At&t Intellectual Property I, LP

At+t Corp.

Other

Aviel D Rubin

Martin Joel Strauss

William A Aiello

Steven Michael Bellovin

Thomas Joseph Killian

Norman Loren Schryer

Bruce LaRose

Oliver Spatscheck

Frederick Douglis

Michael Rabinovich

Charles Robert Kalmanek, Jr

William Todd Marshall

David Kormann

Christian A Gilmore

Patrick Drew Mcdaniel

The present invention provides a system and method for providing certified voice and/or multimedia mail messages in a broadband signed communication system which uses packetized digital information. Cryptography is used to authenticate a message that has been compiled from streaming voice or multimedia packets. A certificate of the originator's identity and electronic signature authenticates the message. A broadband communication system user may be provisioned for certified voice and/or multimedia mail by registering with a certified mail service provider and thereby receiving certification. The called system user's CPE electronically signs the bits in received communication packets and returns the message with an electronic signature of the called system user to the calling party, along with the system user's certificate obtained from the service provider/certifying authority during registration. The electronic signature is a cryptographic key of the called party.

Broadband certified mail

The present invention provides system and method for providing certified voice and/or multimedia mail messages in a broadband signed communication system which uses packetized digital information. Cryptography is used to authenticate a message that has been compiled from streaming voice or multimedia packets. A certificate of the originator's identity and electronic signature authenticates the message. A broadband communication system user may be provisioned for certified voice and/or multimedia mail by registering with a certified mail service provider and thereby receiving certification. The called system user's CPE electronically signs the bits in received communication packets and returns the message with an electronic signature of the called system user to the calling party, along with the system user's certificate obtained from the service provider/certifying authority during registration. The electronic signature is a cryptographic key of the called party.

The invention described herein can be configured for securing communications against malware by utilizing two devices with differential or application-specific components during an online session. The invention can determine whether both a first device and a second device are accessible and if both the first and second devices are determined to be accessible, transmitting a first subset of the information to the first device from the server and transmitting a second subset of the information to the second device from the server.

Utilization of multiple devices to secure online transactions

The present invention is directed to an architecture and mechanism for securely backing up files and directories on a local machine onto untrusted servers over an insecure network.

Method for secure remote backup

A system and method are provided for use in establishing secure end-to-end communication links over a VPN gateway via a network interface unit. Illustrative embodiments include establishing and providing secure communication relationships between users (customers) and companies for e-commerce and other business purposes. Each company's data and linkage to users remaining private and secure from the other participating companies as well as from the general public over the Internet. Login by user with network interface units, addressing, authentication, and other configuration operations achieved using a web page-based GUI are applied in establishing tunnels from LAN clients to desired VPN destinations. Required authentication exchanges and required encryption key exchanges facilitate the secure communications. Financial arrangements regarding the provisioning and use of network interface units are also disclosed.

Method and apparatus for connection to virtual private networks for secure transactions

A mechanism is provided to build and maintain a searchable database of communication content and related indicia information of all voice and multimedia (audio and video) communications in which a person participates using a broadband communication system. A personal communication module may be coupled to a user's communication device and a broadband communication network for capturing data and performing voice recognition associated with a communication. Data may be stored in a database and searched including, for example, keywords from the communications, date, time, number, etc.

System and method for storage and retrieval of personal communications in a broadband network

The present invention permits a user to conduct remote transactions without a network while using an untrusted computing device, such as a hand-held personal digital assistant or a laptop computer. The computing device is augmented with a smartcard reader, and the user obtains a smartcard and connects it to the device. This design can be used by an untrusted user to perform financial transactions, such as placing bets on the outcome of a probabilistic computation. Protocols are presented for adding (purchasing) or removing (selling) value on the smartcard, again without requiring a network connection. Using the instant protocols, neither the user nor the entity issuing the smartcards can benefit from cheating.

Using smartcards to enable probabilistic transactions on an untrusted device

The present invention provides authorized users access to sensitive information on internal servers inside a firewall while protecting the information from others. A strong client authentication mechanism is layered on top of a secure communication protocol to allow legitimate users access to an internal server from outside the firewall. A proxy is provided with an external component outside the firewall and an internal component inside the firewall, with a control communication channel established between the two. The external component forwards messages through the firewall to the internal component which handles user authentication and acts as a proxy between the user and the internal servers. Where the returned resource contains document hyperlinks, the links are translated into references to the proxy, permitting the user a seamless experience that is almost exactly the same whether the user is inside or outside the firewall.

Growing community of inventors

West Caldwell, NJ, United States of America

Aviel D Rubin