1. A modified Host Identity Protocol, HIP, base exchange method for use by first and second HIP hosts having a shared state from a pre-existing relationship, comprising:
sending an authentication message from the first host to the second host comprising an identifier of the first host and a cryptographic item; and
receiving the authentication message at the second host and using the identifier and information relating to the shared state to authenticate the cryptographic item.
2. A method as claimed in claim 1, wherein the identifier is a HIP identity tag.
3. A method as claimed in claim 2, wherein the HIP identity tag is a Host Identity Tag (HIT) or a Local Scope Identifier (LSI).
4. A method as claimed in any preceding claim, wherein authenticating the cryptographic item comprises verifying the origin of the cryptographic item.
5. A method as claimed in any preceding claim, comprising retrieving the shared stated information using the received identifier.
6. A method as claimed in any preceding claim, comprising generating or selecting the cryptographic item using the shared state information.
7. A method as claimed in any preceding claim, wherein the cryptographic item derives from the performance of a cryptographic function.
8. A method as claimed in claim 7, wherein the cryptographic function has at least the identifier as input.
9. A method as claimed in claim 7 or 8, wherein the cryptographic function is a hash function.
10. A method as claimed in claim 9, wherein the shared state information comprises at least the last used item from a hash chain generated from the hash function, and comprising selecting the next unused item in the hash chain for use as the cryptographic item.
11. A method as claimed in claim 10, when dependent on claim 8, wherein the cryptographic item is authenticated by computing the hash function using the received identifier and the received cryptographic item, and comparing the result with at least the last used item.
12. A method as claimed in claim 10 or 11, wherein the hash chain is pre-generated and at least the unused items in the hash chain stored at or accessible by the first host.
13. A method as claimed in claim 12, wherein the hash chain is generated as a result of the pre-existing relationship.
14. A method as claimed in any one of claims 10 to 13, wherein the hash chain is dedicated for interactions between the first and second hosts.
15. A method as claimed in any one of claims 10 to 13, wherein the hash chain is dedicated for interactions between the first hosts and a plurality of such second hosts.
16. A method as claimed in any preceding claim, wherein the shared state information comprises secret information exchanged between the first and second hosts as a result of the pre-existing relationship.
17. A method as claimed in claim 16, wherein the secret information comprises a cryptographic key.
18. A method as claimed in claim 16 or 17, when dependent on claim 7, wherein the secret information is used as input to the cryptographic function.
19. A method as claimed in claim 18, when dependent on claim 8, wherein the cryptographic item is authenticated by computing the cryptographic function using the received identifier and the secret information, and comparing the result with the received cryptographic item.
20. A method as claimed in claim 18 or 19, wherein a time stamp is used as input to the cryptographic function.
21. A method as claimed in claim 18, 19 or 20, wherein a counter is used as input to the cryptographic function, and comprising incrementing the counter.
22. A method as claimed in claim 20 or 21, wherein the authentication message comprises the time stamp andor counter, and the cryptographic item is authenticated by computing the cryptographic function using the received time stamp andor counter, and comparing the result with the received cryptographic item.
23. A method as claimed in any preceding claim, wherein the shared stated information is stored at the second host.
24. A method as claimed in any one of claims 1 to 22, comprising retrieving the shared state information from a remote server.
25. A method as claimed in claim 24, wherein the shared state information stored in the remote server is protected against modification by unauthorised parties.
26. A method as claimed in claim 24 or 25, comprising forwarding at least part of the authentication message to the remote server for retrieving the shared state information.
27. A method as claimed in any preceding claim, wherein the authentication message comprises the first host’s public Diffie-Hellmann key.
28. A method as claimed in any preceding claim, wherein the authentication message comprises the first host’s Host Identity public key.
29. A method as claimed in any preceding claim, comprising, following successful authentication of the cryptographic item, sending a confirmation message from the second host to the first host that indicates successful authentication.
30. A method as claimed in claim 29, wherein the confirmation message comprises the second host’s public Diffie-Hellman key.
31. A method as claimed in claim 29 or 30, comprising signing the confirmation message with the second host’s private key.
32. A method as claimed in claim 31, comprising verifying the signature at the first host using the second host’s Host Identity public key.
33. A method as claimed in claim 32, wherein the second host’s Host Identity public key is known to the first host as a result of the pre-existing relationship or is available from a remote server.
34. A method as claimed in any one of claims 29 to 33, comprising creating a HIP Security Association between the first and second hosts following receipt of the confirmation message at the first host.
35. A method as claimed in any preceding claim, wherein the pre-existing Relationship derives from having previously performed a standard HIP base exchange procedure between the first and second hosts.
36. A method as claimed in any preceding claim, comprising determining whether or not the authentication message is a standard HIP base exchange I2 message.
37. A method as claimed in claim 36, comprising differentiating the authentication message from a standard HIP base exchange I2 message by detecting a HIP parameter type associated with the cryptographic item.
38. A method as claimed in claim 36, comprising differentiating the authentication message from a standard HIP base exchange I2 message with reference to any one or more of: the HIP packet type; the HIP protocol version field; a bit or some bit combination from the HIP header reserved field; a HIP control in the header Controls field; a variant in either or both of the identifiers of the first and second hosts; and the IP protocol used.
39. A communications system for performing a modified Host Identity Protocol, HIP, base exchange method between first and second HIP hosts of the system having a shared state from a pre-existing relationship:
the first host comprising means for sending an authentication message to the second host comprising an identifier of the first host and a cryptographic item; and
the second host comprising means for receiving the authentication message and using the identifier and information relating to the shared state to authenticate the cryptographic item.
