US5689566A — Network with secure communications sessions

Claim 1

Independent Claim 339 words

A bi-directional security system for a network, comprising: at least one client, the client further comprising: client communication means to communicate with at least one server; packet reception means to receive transmitted packet data from the server; means to generate and transmit a first packet to the server, at least a portion of the first packet having a first packet header containing client identifying information; means to encrypt at least a portion of the client identifying information in the first packet header prior to transmission; means to decrypt at least a portion of the client authenticating information in a second packet header and to determine if the second packet is from the server, the client further having means to terminate the communication if the second packet is from an invalid server; means to generate and transmit a third packet to the server, at least a portion the third packet having a third packet header containing session information; and means to encrypt at least a portion of the session information in the third packet header prior to transmission; and the server further comprising: server communication means to communicate with the client; packet reception means to receive transmitted packet data from the client; means to decrypt at least a portion of the client identifying information in the first packet header and to determine if the first packet is from a valid client, the server further having means to terminate the communication if the first packet is from an invalid client; means to generate and transmit a second packet to the client in response to the first packet, at least a portion the second packet having the second packet header containing client authenticating information; means to encrypt at least a portion of the client authenticating information in the second packet header prior to transmission; and means to decrypt at least a portion of the session information in the third packet header; whereby, the client and the server each verify the validity of the other by transmitting encrypted identifying information to one another.

Claim 2

Dependent Claim 339 words

A bi-directional security system for a network, comprising: at least one client, the client further comprising: client communication means to communicate with at least one server; packet reception means to receive transmitted packet data from the server; means to generate and transmit a first packet to the server, at least a portion of the first packet having a first packet header containing client identifying information; means to encrypt at least a portion of the client identifying information in the first packet header prior to transmission; means to decrypt at least a portion of the client authenticating information in a second packet header and to determine if the second packet is from the server, the client further having means to terminate the communication if the second packet is from an invalid server; means to generate and transmit a third packet to the server, at least a portion the third packet having a third packet header containing session information; and means to encrypt at least a portion of the session information in the third packet header prior to transmission; and the server further comprising: server communication means to communicate with the client; packet reception means to receive transmitted packet data from the client; means to decrypt at least a portion of the client identifying information in the first packet header and to determine if the first packet is from a valid client, the server further having means to terminate the communication if the first packet is from an invalid client; means to generate and transmit a second packet to the client in response to the first packet, at least a portion the second packet having the second packet header containing client authenticating information; means to encrypt at least a portion of the client authenticating information in the second packet header prior to transmission; and means to decrypt at least a portion of the session information in the third packet header; whereby, the client and the server each verify the validity of the other by transmitting encrypted identifying information to one another.

Claim 3

Dependent Claim 59 words

A security system, as in claim 1, further comprising: means in the server to generate and transmit a fourth packet to the client in response to the third packet, the fourth packet having a packet header containing session information; and means to encrypt at least a portion of the session information in the fourth packet header prior to transmission.

Claim 4

Dependent Claim 115 words

A security system, as in claim 2, wherein: the client has a userid; the client has a password; the first packet is encrypted by: concatenating a random number to a predetermined bit constant to form a value R; a CRC signature C1 is generated from the value R and the userid; the value R is used as a DES key to encrypt the userid; the server name is used to generate a key K to encrypt the value R; the key Ka is generated by a one way hash function from the userid and password; and a random number Ra and its CRC signature C2 is generated, Ra and C2 are encrypted using key Ka.

Claim 5

Dependent Claim 156 words

A security system, as in claim 3, wherein: the server further comprises an encrypted client password file; the second packet is encrypted by: a key K2 is generated from the server name and a one way hash function to decrypt the packet header of the first packet; the userid is decrypted using the decrypted value R from the packet header; the decrypted userid is used to access an authorization table to determine if the first packet is valid; the userid is used to extract a one way hashed password Kb from the encrypted client password file, the password Kb is then used to decrypt values Ra, C1 and C2; the value Ra is manipulated via a predetermined formula to produce a random number R'a; a random number Rb is generated by the server; and R'a and Rb are encrypted with password Kb, inserted into the packet header of the second packet and transmitted to the client.

Claim 6

Dependent Claim 117 words

A bidirectional security system for a network, comprising: at least one client, the client further comprising: means to encrypt a first logon packet; means to transmit the first logon packet to the server; means to decrypt the second logon packet; means to encrypt a third logon packet with session information; a server, further comprising: means to decrypt the first logon packet; means to encrypt a second logon packet with client authenticating information; means to transmit the second logon packet to the client; means to decrypt the third logon packet; and a communication channel capable transmitting packets between the client machine and the server; whereby the client and server can establish secure communications by bi-directionally transmitting encrypted data.

Claim 7

Dependent Claim 117 words

A bidirectional security system for a network, comprising: at least one client, the client further comprising: means to encrypt a first logon packet; means to transmit the first logon packet to the server; means to decrypt the second logon packet; means to encrypt a third logon packet with session information; a server, further comprising: means to decrypt the first logon packet; means to encrypt a second logon packet with client authenticating information; means to transmit the second logon packet to the client; means to decrypt the third logon packet; and a communication channel capable transmitting packets between the client machine and the server; whereby the client and server can establish secure communications by bi-directionally transmitting encrypted data.

