codes: G06F 2211/001 In-Line Device
• CPC Class Codes: G06F 2211/005 Network, LAN, Remote Access, Distributed System
• CPC Class Codes: G06F 2211/007 Encryption, En-/decode, En-/decipher, En-/decypher, Scramble, (De-)compress
• CPC Class Codes: G06F 2211/009 Trust
• CPC Class Codes: G06F 2221/2101 Auditing as a secondary aspect
• CPC Class Codes: G06F 2221/2141 Access rights, e.g. capability lists, access control lists, access tables, access matrices
• CPC Class Codes: G06F 2221/2149 Restricted operating environment
• CPC Class Codes: G06F 2221/2153 Using hardware token as a secondary aspect
• CPC Class Codes: H04L 2209/76 Proxy, i.e. using intermediary entity to perform cryptographic operations network architectures or network communication protocols using hop-by-hop encryption H04L63/0464
• CPC Class Codes: H04L 63/02 for separating internal from external traffic, e.g. firewalls
• CPC Class Codes: H04L 63/0218 Distributed architectures, e.g. distributed firewalls
• CPC Class Codes: H04L 63/0442 wherein the sending and receiving network entities apply asymmetric encryption, i.e. different keys for encryption and decryption cryptographic mechanisms or cryptographic arrangements for public-key encryption H04L9/30
• CPC Class Codes: H04L 63/061 for key exchange, e.g. in peer-to-peer networks cryptographic mechanisms or cryptographic arrangements for key agreement H04L9/0838
• CPC Class Codes: H04L 63/0869 for achieving mutual authentication cryptographic mechanisms or cryptographic arrangements for mutual authentication H04L9/3273
• CPC Class Codes: H04L 63/101 Access control lists [ACL]
• CPC Class Codes: H04L 63/105 Multiple levels of security
• CPC Class Codes: H04L 63/126 the source of the received data
• CPC Class Codes: H04L 63/14 : for detecting or protecting against malicious traffic
• CPC Class Codes: H04L 67/141 : Setup of application sessions admission control or resource allocation in data switching networks H04L47/70
• CPC Class Codes: H04L 67/563 : Data redirection of data network streams
• CPC Class Codes: H04L 9/3247 : involving digital signatures
• CPC Class Codes: H04L 9/3268 : using certificate validation, registration, distribution or revocation, e.g. certificate revocation list [CRL]
• CPC Class Codes: H04L 9/3273 : for mutual authentication network architectures or network communication protocols for achieving mutual authentication in a packet data network H04L63/0869
• CPC Class Codes: H04L 9/40 : Network security protocols
• CPC Class Codes: H04W 12/069 : using certificates or pre-shared keys

Abstract

A portable communications device adapted to provide communication security in, for example, an ad hoc or temporary networked environment. In one embodiment, the network comprises an untrusted medium, and the device includes network security apparatus adapted to create security associations between devices on the network, including mutual authentication. Traffic between the associated devices may be encrypted for e.g., data confidentiality and integrity protection. In one variant, the network security apparatus comprises a software entity disposed at least partly within the software stack of the device. The device may be untrusted (e.g., have an untrusted operating system). User identification or validation may also be provided, for example via inputs received via a user interface.

Claims

1. A substantially portable computerized device adapted to permit ad hoc security associations to exist with other computerized devices that may or may not have communicated previously with said portable computerized device, comprising:

a processing apparatus in communication with a memory;

a first computer program operative to run on said portable device adapted to establish an ad hoc security association between said portable device and another remote device, said first computer program comprising a cryptographic data exchange algorithm adapted to cause said portable device to transmit cryptographic data generated substantially under control of said portable device to said another remote device while establishing said association;

a second computer program operative to run on said portable device and adapted to encrypt data sent to said another device using at least one cryptographic key; and

a third computer program operative to run on said portable device and adapted to append said data with an appended message element, said appended message element utilized by said another device for at least data integrity.

2. The device of claim 1, wherein said another device compares said appended message element generated by said portable device with a second message element generated by said another device.

3. The device of claim 2, wherein said appended message element is included within a message sent from said portable device, said message further comprising said encrypted data encrypted by at least one cryptographic key.

4. The device of claim 2, wherein said establishment of an association comprises a mutual authentication procedure, said mutual authentication based on evaluating respective ones of information uniquely associated with said devices.

5. The device of claim 1, wherein said portable device comprises an untrusted operating device, and is physically non-secure.

6. The device of claim 1, wherein said portable device is configured not to pass data from said portable device over said network until said portable device is properly authenticated to said second device based on one or more cryptographic data elements.