40. A modified Host Identity Protocol, HIP, base exchange method for use by a HIP Initiator host having a shared state from a pre-existing relationship with a HP Responder host, comprising sending an authentication message to the HIP Responder host comprising an identifier of the HIP Initiator host and a cryptographic item, the authentication message being for use at the HIP Responder host to authenticate the cryptographic item using the identifier and information relating to the shared state.
41. An apparatus for performing, as a Host Identity Protocol, HP, Initiator host, a modified HIP base exchange method with a HIP Responder host with which the HIP Initiator host has a shared state from a pre-existing relationship, comprising means for sending an authentication message to the HIP Responder host comprising an identifier of the HIP Initiator host and a cryptographic item, the authentication message being for use at the HIP Responder host to authenticate the cryptographic item using the identifier and information relating to the shared state.
42. A modified Host Identity Protocol, HIP, base exchange method for use by a HIP Responder host having a shared state from a pre-existing relationship with a HIP Initiator host, comprising receiving from the HIP Initiator host an authentication message comprising an identifier of the HIP Initiator host and a cryptographic item, and using the identifier and information relating to the shared state to authenticate the cryptographic item.
43. An apparatus for performing, as a Host Identity Protocol, HIP, Responder host, a modified HIP base exchange method with a HIP Initiator host with which the HIP Responder host has a shared state from a pre-existing relationship, comprising means for receiving from the HIP Initiator host an authentication message comprising an identifier of the HIP Initiator host and a cryptographic item, and using the identifier and information relating to the shared state to authenticate the cryptographic item.
44. An operating program which, when run on an apparatus, causes the apparatus to carry out a method as claimed in claims 40 or 42.
45. An operating program which, when loaded into an apparatus, causes the apparatus to become apparatus as claimed in claim 41 or 43.
46. An operating program as claimed in claim 44 or 45, carried on a carrier medium.
47. An operating program as claimed in claim 46, wherein the carrier medium is a transmission medium.
48. An operating program as claimed in claim 46, wherein the carrier medium is a storage medium.
The claims below are in addition to those above.
All refrences to claim(s) which appear below refer to the numbering after this setence.
1. A paint brush cleaning and carrying device comprising, in combination:
a transparent pail having a first side spaced apart from a second side, a first end spaced apart from a second end, and an open top spaced apart from a closed bottom;
a drain disposed adjacent to the bottom of the pail;
a plurality of horizontal parallel vents disposed in each of the sides and in each of the ends;
a lid removably fitted atop the pail;
a lip extended around the lid;
a seal disposed around an interior perimeter of the lip;
a lid latch disposed on the pail and on each of a lid first side and a lid second side;
a plurality of spaced apart tubular holders disposed downwardly from the lid;
a plurality of pairs of orifices disposed within in each holder, each pair diametrically opposed;
a pin removably inserted within a given pair of orifices within each tubular holder;
whereby a hole in a handle of an existing paint brush is removably held by one pin within a given tubular holder.
2. The device according to claim 1 wherein the paint brush is disposed at a selected height within one of the tubular holders upon the insertion of the pin through the hole in the handle.
3. The device according to claim 2 further comprising a handle recess disposed substantially centrally within a top of the lid, the handle recess slightly offset toward the first side;
a pivotal handle disposed within the handle recess.
4. The device according to claim 3 wherein the plurality of spaced apart tubular holders disposed downwardly from the lid further comprise oblong tubular holders.
5. The device according to claim 2 wherein the plurality of spaced apart tubular holders disposed downwardly from the lid further comprise oblong tubular holders.
6. The device according to claim 1 further comprising a handle recess disposed substantially centrally within a top of the lid, the handle recess slightly offset toward the first side; and
a pivotal handle disposed within the handle recess.
7. The device according to claim 6 wherein the plurality of spaced apart tubular holders disposed downwardly from the lid further comprise oblong tubular holders.
8. The device according to claim 1 wherein the plurality of spaced apart tubular holders disposed downwardly from the lid further comprise oblong tubular holders.
9. A paint brush cleaning and carrying device comprising, in combination:
a transparent pail having a first side spaced apart from a second side, a first end spaced apart from a second end, and an open top spaced apart from a closed bottom;
a drain disposed adjacent to the bottom of the pail;
a plurality of horizontal parallel vents disposed in each of the sides and in each of the ends;
a lid removably fitted atop the pail;
a lip extended around the lid;
a handle recess disposed substantially centrally within a top of the lid, the handle recess slightly offset toward the first side;
a pivotal handle disposed within the handle recess, the handle pivoted upwardly to a fully central position upon and above the lid;
a seal disposed around an interior perimeter of the lip;
a lid latch disposed on the pail and on each of a lid first side and a lid second side;
a plurality of spaced apart oblong tubular holders disposed downwardly from the lid, the holders twistably affixed to the lid;
a plurality of pairs of orifices disposed in each holder, each pair diametrically opposed;
a pin removably inserted within a given pair of orifices within each tubular holder;
whereby a hole in a handle of an existing paint brush is removably held by one pin within a given tubular holder;
a removable tray disposed within the pail proximal to the bottom;
a plurality of spaced apart tray vents disposed in the removable tray, the tray vents arranged from proximal to the first side to proximal to the second side.