Communications network with smart card

• US 8,631,165 B2
• Filed: 01/31/2012
• Issued: 01/14/2014
• Est. Priority Date: 07/31/2001
• Status: Active Grant

• Current Assignee: Callahan Cellular LLC (Intellectual Ventures LLC)
• Original Assignee: Momin Development Fund LLC (Intellectual Ventures LLC)
• Inventors: Guthery, Scott B.
• Primary Examiner(s): DONAGHUE, LARRY D
• Application Number:
  US13/362,173
• Publication Number:
  US 20120163401A1
• Time in Patent Office: 714 Days
• Field of Search: 709/250, 709/246
• US Class Current: 709/250
• CPC Class Codes: G06F 21/606 by securing the transmission between two devices or processes
• CPC Class Codes: G06F 2221/2153 Using hardware token as a secondary aspect
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 67/04 specially adapted for terminals or networks with limited capabilities; specially adapted for terminal portability
• CPC Class Codes: H04L 69/22 Parsing or analysis of headers
• CPC Class Codes: H04L 69/329 in the application layer [OSI layer 7]
• CPC Class Codes: H04L 9/40 Network security protocols
• CPC Class Codes: H04W 12/08 Access security

Abstract

Methods and systems are disclosed to enable a smart card having relatively low data rate and low computational power to control a high data rate communications channel without degradation of performance. The smart card and an associated monitor/interface, which can be implemented in a network access device, are interposed between transmitting and receiving nodes in a network, and configured to intervene when conditions of rules stored in the smart card are met. For example, the smart card can intervene when a packet header indicates sufficient change in information, such as the exceeding of a predefined threshold or a requirement for user authorization/authentication. In one mode of regulating packet flow, the smart card selectively enables or disables packet transmission, reception, or both, according to the rules stored therein.

Claims

1. A method comprising:

storing a contingency rule in a smart card; and

regulating, using the smart card, an information packet in a communication network, wherein the regulating is based on a predefined change in the information packet from a previous information packet, the predefined change satisfying the contingency rule.

2. The method of claim 1, wherein the contingency rule comprises a predefined threshold of changes in a header of the information packet.

3. The method of claim 1, wherein regulating the information packet comprises disabling an information packet transmitter.

4. The method of claim 1, wherein regulating the information packet comprises disabling an information packet receiver.

5. The method of claim 1, wherein the information packet comprises a data block, and wherein regulating the information packet comprises:

intercepting the information packet;

modifying the data block; and

re-transmitting the information packet with the modified data block.

6. The method of claim 5, wherein modifying the data block comprises decrypting the data block.

7. The method of claim 1, wherein the information packet comprises a header block, and wherein regulating the information packet comprises:

intercepting the information packet;

modifying the header block; and

re-transmitting the information packet with the modified header block.

8. The method of claim 7, wherein modifying the header block comprises decrypting the header block.

9. The method of claim 1, further comprising:

determining that an authorization code is required;

receiving the authorization code in response to a determination that the authorization code is required; and

transferring the information packet in response to a determination that the authorization code is the correct authorization code.

10. The method of claim 9, further comprising transferring the information packet in response to a determination that the authorization code is not required.

11. The method of claim 9, further comprising rejecting the information packet in response to a determination that the authorization code is not the correct authorization code.

12. The method of claim 11, wherein rejecting the information packet comprises disabling an information packet transmitter.

13. The method of claim 11, wherein rejecting the information packet comprises modifying the information packet.

14. A method comprising:

receiving packet header information at a monitor;

determining, at the monitor, whether the packet header information indicates that a packet header is compressed;

determining, at the monitor, that a rejection rule associated with a smart card has been satisfied in response to a determination that the packet header is not compressed; and

taking an action, by the monitor, regarding a packet associated with the packet header information in response to a determination that the rejection rule has been satisfied.

15. The method of claim 14, wherein the rejection rule comprises a reference to an improper access site.

16. The method of claim 14, wherein taking an action comprises preventing a network access device from transmitting the packet.

17. The method of claim 14, wherein taking an action packet comprises:

altering the packet such that the altered packet is in a usable form; and

transmitting the altered packet.

18. The method of claim 17, wherein altering the packet comprises altering a header of the packet.

19. The method of claim 17, wherein altering the packet comprises altering data of the packet.

20. The method of claim 17, wherein altering the packet comprises decrypting the packet.