Communications network with smart card

• US 8,316,157 B2
• Filed: 07/21/2009
• Issued: 11/20/2012
• Est. Priority Date: 07/31/2001
• Status: Active Grant

• Current Assignee: Callahan Cellular LLC (Intellectual Ventures LLC)
• Original Assignee: Momin Development Fund LLC (Intellectual Ventures LLC)
• Inventors: Guthery, Scott B.
• Primary Examiner(s): DONAGHUE, LARRY D
• Application Number:
  US12/507,036
• Publication Number:
  US 20090320104A1
• Time in Patent Office: 1,218 Days
• Field of Search: 709/250, 709/246
• US Class Current: 709/250
• CPC Class Codes: G06F 21/606 by securing the transmission between two devices or processes
• CPC Class Codes: G06F 2221/2153 Using hardware token as a secondary aspect
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 67/04 specially adapted for terminals or networks with limited capabilities; specially adapted for terminal portability
• CPC Class Codes: H04L 69/22 Parsing or analysis of headers
• CPC Class Codes: H04L 69/329 in the application layer [OSI layer 7]
• CPC Class Codes: H04L 9/40 Network security protocols
• CPC Class Codes: H04W 12/08 Access security

Abstract

Methods and systems are disclosed to enable a smart card having relatively low data rate and low computational power to control a high data rate communications channel without degradation of performance. The smart card and an associated monitor/interface, which can be implemented in a network access device, are interposed between transmitting and receiving nodes in a network, and configured to intervene when conditions of rules stored in the smart card are met. For example, the smart card can intervene when a packet header indicates sufficient change in information, such as the exceeding of a predefined threshold or a requirement for user authorization/authentication. In one mode of regulating packet flow, the smart card selectively enables or disables packet transmission, reception, or both, according to the rules stored therein. In another mode, the smart card, upon activation, provides rules and modifications for packet data, headers, or both. The rules and modifications can implement communication policies of the entity providing communication services to the user of the services, and can be stored in the smart card to prevent alteration or tampering.

Claims

1. A smart card, comprising:

a smart card memory configured to store at least one contingency rule,

wherein the smart card is configured to regulate an information packet in a communication network, based on a predefined change in the information packet from a previous information packet, the predefined change satisfying the at least one contingency rule.

2. The smart card of claim 1, wherein the at least one contingency rule comprises a predefined threshold.

3. The smart card of claim 1, wherein the smart card is further configured to regulate the information packet by disabling an information packet transmitter.

4. The smart card of claim 1, wherein the smart card is further configured to regulate the information packet by disabling an information packet receiver.

5. The smart card of claim 1, wherein the information packet comprises a data block, and wherein the smart card is configured to regulate the information packet by at least:

intercepting the information packet,

modifying the data block, and

re-transmitting the information packet with the modified data block.

6. The smart card of claim 5, wherein modifying the data block comprises decrypting the data block.

7. The smart card of claim 1, wherein the information packet comprises a header block, and wherein the smart card is configured to regulate the information packet by at least:

intercepting the information packet,

modifying the header block, and

re-transmitting the information packet with the modified header block.

8. The smart card of claim 7, wherein modifying the header block comprises decrypting the header block.

9. The smart card of claim 1, wherein the smart card is further configured to:

determine that an authorization code is required;

responsive to determining the authorization code is required, receive the authorization code; and

responsive to the authorization code being a correct authorization code, transfer the information packet.

10. The smart card of claim 9, wherein the smart card is further configured to:

responsive to determining the authorization code is not required, transfer the information packet.

11. The smart card of claim 9, wherein the smart card is further configured to:

responsive to determining the authorization code is not the correct authorization code, rejecting the information packet.

12. The smart card of claim 11, wherein rejecting the information packet comprises disabling an information packet transmitter.

13. The smart card of claim 11, wherein rejecting the information packet comprises modifying the information packet.

14. An apparatus comprising:

a monitor configured to;

receive packet header information;

determine whether the packet header information indicates a packet header is compressed;

responsive to determining that the packet header is not compressed, determine that a rejection rule has been satisfied; and

responsive to determining that the rejection rule has been satisfied, take an action regarding a packet associated with the packet header information.

15. The apparatus of claim 14, wherein the rejection rule comprises a reference to an improper access site.

16. The apparatus of claim 14, wherein the action regarding the packet comprises disabling a network access device from transmitting the packet.

17. The apparatus of claim 14, wherein the action regarding the packet comprises:

altering the packet to be in a usable form; and

transmitting the altered packet.

18. The apparatus of claim 17, wherein altering the packet comprises altering a header of the packet.

19. The apparatus of claim 17, wherein altering the packet comprises altering data of the packet.

20. The apparatus of claim 17, wherein altering the packet comprises decrypting the packet.

21. The apparatus of claim 14, further comprising a smart card memory configured to store the rejection rule.