US6182226B1
Expired / Lapsed
US
⏱️ 0.0 years remaining
System and method for controlling interactions between networks
Assignee: McAfee LLC
•
Filing: 1998-03-18
•
Granted: 2001-01-30
•
Expires: 2018-03-18
Abstract
Abstract A firewall is used to achieve network separation within a computing system having a plurality of network interfaces. A plurality of regions is defined within the firewall and a set of policies is configured for each of the plurality of regions. The firewall restricts communication to and from each of the plurality of network interfaces in accordance with the set of policies configured for the one of the plurality of regions to which the one of the plurality of network interfaces has been assigned.
Inventors
- 👤 Irving Reid
- 👤 Spencer Minear
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-11-06 19:28
CPC Classifications
H; H04; H04L; H04L63/00; H04L63/02; H04L63/0227; H04L63/0263; H04L63/0272; H04L9/00; H04L9/40
Claims Analysis
Total Claims: 40
Claim 1
Independent Claim
99 words
A method of achieving network separation within a computing system having network interfaces connected to form a plurality of physical networks, the method comprising the steps of: defining a plurality of regions; defining a virtual private network; establishing a set of security policies, wherein the set of security policies defines rules for communicating between each of the plurality of regions; assigning each physical network to one of the plurality of regions; assigning the virtual private network to one of the plurality of regions; and restricting communication between the plurality of regions in accordance with the set of security policies.
Claim 2
Independent Claim
99 words
A method of achieving network separation within a computing system having network interfaces connected to form a plurality of physical networks, the method comprising the steps of: defining a plurality of regions; defining a virtual private network; establishing a set of security policies, wherein the set of security policies defines rules for communicating between each of the plurality of regions; assigning each physical network to one of the plurality of regions; assigning the virtual private network to one of the plurality of regions; and restricting communication between the plurality of regions in accordance with the set of security policies.
Claim 3
Dependent Claim
24 words
The method according to claim 1 , wherein establishing a set of security policies includes defining an access rule for communication between two regions.
Claim 4
Dependent Claim
25 words
The method according to claim 2 , wherein the access rule establishes permissions for use of a communication path between the source and destination regions.
Claim 5
Dependent Claim
28 words
The method according to claim 2 , wherein the access rule establishes one or more constraints on use of a communication path between the source and destination regions.
Claim 6
Dependent Claim
14 words
The method according to claim 4 , wherein the constraints include an encryption requirement.
Claim 7
Dependent Claim
14 words
The method according to claim 4 , wherein the constraints include an authentication requirement.
Claim 8
Dependent Claim
41 words
The method according to claim 4 , wherein the constraints include a constraint from a group of constraints including a time of day restriction, a concurrent sessions restriction, connection redirection, an address restriction, a host name restriction and a user restriction.
Claim 9
Dependent Claim
32 words
The method according to claim 1 , wherein restricting communication includes routing communication between different regions to an application level proxy, wherein the application level proxy applies the set of security policies.
Claim 10
Dependent Claim
105 words
A secure server, comprising: an operating system kernel; a plurality of network interfaces, wherein the network interfaces are connected to form a plurality of physical networks and wherein each of the plurality of network interfaces communicates with the operating system kernel; a virtual private network; a plurality of regions; and a security policy, wherein the security policy defines rules for communicating between each of the plurality of regions; wherein each of the physical networks is assigned to a region; wherein the virtual private network is assigned to a region; and wherein communication between the plurality of regions is restricted in accordance with the security policy.
Claim 11
Dependent Claim
105 words
A secure server, comprising: an operating system kernel; a plurality of network interfaces, wherein the network interfaces are connected to form a plurality of physical networks and wherein each of the plurality of network interfaces communicates with the operating system kernel; a virtual private network; a plurality of regions; and a security policy, wherein the security policy defines rules for communicating between each of the plurality of regions; wherein each of the physical networks is assigned to a region; wherein the virtual private network is assigned to a region; and wherein communication between the plurality of regions is restricted in accordance with the security policy.
