Community separation control in a closed multi-community node

Details Community separation control in a closed multi-community node Community separation control in a closed multi-community node

2005-07-05

2005-07-05

Etienne, Ario (Department: 2157)

Electrical computers and digital processing systems: multicomput

Computer-to-computer data routing

Routing data updating

C709S225000, C709S242000, C709S249000, C370S389000, C370S392000, C370S400000, C370S395310

Reexamination Certificate

active

06915351

ABSTRACT:
A method and mechanism of enforcing, in a computer network, a community separation policy wherein the data of a particular user community should be accessible only by members of that community. A Multi-Community Node (MCN) processes information for users in multiple communities and must enforce the community separation policy. In a closed MCN, which runs only applications trusted to enforce the community separation policy, the method and mechanism performs a set of checks on packets received from and to be transmitted on a network, to ensure that all communications comply with the community separation policy. The checks (1) prevent communications from a network used by one community or communities to a network used by different communities; (2) ensure that packets sent by the MCN are output on an interface attached to a network for the intended community; and (3) detect when remote nodes communicating with the MCN spoof their source network address to masquerade as a node in another community. The enforcement method and mechanism use a database of associations of sets of communities corresponding to each network addresses of the MCN and each node with which it communicates, and of the set of communities associated with each network attached to the MCN.

REFERENCES:
patent: 5530806 (1996-06-01), Condon et al.
patent: 5884025 (1999-03-01), Baehr et al.
patent: 5889953 (1999-03-01), Thebaut et al.
patent: 5918018 (1999-06-01), Gooderum et al.
patent: 6047325 (2000-04-01), Jain et al.
patent: 6158008 (2000-12-01), Maria et al.
patent: 6182226 (2001-01-01), Reid et al.
patent: 6226751 (2001-05-01), Arrow et al.
patent: 6256307 (2001-07-01), Salmonson
patent: 6349098 (2002-02-01), Parruck et al.
patent: 6700874 (2004-03-01), Takihiro et al.
patent: 6754716 (2004-06-01), Sharma et al.
patent: 6772346 (2004-08-01), Chess et al.
“Department of Defense Trusted Computer System Evaluation Criteria,” Dec. 1985., pp. 1-82.
Fithen et al., “Deploying Firewalls,” May 1999, pp. 1-63.
“Trusted Solaris™ 8 Operating Environment,” Nov. 2000, pp. 1-24.
“SunScreen™ Secure Net 3.0,” Jul. 1999, pp. 1-66.

Affiliated with

Also associated with

Rating

Community separation control in a closed multi-community node does not yet have a rating. At this time, there are no reviews or comments for this patent.

If you have personal experience with Community separation control in a closed multi-community node, we encourage you to share that experience with our LandOfFree.com community. Your opinion is very important and Community separation control in a closed multi-community node will most certainly appreciate the feedback.

Rate now

Comments { 0 }

Profile ID: LFUS-PAI-O-3390574