Konica Minolta Laboratory U.s.a., Inc.

Maria Perez

Rahul Suraparaju

Ghenya Krochik

Richa Kudaraya

A system that facilitates processing of data packets in an Internet Protocol (IP) network environment, which includes a computer device having an Internet Protocol version 6 (IPv6) extensions application, and wherein the IPv6 extensions application performs the following steps: setting an IPv6 extension header policy for the computer device; retrieving an original IPv6 packet from a network stack on the computer device, the original IPv6 packet having an extension header or destination option; determining if a designated route in the extension header or destination option is in accordance with the IPv6 extension header policy for the computer device; and if the designated route is in accordance with the IPv6 extension header policy, modifying the extension header or destination option for the computer device to generate a modified IPv6 packet, and sending the modified IPv6 packet on the IPv6 network.

Method and system having an application for IPv6 extension headers and destination options

A method, non-transitory computer readable medium, and a primary server are disclosed for transferring data over a communication network from an Internet of Things (IoT) device. The method include receiving a data packet from the IoT device on an application running on a primary server, the data packet having a stateless autoconfiguration IPv6 address, which is configured at least partially based on a device identifier assigned to the IoT device; modifying the stateless autoconfiguration IPv6 address associated with the IoT device identifier to generate a global IP address with the application running on the primary server; and sending the data packet with the global IP address from the primary server to one or more secondary servers over the communication network.

Internet of Things (IoT) mediation and adaptation secure application gateway

A method, a computer readable medium, and a client device are disclosed, which create multiple profiles to mitigate profiling of the client device on a network. The method includes generating a request on the client device, the request including a uniform resource locator (URL) indicating a source hosting content; forwarding the request to a profile generation application on the client device, the profile generation application configured to generate a plurality of requests for the request, and wherein only one request of the plurality of requests has system information pertaining to the client device; and sending the plurality of requests to the network to retrieve the content hosted on the source.

Method and system for multiple profile creation to mitigate profiling

A method, a computer program product, and a multi-function peripheral are disclosed, which secures a device using a link local network for transmission of data. The method includes starting an Internet Protocol Version 6 (IPv6) network initialization from an Internet of Things (IOT) device in an IPv6 link local network; deriving an identifier for a link local IPv6 address for the IOT device from a first public key of the IOT device; sending the link local IPv6 address with the identifier from the IOT device to the first host device for double address detection (dad) in the link local IPv6 network; and authenticating the link local IPv6 address on the first host device with a private key.

IPv6 link local secure network with biometric security to secure IOT devices

A method is disclosed of using IPv6 Neighbor Discovery to discover application services in an IPv6 network, the method including hosting a list of application services on a first host device; creating an application service Neighbor Discovery option for the list of application services hosted on the first host device; attaching the application service Neighbor Discovery option to a Neighbor Discovery solicitation response, a Neighbor Discovery advertisement, or a Neighbor Discovery solicitation request; and sending the Neighbor Discovery solicitation response, the Neighbor Discovery advertisement, or the Neighbor Discovery solicitation request with the application service Neighbor Discovery option from the first host device to one or more second host devices on a IPv6 network connection, wherein the application service Neighbor Discovery option provides the one or more second host devices with the list of application services hosted on the first host device.

Method and system of using IPV6 neighbor discovery options for service discovery

A method, a computer program product, and a system are disclosed, which use OAuth2 to secure IPv6 Neighbor Discovery. The method including sending a Neighbor Discovery duplicate address detection (DAD) package from a client device on a communication network, the Neighbor Discovery DAD package having an authorization code for an OAuth2 token for access to an IPv6 network; receiving the Neighbor Discovery DAD package with the authorization code on an authorizing device, the authorizing device configured to issue OAuth2 tokens; issuing the OAuth2 token having an expiration to the client device for access to the IPv6 network; and allowing the client device to access the IPv6 network until the expiration of the OAuth2 token.

Method and system of using OAuth2 to secure neighbor discovery

A method of providing security for data using a loopback interface, the method includes setting a security policy on a host device and a client device, the security policy configuration including a first loopback interface and an IP address for the host device and a second loopback interface and an IP address for the client device; sending an IP packet to the first loopback interface on the host device, wherein the first loopback interface configures the packet to be routed to the second loopback interface; sending the IP packet from the first loopback interface to a security module on the host device for encryption pursuant to a security protocol; filtering the encrypted packet received from first loopback interface and configuring the encrypted packet be sent to the client device; and sending the encrypted packet from the host device to the client device.

Method and system for providing security using a loopback interface

A method of providing security for data being transferred over a Universal Serial Bus (USB) connection, the method comprising: setting an IPsec policy configuration on a host device hand a client device; sending a packet to a first loopback interface on the host device, wherein the first loopback interface configures the packet to be routed to a second loopback interface on the client device; sending the packet from the first loopback interface to an IPsec module for encryption; filtering the packet received from first loopback interface; sending the packet to the client device over the USB connection; injecting the packet into the second loopback interface; sending the packet from the second loopback interface on the client device to the IPsec module on the client device for decryption; and sending the decrypted packet to the second loopback interface on the device application, wherein the packet is received on the client device.

