WO1997014236B1 - Method and apparatus for relaying digitally signed messages - Google Patents
Method and apparatus for relaying digitally signed messagesInfo
- Publication number
- WO1997014236B1 WO1997014236B1 PCT/US1996/014759 US9614759W WO9714236B1 WO 1997014236 B1 WO1997014236 B1 WO 1997014236B1 US 9614759 W US9614759 W US 9614759W WO 9714236 B1 WO9714236 B1 WO 9714236B1
- Authority
- WO
- WIPO (PCT)
- Prior art keywords
- message
- original
- digital signature
- gateway
- channel
- Prior art date
Links
- 102000004310 Ion Channels Human genes 0.000 claims 1
- 108090000862 Ion Channels Proteins 0.000 claims 1
Abstract
A communication network (10) includes any number of interconnected nodes (20), including a sending node (22), a sending gateway (24), a receiving gateway (26), and a destination node (28). A low capacity or expensive communication channel (30) resides between the sending and receiving gateways (24, 26). An original digitally signed message is sent from the sending node (22) toward the destination node (28). When the original message arrives at the sending gateway (24), the original signature is verified. If verified, the sending gateway (24) shrinks the original message into a reduced message and re-signs the message with a gateway digital signature before sending the message onward through the communication channel (30) toward the destination node (28). The destination node (28) verifies the gateway digital signature against the reduced message and is not required to de-compress the reduced message into a precise duplicate of the original message.
Claims
1. A method of transferring a digitally signed message through a communication channel, said method comprising the steps of: receiving an original message at a gateway to said channel, said original message having an original digital signature associated therewith; verifying an authenticity of said original digital signature with respect to said original message at said gateway; shrinking said original message into a reduced message according to predefined rules thereby reducing an amount of data to be transferred over the communication channel; determining a gateway digital signature for said reduced message thereby preserving an accurate and verifiable digital signature when transferred over the communica ion channel; and sending said reduced message and said gateway digital signature through said communication channel .
2. A method as claimed in claim 1 wherein said shrinking step comprises the steps of: identifying target information in said original message; and deriving said reduced message from said target information.
3. A method as claimed in claim 1 additionally comprising the step of compressing said reduced message so that said reduced message may be reconstructed after passing through said channel.
4. A method as claimed in claim 1 wherein: said original message is directed to a destination node; and said method additionally comprises the step of archiving said reduced message and said gateway digital signature through a network node other than said destination node.
5. A method as claimed in claim 1 wherein: said sending step is performed when said verifying step verifies said original digital signature; and said method additionally comprises the step of refraining from sending said message through said channel when said verifying step fails to verify said original digital signature.
6. A method as claimed in claim 1 wherein: said original message is directed to a destination node; and said method additionally comprises the step of archiving said original digital signature and said original message through a network node other than said destination node.
7. A method as claimed in claim 1 additionally comprising the steps of: receiving a private gateway key; and using said private gateway key in said determining step to determine said gateway digital signature.
8. A method as claimed in claim 1 additionally comprising the steps of: identifying a sender of said original message; and appending a sender identity to said at least a portion of said original message sent during said sending step.
9. A communication network gateway for transferring a digitally signed message through a communication channel, said gateway comprising: a first port for receiving an original message having a destination reachable through said channel, said original message having an original digital signature associated therewith; a controller coupled to said first port and configured to verify said original digital signature with respect to said original message, to shrink said original message into a reduced message according to predefined rules thereby reducing an amount of data to be transferred over said channel, and to determine a gateway digital signature for said reduced message thereby preserving an accurate and verifiable digital signature when transferred over said channel; and a second port coupled to said controller, said second port being configured to send said reduced message and said gateway digital signature through said channel.
10. The communication network gateway of claim 9 wherein said controller archives said reduced message and said gateway digital signature.
11. The communication network gateway of claim 9 wherein said second port sends said reduced message and said gateway digital signature through said channel only when said original digital signature is verified.
