End-to-end IP security

Details End-to-end IP security End-to-end IP security

2006-01-11

2010-06-15

Smithers, Matthew B (Department: 2437)

Information security

Access control or authentication

Network

C713S153000

Reexamination Certificate

active

07739728

ABSTRACT:
End-to-end security is established automatically for network communications. In one embodiment a first host is associated with a policy manager that determines, for the first host, whether a secure session is permissible. If the secure session is determined to be permissible then the policy manager signals to intermediate devices in order to prompt establishment of SA/DA pinholes. In an alternative embodiment a neutral policy broker determines, for both first and second hosts, whether the secure session is permissible and signals to the intermediate devices to establish the pinholes if the secure session is permissible. In another embodiment the end-to-end session includes back-to-back tunnel mode sessions linked by at least one intermediate device. The intermediate device is operative to decrypt and re-encrypt traffic in the session, and may be configured by a policy manager or policy broker. Further, another security association can be nested in one or more segments of the session in a manner that permits one host to access a third host or secure resource which is shielded from the second host.

REFERENCES:
patent: 7409704 (2008-08-01), Charas
patent: 2004/0255156 (2004-12-01), Chan et al.
patent: 2005/0268331 (2005-12-01), Le et al.
patent: 2007/0124797 (2007-05-01), Gupta et al.
patent: 2009/0135837 (2009-05-01), Mohaban
Wu et al.,“The Sharing Session Key Component (SSKC) Algorithm for End-to-End Secure Wireless Communication”, 2000, IEEE, pp. 242-250.

Affiliated with

Also associated with

Rating

End-to-end IP security does not yet have a rating. At this time, there are no reviews or comments for this patent.

If you have personal experience with End-to-end IP security, we encourage you to share that experience with our LandOfFree.com community. Your opinion is very important and End-to-end IP security will most certainly appreciate the feedback.

Rate now

Comments { 0 }

Profile ID: LFUS-PAI-O-4225244