System for providing security for ad hoc networked computerized devices

• US 7,827,291 B2
• Filed: 07/11/2007
• Issued: 11/02/2010
• Est. Priority Date: 07/30/1996
• Status: Expired due to Fees

• Current Assignee: Round Rock Research LLC
• Original Assignee: Round Rock Research LLC
• Inventors: Holden, James M, Levin, Stephen E, Nickel, James O, Wrench, Edwin H
• Primary Examiner(s): VU, VIET DUY
• Application Number:
  US11/776,413
• Publication Number:
  US 20080016340A1
• Time in Patent Office: 1,210 Days
• Field of Search: 709/217, 709/219, 709/227, 709/228, 709/237, 709/250
• US Class Current: 709/228
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/606 by securing the transmission between two devices or processes
• CPC Class Codes: G06F 21/85 interconnection devices, e.g. bus-connected or in-line devices
• CPC Class Codes: G06F 2211/001 In-Line Device
• CPC Class Codes: G06F 2211/005 Network, LAN, Remote Access, Distributed System
• CPC Class Codes: G06F 2211/007 Encryption, En-/decode, En-/decipher, En-/decypher, Scramble, (De-)compress
• CPC Class Codes: G06F 2211/009 Trust
• CPC Class Codes: G06F 2221/2101 Auditing as a secondary aspect
• CPC Class Codes: G06F 2221/2141 Access rights, e.g. capability lists, access control lists, access tables, access matrices
• CPC Class Codes: G06F 2221/2149 Restricted operating environment
• CPC Class Codes: G06F 2221/2153 Using hardware token as a secondary aspect
• CPC Class Codes: H04L 2209/76 Proxy, i.e. using intermediary entity to perform cryptographic operations network architectures or network communication protocols using hop-by-hop encryption H04L63/0464
• CPC Class Codes: H04L 63/02 for separating internal from external traffic, e.g. firewalls
• CPC Class Codes: H04L 63/0218 Distributed architectures, e.g. distributed firewalls
• CPC Class Codes: H04L 63/0442 wherein the sending and receiving network entities apply asymmetric encryption, i.e. different keys for encryption and decryption cryptographic mechanisms or cryptographic arrangements for public-key encryption H04L9/30
• CPC Class Codes: H04L 63/061 for key exchange, e.g. in peer-to-peer networks cryptographic mechanisms or cryptographic arrangements for key agreement H04L9/0838
• CPC Class Codes: H04L 63/0869 for achieving mutual authentication cryptographic mechanisms or cryptographic arrangements for mutual authentication H04L9/3273
• CPC Class Codes: H04L 63/101 Access control lists [ACL]
• CPC Class Codes: H04L 63/105 Multiple levels of security
• CPC Class Codes: H04L 63/126 the source of the received data
• CPC Class Codes: H04L 63/14 : for detecting or protecting against malicious traffic
• CPC Class Codes: H04L 67/141 : Setup of application sessions admission control or resource allocation in data switching networks H04L47/70
• CPC Class Codes: H04L 67/563 : Data redirection of data network streams
• CPC Class Codes: H04L 9/3247 : involving digital signatures
• CPC Class Codes: H04L 9/3268 : using certificate validation, registration, distribution or revocation, e.g. certificate revocation list [CRL]
• CPC Class Codes: H04L 9/3273 : for mutual authentication network architectures or network communication protocols for achieving mutual authentication in a packet data network H04L63/0869
• CPC Class Codes: H04L 9/40 : Network security protocols
• CPC Class Codes: H04W 12/069 : using certificates or pre-shared keys

Abstract

A system adapted to provide communication security between computerized devices in, for example, an ad hoc or temporary networked environment. In one embodiment, the network comprises an untrusted network, and the system includes network security apparatus adapted to create security associations between devices on the network, including mutual authentication. Traffic between the associated devices may be encrypted for e.g., data confidentiality and integrity protection. In one variant, the network security apparatus comprises a software entity disposed at least partly within the software stack of the devices. The associated devices may be for example fixed or portable, and may be untrusted (e.g., have an untrusted operating system).

