Policy-driven kernel-based security implementation

Details Policy-driven kernel-based security implementation Policy-driven kernel-based security implementation

2007-07-17

2007-07-17

Barron, Jr., Gilberto (Department: 2132)

Electrical computers and digital processing systems: support

Multiple computer communication using cryptography

Security kernel or utility

C713S152000

Reexamination Certificate

active

10007446

ABSTRACT:
Improvements in security processing are disclosed which enable security processing to be transparent to the application. Security processing (such as Secure Sockets Layer, or “SSL”, or Transport Layer Security, or “TLS”) is performed in (or controlled by) the stack. A decision to enable security processing on a connection can be based on configuration data or security policy, and can also be controlled using explicit enablement directives. Directives may also be provided for allowing applications to communicate with the security processing in the stack for other purposes. Functions within the protocol stack that need access to clear text can now be supported without loss of security processing capability. No modifications to application code, or in some cases only minor modifications (such as inclusion of code to invoke directives), are required to provide this security processing. Improved offloading of security processing is also disclosed, which provides processing efficiencies over prior art offloading techniques.

REFERENCES:
patent: 5007082 (1991-04-01), Cummins
patent: 5029206 (1991-07-01), Marino et al.
patent: 5392357 (1995-02-01), Bulfer et al.
patent: 5541920 (1996-07-01), Angle et al.
patent: 5584023 (1996-12-01), Hsu
patent: 5764738 (1998-06-01), Gillon et al.
patent: 5815707 (1998-09-01), Krause et al.
patent: 5845068 (1998-12-01), Winiger
patent: 5931928 (1999-08-01), Brennan et al.
patent: 5974549 (1999-10-01), Golan
patent: 5987140 (1999-11-01), Rowney et al.
patent: 6070198 (2000-05-01), Krause et al.
patent: 6094485 (2000-07-01), Weinstein et al.
patent: 6131163 (2000-10-01), Wiegel
patent: 6141705 (2000-10-01), Anand et al.
patent: 6175917 (2001-01-01), Arrow et al.
patent: 6266666 (2001-07-01), Ireland et al.
patent: 6370599 (2002-04-01), Anand et al.
patent: 6412069 (2002-06-01), Kasvsan
patent: 6434620 (2002-08-01), Boucher
patent: 6438666 (2002-08-01), Cassagnol et al.
patent: 6615349 (2003-09-01), Hair
patent: 6801927 (2004-10-01), Smith et al.
patent: 6886004 (2005-04-01), Molnar
patent: 6904519 (2005-06-01), Anand
patent: 6981140 (2005-12-01), Choo
patent: 7000106 (2006-02-01), Carter
patent: 2001/0044904 (2001-11-01), Bert et al.
patent: 2002/0116605 (2002-08-01), Berg
patent: 2002/0120842 (2002-08-01), Bragstad et al.
patent: 2003/0014623 (2003-01-01), Freed et al.
patent: 2003/0014626 (2003-01-01), Freed et al.
patent: 2003/0014650 (2003-01-01), Freed et al.
patent: 2003/0046532 (2003-03-01), Gast
patent: 2003/0079146 (2003-04-01), Burstein
patent: 2003/0084329 (2003-05-01), Tarquini
patent: 2003/0105952 (2003-06-01), Brabson et al.
Engelschall, Ralph; “Uàer Manual for mod ssl version 2.6—The Apache Interface to OpenSSL”, Chapter 1-7.
Dierk et al., RFC 2246, The TLS Protocol Version 1.0, Jan. 1999, http://www.apps.ietf.org/rfc/rfc2246.html.

Affiliated with

Also associated with

Rating

Policy-driven kernel-based security implementation does not yet have a rating. At this time, there are no reviews or comments for this patent.

If you have personal experience with Policy-driven kernel-based security implementation, we encourage you to share that experience with our LandOfFree.com community. Your opinion is very important and Policy-driven kernel-based security implementation will most certainly appreciate the feedback.

Rate now

Comments { 0 }

Profile ID: LFUS-PAI-O-3739282