Lucent Technologies Inc.

Avishai Wool

Yuval Shavitt

Alain Jules Mayer

Bulent Yener

Jessica Nicola Staddon

Juan A Garay

Eran Gabber

Daniel Bleichenbacher

Yair Bartal

Elisha Ziskind

Michel Ferreira Abdalla

Xiaodong Sun

A method and apparatus are disclosed for managing a firewall. The disclosed firewall manager facilitates the generation of a security policy for a particular network environment, and automatically generates the firewall-specific configuration files from the security policy simultaneously for multiple gateways. The security policy is separated from the vendor-specific rule syntax and semantics and from the actual network topology. Thus, the security administrator can focus on designing an appropriate policy without worrying about firewall rule complexity, rule ordering, and other low-level configuration issues. In addition, the administrator can maintain a consistent policy in the presence of intranet topology changes. The disclosed firewall manager utilizes a model definition language (MDL) and an associated parser to produce an entity relationship model. A model compiler translates the entity-relationship model into the appropriate firewall configuration files. The entity-relationship model provides a framework for representing both the firewall-independent security policy, and the network topology. The security policy is expressed in terms of 'roles,' which are used to define network capabilities of sending and receiving services. A role may be assumed by different hosts or host-groups in the network. A visualization and debugging tool is provided to transform the firewall-specific configuration files into a graphical representation of the current policy on the actual topology, allowing the viability of a chosen policy to be evaluated. A role-group may be closed to prevent the inheritance of roles.

Method and apparatus for managing a firewall

A method for mapping a network, in accordance with the present invention, includes providing distance measurements between tracers in the network, determining routes along which the distance measurements are made, and creating a system of equations which links the distance measurements between the nodes with a sum of the delays between the nodes which comprise the routes. Additional information is extracted about distances of subpaths of the routes to provide additional details to a map of the network. The additional information provides a capability of estimation of distances between nodes without tracers.

Method and apparatus for network mapping using end-to-end delay measurements

A method and apparatus are disclosed for analyzing the operation of one or more network gateways, such as firewalls or routers, that perform a packet filtering function in a network environment. Given a user query, the disclosed firewall analysis tool simulates the behavior of the various firewalls, taking into account the topology of the network environment, and determines which portions of the services or machines specified in the original query would manage to reach from the source to the destination. The relevant packet-filtering configuration files are collected and an internal representation of the implied security policy is derived. A graph data structure is used to represent the network topology. A gateway-zone graph permits the firewall analysis tool to determine where given packets will travel in the network, and which gateways will be encountered along those paths. In this manner, the firewall analysis tool can evaluate a query object against each rule-base object, for each gateway node in the gateway-zone graph that is encountered along each path between the source and destination. A graphical user interface is provided for receiving queries, such as whether one or more given services are permitted between one or more given machines, and providing results. A spoofing attack can be simulated by allowing the user to specify where packets are to be injected into the network, which may not be the true location of the source host-group.

Method and apparatus for analyzing one or more firewalls

A long-lived broadcast encryption method that adapts to the presence of compromised keys and continues to broadcast securely to privileged sets of users over time. In one aspect, a method for providing long-lived broadcast encryption comprises the steps of: allocating, to each of a plurality of subscribers, a corresponding set of subscriber keys; broadcasting encrypted content to the plurality of subscribers using a set of broadcast keys, wherein the encrypted content is decoded by a given subscriber using the subscriber's corresponding set of subscriber keys; modifying the set of broadcast keys, which are used for broadcasting encrypted content, by excluding compromised subscriber keys; and updating a set of subscriber keys corresponding to at least one subscriber when the at least one subscriber's set of subscriber keys comprises an amount of active keys that falls below a first predetermined threshold. In a long-lived broadcast encryption scheme, for any positive fraction &#x3b2;, a plurality of parameter values may be selected, a priori, in such a way to ensure that a steady state is achieved wherein, at most &#x3b2; of the total number of issued cards need to be replaced in a given recarding session.

Method for providing long-lived broadcast encrypton

A system for restricting access to transmitted programming content is disclosed, which transmits a program identifier with the encrypted programming content. A set-top terminal or similar mechanism restricts access to the transmitted multimedia information using stored decryption keys. The set-top terminal receives entitlement information periodically from the head-end, corresponding to one or more packages of programs that the customer is entitled to for a given period. Each program is encrypted by the head-end server prior to transmission, using a program key, K , which may be unique to the program. The set-top terminal uses the received program identifier, p, together with the stored entitlement information, to derive the decryption key necessary to decrypt the program. Each of the k-bit program keys, K , used to encrypt transmitted programs is obtained by applying one or more pseudo-random hash functions, H, such as a length-doubling hash function, H, to a master key, m.

