中科微点-全球专利检索

  1. Login
  2. Sign Up
Invention Grant
US09185133B2 Methods, devices and systems for establishing end-to-end secure connections and for securely communicating data packets 有权
用于建立端到端安全连接和安全地传送数据包的方法，设备和系统

Methods, devices and systems for establishing end-to-end secure connections and for securely communicating data packets
Abstract:
The invention provides methods, devices (102, 110, 124, 136) and communication systems (100) for establishing end-to-end secure connections and for securely communicating data packets. Such a communication system (100) comprises a first device (124, 136), an intermediate device (110) and a second device (102). The first device (124, 136) communications via a first network (120), which is based on a first transport protocol and a first transport security protocol with the intermediate device (110). The second device (102) communications via a second network, which is based on a second transport protocol and a second transport security protocol with the intermediate device (110). The intermediate device (110) modifies packets received via first network to packets suitable for communication via the second network, and vice versa. The first device (124, 136) is able to reconstruct a header of a received packet as if the packet was sent via the second network (108) and its transport and security protocols. Further, the first device (124) is able to verify, on basis of the reconstructed header, verification fields which are generated on basis of the second transport security protocol.
Abstract(Chinese):

本发明提供了用于建立端到端安全连接和用于安全地传送数据分组的方法，设备（102,110,124,136）和通信系统（100）。 这种通信系统（100）包括第一设备（124,136），中间设备（110）和第二设备（102）。 第一设备（124,136）经由第一网络（120）进行通信，第一网络（120）基于第一传输协议和与中间设备（110）的第一传输安全协议。 第二设备（102）经由第二网络进行通信，第二网络基于第二传输协议和与中间设备（110）的第二传输安全协议。 中间设备（110）将经由第一网络接收的分组修改为适合于经由第二网络进行通信的分组，反之亦然。 第一设备（124,136）能够重建接收到的分组的报头，好像分组是经由第二网络（108）及其传输和安全协议发送的。 此外，第一设备（124）能够基于重构的报头来验证基于第二传输安全协议生成的验证字段。

Public/Granted literature
Information query
Espacenet
Patent Agency Ranking
0/0