Communicating data from a data producer to a data receiver

• US 7,853,983 B2
• Filed: 02/25/2003
• Issued: 12/14/2010
• Est. Priority Date: 07/29/2002
• Status: Active Grant

• Current Assignee: Oracle International Corporation (Oracle Corporation)
• Original Assignee: BEA Systems Incorporated (Oracle Corporation)
• Inventors: Abrutyn, Scott D., Douglas, David C., Traub, Kenneth R., Bernardi, Linda, Hatanaka, Iwao
• Primary Examiner(s): PATEL, NIRAV B
• Application Number:
  US10/372,395
• Publication Number:
  US 20080301783A1
• Time in Patent Office: 2,849 Days
• Field of Search: 713168-170, 713150-155, 726 2- 5, 726 12- 14, 709/217, 709/224, 709/230, 709/236, 370/348, 370/349, 370/395.3, 370/386, 370/362, 380/28, 375/146, 375/147, 375/219, 375/295, 375/316
• US Class Current: 726/2
• CPC Class Codes: H04L 61/50 Address allocation
• CPC Class Codes: H04L 63/0492 by using a location-limited connection, e.g. near-field communication or limited proximity of entities
• CPC Class Codes: H04L 67/125 involving control of end-device applications over a network
• CPC Class Codes: H04L 67/52 specially adapted for the location of the user terminal
• CPC Class Codes: H04W 12/02 Protecting privacy or anonymity, e.g. protecting personally identifiable information [PII]

Abstract

A computer architecture for enterprise device applications provides a real-time, bi-directional communication layer for device communication. An identity-based communications layer provides for secure, end-to-end telemetry and control communications by enabling mutual authentication and encryption between the devices and the enterprise. A unique identity is assigned to each device, user and application to provide security services. Telemetry data is communicated between a data producing device and a data receiving device. The telemetry data sent from the data producing device is identified using the identity identifier of the data producing device.

Claims

1. A method for communicating data from a telemetry transmitter device to a telemetry receiver device, the method comprising:

associating an identity identifier with the telemetry transmitter device, the identity identifier being independent of a network address of the telemetry transmitter device and being unique across all telemetry transmitter devices and across all enterprises; and

sending, over a computer network, a telemetry data element from the telemetry transmitter device to the telemetry receiver device, the telemetry data element including the identity identifier of the telemetry transmitter device, a data element identifier that is unique across all data elements sent by the telemetry transmitter device, and a client data element comprising transmitter-defined data;

wherein the data element identifier comprises a generation number and a sequence number, and identifies a period that the telemetry transmitter device was active by having the generation number incremented when the telemetry transmitter device becomes active from an inactive state and by having the sequence number reset when the telemetry transmitter device becomes active from an inactive state;

wherein the identity identifier comprises a realm that identifies a particular instance of an identity service that is responsible for managing the identities of telemetry transmitter devices and receiver devices, and a unique identifier that identifies each identity in the realm;

wherein security information is associated with the identity identifier of the telemetry transmitter device; and

the method further comprising using the security information to authenticate the telemetry transmitter device.

2. The method of claim 1 wherein the telemetry data element is sent using an identity-based communications layer situated between a network layer and an application layer.

3. The method of claim 2 wherein the identity identifier comprises an identity identifier for a composite identity, the composite identity being associated with two or more other identity identifiers.

4. The method of claim 3 wherein the composite identity is associated with an authentication credential.

5. The method of claim 3 further comprising creating the composite identity only when each of the two or more other identity identifiers associated with the composite identity have been authenticated.

6. The method of claim 3 wherein at least one of the two or more other identity identifiers associated with the composite identity comprises an identity identifier for another composite identity.

7. The method of claim 1 wherein the generation number is incremented by one and the sequence number is reset to zero.

8. The method of claim 7 wherein the telemetry transmitter device becomes active after being powered up.

9. The method of claim 8 wherein a next value to be used for the generation number is held in a persistent store associated with the identity identifier.

10. The method of claim 9 wherein the persistent store is implemented as non-volatile memory of the telemetry transmitter device.

11. The method of claim 9 wherein the persistent store is implemented by a second computer system on the network, the second computer system holding generation numbers for one or more identity identifiers.

12. The method of claim 8 wherein the telemetry receiver device detects missing telemetry data elements by detecting gaps in the series of received sequence numbers.

