Patent US6076168A successfully refreshed from Google Patents.
← Back to Patent Explorer
US6076168A Expired / Lapsed US ⏱️ 0.0 years remaining

Simplified method of configuring internet protocol security tunnels

Assignee: International Business Machines Corp
•
Filing: 1997-10-03
•
Granted: 2000-06-13
•
Expires: 2017-10-03
📄 Original PDF 🌐 Google Patents 🔄 Sync Now

Abstract

Abstract A method of securing data traffic between a local and remote host systems is provided. The method includes autogenerating a filter having rules associated with a defined tunnel. The filter rules are used to permit or deny acceptance of transmitted data by the host system and to direct traffic to the tunnel. The tunnel, on the other hand, is used to keep data confidential. The method further includes autogeneration of a counterpart tunnel and associated filter to be used by the remote host when in communication with the local host. The method further autogenerates a new filter to reflect changes to any one of the tunnels and autodeactivates the filter associated with a deleted tunnel.

Inventors

  • 👤 William Alton Fiveash
  • 👤 Xinya Wang
  • 👤 Christiaan Blake Wenzel
  • 👤 Jacqueline Hegedus Wilson
  • 👤 Opral Vanan Wisham

Bibliographic Details

Application Number —
Jurisdiction US
Data Source google_patents
Last Synchronized 2026-11-05 05:13
CPC Classifications
H; H04; H04L; H04L63/00; H04L63/02; H04L63/0227; H04L63/0263

Claims Analysis

Total Claims: 18
Claim 1
Independent Claim 58 words
A method of providing secure data traffic between a local and remote host systems comprising the steps of: defining a first tunnel; and autogenerating, in response to the definition of the first tunnel, a first filter, said first filter including rules for permitting or denying acceptance of inbound data and for permitting or denying transmission of outbound data.
Claim 2
Independent Claim 58 words
A method of providing secure data traffic between a local and remote host systems comprising the steps of: defining a first tunnel; and autogenerating, in response to the definition of the first tunnel, a first filter, said first filter including rules for permitting or denying acceptance of inbound data and for permitting or denying transmission of outbound data.
Claim 3
Dependent Claim 24 words
The method of claim 1 wherein said first tunnel is defined at said local host system to be used by said local host system.
Claim 4
Dependent Claim 26 words
The method of claim 2 further comprising the step of autogenerating a second tunnel by said local host system for use by said remote host system.
Claim 5
Dependent Claim 23 words
The method of claim 3 further comprising the step of autogenerating a second filter in response to said autogeneration of said second tunnel.
Claim 6
Dependent Claim 47 words
The method of claim 4 further comprising the steps of: determining whether a source or destination address has changed after a modification of said first or second tunnel; and autogenerating, in response to said modified tunnel, a third filter if said source or destination address has changed.
Claim 7
Dependent Claim 25 words
The method of claim 5 further comprising the step of automatically deactivating said first or second filter if said first or second tunnel is deleted.
Claim 8
Dependent Claim 28 words
The method of claim 6 further comprising the step of exporting said second tunnel and said second filter to said remote host system by said local host system.
Claim 9
Dependent Claim 28 words
The method of claim 6 further comprising the step of importing said second tunnel and said second filter from said local host system by said remote host system.
Claim 10
Dependent Claim 78 words
A computer program product for use with a computer system, said computer program product having computer readable program code means embodied in a medium, said computer program code means comprising: program code means for defining a first tunnel; and program code means for autogenerating, in response to the definition of the first tunnel, a first filter, said first filter including rules for permitting or denying acceptance of inbound data and for permitting or denying transmission of outbound data.
Claim 11
Dependent Claim 78 words
A computer program product for use with a computer system, said computer program product having computer readable program code means embodied in a medium, said computer program code means comprising: program code means for defining a first tunnel; and program code means for autogenerating, in response to the definition of the first tunnel, a first filter, said first filter including rules for permitting or denying acceptance of inbound data and for permitting or denying transmission of outbound data.
Claim 12
Dependent Claim 26 words
The computer program product of claim 9 wherein said first tunnel is defined at said local host system to be used by said local host system.
Claim 13
Dependent Claim 36 words
The computer program product of claim 10 wherein said computer readable program code means further comprising program code means for autogenerating a second tunnel by said local host system for use by said remote host system.
Claim 14
Dependent Claim 33 words
The computer program product of claim 11 wherein said computer readable program code means further comprising program code means for autogenerating a second filter in response to said autogeneration of said second tunnel.
Claim 15
Dependent Claim 61 words
The computer program product of claim 12 wherein said computer readable program code means further comprising: program code means for determining whether a source or destination address has changed after a modification of said first or second tunnel; and program code means for autogenerating, in response to said modified tunnel, a third filter if said source or destination address has changed.
Claim 16
Dependent Claim 35 words
The computer program product of claim 13 wherein said computer readable program code means further comprising program code means for automatically deactivating said first or second filter if said first or second tunnel is deleted.
Claim 17
Dependent Claim 38 words
The computer program product of claim 14 wherein said computer readable program code means further comprising program code means for exporting said second tunnel and said second filter to said remote host system by said local host system.
Claim 18
Dependent Claim 38 words
The computer program product of claim 14 wherein said computer readable program code means further comprising program code means for importing said second tunnel and said second filter from said local host system by said remote host system.

References Cited (Backward Citations)

US5475839A Cited
US5720033A Cited
US5696898A Cited
US5781550A Cited
US5757925A Cited
US5828833A Cited

USPTO Annuity & Maintenance Windows

Annuity Stage Window Opens Payment Deadline Surcharge Period Until Estimated Fee Status
3.5 Years (Year 4) 2003-06-13 2003-12-13 2004-06-13 $2000.00 Window Closed / Lapsed
7.5 Years (Year 8) 2007-06-13 2007-12-13 2008-06-13 $3760.00 Window Closed / Lapsed
11.5 Years (Year 12) 2011-06-13 2011-12-13 2012-06-13 $7700.00 Window Closed / Lapsed

Assigned Categories & Tags

No categories assigned to this patent yet.

Assign Category Tag