Verification by target end system of intended data transfer operation

• US 6,684,336 B1
• Filed: 04/27/2000
• Issued: 01/27/2004
• Est. Priority Date: 04/30/1999
• Status: Expired due to Term

• Current Assignee: Qualcomm, Inc.
• Original Assignee: Hewlett-Packard Development Company, L.P. (HP Inc.)
• Inventors: Fedrigo, Enrico, Banks, David
• Primary Examiner(s): JUNG, DAVID YIUK
• Application Number:
  US09/560,076
• Time in Patent Office: 1,370 Days
• Field of Search: 713/150-153, 713/154, 713/160-169, 713/200-202, 380/255-258, 380/41
• US Class Current: 709/227
• CPC Class Codes: H04L 12/2856 Access arrangements, e.g. Internet access asynchronous transfer mode networks H04L12/5601; broadband local area networks H04L12/2801; optical access or distribution networks H04Q11/0067; access to open networks H04L12/5691; digital subscriber line end-user equipment and bit-level processing of data on a PSTN-based network H04M11/00; home network gateways H04L12/2834; wireless access networks H04W
• CPC Class Codes: H04L 12/2859 Point-to-point connection between the data network and the subscribers encapsulation H04L12/4633; virtual LANs H04L12/4641; routing of packets H04L45/00
• CPC Class Codes: H04L 12/2874 Processing of data for distribution to the subscribers
• CPC Class Codes: H04L 61/4535 using an address exchange platform which sets up a session between two nodes, e.g. rendezvous servers, session initiation protocols [SIP] registrars or H.323 gatekeepers
• CPC Class Codes: H04L 61/4557 Directories for hybrid networks, e.g. including telephone numbers
• CPC Class Codes: H04L 63/126 the source of the received data
• CPC Class Codes: H04L 63/14 for detecting or protecting against malicious traffic
• CPC Class Codes: H04L 67/02 based on web technology, e.g. hypertext transfer protocol [HTTP]
• CPC Class Codes: H04L 67/1095 Replication or mirroring of data, e.g. scheduling or transport for data synchronisation between network nodes
• CPC Class Codes: H04L 67/14 Session management for real-time applications in data packet communications networks H04L65/1066
• CPC Class Codes: H04L 67/142 Managing session states for stateless protocols; Signalling session states; State transitions; Keeping-state mechanisms

Abstract

A communications infrastructure is provided with a service system that facilitates the setting up of data transfer operations between end systems connected to the infrastructure. When a first end system wishes to initiate a data transfer operation, it contacts the service system and establishes a transfer-operation characteristic for the proposed data transfer operation that is known both to itself and the service system. The first end system then contacts the target end system with which it wishes to effect a data transfer operation and passes it the aforesaid transfer-operation characteristic. The target end system uses the received transfer-operation characteristic to check with the service system that the proposed data transfer from the first end system is known and acceptable to the service system; only if this check is passed does the target end system proceed with the data transfer operation proposed by the first end system. With this arrangement, the target end system can be sure that it only participates in data transfer operations with parties vetted by the service system.

Claims

1. A communications arrangement comprising:

a communications infrastructure;

a plurality of end systems connected to the communications infrastructure; and

a service system connected to the communications infrastructure for participating in the initiation of a data transfer operation between a first said end system and a second said end system;

the first end system comprising connectivity means for informing the service system of an intended data transfer operation with said second system, and for contacting the second end system over the communications infrastructure for the purpose of effecting said intended data transfer operation, the connectivity means of the first end system being operative to initially pass the second end system a transfer-operation characteristic known also to the service system in respect of the intended said data transfer operation;

the second end system comprising connectivity means for cooperating with the connectivity means of the first end system to effect said intended data transfer operation, the connectivity means of the second end system including verify means responsive to a said end system contacting the second end system and passing it a said transfer-operation characteristic, to communicate with the service system to check that the said transfer-operation characteristic received by the second end system corresponds to that known to the service system in respect of the intended data transfer operation with the second end system, the verify means only permitting data transfer to proceed where said transfer-operation characteristic checks out; and

the service system including complementary verify means for cooperating with the verify means of the second end system to check said transfer-operation characteristic.

