[go: up one dir, main page]

WO2002011390A3 - Ameliorations apportees a des communications securisees - Google Patents

Ameliorations apportees a des communications securisees Download PDF

Info

Publication number
WO2002011390A3
WO2002011390A3 PCT/US2001/023276 US0123276W WO0211390A3 WO 2002011390 A3 WO2002011390 A3 WO 2002011390A3 US 0123276 W US0123276 W US 0123276W WO 0211390 A3 WO0211390 A3 WO 0211390A3
Authority
WO
WIPO (PCT)
Prior art keywords
layer
communication
security
packets
network
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Ceased
Application number
PCT/US2001/023276
Other languages
English (en)
Other versions
WO2002011390A2 (fr
Inventor
Guillermo Maturana
Ashish V Naik
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Andes Networks Inc
Original Assignee
Andes Networks Inc
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Priority claimed from US09/792,964 external-priority patent/US20020035681A1/en
Application filed by Andes Networks Inc filed Critical Andes Networks Inc
Priority to AU2001277990A priority Critical patent/AU2001277990A1/en
Publication of WO2002011390A2 publication Critical patent/WO2002011390A2/fr
Publication of WO2002011390A3 publication Critical patent/WO2002011390A3/fr
Anticipated expiration legal-status Critical
Ceased legal-status Critical Current

Links

Classifications

    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/16—Implementing security features at a particular protocol layer
    • H04L63/166—Implementing security features at a particular protocol layer at the transport layer
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/04—Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks
    • H04L63/0428—Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks wherein the data content is protected, e.g. by encrypting or encapsulating the payload
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/04—Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks
    • H04L63/0428—Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks wherein the data content is protected, e.g. by encrypting or encapsulating the payload
    • H04L63/0471—Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks wherein the data content is protected, e.g. by encrypting or encapsulating the payload applying encryption by an intermediary, e.g. receiving clear information at the intermediary and encrypting the received information at the intermediary before forwarding
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L69/00—Network arrangements, protocols or services independent of the application payload and not provided for in the other groups of this subclass
    • H04L69/16—Implementation or adaptation of Internet protocol [IP], of transmission control protocol [TCP] or of user datagram protocol [UDP]
    • H04L69/163—In-band adaptation of TCP data exchange; In-band control procedures
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L69/00—Network arrangements, protocols or services independent of the application payload and not provided for in the other groups of this subclass
    • H04L69/16—Implementation or adaptation of Internet protocol [IP], of transmission control protocol [TCP] or of user datagram protocol [UDP]
    • H04L69/166—IP fragmentation; TCP segmentation
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L69/00—Network arrangements, protocols or services independent of the application payload and not provided for in the other groups of this subclass
    • H04L69/30—Definitions, standards or architectural aspects of layered protocol stacks
    • H04L69/32—Architecture of open systems interconnection [OSI] 7-layer type protocol stacks, e.g. the interfaces between the data link level and the physical level
    • H04L69/322—Intralayer communication protocols among peer entities or protocol data unit [PDU] definitions
    • H04L69/325—Intralayer communication protocols among peer entities or protocol data unit [PDU] definitions in the network layer [OSI layer 3], e.g. X.25
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L69/00—Network arrangements, protocols or services independent of the application payload and not provided for in the other groups of this subclass
    • H04L69/30—Definitions, standards or architectural aspects of layered protocol stacks
    • H04L69/32—Architecture of open systems interconnection [OSI] 7-layer type protocol stacks, e.g. the interfaces between the data link level and the physical level
    • H04L69/322—Intralayer communication protocols among peer entities or protocol data unit [PDU] definitions
    • H04L69/326—Intralayer communication protocols among peer entities or protocol data unit [PDU] definitions in the transport layer [OSI layer 4]
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L69/00—Network arrangements, protocols or services independent of the application payload and not provided for in the other groups of this subclass
    • H04L69/30—Definitions, standards or architectural aspects of layered protocol stacks
    • H04L69/32—Architecture of open systems interconnection [OSI] 7-layer type protocol stacks, e.g. the interfaces between the data link level and the physical level
    • H04L69/322—Intralayer communication protocols among peer entities or protocol data unit [PDU] definitions
    • H04L69/328—Intralayer communication protocols among peer entities or protocol data unit [PDU] definitions in the presentation layer [OSI layer 6]
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L69/00—Network arrangements, protocols or services independent of the application payload and not provided for in the other groups of this subclass
    • H04L69/16—Implementation or adaptation of Internet protocol [IP], of transmission control protocol [TCP] or of user datagram protocol [UDP]

