US6076168A
Expired / Lapsed
US
⏱️ 0.0 years remaining
Simplified method of configuring internet protocol security tunnels
Assignee: International Business Machines Corp
•
Filing: 1997-10-03
•
Granted: 2000-06-13
•
Expires: 2017-10-03
Abstract
Abstract A method of securing data traffic between a local and remote host systems is provided. The method includes autogenerating a filter having rules associated with a defined tunnel. The filter rules are used to permit or deny acceptance of transmitted data by the host system and to direct traffic to the tunnel. The tunnel, on the other hand, is used to keep data confidential. The method further includes autogeneration of a counterpart tunnel and associated filter to be used by the remote host when in communication with the local host. The method further autogenerates a new filter to reflect changes to any one of the tunnels and autodeactivates the filter associated with a deleted tunnel.
Inventors
- 👤 William Alton Fiveash
- 👤 Xinya Wang
- 👤 Christiaan Blake Wenzel
- 👤 Jacqueline Hegedus Wilson
- 👤 Opral Vanan Wisham
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-11-05 02:12
CPC Classifications
H; H04; H04L; H04L63/00; H04L63/02; H04L63/0227; H04L63/0263
Claims Analysis
Total Claims: 18
Claim 1
Independent Claim
58 words
A method of providing secure data traffic between a local and remote host systems comprising the steps of: defining a first tunnel; and autogenerating, in response to the definition of the first tunnel, a first filter, said first filter including rules for permitting or denying acceptance of inbound data and for permitting or denying transmission of outbound data.
Claim 2
Independent Claim
58 words
A method of providing secure data traffic between a local and remote host systems comprising the steps of: defining a first tunnel; and autogenerating, in response to the definition of the first tunnel, a first filter, said first filter including rules for permitting or denying acceptance of inbound data and for permitting or denying transmission of outbound data.
Claim 3
Dependent Claim
24 words
The method of claim 1 wherein said first tunnel is defined at said local host system to be used by said local host system.
Claim 4
Dependent Claim
26 words
The method of claim 2 further comprising the step of autogenerating a second tunnel by said local host system for use by said remote host system.
Claim 5
Dependent Claim
23 words
The method of claim 3 further comprising the step of autogenerating a second filter in response to said autogeneration of said second tunnel.
Claim 6
Dependent Claim
47 words
The method of claim 4 further comprising the steps of: determining whether a source or destination address has changed after a modification of said first or second tunnel; and autogenerating, in response to said modified tunnel, a third filter if said source or destination address has changed.
Claim 7
Dependent Claim
25 words
The method of claim 5 further comprising the step of automatically deactivating said first or second filter if said first or second tunnel is deleted.
Claim 8
Dependent Claim
28 words
The method of claim 6 further comprising the step of exporting said second tunnel and said second filter to said remote host system by said local host system.
Claim 9
Dependent Claim
28 words
The method of claim 6 further comprising the step of importing said second tunnel and said second filter from said local host system by said remote host system.
Claim 10
Dependent Claim
78 words
A computer program product for use with a computer system, said computer program product having computer readable program code means embodied in a medium, said computer program code means comprising: program code means for defining a first tunnel; and program code means for autogenerating, in response to the definition of the first tunnel, a first filter, said first filter including rules for permitting or denying acceptance of inbound data and for permitting or denying transmission of outbound data.
Claim 11
Dependent Claim
78 words
A computer program product for use with a computer system, said computer program product having computer readable program code means embodied in a medium, said computer program code means comprising: program code means for defining a first tunnel; and program code means for autogenerating, in response to the definition of the first tunnel, a first filter, said first filter including rules for permitting or denying acceptance of inbound data and for permitting or denying transmission of outbound data.
Claim 12
Dependent Claim
26 words
The computer program product of claim 9 wherein said first tunnel is defined at said local host system to be used by said local host system.
Claim 13
Dependent Claim
36 words
The computer program product of claim 10 wherein said computer readable program code means further comprising program code means for autogenerating a second tunnel by said local host system for use by said remote host system.
Claim 14
Dependent Claim
33 words
The computer program product of claim 11 wherein said computer readable program code means further comprising program code means for autogenerating a second filter in response to said autogeneration of said second tunnel.
Claim 15
Dependent Claim
61 words
The computer program product of claim 12 wherein said computer readable program code means further comprising: program code means for determining whether a source or destination address has changed after a modification of said first or second tunnel; and program code means for autogenerating, in response to said modified tunnel, a third filter if said source or destination address has changed.
Claim 16
Dependent Claim
35 words
The computer program product of claim 13 wherein said computer readable program code means further comprising program code means for automatically deactivating said first or second filter if said first or second tunnel is deleted.
Claim 17
Dependent Claim
38 words
The computer program product of claim 14 wherein said computer readable program code means further comprising program code means for exporting said second tunnel and said second filter to said remote host system by said local host system.
Claim 18
Dependent Claim
38 words
The computer program product of claim 14 wherein said computer readable program code means further comprising program code means for importing said second tunnel and said second filter from said local host system by said remote host system.
References Cited (Backward Citations)
US5475839A
Cited
US5720033A
Cited
US5696898A
Cited
US5781550A
Cited
US5757925A
Cited
US5828833A
Cited
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 2003-06-13 | 2003-12-13 | 2004-06-13 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 2007-06-13 | 2007-12-13 | 2008-06-13 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2011-06-13 | 2011-12-13 | 2012-06-13 | $7700.00 | Window Closed / Lapsed |