US6324646B1
Expired / Lapsed
US
⏱️ 0.0 years remaining
Method and system for securing confidential data in a computer network
Assignee: Cisco Technology Inc
•
Filing: 1998-09-11
•
Granted: 2001-11-27
•
Expires: 2018-09-11
Abstract
Abstract A method and system for securing confidential data in a computer network, wherein the computer network includes a management information database that assists in the management of the computer network. Initially, confidential data are identified within the management information database. Next, particular data objects are associated with the identified confidential data. Thereafter, the identified confidential data are accessed from the management information database. Finally each particular data object and its associated confidential data are automatically converted into a secure data object, in response to accessing the confidential data from the management information database, such that the confidential data may only be understood or altered external to the management information database by converting the secure data object back into the particular data objects and the associated confidential data. The particular data objects may comprise primitive data objects while the secure data object may be composed of an opaque data object. Network management format and conventions may be governed by a network management protocol.
Inventors
- 👤 David De-Hui Chen
- 👤 Joseph Brendan Kerr
- 👤 Stephen Anton Owen
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-10-30 16:53
CPC Classifications
H; H04; H04L; H04L41/00; H04L41/28; G; G06; G06F; G06F21/00; G06F21/60; G06F21/62; G06F21/6218; G06F21/6245; H04L63/00; H04L63/04; H04L63/0428; H04L63/10; H04L63/105; Y; Y10; Y10S; Y10S707/00; Y10S707/99941; Y10S707/99944
Claims Analysis
Total Claims: 42
Claim 1
Independent Claim
126 words
A method for securing confidential data in a computer network, wherein said computer network includes a management information database that assists in the management of said computer network, said method comprising the steps of: identifying confidential data within said management information database; associating particular data objects with said identified confidential data; accessing said identified confidential data from said management information database; and automatically converting each particular data object and its associated confidential data into a secure data object, in response to an accessing of said confidential data from said management information database, such that said confidential data may only be understood or altered external to said management information database by converting said secure data object back into said particular data objects and said associated confidential data.
Claim 2
Independent Claim
126 words
A method for securing confidential data in a computer network, wherein said computer network includes a management information database that assists in the management of said computer network, said method comprising the steps of: identifying confidential data within said management information database; associating particular data objects with said identified confidential data; accessing said identified confidential data from said management information database; and automatically converting each particular data object and its associated confidential data into a secure data object, in response to an accessing of said confidential data from said management information database, such that said confidential data may only be understood or altered external to said management information database by converting said secure data object back into said particular data objects and said associated confidential data.
Claim 3
Dependent Claim
36 words
The method of claim 1 wherein the step of associating particular data objects with said identified confidential data, further comprises the step of: associating particular data objects with said identified confidential data via a message protocol.
Claim 4
Dependent Claim
21 words
The method of claim 2 further comprising the step of: defining particular data objects that can be manipulated by network devices.
Claim 5
Dependent Claim
41 words
The method of claim 3 wherein the step of associating particular data objects with said identified confidential data, further comprises the step of: associating particular data objects with said identified confidential data, wherein said particular data objects comprise primitive data objects.
Claim 6
Dependent Claim
152 words
The method of claim 4 wherein the step of automatically converting each particular data object and its associated confidential data into a secure data object, in response to an accessing of said confidential data from said management information database, such that said confidential data may only be understood or altered external to said management information database by converting said secure data object back into said particular data objects and said associated confidential data, further comprises the step of: automatically converting each particular data object and its associated confidential data into a secure data object, in response to an accessing of said confidential data from said management information database, such that said confidential data may only be understood or altered external to said management information database by converting said secure data object back into said particular data objects and said associated confidential data, wherein said secure data object comprises an opaque data object.
Claim 7
Dependent Claim
25 words
The method of claim 5 further comprising the steps of: modifying said identified confidential data; and storing said identified confidential data in a memory location.
Claim 8
Dependent Claim
23 words
The method of claim 6 wherein the step of modifying said identified confidential data further comprises the step of: creating said confidential data.
Claim 9
Dependent Claim
49 words
The method of claim 7 wherein the step of associating particular data objects with said identified confidential data via a message protocol, further comprises the step of: associating particular data objects with said identified confidential data via a message protocol, wherein said message protocol comprises a network management protocol.
Claim 10
Dependent Claim
46 words
The method of claim 8 wherein the step of accessing said identified confidential data from said management information database, further comprises the step of: releasing said identified confidential data from said management information database, in response to accessing of said confidential data by a network device.
Claim 11
Dependent Claim
20 words
The method of claim 9 further comprising the step of: retrieving said identified confidential data from said management information database.
Claim 12
Dependent Claim
14 words
The method of claim 10 further comprising the step of: updating said confidential data.
Claim 13
Dependent Claim
21 words
The method of claim 11 further comprising the step of: deleting said confidential data, in response to a particular user input.
Claim 14
Independent Claim
131 words
A system for securing confidential data in a computer network, wherein said computer network includes a management information database that assists in the management of said computer network, said system comprising: means for identifying confidential data within said management information database; means for associating particular data objects with said identified confidential data; means for accessing said identified confidential data from said management information database; and means for automatically converting each particular data object and its associated confidential data into a secure data object, in response to an accessing of said confidential data from said management information database, such that said confidential data may only be understood or altered external to said management information database by converting said secure data object back into said particular data objects and said associated confidential data.
Claim 15
Independent Claim
131 words
A system for securing confidential data in a computer network, wherein said computer network includes a management information database that assists in the management of said computer network, said system comprising: means for identifying confidential data within said management information database; means for associating particular data objects with said identified confidential data; means for accessing said identified confidential data from said management information database; and means for automatically converting each particular data object and its associated confidential data into a secure data object, in response to an accessing of said confidential data from said management information database, such that said confidential data may only be understood or altered external to said management information database by converting said secure data object back into said particular data objects and said associated confidential data.
