Adaptive communication system enabling dissimilar devices to exchange information over a network

{ADAPTIVE COMMUNICATION SYSTEM ENABLING DISSIMILAR DEVICES TO EXCHANGE INFORMATION OVER A NETWORK}

FIELD OF THE INVENTION The present invention relates to computer networks, and more particularly, to an adaptive open system architecture with protocol conversion, validation and translation functions that allow dissimilar systems to communicate over an existing infrastructure.

Electronic networks combine similar types of devices specifically designed to communicate with each other. Perhaps the first type of network was a telephone system, which mutually enabled communication through a switch to the same handset. The first computer networks consisted of terminals and were designed to communicate with large computers or host computers, so that multiple terminals used the resources of the host computer.

However, over the years, the distinction between computer networks and telephone networks has blurred. Current telephone networks allow computers to communicate with each other, and computer networks facilitate telephone communication. The company uses internal computers and telephone networks to support its office functions, and connects these internal networks to the wide area network and the Internet through telephone lines or other connecting means. This configuration allows computing and communication devices to communicate over a wide range with other types of devices. Other current network variants include portable telephone networks, automated teller machines (ATMs), and various personal communication systems used in business and commerce.

The fastest expanding network so far is the Internet, which is actually a collection of computer networks interconnected by a protocol known as TCP/IP (transmission control protocol/internet protocol). The current growth rate of the Internet is estimated to be one million new users every month. These new users include homeowners, students and children, as well as high-performance computers and office workers.

Advances in technology have added numerous new devices to computer networks and telephone networks, including cell phones, printers, facsimile machines, automated teller machines (ATMs), cash registers, or point of sales (POA) devices. , and numerous other types of devices with new devices appear almost every day. Because these devices need to communicate with each other, security becomes increasingly important in any type of computer. For example, in a client-server architecture, multiple clients typically communicate with separate servers. In this case, problems arise as to whether a specific client has the right to communicate with the server and whether to grant communication permission by granting some privilege. When clients try to communicate with other clients, the problem is similar, but the security problem is more complicated. The communication is in some cases direct communication between clients, for example communication between friends. In other environments, communication is relayed through a server, for example from client (A) to server and from server to client (B). Several techniques for controlling access to both clients and servers and for securing communications between adjuncts include cryptography, encryption and various other methods to establish the authenticity and authenticity of clients, servers, and other devices.

A system of addresses, called Internet Protocol (IP) addresses, has been devised to allow electronic or computing devices to communicate with each other, and these multiple sets of addresses are assigned to various manufacturers and encrypted on the devices themselves. Another set of IP addresses is assigned to different types of network registration owners. These addresses are assigned to devices attached to the network, for example personal computers attached to a local area network. Devices attached to the network can use IP addresses in this way to send information to other devices attached to the network. While not sure that the message has reached the desired device in this way, it is desirable that the subscribed device generally disseminate the message on the network, and that the receiving device listen for the message and the IP address attached to the message.

When only heterogeneous equipment is attached to the shared network structure, many problems occur. At a low level, it includes the problem that the protocols that try to communicate with each other are different. [e.g. TCP/IP, NetBUI, Net Basic Input/Output System (NetBIOS), systems network architecture (SNA), BNA, etc.] At a high level, different types of encryption schemes, different character sets [e.g. ASCII ( American Standard Code for Information Interchange (ASCII), EBCIC, etc.], and different electrical specifications (eg 802.1, etc.). Differences between devices cause differences in the use of the system itself, which may include banking systems, telecommunication systems, office networks, wide area communication networks, portable telephone networks, cable TV networks, and various types of e-commerce practices. have. Each of these systems has their own unique characteristics, even when operating through the same medium.

In a client and server environment, cryptography is typically used to verify that a client is a client to a server, thereby verifying that the client attempting to communicate with the server is authentic. Another technique for identifying itself to the server was through encryption. These encryption schemes have typically used a public key and a private key to allow the client to recognize itself to the server. In such an environment, the client and server first reach a mutual agreement before connecting or having a conversation. To allow a server to connect to other servers, you can create a name server that typically lists all other servers, and the name server determines the privileges available between the servers.

