BR112021001715A2 - método de segurança para rede de comunicação de dados - Google Patents
método de segurança para rede de comunicação de dados Download PDFInfo
- Publication number
- BR112021001715A2 BR112021001715A2 BR112021001715-1A BR112021001715A BR112021001715A2 BR 112021001715 A2 BR112021001715 A2 BR 112021001715A2 BR 112021001715 A BR112021001715 A BR 112021001715A BR 112021001715 A2 BR112021001715 A2 BR 112021001715A2
- Authority
- BR
- Brazil
- Prior art keywords
- hosts
- network
- secure
- data communication
- security
- Prior art date
Links
Classifications
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
- H04L9/08—Key distribution or management, e.g. generation, sharing or updating, of cryptographic keys or passwords
- H04L9/0816—Key establishment, i.e. cryptographic processes or cryptographic protocols whereby a shared secret becomes available to two or more parties, for subsequent use
- H04L9/0838—Key agreement, i.e. key establishment technique in which a shared key is derived by parties as a function of information contributed by, or associated with, each of these
- H04L9/0841—Key agreement, i.e. key establishment technique in which a shared key is derived by parties as a function of information contributed by, or associated with, each of these involving Diffie-Hellman or related key agreement protocols
- H04L9/0844—Key agreement, i.e. key establishment technique in which a shared key is derived by parties as a function of information contributed by, or associated with, each of these involving Diffie-Hellman or related key agreement protocols with user authentication or key authentication, e.g. ElGamal, MTI, MQV-Menezes-Qu-Vanstone protocol or Diffie-Hellman protocols using implicitly-certified keys
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
- H04L9/14—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols using a plurality of keys or algorithms
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L63/00—Network architectures or network communication protocols for network security
- H04L63/04—Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks
- H04L63/0428—Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks wherein the data content is protected, e.g. by encrypting or encapsulating the payload
- H04L63/045—Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks wherein the data content is protected, e.g. by encrypting or encapsulating the payload wherein the sending and receiving network entities apply hybrid encryption, i.e. combination of symmetric and asymmetric encryption
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L63/00—Network architectures or network communication protocols for network security
- H04L63/06—Network architectures or network communication protocols for network security for supporting key management in a packet data network
- H04L63/061—Network architectures or network communication protocols for network security for supporting key management in a packet data network for key exchange, e.g. in peer-to-peer networks
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L63/00—Network architectures or network communication protocols for network security
- H04L63/08—Network architectures or network communication protocols for network security for authentication of entities
- H04L63/0869—Network architectures or network communication protocols for network security for authentication of entities for achieving mutual authentication
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
- H04L9/08—Key distribution or management, e.g. generation, sharing or updating, of cryptographic keys or passwords
- H04L9/0816—Key establishment, i.e. cryptographic processes or cryptographic protocols whereby a shared secret becomes available to two or more parties, for subsequent use
- H04L9/0838—Key agreement, i.e. key establishment technique in which a shared key is derived by parties as a function of information contributed by, or associated with, each of these
- H04L9/0841—Key agreement, i.e. key establishment technique in which a shared key is derived by parties as a function of information contributed by, or associated with, each of these involving Diffie-Hellman or related key agreement protocols
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
- H04L9/08—Key distribution or management, e.g. generation, sharing or updating, of cryptographic keys or passwords
- H04L9/0891—Revocation or update of secret information, e.g. encryption key update or rekeying
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
- H04L9/32—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials
- H04L9/3271—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials using challenge-response