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Security & Cryptography (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Computer Hardware Design (AREA)
  • Computing Systems (AREA)
  • General Engineering & Computer Science (AREA)
  • Data Exchanges In Wide-Area Networks (AREA)

Abstract

Des modes de réalisation de l'invention concernent un procédé et un appareil codant /décodant des messages envoyés rapidement sur un réseau, et ne nécessitant pas des quantités importantes de ressources informatiques ou de mémoire. Plus précisément, un mode de réalisation de l'invention concerne un procédé de manipulation de la sécurité dans une communication entre une première extrémité et une seconde extrémité impliquant une couche sécurité, une couche transport et une couche réseau. Ce procédé comprend les étapes consistant: (a) à recevoir des paquets de la couche réseau à partir de la première extrémité de communication, ces paquets renfermant des informations codées au moyen du traitement de codage de la couche sécurité; (b) à décoder les informations codées au moyen du traitement de décodage de la couche sécurité; et (c) à transmettre des paquets de la couche réseau en direction de la second extrémité de communication, ces paquets renfermant les informations décodées.
PCT/US2001/023276 2000-07-31 2001-07-24 Ameliorations apportees a des communications securisees Ceased WO2002011390A2 (fr)

Priority Applications (1)

Application Number Priority Date Filing Date Title
AU2001277990A AU2001277990A1 (en) 2000-07-31 2001-07-24 Enhancing secure communications

Applications Claiming Priority (6)

Application Number Priority Date Filing Date Title
US63033000A 2000-07-31 2000-07-31
US09/630,330 2000-07-31
US70311000A 2000-10-31 2000-10-31
US09/703,110 2000-10-31
US09/792,964 US20020035681A1 (en) 2000-07-31 2001-02-26 Strategy for handling long SSL messages
US09/792,964 2001-02-26

Publications (2)

Publication Number Publication Date
WO2002011390A2 WO2002011390A2 (fr) 2002-02-07
WO2002011390A3 true WO2002011390A3 (fr) 2002-05-16

Family

ID=27417492

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/US2001/023276 Ceased WO2002011390A2 (fr) 2000-07-31 2001-07-24 Ameliorations apportees a des communications securisees

Country Status (2)

Country Link
AU (1) AU2001277990A1 (fr)
WO (1) WO2002011390A2 (fr)

Families Citing this family (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20020199098A1 (en) * 2001-06-08 2002-12-26 Davis John M. Non-invasive SSL payload processing for IP packet using streaming SSL parsing
US20060041741A1 (en) 2004-08-23 2006-02-23 Nokia Corporation Systems and methods for IP level decryption
FR2887049A1 (fr) * 2005-06-14 2006-12-15 France Telecom Procede de protection contre le piratage d'un terminal client utilisant un connexion securisee avec un serveur sur un reseau public
US9230373B2 (en) * 2013-02-07 2016-01-05 Honeywell International Inc. System and method to aggregate control of multiple devices via multicast messages and automatic set up of connections
CN114143051B (zh) * 2021-11-19 2024-02-23 江苏林洋能源股份有限公司 一种智能电表基于性能调整tls协议选择的方法

Non-Patent Citations (2)

* Cited by examiner, † Cited by third party
Title
"Packetized SSL Understanding the Advantage", ANDES NETWORKS TECHNICAL WHITE PAPER, 1 March 2001 (2001-03-01), XP002189707, Retrieved from the Internet <URL:http://www.andesnetworks.com/assets/115038519_ssl_advantage.pdf> [retrieved on 20020206] *
"Using the Accelar 710 User Switch, Part No. 207611-A", NORTEL NETWORKS, 11 October 1999 (1999-10-11), Santa Clara, CA (USA), XP002189706, Retrieved from the Internet <URL:http://www25.nortelnetworks.com/library/tpubs/pdf/accelar/207611A.PDF> [retrieved on 20020208] *

Also Published As

Publication number Publication date
WO2002011390A2 (fr) 2002-02-07
AU2001277990A1 (en) 2002-02-13