One system for addressing communication problems between clients was addressed in a system called MIT's Kerberos. In such a system, one client requests permission from a particular server to communicate with another client. The server returns the key used to enable the communication requesting client to communicate with the receiving client to the communication requesting client. The server also sends the same key to the client that will receive the communication, so that the client that will receive the communication knows that the communication has reached it. If the communication includes the key, it must be secure for the subscribing client to communicate with the receiving client. The server also instructs the client on the path to reach the receiving client. The disadvantage of the Kerberos system is that when a malicious observer monitors the communication between a subscribing client and a server, and the valid key is transmitted from the server to the subscribing client, the malicious observer obtains the valid key from the server. Other problems include delayed transmission, which has been successfully addressed through time-stamping. As another system, it has experienced a lot of creative effort in banking systems, which typically include an ATM connected to a central computer through a variety of technologies. Security in these systems is so important that encryption and several other technologies have had great success. Some banking systems operate on a dedicated line from the ATM to the central computer, simplifying security concerns. Even with such a security system in place, it encrypts transmissions and grants very strict permission at every point.

In telecommunication, the system verifies the authenticity of the telephone subscription, verifies the personal ID number subscribed to the mobile phone, identifies the rights of the calling subscriber and the mobile phone operating outside of the regular mobile phone, It has been designed to make calls between telecommunication systems and to block certain types of calls, both cellular and landline systems, and numerous other techniques are now being implemented.

In the field of e-commerce (commerce over the Internet), a system that can safely transmit information and verify transactions is now in place. The system implements a specific user to connect to a specific site while excluding other users from a specific site. In the current World Wide Web (WWW) environment, a new technique has also been developed to transmit guaranteed and secure mail, which includes verification of the right to send and verification of the right to receive a specific message.

While these discrete areas of network communication provide many benefits to the general public, each system also has risks. There is a risk when information received over the network is altered or erroneous communication is transmitted directly to the receiving device. A general problem in currently implemented systems is that the receiving client must be present when a transmission from the sending client is initiated. One well-known disadvantage in e-mail systems is that e-mail is transmitted from the sending client through the server to the receiving client. It is preferable that the message is transmitted directly from the sender to the receiver, thus solving the great problem that the message is tampered with. It would be desirable to have a system for addressing a device attempting to communicate with an incompatible device, wherein at least one of the devices has the capability to convert the communication to a compatible communication.

The present invention improves upon current technology by providing methods and apparatus that allow dissimilar devices to exchange information with each other over a computer network. According to the method of the present invention, a database of acceptable transmitting devices and receiving devices is stored in a verification server. The first device generates a transmission permission request signal, the signal is compared with a database stored in the server, and if there is a match, the server generates a transmission permission signal, so that the message can be transmitted from the first device to the second device.

However, before the complete exchange of information, a reception permission request signal is generated at the second device in response to receiving the communication signal from the first device. The reception permission request signal is compared with the database in the server, and if they match, the server generates a reception permission signal, so that the second device can receive the message from the first device.

The method is applicable to a wide range of devices including dissimilar or incompatible devices, namely personal computers, cellular phones, facsimile machines, pagers and printers. As such, the method may further comprise performing a translation function prior to causing the second device to receive the message from the first device in response to the acknowledgment signal. The translation function may relate to dissimilar device hardware, software device protocols, network security, national/international communication standards, language or other factors. Therefore, according to the precise implementation, the data structure in the verification server may include a rule table including communication protocol, transmission permission, reception permission, and transmission performance stored for each base of each device, among other information.

1 is a view showing the basic arrangement of the present invention,

2 is a diagram illustrating an embodiment of the present invention in which a client computer interacts with a set of server relays;

Figure 3 illustrates another embodiment of the present invention in which a client computer interacts with another set of server relays;

Figure 4 illustrates another embodiment of the present invention in which another set of server relays communicate via each client computer;

5 is a view showing a plurality of visual symbols that can be used by accessing the system according to the present invention.

Referring to the drawings, FIG. 1 illustrates the basic environment in which the present invention operates, including a verification server 12 , device (A) 14 and device (B) 16 . Device 14 and device 16 may be any type of communication device including, but not limited to, computers, telephones, facsimile machines, pagers, cellular communication devices, electronic mail, and computer software. The server 12 may store a predetermined or arranged database of acceptable receiving and transmitting devices according to information including information obtained through adaptation regarding protocol conversion, language translation and other functions that may be required for device compatibility. Any type of machine is possible.

