US6542993B1
Expired / Lapsed
US
⏱️ 0.0 years remaining
Security management system and method
Assignee: Nokia of America Corp
•
Filing: 1999-03-12
•
Granted: 2003-04-01
•
Expires: 2019-03-12
Abstract
Abstract A comprehensive system and method for managing security in an electronic network. The method includes the steps of providing a plurality of security services, providing a plurality of security mechanisms, and linking the services and mechanisms with a plurality of security management functions. The method supports all associated security protocols in the electronic network while maintaining transparency for message exchange. Advantageously, the method of the invention readily provides compatibility with a plurality of environments, network types, and technologies. The method provides five functional hierarchical layers, one protocol handling access to the layers, and includes a security management information base segmented according to the five functional layers. The five functional layers are, from the base, fundamental security primitives, security mechanisms, security services, security management functions, and security policies. Each layer can contain several independent modules. Exchange of messages between modules in a layer and between layers is provided. An implementing system facilitates the method in an electronic network, illustratively including an electronic processing environment.
Inventors
- 👤 Shervin Erfani
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-11-06 13:43
CPC Classifications
H; H04; H04L; H04L63/00; H04L63/02; H04L63/0227; H04L63/0263; H04L63/04; H04L63/08; H04L63/10; H04L63/102
Claims Analysis
Total Claims: 12
Claim 1
Independent Claim
52 words
A method of managing security in an electronic network, comprising the steps of: providing a plurality of security services; providing a plurality of security mechanisms; linking the services and mechanisms with a plurality of security management functions; and linking the services, mechanisms, and security management functions with at least one security policy.
Claim 2
Independent Claim
52 words
A method of managing security in an electronic network, comprising the steps of: providing a plurality of security services; providing a plurality of security mechanisms; linking the services and mechanisms with a plurality of security management functions; and linking the services, mechanisms, and security management functions with at least one security policy.
Claim 3
Dependent Claim
27 words
The method according to claim 1 additionally comprising the step of supporting a plurality of security protocols in the electronic network while maintaining transparency for message exchange.
Claim 4
Independent Claim
90 words
A method for managing security in an electronic network, comprising the steps of: providing five functional hierarchical layers and one protocol handling access to the layers, the five functional layers including, from the base, fundamental security primitives, security mechanisms, security services, security management functions, and security policies; providing a security management information base segmented according to the five functional layers; enabling exchange of messages between layers; and providing a plurality of independent modules in at least one of the layers, the enabling step enabling exchange of messages between the modules.
Claim 5
Independent Claim
90 words
A method for managing security in an electronic network, comprising the steps of: providing five functional hierarchical layers and one protocol handling access to the layers, the five functional layers including, from the base, fundamental security primitives, security mechanisms, security services, security management functions, and security policies; providing a security management information base segmented according to the five functional layers; enabling exchange of messages between layers; and providing a plurality of independent modules in at least one of the layers, the enabling step enabling exchange of messages between the modules.
Claim 6
Dependent Claim
33 words
The method according to claim 3 , wherein the modules are partitioned according to respective ones of the plurality of security services or according to respective ones of the plurality of security mechanisms.
Claim 7
Independent Claim
88 words
A system for managing security in an electronic network, comprising: means for providing a plurality of security services; means for providing a plurality of security mechanisms; means for linking the security services providing means and the security mechanisms providing means with an interface; and means connected to said interface for providing a plurality of security management functions; wherein the linking means comprises means for linking the security services providing means, the security mechanisms providing means, and the security management functions providing means with at least one security policy.
Claim 8
Independent Claim
88 words
A system for managing security in an electronic network, comprising: means for providing a plurality of security services; means for providing a plurality of security mechanisms; means for linking the security services providing means and the security mechanisms providing means with an interface; and means connected to said interface for providing a plurality of security management functions; wherein the linking means comprises means for linking the security services providing means, the security mechanisms providing means, and the security management functions providing means with at least one security policy.
Claim 9
Dependent Claim
26 words
The system according to claim 5 additionally comprising means for supporting a plurality of security protocols in the electronic network while maintaining transparency for message exchange.
Claim 10
Independent Claim
95 words
A system for managing security in an electronic network, comprising: means for providing five functional hierarchical layers and one protocol handling access to the layers, the five functional layers including, from the base, fundamental security primitives, security mechanisms, security services, security management functions, and security policies; means for providing a security management information base segmented according to the five functional layers; means for enabling exchange of messages between layers; and a plurality of independent modules in at least one of the layers, the enabling means including means for enabling exchange of messages between the modules.
Claim 11
Independent Claim
95 words
A system for managing security in an electronic network, comprising: means for providing five functional hierarchical layers and one protocol handling access to the layers, the five functional layers including, from the base, fundamental security primitives, security mechanisms, security services, security management functions, and security policies; means for providing a security management information base segmented according to the five functional layers; means for enabling exchange of messages between layers; and a plurality of independent modules in at least one of the layers, the enabling means including means for enabling exchange of messages between the modules.
Claim 12
Dependent Claim
33 words
The system according to claim 7 , wherein the modules are partitioned according to respective ones of the plurality of security services or according to respective ones of the plurality of security mechanisms.
References Cited (Backward Citations)
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 2006-03-31 | 2006-09-30 | 2007-04-01 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 2010-03-31 | 2010-09-30 | 2011-04-01 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2014-03-31 | 2014-09-30 | 2015-04-01 | $7700.00 | Window Closed / Lapsed |