Method and system for providing security using a loopback interface

• US 10,091,244 B2
• Filed: 06/30/2016
• Issued: 10/02/2018
• Est. Priority Date: 02/27/2015
• Status: Active Grant

• Current Assignee: Konica Minolta Laboratory U.S.A., Inc. (Konica Minolta Inc.)
• Original Assignee: Konica Minolta Laboratory U.S.A., Inc. (Konica Minolta Inc.)
• Inventors: Perez, Maria
• Primary Examiner(s): Feild, Lynn D
• Assistant Examiner(s): Cattungal, Dereena T
• Application Number:
  US15/197,936
• Publication Number:
  US 20160308911A1
• Time in Patent Office: 824 Days
• Field of Search: 726 1
• CPC Class Codes: G06F 21/608 Secure printing
• CPC Class Codes: H04L 12/40 Bus networks
• CPC Class Codes: H04L 63/0254 Stateful filtering
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/0485 Networking architectures for enhanced packet encryption processing, e.g. offloading of IPsec packet processing or efficient security association look-up
• CPC Class Codes: H04L 63/164 at the network layer
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227

Abstract

A method of providing security for data using a loopback interface, the method includes setting a security policy on a host device and a client device, the security policy configuration including a first loopback interface and an IP address for the host device and a second loopback interface and an IP address for the client device; sending an IP packet to the first loopback interface on the host device, wherein the first loopback interface configures the packet to be routed to the second loopback interface; sending the IP packet from the first loopback interface to a security module on the host device for encryption pursuant to a security protocol; filtering the encrypted packet received from first loopback interface and configuring the encrypted packet be sent to the client device; and sending the encrypted packet from the host device to the client device.

Claims

1. A method of providing security for data using a loopback interface, the method comprising:

setting an Internet Protocol Security (IPsec) security policy configuration on a host device and a client device, the security policy configuration including a first loopback interface and an IP address for the host device and a second loopback interface and an IP address for the client device;

sending an HTTP/IPP packet to the first loopback interface on the host device, wherein the first loopback interface configures the packet to be routed to the second loopback interface;

sending the HTTP/IPP packet from the first loopback interface to a security module on the host device for encryption pursuant to an IPsec security protocol;

filtering the encrypted packet received from the first loopback interface on the host device and configuring the encrypted packet to be sent via Universal Serial Bus (USB) protocol over a USB connection to the client;

sending the encrypted packet from the host device to the client device over the USB connection;

injecting the encrypted packet into the second loopback interface on the client device;

sending the encrypted packet from the second loopback interface on the client device to the security module on the client device for decryption; and

sending the decrypted packet to the second loopback interface on the client device, wherein the packet is received on the client device.

2. The method of claim 1, comprising:

setting the first and second loopback interfaces with IP addresses of 127.0.0.2 and 127.0.0.3.

3. The method of claim 1, comprising:

sending an IP response packet to the second loopback interface on the client device, wherein the second loopback interface configures the IP response packet to be routed to the first loopback interface on the host device;

sending the response packet to a security module on the client device for encryption;

filtering the encrypted response packet received from the security module on the client device and configuring the encrypted response packet to be sent via the USB connection;

sending the encrypted response packet to the host device over the USB connection;

injecting the encrypted response packet into the first loopback interface;

sending the encrypted response packet to the security module on the host device for decryption; and

receiving the decrypted response packet from the security module on the host device and filtering the response packet.

4. The method of claim 3, wherein the host device is a printer and the client device is a personal computer, and further comprising:

attaching print data to the encrypted response packet.

5. The method of claim 3, comprising:

configuring only the host device and the client device to decrypt the encrypted packet and the encrypted response packet.

12. The method of claim 1, comprising:

setting the IPsec policy configuration with a manual key configuration.

13. The method of claim 1, comprising:

setting the IPsec policy configuration with an automatic key configuration.

6. A non-transitory computer readable medium containing a computer program having computer readable code embodied to carry out a method of providing security for data using a loopback interface, the method comprising:

setting an Internet Protocol Security (IPsec) security policy configuration on a host device, the security policy configuration including a first loopback interface and an IP address for the host device;

sending an HTTP/IPP packet to the first loopback interface on the host device, wherein the first loopback interface configures the packet to be routed to a second loopback interface on a client device, wherein the second loopback interface is configured to decrypt the packet;

sending the HTTP/IPP packet from the first loopback interface to a security module on the host device for encryption pursuant to an IPsec security protocol;

filtering the encrypted packet received from first loopback interface on the host device and configuring the encrypted packet be sent via Universal Serial Bus (USB) protocol over a USB connection to the client; and

sending the encrypted packet from the host device to the client device over the USB connection.

7. The computer readable medium of claim 6, comprising:

setting the first loopback interface with an IP address of 127.0.0.2.

8. The computer readable medium of claim 6, comprising:

receiving an encrypted response packet from the client device over the USB connection;

injecting the encrypted response packet into the first loopback interface;

sending the encrypted response packet to the security module for decryption; and

receiving the decrypted response packet from the security module and filtering the response packet.

14. The computer readable medium of claim 6, comprising:

setting the IPsec policy configuration with a manual key configuration.

15. The computer readable medium of claim 6, comprising:

setting the IPsec policy configuration with an automatic key configuration.

9. A non-transitory computer readable medium containing a computer program having computer readable code embodied to carry out a method of providing security for data using a loopback interface, the method comprising:

setting an Internet Protocol Security (IPsec) security policy configuration on a client device, the security policy configuration including a second loopback interface and an IP address for the client device;

receiving an encrypted HTTP/IPP packet from a host device via Universal Serial Bus (USB) protocol over a USB connection, the HTTP/IPP packet being encrypted pursuant to an IPsec security protocol;

injecting the encrypted packet into the second loopback interface on the client device;

sending the encrypted packet from the second loopback interface on the client device to the security module on the client device for decryption; and

sending the decrypted packet to the second loopback interface on the client device, wherein the HTTP/IPP packet is received on the client device.

10. The computer readable medium of claim 9, comprising:

setting the second loopback interface with an IP address of 127.0.0.3.

11. The computer readable medium of claim 9, comprising:

sending an IP response packet to the second loopback interface on the client device, wherein the second loopback interface configures the IP response packet to be routed to a first loopback interface on the host device;

sending the response packet to a security module for encryption;

filtering the encrypted response packet received from the security module; and

sending the encrypted response packet to the host device over the USB connection.

16. The computer readable medium of claim 9, comprising:

setting the IPsec policy configuration with a manual key configuration.

17. The computer readable medium of claim 9, comprising:

setting the IPsec policy configuration with an automatic key configuration.