Method and system for IPSec security for IPP-USB data

A method, a computer readable medium, and a multi-function peripheral are disclosed, which use IPv6 packet extensions for execution of a job request based on proximity. The method including sending a job to be processed by a multi-function peripheral with an IPv6 Destination Options extension header from a client device to the multi-function peripheral, the IPv6 Destination Options extension header containing a physical location of the client device; receiving the job with the IPv6 Destination Options extension header containing the physical location of the client device on the multi-function peripheral; examining the IPv6 Destination Options extension header containing the physical location of the client device on the multi-function peripheral; and executing the job if the physical location of the client device is within a defined proximity to the multi-function peripheral.

Method and system of using IPv6 packet extensions to allow or prevent execution of a job based on physical location

A method is disclosed of embedding a GPS location of a host device in an IPv6 address using IPv6 Neighbor Discovery, the method includes sending a neighbor solicitation request having a Global Positioning System (GPS) option from a first host device to an IPv6 server via an IPv6 communication network, the GPS option providing GPS information of the first host device; receiving the neighbor solicitation request having the GPS option on the IPv6 server, the IPv6 server configured to capture the neighbor solicitation request and create an IPv6 address with GPS information for the first host device; sending a neighbor discovery advertisement from the IPv6 server to the first host device; receiving the neighbor discovery advertisement and returning a solicit, request and renew message to the IPv6 server; and returning a reply message to the first host device with the IPv6 address with the GPS information.

Method and system for providing GPS location embedded in an IPv6 address using neighbor discovery

A method, system and computer program product are disclosed that facilitates exchange multifunction job security using IPv6 Neighbor Discovery, which can include generating a print job on a first node, the first node having a first software module and a first IP filter configured to capture neighbor solicitation messages and sending a neighbor solicitation request with the at least one security option to a second nod. Capturing the neighbor solicitation request via a second IP filter on the second node; validating a digital certificate and decrypting a first encrypted job identifier associated with the neighbor solicitation request using a second software module on the second node. Sending a neighbor advertisement to the first node, the neighbor advertisement including a second encrypted job identifier for the print job and capturing the neighbor advertisement from the second node with the first IP filter, and processing the job on the first node.

Method and system for exchange multifunction job security using IPV6 neighbor discovery options

A system, method, and computer readable medium are disclosed that facilitates an IP network environment. The system includes a computer device having a software module running on an operating system of the computer device, the software module (a) establishes an IP network criteria for incoming and outgoing packets for the computer device; (b) retrieves the incoming and outgoing packets to determine if an IP address for the incoming and outgoing packets meet the IP network criteria; (c) if the IP address for the incoming and outgoing packets meets the IP network criteria, forwards the incoming packets having the IP address to a network layer, which is under or part of the operating system of the computer device and forwards outgoing packets to a network connection; and (d) if the IP address for the incoming and outgoing packets does not meet the IP network criteria, drops the incoming and outgoing packets.

Method and system having an application for a run time IPv6 only network

A method and system that facilitates power management over an IPv6 network connection is described. A first host having an application creates a power management option for managing power management settings of one or more second hosts, which is in network communication with the first host. A neighbor solicitation request is sent with the power management option to the one or more second hosts, wherein the power management option requests the power management settings of the one or more second hosts. A table of the power management settings for each of the one or more second hosts is generated from the responses received from the neighbor solicitation request, and the power management settings are applied to the one or more second hosts.

Method and system for power management using ICMPV6 options

A system that facilitates enhancing security for a computer device utilizing an IPv6 network connection. The system includes a computer device having a software module, which performs the following steps: capturing outgoing IPv6 packets, the outgoing IPv6 packets having a stateless autoconfiguration IPv6 address, which is configured at least partially based on a computer device identifier; modifying the IPv6 address associated with the computer device identifier to generate a modified IPv6 address; and returning the outgoing IPv6 packet with the modified IPv6 address to a network layer of the Internet Protocol of the computer device. In accordance with an example, the computer device is an image forming apparatus.

Method and system for modifying and/or changing a MAC ID utilizing an IPv6 network connection

A system that facilitates enhancing security for a computer device by obtaining a link layer address of an IPv6 IPsec address. The system including a computer device having a software module, which performs the following steps: capturing multicast addresses and solicited multicast addresses for one or more IPv6 IPsec addresses; calculating the computer device identifier from the one or more multicast addresses and solicited multicast addresses; storing the computer device identifier for the one or more multicast addresses and solicited multicast addresses; sending a neighbor solicitation to one or more of the IPv6 IPsec addresses as a tentative target address simulating double address detection; capturing the neighbor advertisement response from the one or more IPv6 IPsec addresses and calculating a link-layer identifier; generating a neighbor cache with the link-layer identifier; and enabling IPv6 IPsec communication with the one or more IPv6 IPsec addresses using the link-layer identifier.

Growing community of inventors

Half Moon Bay, CA, United States of America

Maria Perez