Priority Applications (1)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
AU70720/96A AU7072096A (en) | 1995-09-25 | 1996-09-13 | Method and apparatus for relaying digitally signed messages |
Applications Claiming Priority (2)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
US53304095A | 1995-09-25 | 1995-09-25 | |
US08/533,040 | 1995-09-25 |
Publications (2)
Publication Number | Publication Date |
---|---|
WO1997014236A1 WO1997014236A1 (en) | 1997-04-17 |
WO1997014236B1 true WO1997014236B1 (en) | 1997-05-29 |
Family
ID=24124210
Family Applications (1)
Application Number | Title | Priority Date | Filing Date |
---|---|---|---|
PCT/US1996/014759 WO1997014236A1 (en) | 1995-09-25 | 1996-09-13 | Method and apparatus for relaying digitally signed messages |
Country Status (3)
Country | Link |
---|---|
US (1) | US5943426A (en) |
AU (1) | AU7072096A (en) |
WO (1) | WO1997014236A1 (en) |
Families Citing this family (62)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US6732154B1 (en) * | 1997-03-18 | 2004-05-04 | Paratran Corporation | Distribution limiter for network messaging |
WO1999014931A2 (en) | 1997-09-16 | 1999-03-25 | Transnexus, Llc | Internet telephony call routing engine |
US6282294B1 (en) | 1998-01-07 | 2001-08-28 | Microsoft Corporation | System for broadcasting to, and programming, a motor device in a protocol, device, and network independent fashion |
US6665271B1 (en) | 1998-03-17 | 2003-12-16 | Transnexus, Llc | System for real-time prediction of quality for internet-based multimedia communications |
US6073167A (en) * | 1998-03-18 | 2000-06-06 | Paratran Corporation | Distribution limiter for network messaging |
US8516055B2 (en) | 1998-05-29 | 2013-08-20 | Research In Motion Limited | System and method for pushing information from a host system to a mobile data communication device in a wireless data network |
US6779019B1 (en) | 1998-05-29 | 2004-08-17 | Research In Motion Limited | System and method for pushing information from a host system to a mobile data communication device |
US6219694B1 (en) | 1998-05-29 | 2001-04-17 | Research In Motion Limited | System and method for pushing information from a host system to a mobile data communication device having a shared electronic address |
US7209949B2 (en) * | 1998-05-29 | 2007-04-24 | Research In Motion Limited | System and method for synchronizing information between a host system and a mobile data communication device |
US7209955B1 (en) * | 1998-05-29 | 2007-04-24 | Research In Motion Limited | Notification system and method for a mobile data communication device |
US6463463B1 (en) | 1998-05-29 | 2002-10-08 | Research In Motion Limited | System and method for pushing calendar event messages from a host system to a mobile data communication device |
US6829242B2 (en) * | 1998-06-30 | 2004-12-07 | Cisco Technology, Inc. | Method and apparatus for associating PVC identifiers with domain names of home gateways |
US6205211B1 (en) | 1998-08-04 | 2001-03-20 | Transnexus, Llc | Internet telephony call pricing center |
US6487283B2 (en) | 1998-08-04 | 2002-11-26 | Transnexus, Inc. | Pricing center for internet protocol routed transactions |
US6356935B1 (en) | 1998-08-14 | 2002-03-12 | Xircom Wireless, Inc. | Apparatus and method for an authenticated electronic userid |
WO2000010288A1 (en) * | 1998-08-14 | 2000-02-24 | Omnipoint Corporation | Apparatus and method for an authenticated electronic userid |
US6615348B1 (en) | 1999-04-16 | 2003-09-02 | Intel Corporation | Method and apparatus for an adapted digital signature |
US6516414B1 (en) * | 1999-02-26 | 2003-02-04 | Intel Corporation | Secure communication over a link |
US6550008B1 (en) | 1999-02-26 | 2003-04-15 | Intel Corporation | Protection of information transmitted over communications channels |
US6507907B1 (en) | 1999-02-26 | 2003-01-14 | Intel Corporation | Protecting information in a system |
US6751652B1 (en) | 1999-06-29 | 2004-06-15 | Transnexus, Inc. | Intelligent end user devices for clearinghouse services in an internet telephony system |
US7444407B2 (en) | 2000-06-29 | 2008-10-28 | Transnexus, Inc. | Intelligent end user devices for clearinghouse services in an internet telephony system |
AU2911901A (en) | 1999-12-22 | 2001-07-03 | Transnexus, Inc. | System and method for the secure enrollment of devices with a clearinghouse server for internet telephony and multimedia communications |
