Optional compression of secure network traffic

• US 9,461,971 B1
• Filed: 07/10/2014
• Issued: 10/04/2016
• Est. Priority Date: 07/10/2014
• Status: Active Grant

• Current Assignee: Anuvu IP Holdings LLC, Anuvu Operations LLC (Marlin Holding Ltd. (Hong Kong))
• Original Assignee: EMC Satcom Technologies Incorporated
• Inventors: Wise, Robert M
• Primary Examiner(s): Waliullah, Mohammed
• Application Number:
  US14/328,563
• Time in Patent Office: 817 Days
• US Class Current: 1/1
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/0471 applying encryption by an intermediary, e.g. receiving clear information at the intermediary and encrypting the received information at the intermediary before forwarding
• CPC Class Codes: H04W 12/037 of the control plane, e.g. signalling traffic

Abstract

A system includes a shore based security proxy to transmit and receive encrypted network traffic on behalf of users who opt in. The shore-based security proxy includes an Internet interface and a data compander. The system further includes a compander on a mobile vessel comprising a satellite interface and a local area network (LAN) interface, and logic to exchange uncompressed, unencrypted traffic over the LAN interface between user devices on the mobile vessel and the compander on the mobile vessel; and logic for the shore based compander to exchange compressed, encrypted data with the compander on the mobile vessel over the satellite interface.

Claims

1. A system comprising:

a fixed location encryption proxy located off a mobile vessel and coupled to communicate with a user device on the mobile vessel;

a fixed location compander located off the mobile vessel and coupled to communicate with the fixed location encryption proxy;

a mobile compander located on the mobile vessel;

the fixed location encryption proxy comprising logic to intercept a request for encrypted network traffic from the user device, and only if the user device is associated with a passenger of the mobile vessel who has opted into utilizing the fixed location encryption proxy, to receive the encrypted network traffic on behalf of the user device and to decrypt the encrypted network traffic into decrypted network traffic and to communicate the decrypted network traffic to the fixed location compander;

the fixed location compander comprising logic to compress the decrypted network traffic from the fixed location encryption proxy into compressed traffic and to communicate the compressed traffic to the mobile compander; and

the mobile compander comprising logic to uncompress the compressed traffic from the fixed location compander into uncompressed traffic and to communicate the uncompressed traffic to the user device;

wherein a user proxy comprising logic to inspect unencrypted traffic and assign a quality of service priority (QoS priority) to the unencrypted traffic based on content inspection of the unencrypted traffic and the user proxy selectively alters unencrypted traffic by reducing resolution or quality of media based on the assigned QoS.

2. The system of claim 1, further comprising:

the user proxy comprising logic to inspect the unencrypted traffic and assign a quality of service priority (QoS priority) to the unencrypted traffic based on content inspection of the unencrypted traffic and settings for the passenger of the mobile vessel and to communicate the unencrypted traffic to the fixed location encryption proxy on behalf of the user device.

3. A method comprising:

operating a fixed location encryption proxy located off a mobile vessel to intercept a request for encrypted network traffic from a user device located on the mobile vessel;

only if the user device is associated with a passenger of the mobile vessel who has opted into utilizing the fixed location encryption proxy, operating the fixed location encryption proxy to receive the encrypted network traffic on behalf of the user device and to decrypt the encrypted network traffic into decrypted network traffic and to communicate the decrypted network traffic to a fixed location compander located off the mobile vessel;

operating the fixed location compander to compress the decrypted network traffic from the fixed location encryption proxy into compressed traffic and to communicate the compressed traffic to a mobile compander located on the mobile vessel; and

operating the mobile compander to uncompress the compressed traffic from the fixed location compander into uncompressed traffic and to communicate the uncompressed traffic to the user device;

wherein a user proxy comprising logic to inspect unencrypted traffic and assign a quality of service priority (QoS priority) to the unencrypted traffic based on content inspection of the unencrypted traffic and the user proxy selectively alters unencrypted traffic by reducing resolution or quality of media based on the assigned QoS.

4. The method of claim 3, further comprising:

the user proxy comprising logic to inspect the unencrypted traffic and assign a quality of service priority (QoS priority) to the unencrypted traffic based on content inspection of the unencrypted traffic and settings for the passenger of the mobile vessel and to communicate the unencrypted traffic to the fixed location encryption proxy on behalf of the user device.