Similar Documents

Publication Publication Date Title
US7961882B2 (en) Methods and apparatus for initialization vector pressing
US7310424B2 (en) Encryption key distribution and network registration system, apparatus and method
US20030026428A1 (en) Method of transmitting confidential data
EP3476078B1 (fr) Systèmes et procédés pour authentifier des communications à l&#39;aide d&#39;un seul échange de message et d&#39;une clé symétrique
US20080109654A1 (en) System and method for RFID transfer of MAC, keys
WO2000060846A3 (fr) Cryptage selectif et renouvelable pour la distribution securisee de video sur demande
US10084492B2 (en) Method and system for non-persistent real-time encryption key distribution
GR3034392T3 (en) Method for providing a secure communication between two devices and application of this method
EP0792041A3 (fr) Procédé et dispositif de chiffrage par bloc
JP2010268496A (ja) 安全なハンドオーバーの方法
MY141429A (en) Processing for managing a symmetric key in a communication network and devices for the implementation of this process.
CN101502041A (zh) 加密装置、解密装置、加密方法以及解密方法
WO2005041461A3 (fr) Procede de cryptage point-a-point dans un systeme de communications
JP4976633B2 (ja) データの安全な伝送のための方法および装置
WO2024077857A1 (fr) Procédé et appareil de transmission de données et dispositif et support de stockage
JPH09307542A (ja) データ伝送装置とその方法
WO2002041101A3 (fr) Procede et systeme de transmission de donnees a securite renforcee conforme a un protocole de reseau
WO2002011390A3 (fr) Ameliorations apportees a des communications securisees
KR100601634B1 (ko) 고속 복제 방지 방법
JP2007500481A (ja) Ｄｅｓアルゴリズムに基づく暗号化方法。
JP2005501481A5 (fr)
EP1067489A3 (fr) Terminal à libre-service
KR20080047235A (ko) 블록암호의 블록 체이닝 모드를 사용한 패킷 암호화 방법,이를 이용한 패킷 암/복호화 서비스 제공 방법
US7290135B2 (en) Method and arrangement for data communication in a cryptographic system containing a plurality of entities
CN101192918B (zh) 一种广播网络中处理加密流的方法及系统

Legal Events

Date Code Title Description
AK Designated states

Kind code of ref document: A2

Designated state(s): AE AG AL AM AT AU AZ BA BB BG BR BY BZ CA CH CN CO CR CU CZ DE DK DM DZ EC EE ES FI GB GD GE GH GM HR HU ID IL IN IS JP KE KG KP KR KZ LC LK LR LS LT LU LV MA MD MG MK MN MW MX MZ NO NZ PL PT RO RU SD SE SG SI SK SL TJ TM TR TT TZ UA UG UZ VN YU ZA ZW

AL Designated countries for regional patents

Kind code of ref document: A2

Designated state(s): GH GM KE LS MW MZ SD SL SZ TZ UG ZW AM AZ BY KG KZ MD RU TJ TM AT BE CH CY DE DK ES FI FR GB GR IE IT LU MC NL PT SE TR BF BJ CF CG CI CM GA GN GQ GW ML MR NE SN TD TG

121 Ep: the epo has been informed by wipo that ep was designated in this application
AK Designated states

Kind code of ref document: A3

Designated state(s): AE AG AL AM AT AU AZ BA BB BG BR BY BZ CA CH CN CO CR CU CZ DE DK DM DZ EC EE ES FI GB GD GE GH GM HR HU ID IL IN IS JP KE KG KP KR KZ LC LK LR LS LT LU LV MA MD MG MK MN MW MX MZ NO NZ PL PT RO RU SD SE SG SI SK SL TJ TM TR TT TZ UA UG UZ VN YU ZA ZW

AL Designated countries for regional patents

Kind code of ref document: A3

Designated state(s): GH GM KE LS MW MZ SD SL SZ TZ UG ZW AM AZ BY KG KZ MD RU TJ TM AT BE CH CY DE DK ES FI FR GB GR IE IT LU MC NL PT SE TR BF BJ CF CG CI CM GA GN GQ GW ML MR NE SN TD TG

REG Reference to national code

Ref country code: DE

Ref legal event code: 8642

122 Ep: pct application non-entry in european phase
NENP Non-entry into the national phase

Ref country code: JP