Enabling ad hoc trusted connections among enclaved communication communities

• US 9,871,767 B2
• Filed: 03/13/2013
• Issued: 01/16/2018
• Est. Priority Date: 07/18/2005
• Status: Active Grant

• Current Assignee: Mutualink, Inc.
• Original Assignee: Mutualink, Inc.
• Inventors: Mazzarella, Joseph R.
• Primary Examiner(s): Lewis, Lisa
• Assistant Examiner(s): Harris, Christopher C
• Application Number:
  US13/800,727
• Publication Number:
  US 20130198517A1
• Time in Patent Office: 1,770 Days
• CPC Class Codes: H04L 41/12 Discovery or management of network topologies
• CPC Class Codes: H04L 63/04 for providing a confidential data exchange among entities communicating through data packet networks
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 67/104 Peer-to-peer [P2P] networks
• CPC Class Codes: H04L 67/51 Discovery or management thereof, e.g. service location protocol [SLP] or web services
• CPC Class Codes: H04W 84/08 Trunked mobile radio systems

Abstract

The present invention is directed to systems and methods for establishing an electronic communications connection between secure communities. A secure community includes a collection of communication resources having an administrator that maintains control over the secure community. In an embodiment, a system for establishing an electronic communications connection between two or more secure communities includes a community gateway controller, an identification module, a secure community database configured to store secure community information, and an encryption compatibility module configured to determine a media transmission encryption scheme for a connection between a host secure community and a second secure community. Upon receipt of a request to establish the connection between secure communities, the community gateway controller determines whether to grant the request based on information stored in the secure community database and assigns a media transmission encryption scheme for the connection based on the determination made by the encryption compatibility module.

Claims

1. A system for establishing an electronic communications connection between two or more secure communities, wherein a secure community includes a collection of communications resources having an administrator that maintains control over the secure community and the collection, comprising:

a community gateway controller comprising one or more processors;

a memory coupled to the community gateway controller, for storing instructions;

a secure community database coupled to the community gateway controller configured to store secure community information;

an encryption compatibility module in the memory, comprising instructions for directing the community gateway controller to determine a first media transmission encryption scheme for a connection between a host secure community and a second secure community of the two or more secure communities, and to determine a second media transmission encryption scheme for a connection between one or more communications resources within the host secure community and one or more communications resources within the second secure community; and

an identification module in the memory, comprising instructions for directing the community gateway controller to accept assignment of, initiate the storing of, and transmit identity information for the host secure community and the one or more communications resources therein, and to accept and validate identity information received from the second secure community and the one or more communications resources therein,

wherein the community gateway controller, upon receipt of a request to establish a communications connection between the host and second secure communities determines whether to grant the request based on information stored in the secure community database and in the encryption compatibility module,

wherein upon establishing the communications connection between the host and second secure communities, the community gateway controller relays messages between the one or more communications resources within the host secure community and the one or more communications resources within the second secure community.

2. The system of claim 1, wherein the secure community information includes secure community identifier information.

3. The system of claim 2, wherein the secure community identifier information includes one or more of:

a secure community identifier, a community gateway identifier, individual identifiers for members within a secure community, or a geographic identifier for a secure community and/or members of the secure community.

4. The system of claim 1, wherein the secure community information includes secure community encryption information.

5. The system of claim 4, wherein the secure community encryption information includes encrypted digital certificates for secure communities and communications resources therein created and exchanged between secure communities, and/or encrypted digital certificates for secure communities and communications resources therein that were issued from a third party certificate authority.

6. The system of claim 4, wherein the secure community encryption information includes a media transmission encryption scheme of the host secure community that identifies host secure community preferences for a type of media transmission encryption to be used, wherein the preferences are used to determine the first media transmission encryption to be used between the host and the second secure communities upon considering a media transmission encryption preferred by the second secure community.

7. The system of claim 4, wherein the secure community encryption information of the host secure community includes encryption preference information of the second secure community, wherein the encryption preference information of the second secure community is periodically updated based on an encryption preference from the second secure community.

8. The system of claim 1, wherein the secure community information includes at least one of:

a pre-authorized connection indicator for a secure community or a pre-authorized connection indicator for members of a secure community.

9. The system of claim 1, wherein the encryption compatibility module further comprises instructions for directing the community gateway controller to rank encryption schemes of the host secure community relative to encryption schemes of other secure communities of the two or more secure communities.

