Detection of encrypted packet streams using a timer
First Claim
Patent Images
1. A computer implemented method, comprising:
- inferring a type of data within an encrypted stream of packets based on detecting an observable parameter, the observable parameter being observable despite encryption obscuring contents of the encrypted stream of packets, wherein the observable parameter describes some characteristic that might be observed within the stream of packets, wherein the observable parameter being observable despite encryption obscuring contents of the encrypted stream of packets;
establishing a timer to provide a time interval during which no further inferring of the type of data within the encrypted stream of packets is performed;
processing the encrypted stream of packets until expiration of the time interval, despite a change in the type of data; and
maintaining the type of inferred data until expiration of the time interval, despite a change in the observable parameter, and applying quality of service processing until expiration of the time interval, despite a change in the observable parameter,wherein inferring the type of data and establishing the timer are performed on at least one processor.
1 Assignment
0 Petitions
Accused Products
Abstract
Methods, systems, and devices are disclosed for detecting encrypted Internet Protocol packet streams. The type of data within an encrypted stream of packets is inferred using an observable parameter. The observable parameter is observable despite encryption obscuring the contents of the encrypted stream of packets. A timer is established that maintains settings despite changes in the type of inferred data.
68 Citations
17 Claims
-
1. A computer implemented method, comprising:
-
inferring a type of data within an encrypted stream of packets based on detecting an observable parameter, the observable parameter being observable despite encryption obscuring contents of the encrypted stream of packets, wherein the observable parameter describes some characteristic that might be observed within the stream of packets, wherein the observable parameter being observable despite encryption obscuring contents of the encrypted stream of packets; establishing a timer to provide a time interval during which no further inferring of the type of data within the encrypted stream of packets is performed; processing the encrypted stream of packets until expiration of the time interval, despite a change in the type of data; and maintaining the type of inferred data until expiration of the time interval, despite a change in the observable parameter, and applying quality of service processing until expiration of the time interval, despite a change in the observable parameter, wherein inferring the type of data and establishing the timer are performed on at least one processor. - View Dependent Claims (2, 3, 4, 5, 6, 7)
-
-
8. A system comprising:
-
a processor coupled to a memory device, and a communications module stored in the memory device that when executed by the processor causes the processor to perform operations comprising; inferring a type of data within an encrypted stream of packets based on detecting an observable parameter the observable parameter being observable despite encryption obscuring the contents of the encrypted stream of packets, wherein the observable parameter describes some characteristic that might be observed within the stream of packets, wherein the observable parameter being observable despite encryption obscuring contents of the encrypted stream of packets; establishing a timer to provide a time interval during which no further estimation of the type of data within the encrypted stream of packets is performed; and maintaining the type of inferred data until expiration of the time interval, despite a change in the observable parameter, and applying quality of service processing until expiration of the time interval, despite a change in the observable parameter, wherein the communications module maintains the type of data until expiration of the time interval, despite a change in the observable parameter. - View Dependent Claims (9, 10, 11, 12, 13, 14)
-
-
15. An article of manufacture including a memory including instructions that, when executed by a processor, carries out a method comprising:
-
inferring a type of data within an encrypted stream of packets based on detecting an observable parameter the observable parameter being observable despite encryption obscuring contents of the encrypted stream of packets, wherein the observable parameter describes some characteristic that might be observed within the stream of packets, wherein the observable parameter being observable despite encryption obscuring contents of the encrypted stream of packets; establishing a timer to provide a time interval during which no further inferring of the type of data within the encrypted stream of packets is performed; processing the encrypted stream of packets until expiration of the time interval, despite a change in the type of data; and maintaining the type of inferred data until expiration of the time interval, despite a change in the observable parameter, and applying quality of service processing until expiration of the time interval, despite a change in the observable parameter, wherein inferring the type of data and establishing the timer are performed on at least one processor. - View Dependent Claims (16, 17)
-
Specification
-
- Resources
Litigation Campaign Assessment
Thank you for your request. You will receive a custom alert email when the Litigation Campaign Assessment is available.
×
-
Current AssigneeBellsouth Intellectual Property Corporation (AT&T, Inc.)
-
Original AssigneeAT&T Intellectual Property I LP (AT&T, Inc.)
-
InventorsAaron, Jeffrey A., Shrum, Edgar Vaughan Jr.
-
Primary Examiner(s)Gelagay, Shewaye
-
Application NumberUS13/569,634Publication NumberTime in Patent Office545 DaysField of SearchNoneUS Class Current713/160CPC Class CodesH04L 63/0428 wherein the data content is...