Claim 12
Dependent Claim
51 words
The secure server according to claim 9 , wherein the security policy uses an access rule to restrict communication between two regions and wherein communication between a source and destination region is only allowed if an access rule has been defined for communication from the source region to the destination region.
Claim 13
Dependent Claim
26 words
The secure server according to claim 10 , wherein the access rule establishes permissions for use of a communication path between the source and destination regions.
Claim 14
Dependent Claim
29 words
The secure server according to claim 10 , wherein the access rule establishes one or more constraints on use of a communication path between the source and destination regions.
Claim 15
Dependent Claim
15 words
The secure server according to claim 12 , wherein the constraints include an encryption requirement.
Claim 16
Dependent Claim
15 words
The secure server according to claim 12 , wherein the constraints include an authentication requirement.
Claim 17
Dependent Claim
42 words
The secure server according to claim 12 , wherein the constraints include a constraint from a group of constraints including a time of day restriction, a concurrent sessions restriction, connection redirection, an address restriction, a host name restriction and a user restriction.
Claim 18
Dependent Claim
31 words
The secure server according to claim 10 , wherein the secure server further comprises an application level proxy and wherein communication between regions is first examined by the application level proxy.
Claim 19
Dependent Claim
31 words
The secure server according to claim 10 , wherein the secure server further comprises an application level proxy and wherein communication between regions is first examined by the application level proxy.
Claim 20
Dependent Claim
148 words
In a computer system having a plurality of network interfaces, including a first and a second network interface, in which the first and second network interfaces are connected to first and second networks, respectively, a method of processing a packet having a source region and a destination region, the method comprising: defining a plurality of regions, wherein defining includes assigning a first region identifier to the first network and a second region identifier to the second network; establishing a security policy, wherein the security policy defines rules for communicating between the plurality of regions; receiving a packet at the first network interface; assigning the first region identifier to the packet; reviewing the security policy to determine if transfer of the packet between the source region and the destination region is permitted for packets assigned the first region identifier; and if so, forwarding the packet to the destination region.
Claim 21
Dependent Claim
148 words
In a computer system having a plurality of network interfaces, including a first and a second network interface, in which the first and second network interfaces are connected to first and second networks, respectively, a method of processing a packet having a source region and a destination region, the method comprising: defining a plurality of regions, wherein defining includes assigning a first region identifier to the first network and a second region identifier to the second network; establishing a security policy, wherein the security policy defines rules for communicating between the plurality of regions; receiving a packet at the first network interface; assigning the first region identifier to the packet; reviewing the security policy to determine if transfer of the packet between the source region and the destination region is permitted for packets assigned the first region identifier; and if so, forwarding the packet to the destination region.
Claim 22
Dependent Claim
28 words
The method according to claim 18 wherein reviewing the security policy includes issuing a mgbind() system call to ensure that sockets receive data only from a predefined region.
Claim 23
Dependent Claim
213 words
In a computer system having a plurality of network interfaces, including a first and a second network interface, in which the first and second network interfaces are connected to first and second networks, respectively, a method of processing a packet having a source region and a destination region, the method comprising: providing a virtual private network; defining a plurality of regions, wherein defining includes assigning a first region identifier to the first network, a second region identifier to the second network and a third region identifier to the virtual private network; establishing a security policy, wherein the security policy defines rules for communicating between the plurality of regions; receiving a packet at the first network interface; assigning the first region identifier to the packet; determining if the packet is encrypted; if the packet is encrypted, changing the region identifier assigned to the packet, wherein changing the region identifier includes: retrieving a virtual private network security association for the packet; decrypting the packet; and replacing the first region identifier with the third region identifier; reviewing the security policy to determine if transfer of the packet between the source region and the destination region is permitted when the packet is received from the virtual private network; and if so, forwarding the packet to the destination.