7. The device of claim 1, wherein said portable device is further adapted to dynamically generate at least one encryption key for each security association, said act of generating not requiring intervention by a network administrator or other entity.

8. The device of claim 1, wherein said second and third computer programs are disposed logically within a software stack of said portable device below the Network Layer thereof.

9. The device of claim 1, wherein said association comprises a multi-way authentication process, wherein said portable device is adapted to authenticate said another device, and further adapted to authenticate itself to said another device.

10. The device of claim 1, wherein said portable device further comprises a cryptographic element exchange algorithm adapted to generate and transmit random data to said another device.

11. The device of claim 10, wherein said transmission of said random data is associated with a procedure that permits both said portable device and said another device to possess encryption keys that permit the two devices to decrypt encrypted data sent by the other.

12. The device of claim 1, wherein said portable device comprises a network interface, said interface adapted to communicate with said another device over an untrusted medium.

13. The device of claim 12, wherein said portable device communicates with said another device over said untrusted medium without using an intermediary entity or apparatus.

14. The device of claim 1, wherein said portable device can establish said association with said another device without accessing any other third entity.

15. The device of claim 1, wherein said portable device and said another device can mutually authenticate one another without accessing any third entity for cryptographic information.

16. The device of claim 1, wherein said portable device can establish said association with said second device without accessing any other third entity for cryptographic information.

17. The device of claim 16, wherein said second and third computer programs are disposed logically within a software stack of said portable device above the Physical Layer thereof.

18. The device of claim 17, wherein said second and third computer programs are disposed logically within a software stack of said portable device below the Network Layer thereof.

19. A computerized device, comprising:

a processor with an untrusted operating system running thereon;

a first routine operative to run on said computerized device and adapted to obtain at least one address for said computerized device after said computerized device is placed in data communication with at least one another via an untrusted medium;

a second routine operative to run on said computerized device and adapted to establish a security association between said computerized device and a second device, said second computer program comprising an authentication algorithm adapted to cause said computerized device and said second device to exchange cryptographic data over an unsecure network, said data being substantially unique to said association and comprising at least one random number;

a third routine operative to run on said computerized device and adapted to seal or encrypt data sent from said computerized device using at least one cryptographic key; and

a fourth routine operative to run on said computerized device and adapted to evaluate data sent from said second device for at least data integrity.

20. The device of claim 19, wherein said computerized device, as part of establishing said association, utilizes random data that is transmitted from said second device.

21. The device of claim 19, where said computerized device further comprises a routine adapted to identify or validate a user based on at least one of:

(i) a password;

or (ii) a unique identifier, input by the user via a user interface.

22. A computerized device, comprising:

a processor;

a first computer program operative to run on said device and adapted to obtain at least one temporary address for said device;

a second computer program operative to run on said device and adapted to establish a non-permanent security association between said device and a second device, said second computer program comprising a cryptographic data exchange algorithm adapted to cause said device and said second device to exchange cryptographic data, said data being substantially unique to said security association;

a third computer program operative to run on said device and adapted to seal or encrypt data sent from said device using at least one cryptographic key;

a fourth computer program adapted to identify or validate a user via one or more inputs received via said used interface before said association can be established;

a fifth computer program adapted to authenticate said second device and further adapted to facilitate an authentication of itself to said second device; and

a sixth computer program adapted to dynamically generate at least one encryption key for each security association, said act of generating not requiring intervention by a network administrator;

wherein said device can establish said association with said second device without accessing any entity other than said second device for cryptographic information.

23. A portable computerized device, comprising:

a processing apparatus;

a user interface adapted to receive user inputs;

a first computer program operative to run on said portable device and adapted to obtain at least one temporary address for said portable device;

a second computer program operative to run on said portable device and adapted to establish a non-permanent security association between said portable device and a second device, said second computer program comprising a cryptographic data exchange algorithm in which said portable device and said second device exchange cryptographic data via a physically non-secure network, said data being substantially unique to said security association;

a third computer program operative to run on said portable device and adapted to seal or encrypt data sent from said portable device using at least one cryptographic key; and

a fourth computer program adapted to identify or validate a user via inputs received via said used interface before said association can be established, said fourth computer program adapted to identify a user based at least in part on a cryptographic element associated with said portable device.

24. The device of claim 23, wherein said portable device comprises an untrusted operating system, and is physically non-secure.

25. The device of claim 23, wherein said portable device is configured not to pass data from said portable device until said second device is properly authenticated to said portable device.

26. The device of claim 25, wherein said portable and second devices are mutually authenticated with one another.

27. The device of claim 23, wherein said portable device is adapted to dynamically generate at least one encryption key for each security association, said act of generating not requiring intervention by a network administrator.

