DE69332396T2 - Paketempfänger in einem Rechnernetz und Rechnernetz mit modifizierten Krypto-Schlüsseln zwischen Rechnerpaaren sowie jeweilige Verfahren - Google Patents

Paketempfänger in einem Rechnernetz und Rechnernetz mit modifizierten Krypto-Schlüsseln zwischen Rechnerpaaren sowie jeweilige Verfahren

Info

Publication number
DE69332396T2
DE69332396T2 DE69332396T DE69332396T DE69332396T2 DE 69332396 T2 DE69332396 T2 DE 69332396T2 DE 69332396 T DE69332396 T DE 69332396T DE 69332396 T DE69332396 T DE 69332396T DE 69332396 T2 DE69332396 T2 DE 69332396T2
Authority
DE
Germany
Prior art keywords
computer network
computer
pairs
respective methods
crypto keys
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Expired - Fee Related
Application number
DE69332396T
Other languages
English (en)
Other versions
DE69332396D1 (de
Inventor
Martin Abadi
Michael Burrows
Butler Lampson
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Compaq Computer Corp
Original Assignee
Compaq Computer Corp
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Compaq Computer Corp filed Critical Compaq Computer Corp
Publication of DE69332396D1 publication Critical patent/DE69332396D1/de
Application granted granted Critical
Publication of DE69332396T2 publication Critical patent/DE69332396T2/de
Anticipated expiration legal-status Critical
Expired - Fee Related legal-status Critical Current

Links

Classifications

    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00Network architectures or network communication protocols for network security
    • H04L63/14Network architectures or network communication protocols for network security for detecting or protecting against malicious traffic
    • H04L63/1441Countermeasures against malicious traffic
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00Network architectures or network communication protocols for network security
    • H04L63/14Network architectures or network communication protocols for network security for detecting or protecting against malicious traffic
    • H04L63/1441Countermeasures against malicious traffic
    • H04L63/1466Active attacks involving interception, injection, modification, spoofing of data unit addresses, e.g. hijacking, packet injection or TCP sequence number attacks
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L9/00Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
    • H04L9/08Key distribution or management, e.g. generation, sharing or updating, of cryptographic keys or passwords
    • H04L9/0816Key establishment, i.e. cryptographic processes or cryptographic protocols whereby a shared secret becomes available to two or more parties, for subsequent use
    • H04L9/0838Key agreement, i.e. key establishment technique in which a shared key is derived by parties as a function of information contributed by, or associated with, each of these
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L2209/00Additional information or applications relating to cryptographic mechanisms or cryptographic arrangements for secret or secure communication H04L9/00
    • H04L2209/12Details relating to cryptographic hardware or logic circuitry
    • H04L2209/125Parallelization or pipelining, e.g. for accelerating processing of cryptographic operations
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L2209/00Additional information or applications relating to cryptographic mechanisms or cryptographic arrangements for secret or secure communication H04L9/00
    • H04L2209/34Encoding or coding, e.g. Huffman coding or error correction
DE69332396T 1992-07-21 1993-07-14 Paketempfänger in einem Rechnernetz und Rechnernetz mit modifizierten Krypto-Schlüsseln zwischen Rechnerpaaren sowie jeweilige Verfahren Expired - Fee Related DE69332396T2 (de)

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
US07/917,870 US5268962A (en) 1992-07-21 1992-07-21 Computer network with modified host-to-host encryption keys

Publications (2)

Publication Number Publication Date
DE69332396D1 DE69332396D1 (de) 2002-11-21
DE69332396T2 true DE69332396T2 (de) 2003-06-18

Family

ID=25439446

Family Applications (1)

Application Number Title Priority Date Filing Date
DE69332396T Expired - Fee Related DE69332396T2 (de) 1992-07-21 1993-07-14 Paketempfänger in einem Rechnernetz und Rechnernetz mit modifizierten Krypto-Schlüsseln zwischen Rechnerpaaren sowie jeweilige Verfahren

Country Status (4)