- H04L9/3273—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials using challenge-response for mutual authentication
Landscapes
- Engineering & Computer Science (AREA)
- Computer Security & Cryptography (AREA)
- Computer Networks & Wireless Communication (AREA)
- Signal Processing (AREA)
- Computer Hardware Design (AREA)
- Computing Systems (AREA)
- General Engineering & Computer Science (AREA)
- Data Exchanges In Wide-Area Networks (AREA)
Abstract
Description
Claims (1)
- REIVINDICAÇÕES:1- "MÉTODO DE SEGURANÇA PARA REDE DE COMUNICAÇÃO DE DADOS", objeto da presente patente revela um mecanismo/arquitetura que permite a comunicação segura e transparente fim-a-fim entre dois dispositivos e utilizar troca explícita de chaves, no momento do estabelecimento da conexão, sendo que a aplicação não precisa de nenhuma modificação para seu correto e seguro funcionamento caracterizado por ser implementada nas camadas mais baixas do sistema operacional, como parte da pilha de redes, driver da interface de rede, em "hardware" ou "firmware", em lógica programável ou não, que provê serviços como sigilo e autenticação mútua segura entre dois "hosts", ser suportado por qualquer aplicação ou protocolo e ser implantado como componente do sistema. 2 - "MÉTODO DE SEGURANÇA PARA REDE DE COMUNICAÇÃO DE DADOS", objeto da presente patente revela um mecanismo/arquitetura que permite a comunicação segura e transparente fim-a-fim entre dois dispositivos e utilizar troca explícita de chaves, no momento do estabelecimento da conexão, sendo que a aplicação não precisa de nenhuma modificação para seu correto e seguro funcionamento caracterizado por utilizar um banco de dados distribuído com um protocolo de informações que possibilita aos "hosts" trocarem informações a respeito de outros "hosts" e não depender de entidades certificadoras centralizadas. 3 - "MÉTODO DE SEGURANÇA PARA REDE DE COMUNICAÇÃO DE DADOS", objeto da presente patente revela um mecanismo/arquitetura que permite a comunicação segura e transparente fim-a-fim entre dois dispositivos e utilizar troca explícita de chaves, no momento do estabelecimento da conexão, sendo que a aplicação não precisa de nenhuma modificação para seu correto e seguro funcionamento caracterizado por ser transparente às aplicações e utilizar-se de memória não volátil, a fim de informar os "hosts" com os quais esse se comunicou, e reestabelecer o canal de comunicação seguro. 4 - "MÉTODO DE SEGURANÇA PARA REDE DE COMUNICAÇÃO DE DADOS", objeto da presente patente revela um mecanismo/arquitetura que permite a comunicação segura e transparente fim-a-fim entre dois dispositivos e utilizar troca explícita de chaves, no momento do estabelecimento da conexão, sendo que a aplicação não precisa de nenhuma modificação para seu correto e seguro funcionamento caracterizado por construção diferenciada do sistema com troca de chaves pública para conhecimento dos dois “hosts” é executado o processo DH e estabelece a chave temporária da sessão e a comunicação através da chave criptográfica simétrica estabelecida no processo, qualquer dos “hosts” a qualquer momento que esse procedimento seja reestabelecido a fim de trocar sua chave, quando a sessão é finalizada, os "hosts" descartam a chave simétrica e mantém o par de chaves (pública e privada) para autenticação e reestabelecimento futuro de sessões não depende de autoridades certificadoras para funcionar. 5 - "MÉTODO DE SEGURANÇA PARA REDE DE COMUNICAÇÃO DE DADOS", objeto da presente patente revela um mecanismo/arquitetura que permite a comunicação segura e transparente fim-a-fim entre dois dispositivos e utilizar troca explícita de chaves, no momento do estabelecimento da conexão, sendo que a aplicação não precisa de nenhuma modificação para seu correto e seguro funcionamento caracterizado por arquitetura poder ser implementada em camadas mais baixas do sistema como um módulo da "stack" de rede do sistema operacional, como parte do driver das interfaces de rede, ou em hardware de lógica programável, sendo preservado o componente em formatações ou atualizações e suportada por qualquer mecanismo de comunicação 6 - "MÉTODO DE SEGURANÇA PARA REDE DE COMUNICAÇÃO DE DADOS", objeto da presente patente revela um mecanismo/arquitetura que permite a comunicação segura e transparente fim-a-fim entre dois dispositivos e utilizar troca explícita de chaves, no momento do estabelecimento da conexão, sendo que a aplicação não precisa de nenhuma modificação para seu correto e seguro funcionamento caracterizado por usar memória não volátil visto que o "host" pode renegociar as chaves públicas toda vez que encontra outro host desconhecido, e utilizar desta memória para reestabelecer e reautenticar rapidamente sessões anteriores.