In particular with respect to certain embodiments of the present invention, the database may contain information regarding the performance level of the transmitting and/or receiving device, which may be used by the device to interpret the transmitted signal in an alternative form as may be required by the receiving device. Depending on the required application program. The database also provides pointers to other external databases to assist the verification server in determining whether a sending device can send information to a particular receiving device or whether a receiving device can receive information from a specific sending device. may include The verification server can be any type of computer device, such as a mainframe computer, network server, or local personal computer arranged to function as a server.

The hardware interconnection between the various components can be replaced by any tangible medium that may be required for communication between the device and the verification server. Such media may include telephone lines, fiber optic lines, and wire broadcasting of the type used for cellular transmission. In addition to the aforementioned media, signals may pass between the devices via other devices or servers, although not shown in detail in the drawings.

The initial stage of performing communication according to the present invention takes place via device 14 at the request of device 14 to communicate with device 16 . In particular, device 14 generates a request-to-send (RTS) signal that is sent to server 12 . This transmission permission request signal includes information indicating to the verification server that the device A wishes to communicate with a specific receiving device. In this embodiment, the signal indicates to the verification server that device 14 wishes to communicate with device 16 . As discussed herein, the verification server preferably includes the necessary information to parse the transmit permission request signal. This information is contained in a database containing one set of acceptable receiving devices for device A. This database also contains information pertaining to the device 16 , including the types of messages that the device 16 can receive.

If the verification server determines that device A is capable of communicating with device B, the verification server generates a transmit permission signal indicating that device A is capable of communicating with device B. The transmit permission signal may also include information that informs device A of which data translations need to be transmitted to device B. As long as the necessary components are accessible and used to perform the necessary operations, the process actually used to perform the necessary translations may exist on a server, on any type of device, on a network or even on a distribution type that desires to communicate. For example, the entire translation process can reside entirely in the sending device, so that, with a relatively simple instruction from the verification server and the necessary permission mentioned above, the message can be transmitted in an interpreted form. However, there are a number of alternatives to this basic process. For example, a server may alternatively download a script to a sending (or receiving) device, which enables the device to perform a function or a number of functions necessary for a particular translation. Such scripts may modify the use or modification of encryption keys having a specific bit length due to a high-level set of instructions or a low-level set of mathematical functions, depending on the encryption software based on different types of keys, as an example in many cases. This type of script may be provided and, depending on the environment, may be transmitted to the transmitting and receiving devices in order to harmonize the functions. However, as another alternative, the verification server may provide one or both of the sending and receiving devices with addresses of other locations accessible via the network from which they can download the appropriate functions to perform any necessary translations. .

In this context of the present invention, the word "translation" should be used to mean the data processing task required for two (or more) devices to communicate effectively. Accordingly, a translation may include one or more variations of dissimilar hardware, software, or combinations thereof. This translation allows at least two main steps. The first is through one or more skills acquired or perfected through adaptations or rules automatically stored by the verification server itself. As an example of many cases, it is assumed that the transmission permission request contains some content that cannot be recognized by the verification server.

This adaptation can use external databases and can be applied to own results or externally disclosed trial and error experiments. For example, when connecting a verification server to the World Wide Web via the Internet, the server may automatically generate a query to another Web site based on keywords found in the transmission permission request signal. If a solution to a particular cross-border problem is identified, a communication may be performed, in which case the server may inform some or all of the participants that a particular translation algorithm has been used for future inquiry. In this case, the process necessary for translation may be stored or further modified for later use.

As an alternative, especially when a particular communication request is complex or very sensitive, the sending device first performs the necessary translations and then either or both the verification server and the receiving device can communicate accurately and reliably with respect to the process to be executed in the future. can be trained

In all cases, when the verification server receives the reception permission request signal, a comparison is made against the database to determine whether the device (B) 16 can receive the communication signal from the transmitting device. If the verification server determines that device B is capable of receiving the communication signal from device A, the verification server sends a reception acknowledgment signal to device B. Upon receiving the reception permission signal, the device B starts to receive a communication signal from the device A 14 .

2 shows another embodiment. One of the differences between the first embodiment of Figs. 1 and 2 is the insertion of a server relay between the client device and the verification server. The location of this server relay between the client and the verification server allows the clients to communicate with each other but obscures the location of the verification server. Also, because of the location of the server relay, no other outside party can monitor the communication between the verification server and the client to dedicate communication information for unnecessary purposes.

