Secure proximity verification of a node on a network
First Claim
1. A method of determining proximity of a target node to a source node in a network for imposing restrictions on the distribution of files from the source node to the target node based on the determined proximity, the method comprising the steps of:
- preparing a first response at the target node prior to receiving any part of a query from the source node,communicating the query from the source node to the target node,communicating the first response from the target node to the source node, immediately after the query is received and before the query is processed at the target node,receiving the first response at the source node,processing the query at the target node to produce therefrom a second response that facilitates a verification of the target node and its first response,communicating the second response from the target node to the source node,determining a measure of communication time between communicating the query and receiving the first response, anddetermining the proximity of the target node based on the measure of communication time,wherein determining proximity includes comparing the measure of communication time with a threshold value, and if the communication time is below the threshold value, the target node is determined to be local, otherwise the target node is determined to be remote,wherein the source node uses the remote/local proximity determination to control subsequent communications with the target node based on the determined proximity,and wherein selected files are permitted to be transferred from the source node to the target node only when the target node is determined to be local.
0 Assignments
0 Petitions
Accused Products
Abstract
A system and method determines the proximity of the target node to the source node from the time required to communicate messages within the node-verification protocol. The node-verification protocol includes a query-response sequence, wherein the source node communicates a query to the target node, and the target node communicates a corresponding response to the source node. The target node is configured to communicate two responses to the query: a first response that is transmitted immediately upon receipt of the query, and a second response based on the contents of the query. The communication time is determined based on the time duration between the transmission of the query and receipt of the first response at the source node and the second response is compared for correspondence to the query, to verify the authenticity of the target node.
6 Citations
24 Claims
-
1. A method of determining proximity of a target node to a source node in a network for imposing restrictions on the distribution of files from the source node to the target node based on the determined proximity, the method comprising the steps of:
-
preparing a first response at the target node prior to receiving any part of a query from the source node, communicating the query from the source node to the target node, communicating the first response from the target node to the source node, immediately after the query is received and before the query is processed at the target node, receiving the first response at the source node, processing the query at the target node to produce therefrom a second response that facilitates a verification of the target node and its first response, communicating the second response from the target node to the source node, determining a measure of communication time between communicating the query and receiving the first response, and determining the proximity of the target node based on the measure of communication time, wherein determining proximity includes comparing the measure of communication time with a threshold value, and if the communication time is below the threshold value, the target node is determined to be local, otherwise the target node is determined to be remote, wherein the source node uses the remote/local proximity determination to control subsequent communications with the target node based on the determined proximity, and wherein selected files are permitted to be transferred from the source node to the target node only when the target node is determined to be local. - View Dependent Claims (2, 3, 4, 5, 6, 7, 8)
-
-
9. A node on a network including:
-
A processor configured to prepare a first response at the node prior to receiving any part of a query from a source node; and a communication device configured to; receive the query from the source node, transmit the first response from the node to the source node, immediately after the query is received and before the processor processes the query, and transmit a second response from the node to the source node, wherein the processor is further configured to process the query and to produce therefrom the second response that facilitates a verification of the node, to the source node, wherein the source node determines the proximity of the node based on a measure of communication time, by comparing the measure of communication time with a threshold value, and if the communication time is below the threshold value, the node is determined to be local, otherwise the node is determined to be remote, and wherein the source node uses the remote/local proximity determination to control subsequent communications with the node based on the determined proximity, and wherein the communication device is further configured to; receive selected files from the source node only when the node is determined to be local. - View Dependent Claims (10, 11, 12, 13, 14, 15)
-
-
16. A node on a network including:
-
a communication device configured to transmit a query to a target node and to receive a first response and a second response from the target node; and a processor configured to; measure a communication time between transmitting the query and receiving the first response, determine a proximity of the target node relative to the node based on the measured communication time, said proximity determination including comparing the measured communication time with a threshold value, and if the measured communication time is below the threshold value, the target node is determined to be local, otherwise the target node is determined to be remote and verify the target node based on the second response wherein the node uses the proximity determination to control subsequent communications with the target node based on the determined proximity, in that selected files are permitted to be transferred from the source node to the target node only when the target node is determined to be local. - View Dependent Claims (17, 18, 19, 20, 21, 22, 23, 24)
-
Specification