Claims

1. A system, comprising:

a first, substantially portable and physically non-secure computerized device;

a second, substantially portable and physically non-secure computerized device in data communication with said first device;

a first computer program operative to run on said first computerized device and to obtain at least one temporary address for said first computerized device;

a second computer program operative to run on said first computerized device and adapted to establish a non-permanent security association between said first and second devices, said second computer program comprising a cryptographic data exchange algorithm adapted to cause said first computerized device and said second device to exchange cryptographic data, said data being substantially unique to said security association; and

a third computer program operative to run on said first computerized device and adapted to seal or encrypt data sent from said first device using at least one cryptographic key;

wherein said at least one cryptographic key is derived based at least in part on first data that is uniquely associated with one of said first and second substantially portable and physically non-secure computerized devices.

2. The system of claim 1, wherein said first device comprises an untrusted operating system.

3. The system of claim 2, wherein said second device comprises an untrusted operating system.

4. The system of claim 1, wherein said second device comprises an untrusted operating system.

5. The system of claim 1, wherein said second device is configured not to pass data from said first device over said network until said first device is properly authenticated to said second device.

6. The system of claim 5, wherein said first and second devices are mutually authenticated with one another.

7. The system of claim 1, wherein said first device is adapted to dynamically generate at least one encryption key for each security association, said act of generating not requiring intervention by a network administrator.

8. The system of claim 1, further comprising a fourth computer program operative to run on said second computerized device and adapted to seal or encrypt data sent from said second device using at least one cryptographic key generated by said second device.

9. The system of claim 1, wherein said second and third computer programs are disposed logically within a software stack of said first device above the Physical Layer thereof.

10. The system of claim 9, wherein said second and third computer programs are disposed logically within a software stack of said first device below the Network Layer thereof.

11. The system of claim 9, wherein said second and third computer programs are disposed logically within a software stack of said first device below the Transport Layer thereof.

12. The system of claim 1, wherein said association comprises a multi-way authentication process, wherein said first device is adapted to authenticate said second device, and further adapted to authenticate itself to said second device.

13. The system of claim 1, wherein said second device comprises at least one interface port, access to which is based at least in part on identification of a user of said first device.

14. The system of claim 13, wherein said identification of a user is accomplished based at least in part on a cryptographic element associated with said first device.

15. The system of claim 1, wherein said first device further comprises an algorithm adapted to generate and transmit random data to said second device.

16. The system of claim 15, wherein said transmission of said random data is associated with said data exchange algorithm that permits both said first and second devices to possess encryption keys that permit the two devices to decrypt encrypted data sent by the other.

17. The system of claim 1, wherein said first and second devices each comprise a network interface, said interfaces each adapted to communicate with one another over an untrusted network.

18. The system of claim 17, wherein said devices communicate with one another over said untrusted network without using an intermediary entity or apparatus.

19. The system of claim 1, wherein said first and second devices can establish said association between themselves without accessing any other entity.

20. The system of claim 1, wherein said first and second devices can establish said association between themselves without accessing any other entity for cryptographic information.

21. A security system adapted to permit ad hoc security associations to exist between portable computerized devices that may or may not have communicated previously, comprising:

a first, substantially portable computerized device;

a second, substantially portable computerized device;

first computer programs operative to run on respective ones of said first and second computerized devices to establish an ad hoc security association between said first and second devices, said first computer programs each comprising a cryptographic data exchange algorithm adapted to cause said first and second devices to exchange respective cryptographic data generated substantially under control of respective ones of said devices while establishing said association;

second computer programs operative to run on respective ones of said first and second devices and adapted to encrypt data sent to the other device using at least one cryptographic key; and

third computer programs operative to run on respective ones of said first and second devices and each adapted to evaluate said encrypted data sent from the other device for at least data integrity using an appended message element generated by both of said devices;

wherein said first, second and third computer programs comprise a security perimeter for end-to-end communications between said first, substantially portable communications device and said second, substantially portable communications device over a physically non-secure network.

22. The system of claim 21, wherein said evaluation comprises comparing a first of said appended message element generated by a receiving one of said devices to a second of said appended message element generated by a sending one of said devices.

23. The system of claim 22, wherein said second of said appended message element is included within a message sent from said sending one of said devices, said message further comprising said encrypted data encrypted by at least one cryptographic key.

24. The system of claim 22, wherein said establishment of an association comprises a mutual authentication procedure, said mutual authentication based on evaluating respective ones of information uniquely associated with said devices.

25. The system of claim 21, wherein said first device comprises an untrusted operating system, and is physically non-secure.