In Fig. 2, when the client A wants to communicate with the client B, the client A generates a transmission permission request signal and transmits this signal to the server relay 18 as shown in the preferred embodiment. By inserting a server relay between the client and the verification server, it is possible to hide the location of the verification server from the client A while still allowing full operation.

The server relay 18 transmits a transmission permission request signal to the verification server 12 as shown in FIG. 1 . Although the verification server determines whether the transmission permission request signal is in the database of the acceptable receiving device, the transmission permission signal is transmitted to the server relay 20, and the server relay 20 sends the transmission permission signal to the server relay ( 18), and the server relay 18 again transmits a transmission permission signal to the client (A). These additional intermediate steps act to enhance the security of information transmitted through it, regardless of the medium used.

As in the case of FIG. 1 , the client A sends a communication signal to the device B, which may transmit between the client A and the client B either directly or via a possible route. The client B receives a communication signal from the device A, generates a reception permission request signal, and transmits it to the server relay 24 . In this embodiment, the server relay 24 retransmits the reception permission request signal to the server relay 22 . The server relay 22 retransmits the reception permission request signal to the verification server 12, and the verification server 12 permits the client 16 to receive the communication signal from the client A in the first embodiment. decide whether to do it or not. When the client B is permitted to receive from the client A, a permission signal is transmitted to the server relay 24, and the server relay 24 retransmits the reception permission signal to the client B. After that, the client B starts to receive a communication signal from the client A.

The present invention solves a problem related to communication between a plurality of heterogeneous types of devices by making it possible to know the communication for each device used for communication with one ID. Using one ID, the system can know the capabilities of the receiving device from the verification server. This also solves the problem that communication is misdirected to another party by having both device A and device B get permission for the request from the verification server. To expedite communication, the verification server may include a pre-arranged list of permitted devices.

The present invention also solves certain problems caused by delayed communication. This delayed communication can be transmitted and verified for the appropriate device to receive it. As mentioned here, by having the verification server access other databases, the verification server does not have to keep all the information necessary for a particular communication on the verification server, but the verification server can access information that can be changed. (eg, phone number or IP address) Updating this information may make it invisible to both the sending and receiving clients.

Another advantage of the present invention is that this system can be used to verify that a particular device is located in a particular country, and to use this information to ensure that sensitive information does not fall into the hands of others. The United States and other countries have rules and regulations based on what types of information can be exported. (e.g. encryption software) This information becomes the type of information held by the verification server, and when the verification server receives a request to send permission, the verification server does not authorize the client to transmit such information to the receiving client. . Additional benefits are achieved through the control of software usage by verifying programs or devices running every hour. Authorize the use of the device according to the registration information based on the data based on the verification server.

Since the present invention realizes a wide range of uses through the maintenance of information regarding the diversification of devices, device improvements may be possible even with devices considered out of date. Unlike previously known methods for device-to-device communication and verification, the present invention can provide the required functionality more efficiently and economically, and can also have security features not hitherto possible.

Figure 3 illustrates another embodiment of the present invention that further isolates the client from the verification server. This arrangement is similar to that shown in Figure 2 in that a server relay is located between each client and the verification server. In this particular embodiment client A only needs to know one server relay 19 in order to receive permission from the verification server. The client A transmits a transmission permission request signal to the server relay 19 , and the server relay 19 transmits a transmission permission request signal to the server relay 18 .

In this case, neither the client A nor the server relay 19 need to know the location of the verification server 12 . The server relay 18 sends a transmission permission request signal to the verification server, and the verification server determines whether the transmission permission request signal is in the database or not, based on the database, an acceptable receiving and transmitting device. When the transmission permission request signal is in the database, the permission signal is transmitted to the server relay 20 , and the server relay 20 transmits it to the server relay 19 . The server relay 19 transmits a transmission permission signal to the client A, and the client A starts to transmit a communication signal to the client B. The client B receives the communication signal and transmits a reception permission request signal to the server relay 22 , and the server relay 22 transmits the reception permission request signal to the server relay 23 . Then, the server relay 23 sends a reception permission request signal to the verification server, and the verification server compares the reception permission request signal with the database of the transmitting device acceptable for the client B, and this signal is In the case of being inside, a reception permission signal is transmitted to the server relay 23 . The server relay 23 merely relays the reception permission signal to the server relay 24, and the server relay 24 transmits this signal to the client B. FIG.

