DATA STREAM TRAFFIC CONTROL

• US 20150058622A1
• Filed: 08/20/2013
• Published: 02/26/2015
• Est. Priority Date: 08/20/2013
• Status: Active Grant

• Current Assignee: Hewlett-Packard Development Company, L.P. (HP Inc.)
• Original Assignee: Hewlett-Packard Development Company, L.P. (HP Inc.)
• Inventors: STURGILL, Malgorzata M, SIMSKE, Steven J
• Granted Patent: US 9,485,222 B2
• Time in Patent Office: Days
• US Class Current: 713/160
• CPC Class Codes: H04L 2209/42 Anonymization, e.g. involving pseudonyms
• CPC Class Codes: H04L 63/0421 Anonymous communication, i.e. the party's identifiers are hidden from the other party or parties, e.g. using an anonymizer
• CPC Class Codes: H04L 9/065 Encryption by serially and continuously modifying data stream elements, e.g. stream cipher systems, RC4, SEAL or A5/3

Abstract

Techniques related to data stream traffic control are disclosed herein. A bit equivalent entropy of an anonymized data stream is computed. Traffic of the data stream is controlled based on the value of the bit equivalent entropy.

Claims

1. A system for controlling data stream traffic, comprising:

a processor to;

process a data stream at least partially scrambled so as to anonymize data encoded in the data stream,

compute a bit equivalent entropy of the processed data stream; and

controlling traffic of the data stream based on the computed bit equivalent entropy.

2. The system of claim 1, wherein the processor is further to determine whether the data stream is encrypted based on the computed bit equivalent entropy.

3. The system of claim 2, wherein, upon the data stream being determined to be encrypted, the processor is further to check cryptographic security of the data stream based on the computed bit equivalent entropy.

4. The system of claim 3, further comprising an output to further transmit the data stream, the data stream being restricted of being further transmitted via the output upon data therein being determined to be cryptographically unsecure.

5. The system of claim 2, wherein, upon the data stream being determined not to be encrypted, the processor is further to classify the type of data encoded in the data stream based on the computed bit equivalent entropy value.

6. The system of claim 1, wherein the processor is further to scramble at least a portion of the data stream previous to the processing.

7. A method performed by a processor, comprising:

anonymizing a data stream; and

computing, by the processor, a bit equivalent entropy of the anonymized data stream; and

generating, by the processor, a value of the bit equivalent entropy of the anonymized data stream; and

controlling traffic of the data stream based on the generated value of the bit equivalent entropy.

8. The method of claim 7, wherein anonymizing data is performed without modifying entropy associated with the data stream.

9. The method of claim 8, wherein anonymizing data includes scrambling so as to anonymize data encoded in the data stream without modifying entropy associated with the data stream.

10. The method of claim 9, wherein

the data stream includes data encoded in a plurality of bytes;

scrambling the at least one portion of the data stream by randomly re-arranging bytes of the data stream; and

the bit equivalent entropy of the anonymized data stream using bytes as the data bin unit.

11. A computer software product comprising a tangible medium readable by a processor, the medium having stored thereon a set of instructions for controlling a data stream, the instructions comprising:

(a) a set of instructions which, when loaded into a memory and executed by the processor, causes processing anonymized data encoded in the data stream;

(b) a set of instructions which, when loaded into a memory and executed by the processor, causes computation of a bit equivalent entropy of the processed data stream; and

(c) a set of instructions which, when loaded into a memory and executed by the processor, causes determining whether the data stream is suitably encrypted based on the bit equivalent entropy.

(d) a set of instructions which, when loaded into a memory and executed by the processor, causes,

upon the data stream being determined to be suitably encrypted, allowing traffic containing the data stream, or

upon the data stream being determined as not being suitably encrypted, restricting traffic containing the data stream.

12. The product of claim 11, further comprising a set of instruction to anonymize the data stream via scrambling of at least a portion thereof.

13. The product of claim 11, wherein the bit equivalent entropy is computed as

14. The product of claim 13, wherein the units of digital information correspond to bytes in the data stream.

15. The product of claim 11, wherein determining whether the data stream is suitably encrypted includes

computing an entropy curve of bit equivalent entropy values over size of the data stream;

determining whether the computed entropy curve matches within a selected range a selected random data entropy curve, whereby, if the match result is negative, it is determined that the data stream is cryptographically unsecure.