US5524052A
Expired / Lapsed
US
⏱️ 0.0 years remaining
Communication network access method and system
Assignee: AT&T Inc
•
Filing: 1994-10-13
•
Granted: 1996-06-04
•
Expires: 2014-10-13
Abstract
Abstract A network management frame contains a clear text (unencrypted) management command field and a security field. The management frame is sent to a data communications network by an authorized managing entity (manager). The management frame is addressed to a managing agent (agent). The security field includes two sub fields. The first sub field is a clear text time stamp. The second sub field includes this same time stamp value concatenated with a checksum that is calculated by the manager for the specific clear text management command contained within the management frame. The concatenated value is then encrypted under a secret cryptographic key that is shared by the manager and the agent. The agent receives the management frame, calculates a checksum of the clear text management command, and appends this checksum to the clear text time stamp as contained in the received management frame. This value is then encrypted using the shared cryptographic code. If the result matches the second sub field of the received management command, integrity of the received management command is assured. Next, the clear text value of time stamp contained within the received management command is checked against a common clock within the agent. If the value of this time stamp falls within an predetermined time window, the authenticity of the received management command has been verified.
Inventors
- 👤 Kurt E. Augustine
- 👤 James E. Neeley, Sr.
- 👤 Norman C. Strole
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-11-03 00:53
CPC Classifications
H; H04; H04L; H04L41/00; H04L41/28; H04L41/04; H04L41/046; H04L63/00; H04L63/12; H04L63/123; H04L2463/00; H04L2463/121; H04L63/04; H04L63/0428; H04L63/0435
Claims Analysis
Total Claims: 25
Claim 1
Independent Claim
116 words
A communication network comprising: means for issuing a management frame to said network, said management frame containing a management command, a time stamp of recent origin, and an encryption of a function that is based upon said time stamp and said management command, said function being encrypted using a cryptographic key; means for receiving said management frame from said network; means for reading said management command, said time stamp, and said encryption contained in said received management frame; means for encrypting said function that is based upon said read time stamp and said read management command using said cryptographic key; and means for determining if the result of said encrypting means corresponds to said read encryption.
Claim 2
Dependent Claim
116 words
A communication network comprising: means for issuing a management frame to said network, said management frame containing a management command, a time stamp of recent origin, and an encryption of a function that is based upon said time stamp and said management command, said function being encrypted using a cryptographic key; means for receiving said management frame from said network; means for reading said management command, said time stamp, and said encryption contained in said received management frame; means for encrypting said function that is based upon said read time stamp and said read management command using said cryptographic key; and means for determining if the result of said encrypting means corresponds to said read encryption.
Claim 3
Dependent Claim
31 words
The network of claim 1 further comprising: means for executing said read management command when said determining means determines that the result of said encrypting means corresponds to said read encryption.
Claim 4
Dependent Claim
42 words
The network of claim 2 further comprises: means for checking if said read time stamp is of recent origin; and means for preventing said executing means from executing said read management command if said read time stamp is not of recent origin.
Claim 5
Dependent Claim
31 words
The network of claim 3 wherein said checking means determines if said read time stamp falls within a time window that is determined by said means for receiving said management frame.
Claim 6
Dependent Claim
20 words
The network of claim 4 wherein said management command and said time stamp in said issued management frame are unencrypted.
Claim 7
Dependent Claim
122 words
A communication network comprising: a network manager for issuing a management frame to the network, said management frame containing a command field, a time stamp related to when said management frame is issued, and an encryption by a cryptographic key of a function based upon said time stamp and said command field; and a managed station for receiving said issued management frame from the network, said managed station comprises: means for recreating said function based upon a time stamp and a command field that is contained in said received management frame; means for encrypting said recreated function using said cryptographic key; and means for determining if said encryption of said recreated function corresponds to said encryption contained in said received management frame.