Claim 24
Dependent Claim
213 words
In a computer system having a plurality of network interfaces, including a first and a second network interface, in which the first and second network interfaces are connected to first and second networks, respectively, a method of processing a packet having a source region and a destination region, the method comprising: providing a virtual private network; defining a plurality of regions, wherein defining includes assigning a first region identifier to the first network, a second region identifier to the second network and a third region identifier to the virtual private network; establishing a security policy, wherein the security policy defines rules for communicating between the plurality of regions; receiving a packet at the first network interface; assigning the first region identifier to the packet; determining if the packet is encrypted; if the packet is encrypted, changing the region identifier assigned to the packet, wherein changing the region identifier includes: retrieving a virtual private network security association for the packet; decrypting the packet; and replacing the first region identifier with the third region identifier; reviewing the security policy to determine if transfer of the packet between the source region and the destination region is permitted when the packet is received from the virtual private network; and if so, forwarding the packet to the destination.
Claim 25
Dependent Claim
28 words
The method according to claim 20 wherein reviewing the security policy includes issuing a mgbind() system call to ensure that sockets receive data only from a predefined region.
Claim 26
Independent Claim
93 words
A method of achieving network separation within a computing system having a plurality of networks, including a virtual private network, the method comprising the steps of: defining a plurality of regions; configuring a set of security policies, wherein the set of security policies defines rules for communicating between each of the plurality of regions; assigning each of the plurality of networks to one of the plurality of regions, wherein assigning includes assigning a region identifier to the virtual private network; and restricting communication between regions in accordance with the set of security policies.
Claim 27
Independent Claim
93 words
A method of achieving network separation within a computing system having a plurality of networks, including a virtual private network, the method comprising the steps of: defining a plurality of regions; configuring a set of security policies, wherein the set of security policies defines rules for communicating between each of the plurality of regions; assigning each of the plurality of networks to one of the plurality of regions, wherein assigning includes assigning a region identifier to the virtual private network; and restricting communication between regions in accordance with the set of security policies.
Claim 28
Dependent Claim
24 words
The method according to claim 22 , wherein establishing a set of security policies includes defining an access rule for communication between two regions.
Claim 29
Dependent Claim
23 words
The method according to claim 23 , wherein the access rule establishes permissions for use of a communication path between the two regions.
Claim 30
Dependent Claim
26 words
The method according to claim 23 , wherein the access rule establishes one or more constraints on use of a communication path between the two regions.
Claim 31
Dependent Claim
47 words
The method according to claim 23 , wherein the constraints include a constraint from a group of constraints including an encryption requirement, an authentication requirement, a time of day restriction, a concurrent sessions restriction, connection redirection, an address restriction, a host name restriction and a user restriction.
Claim 32
Dependent Claim
32 words
The method according to claim 22 , wherein restricting communication includes routing communication between different regions to an application level proxy, wherein the application level proxy applies the set of security policies.
Claim 33
Dependent Claim
159 words
In a computer network system having a plurality of regions and a plurality of services, including a first service, wherein each service defines a protocol for transferring data between two of the plurality of regions, and wherein each region includes one or more networks, a method of limiting transfers between regions, comprising: defining a to-from set, wherein the to-from set lists a source region and a destination region; associating the to-from set with the first service; defining a path, wherein the path includes desired options for limiting transfer from the source region to the destination region via the first service; storing information regarding the to-from set, the first service and the path as an access control rule; receiving a request to set up said first service between the source region and the destination region; comparing the request to the access control rule to determine access; and if access is allowed, establishing the service between the source and destination regions.
Claim 34
Dependent Claim
159 words
In a computer network system having a plurality of regions and a plurality of services, including a first service, wherein each service defines a protocol for transferring data between two of the plurality of regions, and wherein each region includes one or more networks, a method of limiting transfers between regions, comprising: defining a to-from set, wherein the to-from set lists a source region and a destination region; associating the to-from set with the first service; defining a path, wherein the path includes desired options for limiting transfer from the source region to the destination region via the first service; storing information regarding the to-from set, the first service and the path as an access control rule; receiving a request to set up said first service between the source region and the destination region; comparing the request to the access control rule to determine access; and if access is allowed, establishing the service between the source and destination regions.