Applications Claiming Priority (1)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
PCT/BR2018/050263 WO2020024021A1 (pt) | 2018-07-29 | 2018-07-29 | Método de segurança para rede de comunicação de dados |
Publications (1)
Publication Number | Publication Date |
---|---|
BR112021001715A2 true BR112021001715A2 (pt) | 2021-06-01 |
Family
ID=69230433
Family Applications (1)
Application Number | Title | Priority Date | Filing Date |
---|---|---|---|
BR112021001715-1A BR112021001715A2 (pt) | 2018-07-29 | 2018-07-29 | método de segurança para rede de comunicação de dados |
Country Status (8)
Country | Link |
---|---|
US (1) | US20210297391A1 (pt) |
EP (1) | EP3832949A4 (pt) |
JP (1) | JP2022500889A (pt) |
KR (1) | KR20210065087A (pt) |
CN (1) | CN112997449A (pt) |
BR (1) | BR112021001715A2 (pt) |
IL (1) | IL280501A (pt) |
WO (1) | WO2020024021A1 (pt) |
Family Cites Families (30)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US5070528A (en) * | 1990-06-29 | 1991-12-03 | Digital Equipment Corporation | Generic encryption technique for communication networks |
JPH10190649A (ja) * | 1996-10-16 | 1998-07-21 | Hewlett Packard Co <Hp> | 双方向データストリーム伝送装置 |
US6101543A (en) * | 1996-10-25 | 2000-08-08 | Digital Equipment Corporation | Pseudo network adapter for frame capture, encapsulation and encryption |
US6754820B1 (en) * | 2001-01-30 | 2004-06-22 | Tecsec, Inc. | Multiple level access system |
US6185681B1 (en) | 1998-05-07 | 2001-02-06 | Stephen Zizzi | Method of transparent encryption and decryption for an electronic document management system |
US6751729B1 (en) | 1998-07-24 | 2004-06-15 | Spatial Adventures, Inc. | Automated operation and security system for virtual private networks |
US6826616B2 (en) | 1998-10-30 | 2004-11-30 | Science Applications International Corp. | Method for establishing secure communication link between computers of virtual private network |
IL135554A0 (en) | 2000-04-09 | 2001-05-20 | Lea D Corp Ltd | Method and system for end-to-end communication through the internet transmission infrastructure |
SE518604C2 (sv) | 2000-06-29 | 2002-10-29 | Wireless Login Ab | Metod och anordning för säker anslutning till ett kommunikationsnätverk |
US20020042875A1 (en) | 2000-10-11 | 2002-04-11 | Jayant Shukla | Method and apparatus for end-to-end secure data communication |
US7757278B2 (en) | 2001-01-04 | 2010-07-13 | Safenet, Inc. | Method and apparatus for transparent encryption |
US7073059B2 (en) * | 2001-06-08 | 2006-07-04 | Hewlett-Packard Development Company, L.P. | Secure machine platform that interfaces to operating systems and customized control programs |
US8239531B1 (en) | 2001-07-23 | 2012-08-07 | At&T Intellectual Property Ii, L.P. | Method and apparatus for connection to virtual private networks for secure transactions |
US20040025018A1 (en) | 2002-01-23 | 2004-02-05 | Haas Zygmunt J. | Secure end-to-end communication in mobile ad hoc networks |
US7266842B2 (en) | 2002-04-18 | 2007-09-04 | International Business Machines Corporation | Control function implementing selective transparent data authentication within an integrated system |
US20050033988A1 (en) | 2002-10-18 | 2005-02-10 | Neoscale Systems, Inc. | Method and system for transparent encryption and authentication of file data protocols over internet protocol |
US7506368B1 (en) | 2003-02-13 | 2009-03-17 | Cisco Technology, Inc. | Methods and apparatus for network communications via a transparent security proxy |