WO2001052476A2 (en) | 2000-01-11 | 2001-07-19 | Transnexus, Inc. | Architectures for clearing and settlement services between internet telephony clearinghouses |
US7146422B1 (en) | 2000-05-01 | 2006-12-05 | Intel Corporation | Method and apparatus for validating documents based on a validation template |
US6732175B1 (en) | 2000-04-13 | 2004-05-04 | Intel Corporation | Network apparatus for switching based on content of application data |
US7214520B2 (en) * | 2000-07-18 | 2007-05-08 | National Research Council Of Canada | Cloning, sequencing and expression of a comamonas cyclopentanone 1,2-monooxygenase-encoding gene in Escherichia coli |
US7958251B2 (en) * | 2000-08-04 | 2011-06-07 | Goldman Sachs & Co. | Method and system for processing raw financial data streams to produce and distribute structured and validated product offering data to subscribing clients |
US7958025B2 (en) | 2000-08-04 | 2011-06-07 | Goldman Sachs & Co. | Method and system for processing raw financial data streams to produce and distribute structured and validated product offering objects |
AU2001291007A1 (en) | 2000-09-11 | 2002-03-26 | Transnexus, Inc. | Clearinghouse server for internet telephony and multimedia communications |
EP2309670B1 (en) * | 2000-10-05 | 2013-05-01 | Certicom Corp. | Method for providing information security for wireless transmissions |
US7107242B1 (en) * | 2000-11-21 | 2006-09-12 | Vasil Paul E | Electronic transaction security method |
CA2432589C (en) | 2000-12-22 | 2008-12-02 | Research In Motion Limited | Wireless router system and method |
US7525956B2 (en) | 2001-01-11 | 2009-04-28 | Transnexus, Inc. | Architectures for clearing and settlement services between internet telephony clearinghouses |
CA2368404C (en) | 2001-01-18 | 2005-08-09 | Research In Motion Limited | Unified messaging system and method |
CA2641610C (en) | 2001-03-09 | 2010-09-14 | Research In Motion Limited | Advanced voice and data operations in a mobile data communication device |
US8406389B2 (en) * | 2001-03-09 | 2013-03-26 | Research In Motion Limited | Advanced voice and data operations in a mobile data communication device |
CA2410118C (en) | 2001-10-26 | 2007-12-18 | Research In Motion Limited | System and method for controlling configuration settings for mobile communication devices and services |
US20030177387A1 (en) * | 2002-03-15 | 2003-09-18 | Cyrill Osterwalder | Secured web entry server |
US20080261633A1 (en) | 2002-10-22 | 2008-10-23 | Research In Motion Limited | System and Method for Pushing Information from a Host System to a Mobile Data Communication Device |
GB2405293B (en) * | 2003-08-18 | 2007-04-25 | Clearswift Ltd | Email policy manager |
WO2005089147A2 (en) | 2004-03-11 | 2005-09-29 | Transnexus, Inc. | Method and system for routing calls over a packet switched computer network |
US20070288746A1 (en) * | 2004-04-02 | 2007-12-13 | Jones Neville R | Method of providing key containers |
US7457283B2 (en) | 2004-12-13 | 2008-11-25 | Transnexus, Inc. | Method and system for securely authorized VoIP interconnections between anonymous peers of VoIP networks |
US8238329B2 (en) | 2005-12-13 | 2012-08-07 | Transnexus, Inc. | Method and system for securely authorizing VoIP interconnections between anonymous peers of VoIP networks |
KR100659609B1 (en) * | 2005-03-04 | 2006-12-21 | 삼성전자주식회사 | Method and apparatus for digital signature generation and validation |
EP1872251B1 (en) | 2005-04-18 | 2015-10-21 | BlackBerry Limited | Method for providing wireless application privilege management |
US20060259440A1 (en) * | 2005-05-13 | 2006-11-16 | Keycorp | Method and system for electronically signing a document |
US8179872B2 (en) | 2007-05-09 | 2012-05-15 | Research In Motion Limited | Wireless router system and method |
US8181861B2 (en) | 2008-10-13 | 2012-05-22 | Miri Systems, Llc | Electronic transaction security system and method |
WO2010063308A1 (en) * | 2008-12-01 | 2010-06-10 | Nokia Corporation | Scalable message authentication framework |
EP2401711A4 (en) * | 2009-02-25 | 2016-12-28 | Miri Systems Llc | Payment system and method |
CA2783841C (en) | 2009-10-05 | 2023-09-05 | Miri Systems, Llc | Electronic transaction security system and method |
US8732475B2 (en) * | 2011-08-17 | 2014-05-20 | Comcast Cable Communication, Llc | Authentication and binding of multiple devices |
CN107005569B (en) | 2014-10-31 | 2021-09-07 | 康维达无线有限责任公司 | End-to-end service layer authentication |
