Method and apparatus for providing notification of detected error conditions in a network

Patent metadata

Field	Value
Publication number	US-10397268-B2
Application number	US-201715707616-A
Country	US
Kind code	B2
Filing date	Sep 18, 2017
Priority date	Jul 31, 2012
Publication date	Aug 27, 2019
Grant date	Aug 27, 2019

Abstract

Methods for managing a communication session in a communication network are disclosed. For example, a method includes detecting, by a first endpoint comprising at least one processor, an error condition associated with the communication session, sending, by the first endpoint, a notification of the error condition to a second endpoint that is using a transport layer session and receiving, by the first endpoint, a communication from the second endpoint, proposing a response to the error condition. Another method includes receiving, by a first endpoint comprising at least one processor, a notification of an error condition associated with the communication session, selecting, by the first endpoint, a response to the error condition, and sending, by the first endpoint, a communication to a second endpoint that is using a transport layer session, proposing a response to the error condition.

First claim

What is claimed is:

1. A first endpoint for managing a communication session, the first endpoint comprising:
a processor; and
a non-transitory computer-readable medium storing instructions which, when executed by the processor, cause the processor to perform operations, the operations comprising:
detecting an error condition associated with the communication session, wherein the first endpoint and a second endpoint are participating in the communication session, wherein the error condition comprises an attack on the communication session, wherein the attack comprises an invalid re-anchor request;
sending a notification of the error condition to the second endpoint using a first transport layer session management message of a transport layer session, wherein the communication session includes the transport layer session, wherein a header of the first transport layer session management message includes a record type, wherein the record type indicates that a payload of the first transport layer session management message contains session management information; and
receiving a communication from the second endpoint via a second transport layer session management message of the transport layer session, the communication proposing a response to the error condition.

2. The first endpoint of claim 1 , wherein the response comprises switching to a different set of session identifiers for the transport layer session.

3. The first endpoint of claim 1 , wherein the response comprises re-negotiating a session key for the transport layer session.

4. The first endpoint of claim 1 , wherein the response comprises re-anchoring the transport layer session.

5. The first endpoint of claim 1 , wherein the response comprises transferring the transport layer session to a different endpoint.

6. The first endpoint of claim 1 , wherein the response comprises dropping the transport layer session.

7. The first endpoint of claim 1 , wherein the response comprises continuing the transport layer session without a modification.

8. The first endpoint of claim 1 , wherein the response comprises renegotiating a cryptographic algorithm for the transport layer session.

9. The first endpoint of claim 1 , wherein the response comprises changing a frequency for renegotiating a session key for the transport layer session.

10. The first endpoint of claim 1 , wherein the response comprises re-authenticating the first endpoint.

11. The first endpoint of claim 1 , wherein the first transport layer session management message is encrypted using a session key of the transport layer session.

12. The first endpoint of claim 1 , wherein the transport layer session comprises a transmission control protocol session that is identified by a requesting system session identifier and a serving system session identifier.

13. The first endpoint of claim 1 , the operations further comprising:
sending a further communication via a third transport layer session management message of the transport layer session proposing a different response.

14. A first endpoint for managing a communication session, the first endpoint comprising:
a processor; and
a non-transitory computer-readable medium storing instructions which, when executed by the processor, cause the processor to perform operations, the operations comprising:
receiving a notification of an error condition associated with the communication session from a second endpoint, wherein the error condition comprises an attack on the communication session, wherein the attack comprises an invalid re-anchor request, wherein the first endpoint and the second endpoint are participating in the communication session, wherein the notification of the error condition is received via a first transport layer session management message of a transport layer session, wherein a header of the first transport layer session management message includes a record type, wherein the record type indicates that a payload of the first transport layer session management message contains session management information, wherein the communication session includes the transport layer session;
selecting a response to the error condition; and
sending a communication to the second endpoint using a second transport layer session management message of the transport layer session, the communication proposing the response to the error condition.

15. The first endpoint of claim 14 , wherein the response comprises at least one of: switching to a different set of session identifiers for the transport layer session, re-negotiating a session key for the transport layer session, re-anchoring the transport layer session, transferring the transport layer session to a different endpoint, dropping the transport layer session, or continuing the transport layer session without a modification.

16. A non-transitory computer-readable medium storing instructions which, when executed by a first endpoint comprising at least one processor, cause the at least one processor to perform operations for managing a communication session, the operations comprising:
receiving a notification of an error condition associated with the communication session from a second endpoint, wherein the error condition comprises an attack on the communication session, wherein the attack comprises an invalid re-anchor request, wherein the first endpoint and the second endpoint are participating in the communication session, wherein the notification of the error condition is received via a first transport layer session management message of a transport layer session, wherein a header of the first transport layer session management message includes a record type, wherein the record type indicates that a payload of the first transport layer session management message contains session management information, wherein the communication session includes the transport layer session;
selecting a response to the error condition; and
sending a communication to the second endpoint using a second transport layer session management message of the transport layer session, the communication proposing the response to the error condition.

17. The non-transitory computer-readable medium of claim 16 , wherein the response comprises at least one of: switching to a different set of session identifiers for the transport layer session, re-negotiating a session key for the transport layer session, re-anchoring the transport layer session, transferring the transport layer session to a different endpoint, dropping the transport layer session, or continuing the transport layer session without a modification.

18. The non-transitory computer-readable medium of claim 16 , wherein the response comprises renegotiating a cryptographic algorithm for the transport layer session.

19. The non-transitory computer-readable medium of claim 16 , wherein the response comprises changing a frequency for renegotiating a session key for the transport layer session.

20. The non-transitory computer-readable medium of claim 16 , wherein the response comprises re-authenticating the first endpoint.

Assignees

• At & T Ip I Lp
• At&T Intellecutal Property I L P

Inventors

• Small David B
• Spencer Iv Thomas

Classifications

• H04L41/0686

  Additional information in the notification, e.g. enhancement of specific meta-data · CPC title

• H04L63/1408

  by monitoring network traffic (monitoring network traffic per se H04L43/00) · CPC title

• H04L69/16

  Implementation or adaptation of Internet protocol [IP], of transmission control protocol [TCP] or of user datagram protocol [UDP] · CPC title

• G06F21/00

  Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity · CPC title

• H04L41/0654 Primary

  using network fault recovery (ring fault isolation or reconfiguration in loop networks without recovery actions by a network management system H04L12/437) · CPC title