US7478427B2 (en) | 2003-05-05 | 2009-01-13 | Alcatel-Lucent Usa Inc. | Method and apparatus for providing adaptive VPN to enable different security levels in virtual private networks (VPNs) |
US7360083B1 (en) | 2004-02-26 | 2008-04-15 | Krishna Ragireddy | Method and system for providing end-to-end security solutions to aid protocol acceleration over networks using selective layer encryption |
US7549048B2 (en) * | 2004-03-19 | 2009-06-16 | Microsoft Corporation | Efficient and secure authentication of computing systems |
US7480794B2 (en) | 2004-09-22 | 2009-01-20 | Cisco Technology, Inc. | System and methods for transparent encryption |
US7730309B2 (en) * | 2005-07-27 | 2010-06-01 | Zimmermann Philip R | Method and system for key management in voice over internet protocol |
US8745373B2 (en) * | 2008-04-23 | 2014-06-03 | Dell Products L.P. | Systems and methods for applying encryption to network traffic on the basis of policy |
US8392699B2 (en) * | 2009-10-31 | 2013-03-05 | Cummings Engineering Consultants, Inc. | Secure communication system for mobile devices |
DK2320621T3 (en) * | 2009-11-06 | 2016-12-19 | Hoffmann La Roche | A method of establishing a cryptographic communication between a remote device and a medical device and system for carrying out this method |
US8705513B2 (en) | 2009-12-15 | 2014-04-22 | At&T Intellectual Property I, L.P. | Methods and apparatus to communicatively couple virtual private networks to virtual machines within distributive computing networks |
CN101710380B (zh) | 2009-12-22 | 2012-04-25 | 中国软件与技术服务股份有限公司 | 电子文件安全防护方法 |
CN101819618A (zh) | 2010-03-19 | 2010-09-01 | 杨筑平 | 文件保密方法 |
US9065802B2 (en) | 2012-05-01 | 2015-06-23 | Fortinet, Inc. | Policy-based configuration of internet protocol security for a virtual private network |
CN104200176A (zh) | 2014-08-28 | 2014-12-10 | 电子科技大学 | 对智能移动终端中文件进行透明加解密的***及方法 |
-
2018
- 2018-07-29 WO PCT/BR2018/050263 patent/WO2020024021A1/pt active Application Filing
- 2018-07-29 KR KR1020217003921A patent/KR20210065087A/ko not_active Application Discontinuation
- 2018-07-29 BR BR112021001715-1A patent/BR112021001715A2/pt unknown
- 2018-07-29 JP JP2021505783A patent/JP2022500889A/ja active Pending
- 2018-07-29 US US17/264,351 patent/US20210297391A1/en not_active Abandoned
- 2018-07-29 CN CN201880096418.3A patent/CN112997449A/zh active Pending
- 2018-07-29 EP EP18928574.5A patent/EP3832949A4/en not_active Withdrawn
-
2021
- 2021-01-28 IL IL280501A patent/IL280501A/en unknown
Also Published As
Publication number | Publication date |
---|---|
EP3832949A1 (en) | 2021-06-09 |
CN112997449A (zh) | 2021-06-18 |
US20210297391A1 (en) | 2021-09-23 |
KR20210065087A (ko) | 2021-06-03 |
IL280501A (en) | 2021-03-25 |
EP3832949A4 (en) | 2022-03-30 |
WO2020024021A1 (pt) | 2020-02-06 |
JP2022500889A (ja) | 2022-01-04 |
Similar Documents
Publication | Publication Date | Title |
---|---|---|
US10841341B2 (en) | Policy-based configuration of internet protocol security for a virtual private network | |
US9516061B2 (en) | Smart virtual private network | |
CN109906625B (zh) | 无线局域网上的安全链路层连接的方法 | |
WO2021068777A1 (en) | Methods and systems for internet key exchange re-authentication optimization | |
Dhall et al. | Implementation of IPSec protocol | |
CN117714370A (zh) | 动态分离的信道加密密钥分配 | |
Elezi et al. | Conception of Virtual Private Networks using IPsec suite of protocols, comparative analysis of distributed database queries using different IPsec modes of encryption | |