Claim 35
Independent Claim
95 words
A method of achieving network separation within a computing system having network interfaces connected to form a plurality of physical networks, the method comprising the steps of: defining a plurality of regions; establishing a set of security policies, wherein the set of security policies defines rules for communicating between each of the plurality of regions; assigning each physical network to one of the plurality of regions, wherein at least one of the regions is assigned two or more networks; and restricting communication between the plurality of regions in accordance with the set of security policies.
Claim 36
Independent Claim
95 words
A method of achieving network separation within a computing system having network interfaces connected to form a plurality of physical networks, the method comprising the steps of: defining a plurality of regions; establishing a set of security policies, wherein the set of security policies defines rules for communicating between each of the plurality of regions; assigning each physical network to one of the plurality of regions, wherein at least one of the regions is assigned two or more networks; and restricting communication between the plurality of regions in accordance with the set of security policies.
Claim 37
Dependent Claim
24 words
The method according to claim 29 , wherein establishing a set of security policies includes defining an access rule for communication between two regions.
Claim 38
Dependent Claim
107 words
A secure server, comprising: an operating system kernel; a plurality of network interfaces, wherein the network interfaces are connected to form a plurality of physical networks and wherein each of the plurality of network interfaces communicates with the operating system kernel; three or more regions; and a security policy, wherein the security policy defines rules for communicating between each of the plurality of regions; wherein each of the physical networks is assigned to a region; wherein at least one of the regions has two or more networks assigned to that region; and wherein communication between the plurality of regions is restricted in accordance with the security policy.
Claim 39
Dependent Claim
107 words
A secure server, comprising: an operating system kernel; a plurality of network interfaces, wherein the network interfaces are connected to form a plurality of physical networks and wherein each of the plurality of network interfaces communicates with the operating system kernel; three or more regions; and a security policy, wherein the security policy defines rules for communicating between each of the plurality of regions; wherein each of the physical networks is assigned to a region; wherein at least one of the regions has two or more networks assigned to that region; and wherein communication between the plurality of regions is restricted in accordance with the security policy.
Claim 40
Dependent Claim
51 words
The secure server according to claim 31 , wherein the security policy uses an access rule to restrict communication between two regions and wherein communication between a source and destination region is only allowed if an access rule has been defined for communication from the source region to the destination region.
References Cited (Backward Citations)
US4177510A
Cited
US3956615A
Cited
US4104721A
Cited
US4442484A
Cited
US4648031A
Cited
US4870571A
Cited
US4584639A
Cited
US4621321A
Cited
US4701840A
Cited
US4713753A
Cited
US4914568A
Cited
US4885789A
Cited
US5093914A
Cited
US5204961A
Cited
US5303303A
Cited
US5124984A
Cited
US5153918A
Cited
US5263147A
Cited
US5272754A
Cited
US5228083A
Cited
US5355474A
Cited
US5305385A
Cited
US5583940A
Cited
EP0554182A1
Cited
US5333266A
Cited
US5276735A
Cited
US5311593A
Cited
US5644571A
Cited
US5329623A
Cited
US5455828A
Cited
US5586260A
Cited
US5414833A
Cited
US5606668A
Cited
GB2287619A
Cited
US5511122A
Cited
US5416842A
Cited
US5615340A
Cited
US5485460A
Cited
US5604490A
Cited
US5548646A
Cited
US5864683A
Cited
WO1996013113A1
Cited
US5623601A
Cited
US5619648A
Cited
US5550984A
Cited
US5566170A
Cited
US5699513A
Cited
WO1996035994A1
Cited
EP0743777A2
Cited
US5636371A
Cited
US5708780A
Cited
US5706507A
Cited
WO1997013340A1
Cited
US5689566A
Cited
US5671279A
Cited
WO1997026734A1
Cited
WO1997026735A1
Cited
WO1997026731A1
Cited
WO1997029413A2
Cited
US5918018A
Cited
US5684951A
Cited
US5673322A
Cited
US5983350A
Cited
US5968176A
Cited
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 2004-01-30 | 2004-07-31 | 2005-01-30 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 2008-01-30 | 2008-07-31 | 2009-01-30 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2012-01-30 | 2012-07-31 | 2013-01-30 | $7700.00 | Window Closed / Lapsed |