10. The system of claim 1, wherein the encryption compatibility module further comprises instructions for directing the community gateway controller to issue an alert upon determining that the one or more communications resources of the second secure community require the use of a different level of security than the host secure community or the one or more communications resources therein.

11. The system of claim 10, wherein the alert is a visible security state message available to all members with the host secure community participating in a communications session.

12. The system of claim 1, further comprising a secure community membership directory module in the memory, comprising instructions for directing the community gateway controller to determine what communications resource information within the host secure community is made available to other secure communities of the two or more secure communities.

13. The system of claim 12, wherein the secure community membership directory module includes a set of policies that govern secure community information that is made available to the other secure communities.

14. The system of claim 12, wherein the secure community membership directory includes a pre-set list that identifies secure community information that is made available to the other secure communities.

15. The system of claim 12, wherein the secure community membership directory includes display indicators that identify the secure community information that is made available to the other secure communities based on identities of the other secure communities.

16. The system of claim 12, wherein the secure community membership directory includes policies that determine what secure community information is made available to the other secure communities and communications resources within the other secure communities, wherein the policies are based upon one or more of:

a characteristic of a secure community of the two or more secure communities, a characteristic of a communications resource within a secure community of the two or more secure communities, a characteristic of a communications resource within the host secure community, a third party verification procedure, or a media transmission encryption scheme.

17. The system of claim 16, wherein the secure community information made available includes one or more of:

a community gateway controller identifier, an identifier of a communications resource of a secure community, a group-based identifier, a functional-based identifier, or an alias for a communications resource of a secure community.

18. The system of claim 1, wherein upon receiving an invitation to establish the communications connection with the second secure community or a communications resource therein, g graphical user interface coupled to the community gateway controller is configured to display secure community information regarding the second secure community or the communications resource therein.

19. The system of claim 1, wherein a graphical user interface coupled to the community gateway controller is configured to display a security indication of a relative rank of a media transmission encryption scheme of a secure community of the two or more secure communities that is to be or has been connected.

20. The system of claim 1, wherein the secure community further comprises:

an interoperability workstation; and

a plurality of network interface controllers, wherein a network interface controller within the plurality of network interface controllers is coupled to a communications resource within the collection of communications resources enabling the communications resource to be communicatively coupled to the interoperability workstation, wherein the interoperability workstation administers access to and from the communications resource within the secure community.

21. The system of claim 1, wherein the administrator determines whether to allow communications connections with other secure communities of the two or more secure communities, and initiates the communications connections with the other secure communities.

22. The system of claim 1, wherein the host secure community includes more than one community gateway controller.

23. The system of claim 22, wherein the more than one community gateway controllers have the same authority and functions.

24. The system of claim 22, wherein the more than one community gateway controllers have different authorities and functions.

25. The system of claim 22, wherein an administrator of the host secure community delegates control of the community gateway controller to one or more other administrators of community gateway controllers.

26. The system of claim 1, wherein one or more interoperable workstations are coupled to the community gateway controller.

27. The system of claim 1, wherein an interoperable workstation within the host secure community may remotely control the community gateway controller.

28. The system of claim 1, wherein the identification module further comprises instructions for directing the community gateway controller to assign an alias for a communications resource.

29. The system of claim 28, wherein the identification module further comprises instructions for directing the community gateway controller to transmit the alias to the second secure community by prearrangement.

30. The system of claim 28, wherein the identification module further comprises instructions for directing the community gateway controller to transmit the alias to the second secure community via a secure transmission.

31. The system of claim 28, wherein the identification module further comprises instructions for directing the community gateway controller to establish an expiry time for the alias upon which the alias is no longer usable.

32. The system of claim 28, wherein the identification module further comprises instructions for directing the community gateway controller to log transmission and events associated with the alias that are associated with a fixed identity of the communications resource of the alias.

33. The system of claim 1, wherein the communications resources include radios, smart phones, and other devices.

34. The system of claim 1, wherein the communications resources include sensors, video cameras, and other devices.

35. The system of claim 1, wherein the first media transmission encryption scheme and the second media transmission encryption scheme are the same.

36. The system of claim 1, wherein the first media transmission encryption scheme and the second media transmission encryption scheme are different.

37. The system of claim 1, wherein a graphical user interface coupled to the community gateway controller is configured to display a security indication of a relative rank of a media transmission encryption scheme of a communications resource within a secure community of the two or more secure communities that is to be, or has been connected.