Country Link
US (1) US5268962A (de)
EP (1) EP0582395B1 (de)
JP (1) JP2509790B2 (de)
DE (1) DE69332396T2 (de)

Families Citing this family (55)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CA2149744C (en) * 1993-11-08 1999-03-16 Erwin W. Bathrick Protected distribution protocol for keying and certificate material
US5481715A (en) * 1993-12-15 1996-01-02 Sun Microsystems, Inc. Method and apparatus for delegated communications in a computer system using trusted deputies
JP3548215B2 (ja) * 1993-12-22 2004-07-28 キヤノン株式会社 通信方法及びそのシステム
US5481610A (en) * 1994-02-28 1996-01-02 Ericsson Inc. Digital radio transceiver with encrypted key storage
JP3647907B2 (ja) * 1994-09-09 2005-05-18 富士通株式会社 暗号化ソフトウェアの解凍システム
US5864683A (en) * 1994-10-12 1999-01-26 Secure Computing Corporartion System for providing secure internetwork by connecting type enforcing secure computers to external network for limiting access to data based on user and process access rights
US5548649A (en) * 1995-03-28 1996-08-20 Iowa State University Research Foundation Network security bridge and associated method
US5579480A (en) * 1995-04-28 1996-11-26 Sun Microsystems, Inc. System and method for traversing ATM networks based on forward and reverse virtual connection labels
DE19515680A1 (de) * 1995-04-28 1996-10-31 Sel Alcatel Ag Verfahren zum Verschlüsseln und Entschlüsseln eines paketierten Nachrichtenstroms, sowie Verschlüssler und Entschlüssler dafür
US5812669A (en) * 1995-07-19 1998-09-22 Jenkins; Lew Method and system for providing secure EDI over an open network
US5757924A (en) * 1995-09-18 1998-05-26 Digital Secured Networks Techolognies, Inc. Network security device which performs MAC address translation without affecting the IP address
US5689566A (en) * 1995-10-24 1997-11-18 Nguyen; Minhtam C. Network with secure communications sessions
US5638448A (en) * 1995-10-24 1997-06-10 Nguyen; Minhtam C. Network with secure communications sessions
US6108784A (en) * 1996-09-19 2000-08-22 Microsoft Corporation Encryption of applications to ensure authenticity
AU743258B2 (en) * 1997-01-03 2002-01-24 Fortress Technologies, Inc. Improved network security device
US6681017B1 (en) * 1997-09-03 2004-01-20 Lucent Technologies Inc. Simplified secure shared key establishment and data delivery protocols for electronic commerce
US6003117A (en) * 1997-10-08 1999-12-14 Vlsi Technology, Inc. Secure memory management unit which utilizes a system processor to perform page swapping
US7587044B2 (en) 1998-01-02 2009-09-08 Cryptography Research, Inc. Differential power analysis method and apparatus
US6389532B1 (en) * 1998-04-20 2002-05-14 Sun Microsystems, Inc. Method and apparatus for using digital signatures to filter packets in a network
CA2333095C (en) 1998-06-03 2005-05-10 Cryptography Research, Inc. Improved des and other cryptographic processes with leak minimization for smartcards and other cryptosystems
US6279065B1 (en) * 1998-06-03 2001-08-21 Compaq Computer Corporation Computer system with improved memory access
ATE360866T1 (de) 1998-07-02 2007-05-15 Cryptography Res Inc Leckresistente aktualisierung eines indexierten kryptographischen schlüssels
US20030037235A1 (en) * 1998-08-19 2003-02-20 Sun Microsystems, Inc. System for signatureless transmission and reception of data packets between computer networks
US6684330B1 (en) * 1998-10-16 2004-01-27 Tecsec, Inc. Cryptographic information and flow control
WO2000030262A2 (en) * 1998-11-12 2000-05-25 I-Data International A/S Apparatus and method for performing and controlling encryption/decryption for data to be transmitted on local area network
