Dynamic segregated secure data connection

• US 10,284,617 B2
• Filed: 06/29/2018
• Issued: 05/07/2019
• Est. Priority Date: 08/26/2015
• Status: Active Grant

• Current Assignee: AT&T Mobility II LLC (AT&T, Inc.)
• Original Assignee: AT&T Intellectual Property I LP (AT&T, Inc.), AT&T Mobility II LLC (AT&T, Inc.)
• Inventors: Dowlatkhah, Sangar, Lau, Erie Lai Har
• Primary Examiner(s): Sall, El Hadji M
• Assistant Examiner(s): Kassa, Elizabeth
• Application Number:
  US16/023,579
• Publication Number:
  US 20180324233A1
• Time in Patent Office: 312 Days
• Field of Search: 709219
• CPC Class Codes: H04L 63/00 Network architectures or network communication protocols for network security cryptographic mechanisms or cryptographic arrangements for secret or secure communication H04L9/00; network architectures or network communication protocols for wireless network security H04W12/00; security arrangements for protecting computers or computer systems against unauthorised activity G06F21/00
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 63/166 at the transport layer
• CPC Class Codes: H04L 65/60 Network streaming of media packets
• CPC Class Codes: H04L 65/61 for supporting one-way streaming services, e.g. Internet radio
• CPC Class Codes: H04L 69/03 Protocol definition or specification protocol conformance testing H04L1/244
• CPC Class Codes: H04W 4/50 Service provisioning or reconfiguring

Abstract

A system can perform operations including receiving a first data stream from a first device, wherein the first data stream is associated with an active session between the first device and a mobile network and wherein the first data stream is associated with a first incoming port. The system can also receive a second data stream from the first device, wherein the second data stream is associated with the active session, and wherein the second data stream is associated with a second incoming port. The system can also determine a third port and a fourth port that are outgoing ports that respectively correspond to the first and second ports. The system can also transmit the first data stream to a second device via the third port and transmit the second data stream to a third device via the fourth port.

Claims

1. A system, comprising:

a processor; and

a memory that stores executable instructions that, when executed by the processor, facilitate performance of operations, comprising;

determining, based on a first indicator, in a first data stream received from a first device, that the first data stream corresponds to a first connection type associated with personal healthcare information;

determining, based on a second indicator, in a second data stream received from the first device, that the second data stream corresponds to a second connection type not related to personal healthcare information, wherein the first data stream and the second data stream are associated with an active session and are received concurrently;

transmitting the first data stream to a second device; and

transmitting the second data stream to a third device.

2. The system of claim 1, wherein the first data stream and the second data stream are associated with a first application executed by the first device.

3. The system of claim 1, wherein the first data stream is associated with a first application executed by the first device and the second data stream is associated with a second application executed by the first device that is different from the first application.

4. The system of claim 1, wherein the first data stream and the second data stream are received via a secure connection, and wherein the secure connection utilizes a transport layer security protocol.

5. The system of claim 1, wherein the operations further comprise:

sending a data stream connection request to the second device and to the third device via a first port and a second port.

6. The system of claim 5, wherein the operations further comprise:

establishing traffic protocol connections for the first data stream and the second data stream in response to receiving affirmative responses to the data stream connection request from the second device and the third device.

7. The system of claim 1, wherein the operations further comprise:

determining that a first incoming port and a second incoming port are based on an application associated with the first data stream and the second data stream.

8. The system of claim 1, wherein the operations further comprise:

determining that a first incoming port and a second incoming port are based on a type of content of the first data stream or the second data stream.

9. The system of claim 1, wherein the second device is selected based on the first port and the third device is selected based on the second port.

10. A method, comprising:

determining, by a network device comprising a processor, based on a first indicator, comprised in a first data stream received from a first device, that the first data stream corresponds to a first connection type associated with personal healthcare information;

determining, by the network device, based on a second indicator, comprised in a second data stream received from the first device, that the second data stream corresponds to a second connection type not related to personal healthcare information, wherein the first data stream and the second data stream are associated with an active session and are received concurrently;

transmitting, by the network device, the first data stream to a second device; and

transmitting, by the network device, the second data stream to a third device.

11. The method of claim 10, wherein the first data stream and the second data stream are associated with a first application executed by the first user equipment.

12. The method of claim 10, wherein the first data stream is associated with a first application of the first user equipment and the second data stream is associated with a second application of the first user equipment.

13. The method of claim 10, further comprising:

transmitting, by the network device, data stream connection requests to the second user equipment and the third user equipment via a first port and a second port respectively.

14. The method of claim 13, further comprising:

facilitating, by the network device, traffic protocol connections for the first data stream and the second data stream in response to receiving affirmative responses to the data stream connection requests from the second user equipment and the third user equipment.

15. The method of claim 10, further comprising:

identifying, by the network device, a first incoming port and a second incoming port based on an application associated with the first data stream and the second data stream.

16. The method of claim 10, further comprising:

identifying, by the network device, a first incoming port and a second incoming port based on a first type of content of the first data stream or a second type of content of the second data stream.

17. The method of claim 10, wherein the first data stream is associated with a first service provided by an application and the second data stream is associated with a second service provided by the application.

18. A non-transitory machine-readable storage medium, comprising executable instructions that, when executed by a processor, facilitate performance of operations, comprising:

determining, based on a first indicator that a first data stream corresponds to a first connection type associated with personal healthcare information, wherein the first data stream comprises the first indicator and is received from a first device;

determining, based on a second indicator that a second data stream corresponds to a second connection type not related to personal healthcare information, wherein the second data stream comprises the second indicator and is received from the first device, and wherein the first data stream and the second data stream are associated with an active session and are received concurrently;

transmitting, the first data stream to a second device; and

transmitting, the second data stream to a third device.

19. The non-transitory machine-readable storage medium of claim 18, wherein the operations further comprise:

transmitting a data stream connection request to the second user equipment and the third user equipment via a first port and a second port; and

facilitating traffic protocol connections for the first data stream and the second data stream in response to receiving affirmative responses to the data stream connection request from the second user equipment and the third user equipment.

20. The machine-readable storage medium of claim 18, wherein the operations further comprise:

identifying a first incoming port and a second incoming port based on an application associated with the first data stream and the second data stream.