Claim 8
Dependent Claim
122 words
A communication network comprising: a network manager for issuing a management frame to the network, said management frame containing a command field, a time stamp related to when said management frame is issued, and an encryption by a cryptographic key of a function based upon said time stamp and said command field; and a managed station for receiving said issued management frame from the network, said managed station comprises: means for recreating said function based upon a time stamp and a command field that is contained in said received management frame; means for encrypting said recreated function using said cryptographic key; and means for determining if said encryption of said recreated function corresponds to said encryption contained in said received management frame.
Claim 9
Dependent Claim
82 words
The network of claim 6 wherein said network manager comprises: a library of command fields; and means for generating said management frame comprises: means for selecting a command field from said library; means for calculating a checksum from said selected command field; means for establishing a time stamp; means for concatenating said established time stamp and said checksum; means for encrypting said concatenation; and means for forming a management frame from said selected command field, said established time stamp, and said encryption.
Claim 10
Dependent Claim
45 words
The network of claim 7 wherein said managed station means for recreating said function comprises: means for computing a checksum from said command field in said received management frame; and means for concatenating said computed checksum and said time stamp in said received management frame.
Claim 11
Dependent Claim
37 words
The network of claim 6 wherein said managed station comprises: means for executing said command field in said received management frame if said encryption of said recreated function corresponds to said encryption in said received management frame.
Claim 12
Dependent Claim
58 words
The network of claim 9 wherein said managed station comprises: means for determining if said time stamp in said received management frame indicates a recent time; and means for preventing said executing means from executing said command field in said reviewed management frame if said time stamp in said received management frame does not indicate a recent time.
Claim 13
Dependent Claim
117 words
In a communication network that is managed by a network manager that issues a management frame to the network, the management frame comprising a command field, a time stamp, and the encryption by a cryptographic key of a function based upon said time stamp and said command field, a managed station connected to said network, said managed station comprising: means for receiving said management frame from said network; means for recreating said function based upon said command field and said time stamp in said received management frame; means for encrypting said recreated function using said cryptographic key; and means for determining if said encryption of said recreated function corresponds to said encryption in said received management frame.
Claim 14
Dependent Claim
117 words
In a communication network that is managed by a network manager that issues a management frame to the network, the management frame comprising a command field, a time stamp, and the encryption by a cryptographic key of a function based upon said time stamp and said command field, a managed station connected to said network, said managed station comprising: means for receiving said management frame from said network; means for recreating said function based upon said command field and said time stamp in said received management frame; means for encrypting said recreated function using said cryptographic key; and means for determining if said encryption of said recreated function corresponds to said encryption in said received management frame.
Claim 15
Dependent Claim
35 words
The managed station of claim 11 further comprising: means for executing said command field in said received management frame if said encryption of said recreated function corresponds to said encryption in said received management frame.
Claim 16
Dependent Claim
56 words
The managed station of claim 12 further comprising: means for determining if said time stamp in said received management frame indicates a recent time; and means for preventing said executing means from executing said command field in said received management frame if said time stamp in said received management frame does not indicate a recent time.
Claim 17
Dependent Claim
162 words
A managed station in a communication network having a network manager, said network manager having a clock, a checksum calculator, and an encryption code, said network manager operating to issue a management frame to said network, said management frame containing a command field, a time stamp that utilizes said clock and is related to when said management frame is issued to said network, and an encryption field that utilizes said encryption code to encrypt combined data that is based upon said time stamp and said command field, said managed station comprising: means for receiving said issued management frame from the network; means for recreating said combined data from the time stamp and the command field contained in said received management frame to generate recreated combined data; means for encrypting said recreated combined data using said encryption code to generate recreated encryption field; and means for determining if said recreated encryption field corresponds to said encryption field contained in said received management frame.
Claim 18
Dependent Claim
162 words
A managed station in a communication network having a network manager, said network manager having a clock, a checksum calculator, and an encryption code, said network manager operating to issue a management frame to said network, said management frame containing a command field, a time stamp that utilizes said clock and is related to when said management frame is issued to said network, and an encryption field that utilizes said encryption code to encrypt combined data that is based upon said time stamp and said command field, said managed station comprising: means for receiving said issued management frame from the network; means for recreating said combined data from the time stamp and the command field contained in said received management frame to generate recreated combined data; means for encrypting said recreated combined data using said encryption code to generate recreated encryption field; and means for determining if said recreated encryption field corresponds to said encryption field contained in said received management frame.