According to the embodiment of Fig. 3, neither client A nor client B communicates directly with the server relay, which is directly communicating with the verification server. Therefore, the level of security is improved, which is useful for transmission. While providing a more advanced level of security in that the location of the verification server is unknown to both client A and client B, the overall functionality of the present invention is usefully present at any node.

4 illustrates another embodiment in which additional security features are useful. In this embodiment, both the client A and the client B have the transmit and receive communication paths completely isolated from each other, thus preventing monitoring of the communication. By separating the transmit and receive paths, it is more challenging than ever for those trying to monitor the transmitted and received signals. By monitoring only one path, an intruder cannot obtain the information needed to imitate the signal and compromise the overall security of the system.

As shown in this embodiment of Fig. 4, the client A starts communication by sending a transmission permission request signal to the server relay 18. As shown in FIG. The server relay 18 transmits a transmission permission request signal to the verification server. The verification server compares the transmission permission request signal with the database of allowable receiving devices, and if the transmission permission request signal is within the allowable set of the receiving device, transmits the transmission permission signal to the server relay 20 . Then, the server relay 20 transmits a transmission permission signal to the client A, and the client A starts transmitting a communication signal to the client B.

When the client B receives a communication signal from the client A, the client B transmits a reception permission request signal to the server relay 22 . Then, the server relay 22 transmits this signal to the verification server 12, which compares the reception permission request signal with a database of an acceptable transmission device, and determines that the reception permission request signal is an acceptable transmission device. Generates a reception acknowledgment signal when in the database. The verification server transmits the reception permission signal to the server relay 24 , and the server relay 24 transmits the reception permission signal to the client B .

The verification server employed in all embodiments of the present invention may be used such as a news database, a fax database, a chat database, a video database and a telephone database to obtain information necessary for the sending client to determine whether it needs to be translated. It should be recognized that it can communicate with an external database.

It is also envisioned that the verification server may do the reverse type of translation analysis. That is, when the verification server receives the transmission permission request signal, the verification server may determine whether the receiving client can translate the communication signal initially transmitted by the client in order to interpret the transmitted communication signal. According to this form, client B cannot rely entirely on client A's translation capabilities.

In combination with the various permissions set forth herein, the present invention well contemplates the use of a new cryptographic system, which is now discussed with reference to FIG. 5 . These figures represent visual signs, particularly the arrangement of the 20 Egyptian hieroglyphs. However, it should be understood from the outset that this aspect of the present invention is not limited to the use of such specific symbols or indicated arrangements, so long as more or fewer symbols may be used instead of arrangements. Therefore, instead of hieroglyphs, geometric symbols, colors or any type of figure can be used. In fact, as will become clear from the discussion below, a sound can be used instead of a picture. Also, as discussed below, although only one level of symbol appears in FIG. 5, in fact activation of one symbol can lead to a new level, so a three-dimensional arrangement of the system is assumed.

In a preferred embodiment, in the case of a computer user attempting to access the system, a "blank slate" is first provided to the computer user at the location of the sending device, receiving device or verification server, which or sound) is preferably in the form of a stone-like surface. Other backgrounds can be used in addition to the stone look, including a completely blank screen. However, as the user moves the pointer around the screen using a mouse or other device, the symbols begin to appear momentarily, at least if the position of the pointer matches the position of the underlying symbol. It is possible to recognize specific symbols through movement of the pointing device, preferably by clicking on specific numbers of specially arranged symbols. To further aid user validation, a new array of symbols, or a completely new set of symbols, is provided each time a user wants to access the system, so that an unauthorized user can see an authorized user accessing the location of the character. can't even remember

The aforementioned encryption system is preferably used in combination with the same code, and the code and password are compared before authorizing the user (or device). The ID code can be gathered in a variety of ways, including the normal entry of a user ID code prior to downloading the machine registration number, either as a passphrase or alternatively. An alternative machine registration number would be used to automatically generate a set of symbols (or sounds) containing items that the user confirms for full authorization. Visual or auditory items may be generated randomly or based on pseudo-random numbers, as long as the later arrangement includes specific user-related symbols required for permission.