Claim 16
Dependent Claim
35 words
The system of claim 13 wherein said means for associating particular data objects with said identified confidential data, further comprises: means for associating particular data objects with said identified confidential data via a message protocol.
Claim 17
Dependent Claim
20 words
The system of claim 14 further comprising: means for defining particular data objects that can be manipulated by network devices.
Claim 18
Dependent Claim
14 words
The system of claim 15 wherein said particular data objects comprise primitive data objects.
Claim 19
Dependent Claim
15 words
The system of claim 16 wherein said secure data object comprises an opaque data object.
Claim 20
Dependent Claim
26 words
The system of claim 17 further comprising: means for modifying said identified confidential data; and means for storing said identified confidential data in a memory location.
Claim 21
Dependent Claim
22 words
The system of claim 18 wherein said means for modifying said identified confidential data further comprises: means for creating said confidential data.
Claim 22
Dependent Claim
14 words
The system of claim 19 wherein said message protocol comprises a network management protocol.
Claim 23
Dependent Claim
32 words
The system of claim 20 further comprising: means for releasing said identified confidential data from said management information database, in response to an accessing of said confidential data by a network device.
Claim 24
Dependent Claim
19 words
The system of claim 21 further comprising: means for retrieving said identified confidential data from said management information database.
Claim 25
Dependent Claim
13 words
The system of claim 22 further comprising: means for updating said confidential data.
Claim 26
Dependent Claim
20 words
The system of claim 23 further comprising: means for deleting said confidential data, in response to a particular user input.
Claim 27
Dependent Claim
161 words
A program product residing in a computer memory in a computer for securing confidential data in a computer network, wherein said computer network includes a management information database that assists in the management of said computer network, said program product comprising: instruction means residing in a computer for identifying confidential data within said management information database; instruction means residing in a computer for associating particular data objects with said identified confidential data; instruction means residing in a computer for accessing said identified confidential data from said management information database; and instruction means residing in a computer for automatically converting each particular data object and its associated confidential data into a secure data object, in response to an accessing of said confidential data from said management information database, such that said confidential data may only be understood or altered external to said management information database by converting said secure data object back into said particular data objects and said associated confidential data.
Claim 28
Dependent Claim
161 words
A program product residing in a computer memory in a computer for securing confidential data in a computer network, wherein said computer network includes a management information database that assists in the management of said computer network, said program product comprising: instruction means residing in a computer for identifying confidential data within said management information database; instruction means residing in a computer for associating particular data objects with said identified confidential data; instruction means residing in a computer for accessing said identified confidential data from said management information database; and instruction means residing in a computer for automatically converting each particular data object and its associated confidential data into a secure data object, in response to an accessing of said confidential data from said management information database, such that said confidential data may only be understood or altered external to said management information database by converting said secure data object back into said particular data objects and said associated confidential data.
Claim 29
Dependent Claim
46 words
The program product of claim 25 wherein said instruction means residing in a computer for associating particular data objects with said identified confidential data, further comprises: instruction means residing in a computer for associating particular data objects with said identified confidential data via a message protocol.
Claim 30
Dependent Claim
26 words
The program product of claim 26 further comprising: instruction means residing in a computer for defining particular data objects that can be manipulated by network devices.
Claim 31
Dependent Claim
15 words
The program product of claim 27 wherein said particular data objects comprise primitive data objects.
Claim 32
Dependent Claim
16 words
The program product of claim 28 wherein said secure data object comprises an opaque data object.
Claim 33
Dependent Claim
37 words
The program product of claim 29 further comprising: instruction means residing in a computer for modifying said identified confidential data; and instruction means residing in a computer for storing said identified confidential data in a memory location.
Claim 34
Dependent Claim
33 words
The program product of claim 30 wherein said instruction means residing in a computer for modifying said identified confidential data further comprises: instruction means residing in a computer for creating said confidential data.
Claim 35
Dependent Claim
15 words
The program product of claim 31 wherein said message protocol comprises a network management protocol.
Claim 36
Dependent Claim
38 words
The program product of claim 32 further comprising: instruction means residing in a computer for releasing said identified confidential data from said management information database, in response to an accessing of said confidential data by a network device.
Claim 37
Dependent Claim
20 words
The program product of claim 33 further comprising: means for retrieving said identified confidential data from said management information database.
Claim 38
Dependent Claim
14 words
The program product of claim 34 further comprising: means for updating said confidential data.
Claim 39
Dependent Claim
21 words
The program product of claim 35 further comprising: means for deleting said confidential data, in response to a particular user input.
Claim 40
Dependent Claim
17 words
The program product of claim 36 wherein each of said instruction means further comprise signal bearing media.
Claim 41
Dependent Claim
14 words
The program product of claim 37 wherein said signal bearing media comprises transmission media.
Claim 42
Dependent Claim
14 words
The program product of claim 37 wherein said signal bearing media comprises recordable media.
References Cited (Backward Citations)
US4993069A
Cited
US5517622A
Cited
US5577209A
Cited
US5640456A
Cited
US5440633A
Cited
US5524052A
Cited
WO1995008232A1
Cited
US5511122A
Cited
US5845281A
Cited
US5699513A
Cited
US5689565A
Cited
US5673322A
Cited
US5892899A
Cited
US6175925B1
Cited
US6178509B1
Cited
US6205550B1
Cited
US6044468A
Cited
US6173404B1
Cited
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 2004-11-26 | 2005-05-28 | 2005-11-27 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 2008-11-26 | 2009-05-28 | 2009-11-27 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2012-11-26 | 2013-05-28 | 2013-11-27 | $7700.00 | Window Closed / Lapsed |