Back to results
US 10,375,118 B2Granted
Method for attribution security system
AssigneeBlackRidge Technology Holdings, Inc.
InventorJohn William Hayes
Life of this patent
Estimating the term…
Abstract
Methods and apparatus for providing a mechanism that uses attribution information present in some network traffic to provide enhanced security for all network services protected by an attribution security system are disclosed.
Claims43
A method comprising the steps of:
- providing an attribution security system (10);
- said attribution security system (10) including a network information collector (12), an attribution information collector (14), a security policy engine (16), a table of security policies (17) containing a plurality of security policies and a network state table (18);
- receiving a network packet (20) from an initiator by said attribution security system (10);
- extracting network information from said network packet (20) by said network information collector (12);
- storing said network information in said network state table (18);
- extracting attribution information from said network packet (20) by said attribution information collector (14);
- said attribution information being obtained by using Statistical Object Identity for determining an identity of said initiator of a communication;
- wherein said Statistical Object Identity is used to receive and to aggregate received statistical objects until an original object is unambiguously determined and the calculated probability satisfies a trusted probability threshold;
- storing said attribution information in said network state table (18);
- selecting a security policy from one of said plurality of security policies in said table of security policies (17) by said security policy engine (16);
- said selecting of said security policy includes using information from said network table (18);
- said selecting of said security policy includes using said attribution information;
- processing said network packet (20) in accordance with said selected security policy;
- and
- said security policy engine (16) for applying said selected security policy to said network packet (20), and, therefore, also to said initiator of said network packet (20).
12 more elements
A method comprising the steps of:
- providing a first network (26), a network client (28), a network client with attribution (28a) and an attribution security system (10);
- receiving a network packet (20) from an initiator at said attribution security system;
- said attribution security system (10) employs Statistical Object Identity for determining an identity of an initiator of said communication;
- wherein said Statistical Object Identity is used to aggregate and to receive statistical objects until an original object is unambiguously determined and the calculated probability satisfies a trusted probability threshold;
- providing a second network (30), a network service (32) and a network service accessible only with attribution information (32a);
- receiving a network packet (20) from said network client (28) by said attribution security system (10);
- selecting a security policy from one of said plurality of security policies in said table of security policies (17) by said security policy engine (16);
- said selecting of said security policy includes using information from said network table (18);
- said selecting of said security policy includes using said attribution information;
- implementing security policy based on the attribution of said network packet (20) by said attribution security system (10);
- and
- said security policy engine (16) for applying said selected security policy to said network packet (20), and, therefore, also to said initiator of said network packet (20).
9 more elements
An apparatus comprising:
- a security system means for determining attribution (10);
- said security system means (10) including
- a network information means for collecting network information (12);
- an attribution information collector means for collecting attribution information (14);
- a security policy engine means for packet processing (16);
- and
- a table of security policies (17) containing a plurality of security policies and a network state table (18);
- said security system means (10) receiving a network packet (20) from said initiator;
- said network information means (12) extracting network information from said network packet (20);
- said network information collector means (12) storing said network information in said network state table (18);
- said attribution information means for collecting attribution information (14) extracting attribution information from said network packet (20);
- said attribution information is obtained by using Statistical Object Identity for determining an identity of said initiator of a communication;
- wherein said Statistical Object Identity is used to receive and to aggregate statistical objects until an original object is unambiguously determined and the calculated probability satisfies a trusted probability threshold;
- said attribution information means (14) storing said attribution information in said network state table (18);
- said security policy engine means (16) selecting a security policy from one of said plurality of security policies in said table of security policies (17);
- said selecting of said security policy includes using information from said network state table (18);
- said selecting of said security policy includes using said attribution information;
- said security policy engine means (16) processing said network packet (20) in accordance with said selected security policy;
- and
- said security policy engine means (16) for applying said selected security policy to said network packet (20), and, therefore, also to said initiator of said network packet (20).
17 more elements
Dependencies are inferred from the claim text.