US6661896B1 (en) * 1998-12-30 2003-12-09 Howard S. Barnett Computer network security system and method
ATE403992T1 (de) * 1999-06-22 2008-08-15 Hitachi Ltd Kryptografisches gerät und verfahren
US7370348B1 (en) * 1999-07-30 2008-05-06 Intel Corporation Technique and apparatus for processing cryptographic services of data in a network system
DE60129682T2 (de) * 2000-03-29 2008-04-30 Vadium Technology Inc., Seattle Einmalige pad-verschlüsselung mit zentralschlüsseldienst und schlüsselfähigen zeichen
US6473844B1 (en) * 2000-04-29 2002-10-29 Hewlett-Packard Company System and method to protect vital memory space from non-malicious writes in a multi domain system
US6944688B1 (en) * 2001-05-18 2005-09-13 Cisco Technology, Inc. Queuing system using dual receive FIFO
US7283526B2 (en) * 2001-07-19 2007-10-16 International Business Machines Corporation Method and system for providing a symmetric key for more efficient session identification
JP2003333024A (ja) * 2002-05-09 2003-11-21 Nec Corp 暗号化/復号化システム及びその暗号解読防止/改竄防止方法
US7478233B2 (en) * 2002-05-30 2009-01-13 Microsoft Corporation Prevention of software tampering
JP2006518056A (ja) * 2002-10-31 2006-08-03 ロッキード マーティン コーポレーション プログラマブル回路、関連計算マシン、並びに、方法
KR100532413B1 (ko) * 2002-12-02 2005-12-02 삼성전자주식회사 플래시 메모리 보호 장치 및 방법
US7451305B1 (en) 2003-04-10 2008-11-11 Cisco Technology, Inc. Method and apparatus for securely exchanging cryptographic identities through a mutually trusted intermediary
US7346773B2 (en) * 2004-01-12 2008-03-18 Cisco Technology, Inc. Enabling stateless server-based pre-shared secrets
US7373502B2 (en) * 2004-01-12 2008-05-13 Cisco Technology, Inc. Avoiding server storage of client state
US20050213595A1 (en) * 2004-03-23 2005-09-29 Takeshi Shimizu Limited cyclical redundancy checksum (CRC) modification to support cut-through routing
US7496753B2 (en) * 2004-09-02 2009-02-24 International Business Machines Corporation Data encryption interface for reducing encrypt latency impact on standard traffic
US7409558B2 (en) * 2004-09-02 2008-08-05 International Business Machines Corporation Low-latency data decryption interface
US20070180228A1 (en) * 2005-02-18 2007-08-02 Ulf Mattsson Dynamic loading of hardware security modules
US7350227B2 (en) * 2005-04-26 2008-03-25 Cisco Technology, Inc. Cryptographic peer discovery, authentication, and authorization for on-path signaling
US8082452B2 (en) * 2006-12-06 2011-12-20 George Mason Intellectual Properties, Inc. Protecting sensitive data associations
US20100031321A1 (en) 2007-06-11 2010-02-04 Protegrity Corporation Method and system for preventing impersonation of computer system user
US8122482B2 (en) * 2008-01-24 2012-02-21 Cisco Technology, Inc. Cryptographic peer discovery, authentication, and authorization for on-path signaling
CN102725737B (zh) * 2009-12-04 2016-04-20 密码研究公司 可验证防泄漏的加密和解密
US8863232B1 (en) * 2011-02-04 2014-10-14 hopTo Inc. System for and methods of controlling user access to applications and/or programs of a computer
CA2935435C (en) * 2013-03-13 2023-09-19 Jumpto Media Inc. Secure network communication
US10540504B2 (en) 2015-05-12 2020-01-21 Datrium, Inc. Distributed data method for encrypting data
US10044502B2 (en) 2015-07-31 2018-08-07 Nicira, Inc. Distributed VPN service
US10567347B2 (en) * 2015-07-31 2020-02-18 Nicira, Inc. Distributed tunneling for VPN
US11831654B2 (en) * 2015-12-22 2023-11-28 Mcafee, Llc Secure over-the-air updates
US11115334B1 (en) * 2020-03-31 2021-09-07 Lenovo Enterprise Solutions (Singapore) Pte. Ltd. Optimized network latency using in-band telemetry