KR102001753B1 (en) | 2015-03-16 | 2019-10-01 | 콘비다 와이어리스, 엘엘씨 | End-to-end authentication at the service layer using public keying mechanisms |
US9729682B2 (en) * | 2015-05-18 | 2017-08-08 | 128 Technology, Inc. | Network device and method for processing a session using a packet signature |
US11232453B2 (en) * | 2015-09-30 | 2022-01-25 | Mastercard International Incorporated | Method and system for authentication data collection and reporting |
WO2018023080A2 (en) * | 2016-07-29 | 2018-02-01 | Apple Inc. | Methodology and application of acoustic touch detection |
RU2673385C9 (en) * | 2017-05-26 | 2018-12-24 | Максим Львович Лихвинцев | Method of data exchange recording control in information – telecommunication network and identification system of electron mail |
DE102018203072A1 (en) * | 2018-03-01 | 2019-09-05 | Siemens Aktiengesellschaft | Method and arrangement for the secure transmission of a message from a transmitting device to a receiving device |
US11017071B2 (en) * | 2018-08-02 | 2021-05-25 | Dell Products L.P. | Apparatus and method to protect an information handling system against other devices |
Family Cites Families (4)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US4885777A (en) * | 1985-09-04 | 1989-12-05 | Hitachi, Ltd. | Electronic transaction system |
US5218637A (en) * | 1987-09-07 | 1993-06-08 | L'etat Francais Represente Par Le Ministre Des Postes, Des Telecommunications Et De L'espace | Method of transferring a secret, by the exchange of two certificates between two microcomputers which establish reciprocal authorization |
US5465299A (en) * | 1992-12-03 | 1995-11-07 | Hitachi, Ltd. | Electronic document processing system and method of forming digital signature |
US5481255A (en) * | 1993-02-10 | 1996-01-02 | Data Critical Corp. | Paging transmission system |
-
1996
- 1996-09-13 WO PCT/US1996/014759 patent/WO1997014236A1/en active Application Filing
- 1996-09-13 AU AU70720/96A patent/AU7072096A/en not_active Abandoned
-
1997
- 1997-09-22 US US08/934,691 patent/US5943426A/en not_active Expired - Lifetime
Similar Documents
Publication | Publication Date | Title |
---|---|---|
WO1997014236B1 (en) | Method and apparatus for relaying digitally signed messages | |
US5943426A (en) | Method and apparatus for relaying digitally signed messages | |
JP4564228B2 (en) | Structure and method for transparently encoding and transmitting network communication data online and in cross session | |
WO1999035799A3 (en) | A method for packet authentication in the presence of network address translations and protocol conversions | |
CN1938982B (en) | Method and apparatus for preventing network attacks by authenticating internet control message protocol packets | |
US20020015422A1 (en) | Cryptographic apparatus and cryptographic communication system | |
JP2001211200A (en) | Message transmitting method and distributed system | |
EP0804003A3 (en) | Digital signature method and communication system | |
WO1997047122A3 (en) | Telephonic voice message store and forward method having network address and voice authentication | |
EP1156625A3 (en) | Communication system, communication control method and control program storage medium | |
WO2001086891A3 (en) | System and method for application object transport | |
WO2000067143A3 (en) | Transaction method and system for data networks | |
JP2011142635A (en) | Method for transmitting short messages | |
AU4785099A (en) | Method for the control of communication and communications system | |
EP0660564A3 (en) | Secure communication setup method | |
US20050204142A1 (en) | Secure file transfer | |
CA2213045C (en) | Nhrp packet authentication method and nhrp server | |
CN114520751A (en) | Tunnel transmission method and device based on software defined wide area network | |
SE515362C2 (en) | Controlling data communication in networks with closed user groups | |
US6212191B1 (en) | Method and system for providing security to asynchronous transfer mode emulated local-area networks | |
CA2205310A1 (en) | Digital signature protocol with reduced bandwidth | |
GB2343326B (en) | Method of transferring data between networks | |
EP0676881B1 (en) | Verification of the integrity of the data exchanged between two stations of a telecommunication network | |
EP1111870A3 (en) | Communication method and communication system | |
Hamzeh | Ascend Tunnel Management Protocol-ATMP |