Methods and systems for data traffic control and encryption

Patent metadata

Field	Value
Publication number	US-2016119294-A1
Application number	US-201414283944-A
Country	US
Kind code	A1
Filing date	May 21, 2014
Priority date	May 21, 2014
Publication date	Apr 28, 2016
Grant date	—

Abstract

Methods, systems and programming for data traffic control and encryption. In one example, data traffic is received from a first node to be sent to a second node. The health of an encryption pathway between the first node and the second node is determined. The data traffic is sent to the second node over the network without going through the encryption pathway when the encryption pathway is not healthy.

First claim

We claim:

1 . A method implemented on at least one machine each of which has at least one processor, storage, and a communication platform connected to a network for data traffic control, the method comprising:
receiving data traffic from a first node to be sent to a second node; determining the health of an encryption pathway between the first node and the second; and sending the data traffic to the second node over the network without going through the encryption pathway when the encryption pathway is not healthy.

2 . The method of claim 1 , further comprising sending the data traffic to the second node over the network through the encryption pathway when the encryption pathway is healthy.

3 . The method of claim 1 , wherein the health of the encryption pathway between the first node and the second node is determined at a regular interval.

4 . A system having at least one processor, storage, and a communication platform connected to a network for data traffic control, the system comprising:
a health checking module configured to determine the health of an encryption pathway between a first node and a second node; and a routing module configured to send data traffic received from the first node to the second node over the network without going through the encryption pathway when the encryption pathway is not healthy.

5 . The system of claim 4 , wherein the routing module is further configured to send the data traffic to the second node over the network through the encryption pathway when the encryption pathway is healthy.

6 . The system of claim 4 , wherein the heath of the encryption pathway between the first node and the second node is determined by the health checking module at a regular interval.

7 . A non-transitory machine-readable medium having information recorded thereon for data traffic control, wherein the information, when read by the machine, causes the machine to perform the following:
receiving data traffic from a first node to be sent to a second node; determining the health of an encryption pathway between the first node and the second; and sending the data traffic to the second node over the network without going through the encryption pathway when the encryption pathway is not healthy.

8 . A system for data traffic control comprising:
means for determining the health of an encryption pathway between a first node and a second node; and means for sending data traffic received from the first node to the second node over the network without going through the encryption pathway when the encryption pathway is not healthy.

9 . A method implemented on at least one machine each of which has at least one processor, storage, and a communication platform connected to a network for encryption pathway health check, the method comprising:
encrypting first data at a first node; sending the encrypted first data to a second node over the network through an encryption pathway; decrypting the encrypted first data to generate second data at the second node; encrypting the second data at the second node; sending the encrypted second data to the first node over the network through the encryption pathway; decrypting the encrypted second data to generate third data at the first node; and comparing the first data with the third data at the first node to determine the health of the encryption pathway between the first node and the second node.

10 . The method of claim 9 , wherein the encryption pathway between the first node and the second node is healthy if the first data matches the third data according to at least one criterion.

11 . The method of claim 9 , wherein the first data is at least one of a test message and normal data traffic.

12 . A system having at least one processor, storage, and a communication platform connected to a network for encryption pathway health check, the system comprising:
a first encrypting module of a first node configured to encrypt first data; a first routing module of the first node configured to send the encrypted first data to a second node over the network through an encryption pathway; a second decrypting module of the second node configured to decrypt the encrypted first data to generate second data; a second encrypting module of the second node configured to encrypt the second data; a second routing module of the second node configured to send the encrypted second data to the first node over the network through the encryption pathway; a first decrypting module of the first node configured to decrypt the encrypted second data to generate third data; and a comparing module of the first node configured to compare the first data with the third data at the first node to determine the health of the encryption pathway between the first node and the second node.

13 . The system of claim 12 , wherein the encryption pathway between the first node and the second node is healthy if the first data matches the third data according to at least one criterion.

14 . The system of claim 12 , wherein the first data is at least one of a test message and normal data traffic.

15 . A non-transitory machine-readable medium having information recorded thereon for encryption pathway health check, wherein the information, when read by the machine, causes the machine to perform the following:
encrypting first data at a first node; sending the encrypted first data to a second node over the network through an encryption pathway; decrypting the encrypted first data to generate second data at the second node; encrypting the second data at the second node; sending the encrypted second data to the first node over the network through the encryption pathway; decrypting the encrypted second data to generate third data at the first node; and comparing the first data with the third data at the first node to determine the health of the encryption pathway between the first node and the second node.

16 . A system for encryption pathway health check comprising:
means for encrypting first data at a first node; means for sending the encrypted first data to a second node over the network through an encryption pathway; means for decrypting the encrypted first data to generate second data at the second node; means for encrypting the second data at the second node; means for sending the encrypted second data to the first node over the network through the encryption pathway; means for decrypting the encrypted second data to generate third data at the first node; and means for comparing the first data with the third data at the first node to determine the health of the encryption pathway between the first node and the second node.

17 . A method implemented on at least one machine each of which has at least one processor, storage, and a communication platform connected to a network for encryption pathway health check, the method comprising:
receiving encrypted first data from a node over the network through an encryption pathway; decrypting the encrypted first data to generate second data; encrypting the second data; and sending the encrypted second data to the node over the network through the encryption pathway.

18 . The method of claim 17 , wherein the first data is at least one of a test message and normal data traffic.

19 . A system having at least one processor, storage, and a communication platform connected to a network for encryption pathway health check, the system comprising:
a routing module configured to receive encrypted first data from a node ove

Assignees

• Yahoo Inc

Inventors

• Petach Matthew Nicholas
• Batta Nitin
• Lacroix Brian
• Gashinsky Igor

Classifications

• H04L63/0428 Primary

  wherein the data content is protected, e.g. by encrypting or encapsulating the payload · CPC title

• H04L9/0822

  using key encryption key · CPC title

• H04L9/083

  involving central third party, e.g. key distribution center [KDC] or trusted third party [TTP] · CPC title

• H04L9/0891

  Revocation or update of secret information, e.g. encryption key update or rekeying · CPC title