Claim 8

Dependent Claim 56 words

A security system, as in claim 5, further comprising: means to encrypt packet data in least two security levels, the first security level having a first packet encryption scheme and the second security level having a second packet encryption scheme; whereby the security system can selectably encrypt packet data with at least two packet encryption schemes.

Claim 9

Dependent Claim 45 words

A security system, as in claim 6, further comprising: means to encrypt packet data at least three security levels, the third security level having a third packet encryption scheme; whereby the security system can selectably encrypt packet data with at least three packet encryption schemes.

Claim 10

Dependent Claim 18 words

A security system, as in claim 7, wherein the first packet encryption scheme is a single DES encryption.

Claim 11

Dependent Claim 18 words

A security system, as in claim 8, wherein the second packet encryption scheme is a triple DES encryption.

Claim 12

Dependent Claim 49 words

A security system, as in claim 9, wherein: the first packet encryption scheme encrypts the packet header information; and the second packet encryption scheme encrypts the packet header information; the third packet encryption scheme is a triple DES encryption, and further encrypts the packet header and the packet data.

Claim 13

Dependent Claim 34 words

A security system, as in claim 10, wherein: the server further comprises means to encrypt a fourth logon packet with session information; and the client further comprises means to decrypt the fourth logon packet.

Claim 14

Dependent Claim 57 words

A security system, as in claim 9, wherein: the client further comprises means to encrypt data packets; and the server further comprises means to encrypt data packets; data packets are selectably encrypted using at least one of the security levels; and means to dynamically adjust the size of the packet header based on the selected encryption scheme.

Claim 15

Dependent Claim 39 words

A security system, as in claim 5, wherein: each client includes at least one application program; and the server further comprises at least one packet queue for each client; whereby application performance is improved by reducing packet search time.

Claim 16

Independent Claim 125 words

A method of securely transmitting packet data between a client and a server with encrypted packets, including the steps of: using at least one communication channel to transmit packets between at least one client machine and at least one server; encrypting in the client a first logon packet; transmitting the first logon packet to the server; decrypting the first logon packet in the server; encrypting a second logon packet in the server with client authenticating information; transmitting the second logon packet to the client; decrypting the second logon packet in the client; encrypting in the client a third logon packet with session information; decrypting the third logon packet in the server; whereby the client and server can establish secure communications by bi-directionally transmitting encrypted data.

Claim 17

Independent Claim 125 words

A method of securely transmitting packet data between a client and a server with encrypted packets, including the steps of: using at least one communication channel to transmit packets between at least one client machine and at least one server; encrypting in the client a first logon packet; transmitting the first logon packet to the server; decrypting the first logon packet in the server; encrypting a second logon packet in the server with client authenticating information; transmitting the second logon packet to the client; decrypting the second logon packet in the client; encrypting in the client a third logon packet with session information; decrypting the third logon packet in the server; whereby the client and server can establish secure communications by bi-directionally transmitting encrypted data.

Claim 18

Dependent Claim 56 words

A method, as in claim 14, including the further steps of: encrypting a fourth logon packet in the server with session information; transmitting the fourth logon packet to the client; and decrypting the fourth logon packet in the client; using the session information to control encryption of packets while communicating between the client and the server.

Claim 19

Dependent Claim 38 words

A method, as in claim 15, including the further step of using at least two selectable encryption schemes, including a first encryption scheme for a first security level and a second encryption scheme for a second security level.

Claim 20

Dependent Claim 70 words

A method, as in claim 16, including the further steps of: using at least two communication channels to communicate between multiple client and server, at least a first communication channel having a first level of security and at least a second communication channel having a second level of security; and selecting the first encryption scheme for the first communication channel and the second encryption scheme for the second communication channel.

Claim 21

Dependent Claim 31 words

A method, as in claim 17, including the further step of using single DES encryption for the first level of security and triple DES encryption for the second level of security.

Claim 22

Dependent Claim 43 words

A method, as in claim 18, including the further steps of: using packets which contain a header portion and a data portion; and using a third encryption scheme in which triple DES encryption is used for the packet header and the packet data.

Claim 23

Dependent Claim 40 words

A method, as in claim 19, including the further steps of: selecting the encryption scheme based on the nature of the data in the packet; and dynamically adjusting the size of the packet header based on the selected encryption scheme.

Annuity Stage	Window Opens	Payment Deadline	Surcharge Period Until	Estimated Fee	Status
3.5 Years (Year 4)	2000-11-17	2001-05-19	2001-11-18	$2000.00	Window Closed / Lapsed
7.5 Years (Year 8)	2004-11-17	2005-05-19	2005-11-18	$3760.00	Window Closed / Lapsed
11.5 Years (Year 12)	2008-11-17	2009-05-19	2009-11-18	$7700.00	Window Closed / Lapsed

Network with secure communications sessions

Abstract

Inventors

Bibliographic Details

Claims Analysis

References Cited (Backward Citations)

USPTO Annuity & Maintenance Windows

Assigned Categories & Tags

Assign Category Tag