2. An arrangement according to claim 1, wherein said communications infrastructure comprises a data network and access network means providing connection to the data network through data-network access points;

the connectivity means of said first end system being operative to connect to the data network through a data-network access point that includes means for allocating the end system an address on the data network that is independently assigned each time connection to the network is established;

the connectivity entity of the first end system including address-passing means for passing to the service system the current data-network address network of the first end system, this address serving as the transfer-operation characteristic checked by the cooperating verify means of the second end system and service system.

3. An arrangement according to claim 1, wherein said service system includes means for assigning a job identity to an intended data transfer between the first and second end systems notified to the service system by the connectivity means of the first end system, the service system being operative to pass this job identity to the first end system and the job identity serving as said transfer-operation characteristic checked by the cooperating verify means of the second end system and service system.

4. An arrangement according to claim 1, wherein the service system includes checking means for checking that the end systems to be involved in an intended data transfer operation are both registered users of the service system, the service system ceasing to cooperate in the set up of the data transfer operation unless the checking means indicates that both end systems are registered users.

5. A method of initiating communication over a communications infrastructure between a first end system and a second end system using the services of a service system connected to the communications infrastructure;

the method comprising the steps of;

(a)—

passing from the first end system, over the communications infrastructure, to said service system, an indication of an intended data transfer operation with the second end system,

(b)—

establishing for the intended data transfer operation a transfer-operation characteristic known to both the first end system and the service system,

(c)—

contacting the second end system from the first end system over the communications infrastructure and passing from the first end system to the second end system said transfer-operation characteristic,

(d)—

contacting the service system from the second end system and checking that the transfer-operation characteristic received by the second end system in step (c) corresponds to one associated with an intended data transfer operation between the first and second end systems, and

e)—

only proceeding with the data transfer operation between the first and second end systems if the checking carried out in step (d) indicates that the transfer-operation characteristic received by the second end system from the first end system corresponds to one known to the service system for an intended data transfer operation between the first and second end systems.

6. A method according to claim 5, wherein said communications infrastructure comprises a data network and access network means providing connection to the data network for said end systems through data-network access points that assign a data network address to a said end system each time connection to the network is established;

the current network address of the first end system when passing said indication to the service system in step (a) serving as the transfer-operation characteristic established in step (b).

7. A method according to claim 5, wherein step (b) involves the service system assigning a job identity to said intended data transfer between the first and second end systems, the service system being operative to pass this job identity to the first end system and the job identity serving as said transfer-operation characteristic.

8. A method according to claim 5, further comprising the step carried out by the service system of checking that the end systems to be involved in an intended data transfer operation are both registered users of the service system and only enabling the data transfer operation to proceed where this is the case.

9. A service system for participating in the set up of a data transfer operation across a communications infrastructure between end systems connected to the latter, the service system comprising:

interface means for connecting the service system to the communications infrastructure;

means for receiving, through said interface means, an indication from a first said end system that it wishes to effect a data transfer operation with another said end system specified in said indication,

logging means for storing, in respect of each data transfer operation for which a said indication has been received by the service system, a corresponding transfer-operation characteristic known to both the first end system and the service system,

verification means for receiving, through said interface means, a verification request from a second said end system that includes a transfer-operation characteristic which that end system wishes to confirm relates to a data transfer operation involving it that is known to the service system, the verification means being operative to check the transfer characteristic received by it from the second end system against transfer characteristics held by said logging means and to return a response to the second end system, through said interface means, indicative of the result of this check.

10. A service system according to claim 9, wherein the transfer-operation characteristic is the current address for the first end system on a network of the communications infrastructure to which the first system is only intermittently connected with dynamic address assignment at each connection.

11. A service system according to claim 9, wherein the transfer-operation characteristic is a job identifier assigned by the logging means of the service system and passed back to the first end system through said interface means.

12. A service system according to claim 9, including checking means for checking that the end systems to be involved in an intended data transfer operation are both registered users of the service system, the service system ceasing to cooperate in the set up of the data transfer operation unless the checking means indicates that both end systems are registered users.