26. The system of claim 25, wherein said second device comprises an untrusted operating system, and is physically non-secure.

27. The system of claim 21, wherein said second device comprises an entrusted operating system, and is physically non-secure.

28. The system of claim 21, wherein said second device is configured not to pass data from said first device over said network until said first device is properly authenticated to said second device based on one or more cryptographic data elements.

29. The system of claim 28, wherein said first and second devices are mutually authenticated with one another.

30. The system of claim 21, wherein said first device is adapted to dynamically generate at least one encryption key for each security association, said act of generating not requiring intervention by a network administrator or other entity.

31. The system of claim 21, wherein said second and third computer programs are disposed logically within a software stack of said first device below the Network Layer thereof.

32. The system of claim 21, wherein said association comprises a multi-way authentication process, wherein said first device is adapted to authenticate said second device, and further adapted to authenticate itself to said second device or another entity.

33. The system of claim 21, wherein said first device further comprises a cryptographic element exchange algorithm adapted to generate and transmit) random data to said second device.

34. The system of claim 33, wherein said transmission of said random data is associated with a procedure that permits both said first and second devices to possess encryption keys that permit the two devices to decrypt encrypted data sent by the other.

35. The system of claim 21, wherein said first and second devices each comprise a network interface, said interfaces each adapted to communicate with one another over an untrusted medium.

36. The system of claim 35, wherein said devices communicate with one another over said untrusted medium without using an intermediary entity or apparatus.

37. The system of claim 21, wherein said first and second devices can establish said association between themselves without accessing any other entity.

38. The system of claim 21, wherein said first and second devices can mutually authenticate one another without accessing any third entity for cryptographic information.

39. A network security system, comprising:

a first computerized device comprising an untrusted operating system;

a second computerized device comprising an untrusted operating system;

a first routine operative to run on said first computerized device and to obtain at least one address for said first computerized device after said first computerized device is placed in data communication with at least one another via an untrusted medium;

a second routine operative to run on said first computerized device and establish a security association between said first and second devices, said second computer program comprising an authentication algorithm adapted to cause said first computerized device and said second device to exchange cryptographic data, said data being substantially unique to said association and comprising at least one random number;

a third routine operative to run on said first computerized device and adapted to seal or encrypt data sent from said first device using at least one cryptographic key;

a fourth routine operative to run on said second computerized device and adapted to seal or encrypt data sent from said second device using at least one cryptographic key; and

a fifth routine operative to run on said first computerized device and adapted to evaluate said encrypted data sent from said second device for at least data integrity;

wherein said first and second devices are mutually authenticated with one another and further utilize cryptographic residues exchanged between said first and second computerized devices; and

wherein the first, second, third, fourth and fifth routines provide for end-to-end communications between said first computerized device and said second computerized device over a physically non-secure network.

40. The system of claim 39, wherein said first computerized device, as part of establishing said association, utilizes random data that is transmitted from said second computerized device.

41. The system of claim 40, wherein said second computerized device comprises a cryptographic element algorithm adapted to generate and transmit random data to said first computerized device as part of a mutual authentication.

42. The system of claim 39, where said first and second devices are each adapted to identify or validate a user based on at least one of:

(i) a password;

or

(ii) a unique identifier, input by the user via a user interface.

43. A security system adapted to permit at least one temporary and ad hoc security association to exist between portable computerized devices that may or may not have communicated previously, comprising:

a first, substantially portable computerized device having an untrusted operating system;

a second, substantially portable computerized device having an untrusted operating system;

first computer programs operative to run on respective ones of said first and second computerized devices to establish an ad hoc and temporary security association between said first and second devices, said first computer programs each comprising an authentication algorithm adapted to cause said first and second devices to exchange respective cryptographic data generated substantially under control of respective ones of said devices while establishing said association;

second computer programs operative to run on respective ones of said first and second devices and adapted to encrypt data sent to the other device using at least one cryptographic key; and

third computer programs operative to run on respective ones of said first and second devices and each adapted to evaluate said encrypted data sent from the other device for at least data integrity using an appended message element generated by both of said devices;

wherein said first and second substantially portable devices can mutually authenticate one another, decrypt the other'"'"'s transmitted encrypted data, and evaluate the integrity of said transmitted encrypted data, without having to access a device or entity other than said first or second device.