ES2891359T3 (es) | Dispositivo y procedimiento de transmisión de datos | |
Huang et al. | The Research of VPN on WLAN | |
BR112021001715A2 (pt) | método de segurança para rede de comunicação de dados | |
Cisco | Introduction to Cisco IPsec Technology | |
Cisco | Tunneling Protocols | |
Cisco | Tunneling Protocols | |
Singh et al. | A Novel approach for the Analysis & Issues of IPsec VPN | |
Korhonen | Future after openvpn and ipsec | |
Arora et al. | Comparison of VPN protocols–IPSec, PPTP, and L2TP | |
US20240022402A1 (en) | A Method for Tunneling an Internet Protocol Connection Between Two Endpoints | |
Rajamohan | An overview of remote access VPNs: Architecture and efficient installation | |
Panchakarla | Design and Implementaion of Firewall to Inspect Traffic in Encrypted VPN Tunnels | |
Caronni et al. | Proposed Security Mechanisms in the ‘New’Internet | |
Kedarnath | IPSEC: Internet Protocol Security | |
Pauliș | Solutions for Network Traffic Security: VPN through IPsec and PKI | |
Al-Abaychi et al. | Evaluation of VPNs | |
Bob | Internet Technology | |
Velasquez | Study of mechanisms ensuring service continuity for IKEv2 and IPsec protocols |
Legal Events
Date | Code | Title | Description |
---|---|---|---|
B25B | Requested transfer of rights rejected |
Owner name: NOUVENN CORPORATION (US) Free format text: INDEFERIDO O PEDIDO DE TRANSFERENCIA CONTIDO NA PETICAO 870220088068 DE 26/09/2022, EM VIRTUDE DO PEDIDO JA ESTAR EM NOME DO INTERESSADO. |
|
B08F | Application dismissed because of non-payment of annual fees [chapter 8.6 patent gazette] |
Free format text: REFERENTE A 3A ANUIDADE. |
|
B08G | Application fees: restoration [chapter 8.7 patent gazette] | ||
B08H | Application fees: decision cancelled [chapter 8.8 patent gazette] |
Free format text: ANULADA A PUBLICACAO CODIGO 8.7 NA RPI NO 2709 DE 06/12/2022. VIDE PARECER. |
|
B11Z | Dismissal: petition dismissal - article 216, par 2 of industrial property law |
Free format text: ARQUIVAMENTO DA PETICAO ART.216 2O DA LPI (NAO APRESENTADA PROCURACAO) - REFERENTE A PETICAO 800220390050, DE 14/11/2022, UMA VEZ QUE NAO FOI APRESENTADA A DEVIDA PROCURACAO POR PARTE DO DEPOSITANTE "NOUVENN CORPORATION" HABILITANDO O PROCURADOR "BRAXIL SERVICOS AUXILIARES LTDA" PARA AGIR NOS AUTOS DO PROCESSO, NO PRAZO DE 60 DIAS CONTADOS DA PRATICA DO REFERIDO ATO, CONFORME ART. 216, PARAGRAFO 2O, DA LPI, UMA VEZ QUE O PROCURADOR ATUAL E "KARINA HAIDAR MUELLER" QUE FOI CONSTITUIDA COMO REPRESENTANTE LEGAL ATRAVES DO PROTOCOLO 870220087473, DE 23/09/2022. DESTA DATA CORRE O PRAZO DE 60 DIAS PARA EVENTUAL RECURSO (GRU COD. 214) DO INTERESSADO. |
|
B15V | Prolongation of time limit allowed |
Free format text: REFERENTE A PETICAO NO 870230022284 DE 15.03.2023 - RECONHECIDA A JUSTA CAUSA CONFORME PREVISTO NO ARTIGO 221 DA LPI9279/96, SERA ATENDIDO O PLEITO DO REQUERENTE CONCEDENDO-LHE O PRAZO ADICIONAL DE 15 (QUINZE) DIAS, CONTADOS DA DATA DESTA PUBLICACAO PARA A REGULARIZACAO DO SEU PEDIDO. |
|
B08G | Application fees: restoration [chapter 8.7 patent gazette] | ||
B25L | Entry of change of name and/or headquarter and transfer of application, patent and certificate of addition of invention: publication cancelled |
Owner name: NOUVENN CORPORATION (US) Free format text: ANULADA A PUBLICACAO CODIGO 25.2 NA RPI NO 2702 DE 18/10/2022 POR TER SIDO INDEVIDA. |