28. The device of claim 23, wherein said second and third computer programs are disposed logically within a software stack of said portable device above the Physical Layer thereof.

29. The device of claim 28, wherein said second and third computer programs are disposed logically within a software stack of said portable device below the Network Layer thereof.

30. The device of claim 28, wherein said second and third computer programs are disposed logically within a software stack of said portable device below the Transport Layer thereof.

31. The device of claim 23, wherein said association comprises a multi-way authentication process, wherein said portable device is adapted to authenticate said second device, and further adapted to authenticate itself to said second device.

32. The device of claim 23, wherein said portable device further comprises an algorithm adapted to generate and transmit random data to said second device.

33. The device of claim 32, wherein said transmission of said random data is associated with said data exchange algorithm that permits both said portable and second devices to possess encryption keys that permit the two devices to decrypt encrypted data sent by the other.

34. The device of claim 23, wherein said portable device comprises a network interface, said interface adapted to communicate with said second device over an untrusted network.

35. The device of claim 34, wherein said portable device communicates with said second device over said untrusted network without using an intermediary entity or apparatus.

36. The device of claim 23, wherein said portable device can establish said association with said second device without accessing any other entity.

37. The device of claim 23, wherein said portable device can establish said association with said second device without accessing any other entity for cryptographic information.

38. The device of claim 37, wherein said portable and second devices are mutually authenticated with one another.

39. The device of claim 38, wherein said second and third computer programs are disposed logically within a software stack of said portable device above the Physical Layer thereof.

40. The device of claim 39, wherein said second and third computer programs are disposed logically within a software stack of said portable device below the Network Layer thereof.

41. The device of claim 40, wherein said portable device communicates with said second device without using an intermediary entity or apparatus.

42. A portable computerized device, comprising:

processing means;

a user interface adapted to receive user inputs;

a first software means operative to run on said portable device for obtaining at least one temporary address for said portable device;

a second software means operative to run on said portable device for establishing a non-permanent security association between said portable device and a second device, said portable device also comprising cryptographic data exchange means in which said portable device and said second device exchange cryptographic data via a physically non-secure network, said data being substantially unique to said security association;

a third software means operative to run on said portable device for sealing or encrypting data sent from said portable device using at least one cryptographic key; and

a fourth software means adapted to identify or validate a user via inputs received via said used interface before said association can be established, said fourth means adapted to identify a user based at least in part on a cryptographic element associated with said portable device.

43. The device of claim 42, wherein said portable device comprises an untrusted operating system, and is physically non-secure.

44. The device of claim 42, wherein said portable device is configured not to pass message data from said portable device until said second device is properly authenticated to said portable device.

45. The device of claim 44, wherein said portable and second devices are mutually authenticated with one another.

46. The device of claim 42, wherein said portable device is adapted to dynamically generate at least one encryption key for each security association, said generation not requiring intervention by a network administrator.

47. The device of claim 42, wherein said second and third software means are disposed logically within a software stack of said portable device above the Physical Layer thereof.

48. The device of claim 47, wherein said second and third software means are disposed logically within a software stack of said portable device below the Network Layer thereof.

49. The device of claim 47, wherein said second and third software means are disposed logically within a software stack of said portable device below the Transport Layer thereof.

50. The device of claim 42, wherein said association comprises a multi-way authentication process, wherein said portable device is adapted to authenticate said second device, and further adapted to authenticate itself to said second device.

51. The device of claim 42, wherein said portable device further comprises means for generating and means for transmitting random data to said second device.

52. The device of claim 51, wherein said transmission of said random data is associated with said data exchange means that permits both said portable and second devices to possess encryption keys that permit the two devices to decrypt encrypted data sent by the other.

53. The device of claim 42, wherein said portable device comprises a network interface, said interface adapted to communicate with said second device over an untrusted network.

54. The device of claim 53, wherein said portable device communicates with said second device over said untrusted network without using an intermediary entity or apparatus.

55. The device of claim 42, wherein said portable device can establish said association with said second device without accessing any other entity.

56. The device of claim 42, wherein said portable device can establish said association with said second device without accessing any other entity for cryptographic information.

57. The device of claim 56, wherein said portable and second devices are mutually authenticated with one another.

58. The device of claim 57, wherein said second and third software means are disposed logically within a software stack of said portable device above the Physical Layer thereof.

59. The device of claim 48, wherein said second and third software means are disposed logically within a software stack of said portable device below the Network Layer thereof.

60. The device of claim 59, wherein said portable device communicates with said second device without using an intermediary entity or apparatus.