Family Cites Families (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US5081678A (en) * 1989-06-28 1992-01-14 Digital Equipment Corporation Method for utilizing an encrypted key as a key identifier in a data packet in a computer network
US5081578A (en) * 1989-11-03 1992-01-14 Ncr Corporation Arbitration apparatus for a parallel bus
CA2044860A1 (en) * 1990-06-29 1991-12-30 Amar Gupta Cryptography processor and method with optional status endcoding

Also Published As

Publication number Publication date
JP2509790B2 (ja) 1996-06-26
DE69332396D1 (de) 2002-11-21
EP0582395A3 (de) 1998-04-01
EP0582395B1 (de) 2002-10-16
EP0582395A2 (de) 1994-02-09
JPH06104929A (ja) 1994-04-15
US5268962A (en) 1993-12-07

Similar Documents

Publication Publication Date Title
DE69332396T2 (de) Paketempfänger in einem Rechnernetz und Rechnernetz mit modifizierten Krypto-Schlüsseln zwischen Rechnerpaaren sowie jeweilige Verfahren
DE69312328D1 (de) System und verfahren zur änderung des schlüssels oder des kennwortes in einem kommunikationsnetzwerk mit schlüssel- verteilung
DK0739560T3 (da) Kryptografisk system og fremgangsmåde med nøgledeponeringsfunktion
DE69504823D1 (de) Kryptographisches schlüsselverteilungssystem in einem rechnernetz
GB9213169D0 (en) Cryptographic key management apparatus and method
HK1006629A1 (en) Distributive communications network and method
DE69232799T2 (de) Netzwerksicherheitsverfahren und-vorrichtung
DE69102925T2 (de) Vermittlungsanordnung zum Durchschalten von Rahmen in einem digitalen und asynchronen Übertragungsnetz.
DE69311581D1 (de) Verfahren und system zur authentifizierten sicheren schlüsselverteilung in einem kommunikationssystem
EP0640943A3 (de) Vorrichtung und Verfahren zur Formmodellierung.
EE03628B1 (et) Sidevõrgus kasutatav aparatuur ja meetod
FI950890A (fi) Menetelmä ja järjestely toiminnallisuuden nopeaa muuttamista varten tietoliikennejärjestelmässä
FI981050A (fi) Menetelmä ja laite telekommunikaatiojärjestelmässä
DE69222815D1 (de) ATM-Netzwerk, System und Verfahren zur Abrechnung in einem ATM-Netzwerk
DE69420987T2 (de) Verfahren und Vorrichtung zur Bitratenverwaltung in ATM-Netzen
BR9400361A (pt) Massas que reticulam em elastÔmeros, processo parasua preparaçÃo e emprego
EE9900513A (et) Kaugsidevõrgus kasutatav meetod ja süsteem
DK0627143T3 (da) Management i telecomsystemer og åbne systemer
NO965275D0 (no) Anordning og fremgangsmåte for distribuering av resurser i et fysisk nett
DE69636513D1 (de) System zur sicherung des flusses und zur selektiven veränderung von paketen in einem rechnernetz
SG47978A1 (en) A method and apparatus for communications between nodes in a communications network
EP0595033A3 (de) Segmentiertes neuronales Hochgeschwindigkeitsnetzwerk und Fabrikationsverfahren.
DE69132549D1 (de) Krypto-Prozessor und Verfahren mit wahlweiser Statuskodierung
IT1271489B (it) Metodo e dispositivo per colorare superfici metalliche in modo selettivo ed ecologico
DE69430822D1 (de) Polymorphe netzwerkverfahren und geräte

Legal Events

Date Code Title Description
8364 No opposition during term of opposition
8339 Ceased/non-payment of the annual fee