44. The system of claim 43, where said first and second devices are each adapted to identify or validate a user based on at least one of:

(i) a password;

or

(ii) a unique identifier, input by the user via a user interface.

45. A system for communication between devices, the system comprising:

a first, substantially portable and physically non-secure computerized device;

a second, substantially portable and physically non-secure computerized device capable of data communication with said first device;

a first computer program operative to run on said first computerized device and to obtain a temporary address for said first computerized device;

a second computer program operative to run on said first computerized device and adapted to establish a non-permanent security association between said first and second devices, said second computer program comprising a cryptographic data exchange algorithm adapted to cause said first computerized device to exchange cryptographic data with said second device, said data being substantially unique to said security association;

a third computer program operative to run on said first computerized device and adapted to encrypt data sent from said first device using at least one cryptographic key; and

a fourth computer program operative to perform an authentication function based at least in part on device-specific information that is unique to said first, substantially portable and physically non-secure computerized device.

46. The system of claim 45, wherein said first device comprises an untrusted operating system.

47. The system of claim 45, wherein said second device is configured not to pass data from said first device over said network until said first device is properly authenticated to said second device.

48. The system of claim 47, wherein said first and second devices are mutually authenticated with one another.

49. The system of claim 45, wherein said first device is adapted to dynamically generate at least one encryption key for each security association, said act of generating not requiring intervention by a network administrator.

50. The system of claim 45, further comprising a fifth computer program operative to run on said second computerized device and adapted to seal or encrypt data sent from said second device using at least one cryptographic key generated by said second device;

and

wherein said second and third computer programs are disposed logically within a software stack of said first device above the Physical Layer thereof.

51. The system of claim 45, wherein said second and third computer programs are disposed logically within a software stack of said first device below the Network Layer thereof but above the Physical Layer thereof.

52. The system of claim 45, wherein said second and third computer programs are disposed logically within a software stack of said first device below the Transport Layer thereof but above the Physical Layer thereof.

53. The system of claim 45, wherein said first device further comprises an algorithm adapted to generate and transmit random data to said second device.

54. The system of claim 53, wherein said transmission of said random data is associated with said data exchange algorithm that permits both said first and second devices to possess encryption keys that permit the two devices to decrypt encrypted data sent by the other.

55. The system of claim 45, wherein the non-permanent security association between said first and second devices can be established whether or not the first and second devices not have communicated previously.

56. A system for enabling communication, the system comprising:

a first, substantially portable and physically non-secure computerized device;

a second, substantially portable and physically non-secure computerized device capable of data communication with said first device;

a first computer program operative to run on said first computerized device and to obtain a temporary address for said first computerized device;

a second computer program operative to run on said first computerized device and adapted to establish a non-permanent security association between said first and second devices, said second computer program comprising a cryptographic data transfer algorithm adapted to cause said first computerized device to transmit cryptographic data to said second device, said data being substantially unique to said security association;

a third computer program operative to run on said first computerized device and adapted to encrypt data sent from said first device using at least one cryptographic key; and

a fourth computer program operative to perform an authentication function based at least in part on unique device-specific information for either said first, substantially portable and physically non-secure computerized device or said second, substantially portable and physically non-secure computerized device.

57. The system of claim 56, wherein said first device comprises an untrusted operating system.

58. The system of claim 56, wherein said second device is configured not to pass data from said first device over said network until said first device is properly authenticated to said second device.

59. The system of claim 56, wherein said first and second devices are mutually authenticated with one another.

60. The system of claim 56, wherein said first device is adapted to dynamically generate at least one encryption key for each security association, said act of generating not requiring intervention by a network administrator.

61. The system of claim 56, wherein said second and third computer programs are disposed logically within a software stack of said first device below the Network Layer thereof but above the Physical Layer thereof.

62. The system of claim 56, wherein said second and third computer programs are disposed logically within a software stack of said first device below the Transport Layer thereof but above the Physical Layer thereof.

63. The system of claim 56, wherein said first device further comprises an algorithm adapted to generate and transmit random data to said second device.

64. The system of claim 63, wherein said transmission of said random data is associated with said data transfer algorithm that permits both said first and second devices to possess encryption keys that permit the two devices to decrypt encrypted data sent by the other.

65. The system of claim 56, wherein the non-permanent security association between said first and second devices can be established whether or not the first and second devices not have communicated previously.