13. The method of claim 1 wherein the telemetry receiver device performs a processing operation on the client data element when a telemetry data element is received.

14. The method of claim 1 further comprising storing the telemetry data when the telemetry data is received by the telemetry receiver device.

15. The method of claim 14 further comprising performing a processing operation on the received telemetry data element.

16. The method of claim 15 further comprising:

receiving multiple telemetry data elements; and

detecting missing telemetry data elements by detecting gaps in the series of received data element identifiers.

17. A non-transitory computer-readable medium having embodied thereon a computer program configured to communicate data from a telemetry transmitter to a telemetry receiver, the medium comprising one or more code segments, when executed by a processor, configured to:

associate an identity identifier with the telemetry transmitter, the identity identifier being independent of a network address of the telemetry transmitter and being unique across all telemetry transmitters and across all enterprises; and

send a telemetry data element from the telemetry transmitter to the telemetry receiver, the telemetry data element including the identity identifier of the telemetry transmitter, a data element identifier that is unique across all data elements sent by the telemetry transmitter, and a client data element comprising transmitter-defined data;

wherein the data element identifier comprises a generation number and a sequence number, and identifies a period that the telemetry transmitter was active by having the generation number incremented when the telemetry transmitter becomes active from an inactive state and by having the sequence number reset when the telemetry transmitter becomes active from an inactive state;

wherein the identity identifier comprises a realm that identifies a particular instance of an identity service that is responsible for managing the identities of telemetry transmitters and receivers, and a unique identifier that identifies each identity in the realm;

wherein security information is associated with the identity identifier of the data producer; and

the one or more code segments are further configured to use the security information to authenticate the telemetry transmitter.

18. The medium of claim 17 wherein the telemetry data element is sent using an identity-based communications layer situated between a network layer and an application layer.

19. The medium of claim 18 wherein the identity identifier comprises an identity identifier for a composite identity, the composite identity being associated with two or more other identity identifiers.

20. The medium of claim 19 wherein the composite identity is associated with an authentication credential.

21. The medium of claim 17 wherein the generation number is incremented by one and the sequence number is reset to zero r.

22. The medium of claim 17 wherein the one or more code segments are further configured to perform a processing operation on the received telemetry data element.

23. The medium of claim 22 wherein the one or more code segments are further configured to:

receive multiple telemetry data elements; and

detect missing telemetry data elements by detecting gaps in the series of received data element identifiers.

24. A system for communicating data from a data producer to a telemetry transmitter, the system comprising a processor connected to a storage device and one or more input/output devices, wherein the processor is configured to:

associate an identity identifier with the telemetry transmitter, the identity identifier being independent of a network address of the telemetry transmitter and being unique across all telemetry transmitters and across all enterprises; and

send a telemetry data element from the telemetry transmitter to the telemetry receiver, the telemetry data element including the identity identifier of the telemetry transmitter, a data element identifier that is unique across all data elements sent by the telemetry transmitter, and a client data element comprising transmitter-defined data;

wherein the data element identifier comprises a generation number and a sequence number, and identifies a period that the telemetry transmitter was active by having the generation number incremented when the telemetry transmitter becomes active from an inactive state and by having the sequence number reset when the telemetry transmitter becomes active from an inactive state;

wherein the identity identifier comprises a realm that identifies a particular instance of an identity service that is responsible for managing the identities of telemetry transmitters and receivers, and a unique identifier that identifies each identity;

security information is associated with the identity identifier of the telemetry transmitter; and

the processor is configured to use the security information to authenticate the telemetry transmitter.

25. The system of claim 24 wherein the telemetry data element is sent using an identity-based communications layer situated between a network layer and an application layer.

26. The system of claim 25 wherein the identity identifier comprises an identity identifier for a composite identity, the composite identity being associated with two or more other identity identifiers.

27. The system of claim 26 wherein the composite identity is associated with an authentication credential.

28. The system of claim 24 wherein the generation number is incremented by one and the sequence number is reset to zero.

29. The system of claim 24 wherein the processor is further configured to perform a processing operation on the received telemetry data element.

30. The system of claim 29 wherein the processor is further configured to:

receive multiple telemetry data elements; and

detect missing telemetry data elements by detecting gaps in the series of received data element identifiers.