Apparatuses and methods for facilitating port discernment driven mutual authentication and service access authorization

Patent metadata

Field	Value
Publication number	US-11658969-B2
Application number	US-202016953388-A
Country	US
Kind code	B2
Filing date	Nov 20, 2020
Priority date	Nov 20, 2020
Publication date	May 23, 2023
Grant date	May 23, 2023

Abstract

Aspects of the subject disclosure may include, for example, receiving, by a processing system including a processor that is operative in a first communication network, a certificate from a communication device that is operative in a second communication network, extracting, by the processing system, an identifier of the communication device from the certificate, authenticating, by the processing system, the communication device in accordance with the identifier, comparing, by the processing system, the identifier with a plurality of identifiers to determine that the communication device is authorized to access data, resulting in an authorization determination, and transmitting, by the processing system, the data to the communication device based on the authorization determination. Other embodiments are disclosed.

First claim

What is claimed is:

1. A device, comprising:
a processing system including a processor; and
a memory that stores executable instructions that, when executed by the processing system, facilitate performance of operations, the operations comprising:
identifying a type of communication traffic as occurring between the device and a client communication device, wherein the device is operative in a first communication network and the client communication device is operative in a second communication network that is different from the first communication network;
transmitting a first request to the client communication device for a first certificate based on the identifying of the type of communication traffic;
obtaining the first certificate from the client communication device, wherein the first certificate includes a first identifier of the client communication device;
extracting the first identifier from the first certificate, resulting in an extracted identifier;
determining that the client communication device is authorized to obtain a file based on the extracted identifier;
transmitting the file to the client communication device based on the determining that the client communication device is authorized to obtain the file;
receiving the file from a first user equipment that is operative in the first communication network;
storing the file at a location included in the memory;
providing an indication of the location to the first user equipment;
receiving a query from the client communication device, wherein the query includes the indication of the location; and
responsive to the receiving of the query from the client communication device, transmitting a response that includes an indication of a port.

2. The device of claim 1 , wherein the operations further comprise:
obtaining a second request from the client communication device for a second certificate; and
transmitting the second certificate to the client communication device,
wherein the second certificate includes a second identifier of the device.

3. The device of claim 2 , wherein the transmitting of the file to the client communication device is further based on the client communication device authenticating the device in accordance with the second identifier.

4. The device of claim 1 , wherein the operations further comprise:
enabling the client communication device to record the file based on the extracted identifier.

5. The device of claim 1 , wherein the file includes media, and wherein the operations further comprise:
enabling the client communication device to playback the media based on the extracted identifier.

6. The device of claim 1 , wherein the operations further comprise:
enabling the client communication device to edit the file based on the extracted identifier.

7. The device of claim 1 , wherein the operations further comprise:
enabling the client communication device to transfer the file to a second client communication device based on the extracted identifier.

8. The device of claim 7 , wherein the enabling of the client communication device to transfer the file to the second client communication device is based on a determination that the second client communication device is operative in the second communication network.

9. The device of claim 1 , wherein the transmitting of the file to the client communication device is further based on obtaining a payment from the client communication device.

10. The device of claim 1 , wherein the client communication device is a server.

11. The device of claim 1 , wherein the indication of the location includes an address, a uniform resource locator (URL), or a combination thereof.

12. The device of claim 1 , wherein the operations further comprise:
establishing a socket between the device and the client communication device using the port indicated in the response,
wherein the transmitting of the file to the client communication device occurs via the socket.

13. A non-transitory machine-readable medium, comprising executable instructions that, when executed by a processing system including a processor, facilitate performance of operations, the operations comprising:
receiving a first message from at least one communication device that is operative in a first network, wherein the first message includes an indication of a location of a file on a server that is operative in the first network, wherein the first message excludes an indication of a port, and wherein the processing system is operative in a second network that is different from the first network;
transmitting a query responsive to the receiving of the first message;
obtaining a second message based on the transmitting of the query, wherein the second message includes an indication of a first port;
engaging an authentication process whereby the processing system authenticates a first identity of the server and the server authenticates a second identity of the processing system; and
receiving the file from the server via the first port based on the engaging of the authentication process.

14. The non-transitory machine-readable medium of claim 13 , wherein the receiving of the file is further based on a determination by the server that the processing system is authorized to receive the file.

15. The non-transitory machine-readable medium of claim 13 , wherein the at least one communication device communicates within the first network via a second port that is different from the first port.

16. The non-transitory machine-readable medium of claim 13 , wherein the operations further comprise:
receiving a request for the file from a user equipment that is operative in the second network, wherein the request includes an identification of a location of the processing system where the file is stored; and
transmitting the file to the user equipment, based on the identification of the location, to fulfill the request.

17. A method, comprising:
receiving, by a processing system including a processor that is operative in a first communication network, a certificate from a communication device that is operative in a second communication network;
extracting, by the processing system, an identifier of the communication device from the certificate;
authenticating, by the processing system, the communication device in accordance with the identifier;
comparing, by the processing system, the identifier with a plurality of identifiers to determine that the communication device is authorized to access data, resulting in an authorization determination;
transmitting, by the processing system, the data to the communication device based on the authorization determination;
receiving, by the processing system, the data from a first user equipment that is operative in the first communication network;
storing the data at a location included in a memory of the processing system;
providing an indication of the location to the first user equipment;
receiving a query from the communication device, wherein the query includes the indication of the location; and
responsive to the receiving of the query from the communication device, transmitting a response that includes an indication of a port.

18. The method of claim 17 , wherein the transmitting of the data to the communication device includes transmitting a file that includes the data to the communication device, and wherein the transmitting of the file facilitates a provisioning of a communication service to the communication device, the method further comprising:
transmitting, by the processing system, a se

Assignees

• At & T Ip I Lp

Inventors

• Yao Timothy
• Bryant Christopher
• Wei Qun

Classifications

• H04L63/0823 Primary

  using certificates (cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263) · CPC title

• H04L63/101

  Access control lists [ACL] · CPC title

• H04L63/0876 Primary

  based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint · CPC title

• H04N21/2542

  for selling goods, e.g. TV shopping (payment schemes, payment architectures or payment protocols for electronic shopping systems G06Q20/12) · CPC title

• H04L63/0869

  for achieving mutual authentication (cryptographic mechanisms or cryptographic arrangements for mutual authentication H04L9/3273) · CPC title