Creating and using secure communications channels for virtual universes

• US 8,612,750 B2
• Filed: 08/15/2012
• Issued: 12/17/2013
• Est. Priority Date: 12/02/2008
• Status: Expired due to Fees

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Garcia, Kelley K., Hamilton, Rick A. II, Newhook, Richard J., Ramsey, Martin S., Rangel, Raull, Seaman, James W.
• Primary Examiner(s): KOSOWSKI, CAROLYN M
• Application Number:
  US13/586,362
• Publication Number:
  US 20130019094A1
• Time in Patent Office: 489 Days
• Field of Search: 713/160
• US Class Current: 713/160
• CPC Class Codes: H04L 63/0442 wherein the sending and receiving network entities apply asymmetric encryption, i.e. different keys for encryption and decryption cryptographic mechanisms or cryptographic arrangements for public-key encryption H04L9/30
• CPC Class Codes: H04L 63/0478 applying multiple layers of encryption, e.g. nested tunnels or encrypting the content with a first key and then with at least a second key cryptographic mechanisms or cryptographic arrangements using a plurality of keys or algorithms H04L9/14
• CPC Class Codes: H04L 67/131 Protocols for games, networked simulations or virtual reality
• CPC Class Codes: H04L 9/30 Public key, i.e. encryption algorithm being computationally infeasible to invert or user's encryption keys not requiring secrecy

Abstract

A system and method provides secure channels for communication in a virtual universe by employing a packet interception layer for incoming and outgoing data packets. A data path is defined and is sequentially encrypted with the public keys of servers in the path. Decryption and identification of the next server occurs in a sequential manner in which the path is known only to the sender.

Claims

1. A method for providing secure communication for a virtual universe client of a virtual universe, the method comprising:

monitoring a communication stream to and from the virtual universe client by a proxy component between the virtual universe client and a hosting network hosting the virtual universe, the communication stream comprising communication between avatars in the virtual universe, in which the virtual universe simulates one or more real world rules including at least one of gravity, topography, or locomotion, and in which users of the virtual universe interact with the simulated one or more real world rules thereof via the avatars; and

selectively encrypting a data packet of the communication stream, the data packet being sent by the virtual universe client to a destination, the selectively encrypting comprising;

encrypting the data packet with one or more public keys of one or more servers of the hosting network along a data path through which the data packet is to be transmitted to the destination; and

transmitting the encrypted data packet to a first server of the one or more servers of the hosting network;

wherein at least one data packet of the communication stream not selected for encryption passes to the virtual universe absent encryption.

2. The method of claim 1, further comprising:

receiving the sequentially encrypted data packet at the first server;

decrypting the data packet with a private key of the first server; and

removing client and first server identifying information from the data packet.

3. The method of claim 2, further comprising:

encrypting at the first server the packet from the removing step using public key information for a next server of the one or more servers in the data path; and

transmitting the data packet from the first server to the next server.

4. The method of claim 3, wherein the public key information for the next server is retrieved from a public source.

5. The method of claim 3, wherein the decrypting the data packet exposes the public key information of the next server, and wherein the next server is identified from the exposed public key information.

6. The method of claim 3, where a random delay is introduced prior to transmission of the data packet to the next server.

7. The method of claim 1, wherein the virtual universe client is provided with a window through which the secure communication is to be provided.

8. The method of claim 1, wherein a last server of the one or more servers in the data path performs:

decrypting the packet that the last server receives;

removing identifying information from the packet; and

transmitting the packet to the destination, the destination comprising an intended client.

9. The method of claim 1, wherein the selectively encrypting comprises encrypting contents of the data packet with a public key of the destination.

10. The method of claim 9, wherein the destination receives the data packet, decrypts the contents of the data packet using a private key of the destination to obtain decrypted data, and replaces the packet contents with the decrypted data.

11. The method of claim 10, wherein an intended virtual universe client of the destination is provided with a window through which the secure communication is provided, and wherein the intended virtual universe client of the destination displays the decrypted data in the window thereof.

12. The method of claim 1, wherein the communication stream comprises at least one data packet selected for encryption and the at least one data packet not selected for encryption.

13. A computer program product for providing secure communication for a virtual universe client of a virtual universe, the computer program product comprising:

a non-transitory storage medium readable by a processor and storing instructions for execution by the processor to perform a method comprising;

monitoring a communication stream to and from the virtual universe client by a proxy component between the virtual universe client and a hosting network hosting the virtual universe, the communication stream comprising communication between avatars in the virtual universe, in which the virtual universe simulates one or more real world rules including at least one of gravity, topography, or locomotion, and in which users of the virtual universe interact with the simulated one or more real world rules thereof via the avatars; and

selectively encrypting a data packet of the communication stream, the data packet being sent by the virtual universe client to a destination, the selectively encrypting comprising;

encrypting the data packet with one or more public keys of one or more servers of the hosting network along a data path through which the data packet is to be transmitted to the destination; and

transmitting the encrypted data packet to a first server of the one or more servers of the hosting network;

wherein at least one data packet of the communication stream not selected for encryption passes to the virtual universe absent encryption.

14. The computer program product of claim 13, wherein the virtual universe client is provided with a window through which the secure communication is to be provided.

15. The computer program product of claim 13, wherein the selectively encrypting comprises encrypting contents of the data packet with a public key of the destination, the encrypted contents for decryption by the destination, using a private key of the destination, to obtain decrypted data for display in a window of an intended virtual universe client of the destination, wherein the secure communication is provided through the window of the intended virtual universe client of the destination.

16. The computer program product of claim 13, wherein the communication stream comprises at least one data packet selected for encryption and the at least one data packet not selected for encryption.

20. The computer system of claim 13, wherein the communication stream comprises at least one data packet selected for encryption and the at least one data packet not selected for encryption.

17. A computer system for providing secure communication for a virtual universe client of a virtual universe, the computer system comprising:

a memory; and

a processor in communications with the memory, wherein the computer system is configured to perform;

monitoring a communication stream to and from the virtual universe client by a proxy component between the virtual universe client and a hosting network hosting the virtual universe, the communication stream comprising communication between avatars in the virtual universe, in which the virtual universe simulates one or more real world rules including at least one of gravity, topography, or locomotion, and in which users of the virtual universe interact with the simulated one or more real world rules thereof via the avatars; and

selectively encrypting a data packet of the communication stream, the data packet being sent by the virtual universe client to a destination, the selectively encrypting comprising;

encrypting the data packet with one or more public keys of one or more servers of the hosting network along a data path through which the data packet is to be transmitted to the destination; and

transmitting the encrypted data packet to a first server of the one or more servers of the hosting network;

wherein at least one data packet of the communication stream not selected for encryption passes to the virtual universe absent encryption.

18. The computer system of claim 17, wherein the virtual universe client is provided with a window through which the secure communication is to be provided.

19. The computer system of claim 17, wherein the selectively encrypting comprises encrypting contents of the data packet with a public key of the destination, the encrypted contents for decryption by the destination, using a private key of the destination, to obtain decrypted data for display in a window of an intended virtual universe client of the destination, wherein the secure communication is provided through the window of the intended virtual universe client of the destination.