Claim 19
Dependent Claim
42 words
The managed station of claim 14 wherein said means for recreating comprises: means for computing a checksum from the command field in said received management frame; and means for concatenating said computed checksum and the time stamp in said received management frame.
Claim 20
Dependent Claim
39 words
The managed station of claim 14 further comprises: means for executing said command field in said received management frame if said determining means determines that said recreated encryption field corresponds to said encryption field in said received management frame.
Claim 21
Dependent Claim
66 words
The managed station of claim 16 further comprises: means for detecting if the time stamp in said received management frame falls within a predetermined time window measured from the network manager clock; and means for preventing said executing means from executing said command field in said received management frame if the time stamp in said received management frame does not fall within the predetermined time window.
Claim 22
Dependent Claim
192 words
In a communication network that is managed by a network manager that issues a management frame to the network, the management frame comprising a command field, a time stamp, and the encryption by a cryptographic key of a function based upon said time stamp and said command field, the network also having at least one managed station connected to said network for receiving said management frame from said network, for recreating said function based upon said command field and said time stamp in said received management frame, for encrypting said recreated function using said cryptographic key, and for determining if said encryption of said recreated function corresponds to said encryption in said received management frame, said network manager comprising: a library of command fields; and means for generating said management frame comprising: means for selecting a command field from said library; means for calculating a checksum from said selected command field; means for establishing a time stamp; means for concatenating said established time stamp and said calculated checksum; means for encrypting said concatenation; and means for forming said management frame from said selected command field, said established time stamp, and said encryption.
Claim 23
Dependent Claim
192 words
In a communication network that is managed by a network manager that issues a management frame to the network, the management frame comprising a command field, a time stamp, and the encryption by a cryptographic key of a function based upon said time stamp and said command field, the network also having at least one managed station connected to said network for receiving said management frame from said network, for recreating said function based upon said command field and said time stamp in said received management frame, for encrypting said recreated function using said cryptographic key, and for determining if said encryption of said recreated function corresponds to said encryption in said received management frame, said network manager comprising: a library of command fields; and means for generating said management frame comprising: means for selecting a command field from said library; means for calculating a checksum from said selected command field; means for establishing a time stamp; means for concatenating said established time stamp and said calculated checksum; means for encrypting said concatenation; and means for forming said management frame from said selected command field, said established time stamp, and said encryption.
Claim 24
Dependent Claim
157 words
In a communication network, a method for managing the network comprising the steps of; A - issuing a management frame to said network, said management frame containing a network management command and a security field, said security field comprising two sub fields, one of which is a time stamp of recent origin, and the other of which is an encryption of a function that is based upon said time stamp and said management command, said function being encrypted using a cryptographic key, B - receiving said management frame from said network, C - reading said management command and said time stamp as contained in said received management frame, D - encrypting said function that is based upon said time stamp and said management command as contained in said received management frame using said cryptographic key, and E - determining if the result of encrypting step D corresponds to said second sub field in said received management frame.
Claim 25
Dependent Claim
157 words
In a communication network, a method for managing the network comprising the steps of; A - issuing a management frame to said network, said management frame containing a network management command and a security field, said security field comprising two sub fields, one of which is a time stamp of recent origin, and the other of which is an encryption of a function that is based upon said time stamp and said management command, said function being encrypted using a cryptographic key, B - receiving said management frame from said network, C - reading said management command and said time stamp as contained in said received management frame, D - encrypting said function that is based upon said time stamp and said management command as contained in said received management frame using said cryptographic key, and E - determining if the result of encrypting step D corresponds to said second sub field in said received management frame.
References Cited (Backward Citations)
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 1999-06-04 | 1999-12-04 | 2000-06-04 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 2003-06-04 | 2003-12-04 | 2004-06-04 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2007-06-04 | 2007-12-04 | 2008-06-04 | $7700.00 | Window Closed / Lapsed |