Michael G Metz

US Patent:

20170295094, Oct 12, 2017

Filed:

Apr 7, 2016

Appl. No.:

15/092844

Inventors:

- Chicago IL, US
Christopher M. Rippe - Broomfield CO, US
Michael Metz - Glenview IL, US

International Classification:

H04L 12/721
H04L 29/12
H04L 29/06

Abstract:

Techniques for providing access control in environments that may become disconnected, as a whole, from other networks (e.g., on-board a vehicle) may include locally storing access control information within the dis-connectable environment, and locally providing discovery and authentication/authorization services. Local services and/or applications may be registered and authenticated and client applications may be authenticated and/or authorized to one or more locally provided services and/or applications even when the environment is in a disconnected state. Local access control information may be synchronized with source access control information stored externally to the environment (e.g., on the ground). These techniques may easily support different dis-connectable environments that are provided by an environment service provider, as well as support different sets of locally provided public and/or private services and/or applications and different sets of client applications across the different environments.

US Patent:

20170295154, Oct 12, 2017

Filed:

Apr 7, 2016

Appl. No.:

15/092884

Inventors:

- Chicago IL, US
Christopher M. Rippe - Broomfield CO, US
Michael Metz - Glenview IL, US

International Classification:

H04L 29/06
H04L 29/08

Abstract:

Techniques for authenticating client applications to services and/or applications that are provided within an environment that may become disconnected, as a whole, from other networks (e.g., on-board a vehicle) may include receiving an indication of a local service that may be provided within the dis-connectable environment, and authenticating/registering the local service. A request for service(s) may be received from a client application within the dis-connectable environment, and the client application may be authenticated/authorized to access one or more local services. An indication of a session key may be provided to the local service provider and to the authenticated/authorized client application for use in establishing a secure connection therebetween, thereby providing the client application access to the registered local service. The access control data utilized for authentication/authorization may be locally available within the environment (even when the environment is disconnected), and may be synchronized with master access control data.