Cryptographic method and apparatus for restricting access to transmitted programming content using hash functions and program identifiers

Cryptographic method for restricting access to transmitted programming content using &fnof;-redundant establishment key combinations

A method and apparatus are disclosed for designing multi-ring networks based on generalized quadrangles of combinatorial design theory, together with a scaling algorithm for realizing networks of arbitrary size. Multi-ring networks based on generalized quadrangles ensures that the path between any two nodes is either confined to a single ring, or traverses exactly two rings (passing through a single bridge node), referred to herein as the &ldquo;one-bridge property.&rdquo; The one-bridge property allows the construction of networks with small rings and low degree, while also permitting efficient congestion-free flow control protocols. Routing, access and flow control protocols are provided for the multi-ring network that capitalize on the combinatorial properties of the disclosed multi-ring networks. A &ldquo;self-routing&rdquo; routing protocol is disclosed wherein a source node does not need to know how to route a packet to a destination node that is not a neighbor. The access control mechanism disclosed herein utilizes a quota counter, k, and allows each node to transmit up to the predefined quota of k packets on each ring, R , that the node belongs to, during any cycle. A set of flow control buffers, consisting of a local queue, LQ , a remote queue, RQ (x), and a buffer queue, BQ , and a flow control quota matrix, Q , are utilized to implement a flow control mechanism. The routing, flow and access control protocols, together with the disclosed network architecture, ensure that (i) no loss due to congestion occurs inside a network, under arbitrary traffic patterns; (ii) all the packets reach their destinations within a bounded time; and (iii) the bandwidth is allocated fairly and no host is starved.

Combinatorial design method and apparatus for multi-ring networks with combined routing and flow control

A system for restricting access to transmitted programming content is disclosed, which transmits a program identifier with the encrypted programming content. A set-top terminal or similar mechanism restricts access to the transmitted multimedia information using stored decryption keys. The set-top terminal preferably receives entitlement information periodically from the head-end, corresponding to one or more packages of programs that the customer is entitled to for a given period. Each program is preferably encrypted by the head-end server prior to transmission, using a program key, K , which may be unique to the program. The set-top terminal uses the received program identifier, p, together with the stored entitlement information, to derive the decryption key necessary to decrypt the program. Each of the k-bit program keys, K , used to encrypt transmitted programs is a linear combination of a defined set of k-bit master keys, m . . . m . The head-end server preferably generates a new set of master keys for the matrix, M, once per billing period. Since each program key, K , is a linear combination of the set of master keys, M, a customer desiring r programs, obtains access to the smallest linear subspace of programs, U, that contains those r programs. In addition, a package consists of (2 &minus;1) program identifiers for some i less than or equal to n, which need not all be assigned to programs. An optional check matrix, C, allows the set-top terminal to determine, in advance, whether a received program is in the entitled subspace, U.

Cryptographic method and apparatus for restricting access to transmitted programming content using program identifiers

A system for detecting the movement of a device that receives a signal broadcast from a relative fixed position, such as a set-top terminal in a Direct Broadcast Satellite (DBS) system, is disclosed, using the phase shift of the broadcast signal, as received by the device. A set-top terminal or similar mechanism restricts access to the transmitted multimedia information using stored decryption keys. If a set-top terminal is moved, the distance between the set-top terminal and the satellite will change, thereby causing a measurable phase shift in the signal received by the set-top terminal. The set-top terminal periodically or intermittently records a sequence of bits received from the satellite and provides the recorded bits to the service provider server for analysis. If the set-top terminal has been moved, the recorded bits will shift. The sequence of bits may be recorded at random intervals, triggered by an external event, shown, for example, by an accurate internal clock, a request sent by a terrestrial paging network, or a request sent by a low-earth-orbit (LEO) satellite messaging system. The service provider detects relative movements of the set-top terminals by instructing a group of set-top terminals in geographical proximity to start recording at the same time, and comparing the sequence of bits recorded by each set-top terminal.

Method and apparatus for detecting the movement of a device that receives a signal broadcast from a relative fixed position

A system for restricting access to transmitted programming content is disclosed, which transmits the encryption key used to encrypt the program to the customer with the encrypted programming content. A set-top terminal or similar mechanism restricts access to the transmitted multimedia information using stored decryption keys. The set-top terminal preferably receives one or more package keys, S.sub.J, periodically from the service provider, each corresponding to a package of programs that the customer is entitled to for a given period. Each program is preferably encrypted by the head-end server prior to transmission using a program key, K.sub.P, which may be unique to the program. Header information is transmitted with the encrypted program to the customers, containing a package pair for each package to which the program belongs. A package pair preferably includes an identifier of the package, as well as the program key, K.sub.P, encrypted by the corresponding package key, S.sub.J. The broadcast of a given program, p, preferably consists of a header portion containing a package pair for each package that the program belongs to, and a program portion containing the program encrypted with the program key, K.sub.P. If a customer is entitled to a particular program, the set-top terminal will be able to decrypt the encrypted program key, K.sub.P, using an appropriate stored package key, S.sub.J, and thereafter use the program key, K.sub.P, to decrypt the encrypted program. The header information can be interleaved with the program portion or transmitted on a separate dedicated control channel.

Growing community of inventors

Livingston, NJ, United States of America

Avishai Wool