Back to results
US 11,108,739 B2Granted
Firewall incorporating network security information
AssigneeBlackBerry Limited
InventorNick Mark Waterman
Life of this patent
Estimating the term…
Abstract
A method of implementing a firewall incorporating network security information includes configuring a firewall at a first computing device. The firewall is configured to initiate the first computing device to establish a secured connection with a second computing device in response to the firewall determining that a data packet received from the second computing device or to be transmitted to the second computing device is unencrypted. The first computing device detects the data packet, where the data packet is received from the second computing device or to be transmitted to the second computing device. In response to detecting that the data packet is unencrypted, the secured connection is established between the first computing device and the second computing device.
Claims14
A method, comprising:
- configuring a firewall at a first computing device, wherein, in response to determining that a data packet received from a second computing device is unencrypted and that the data packet comprises a particular destination port, the firewall is configured to initiate the first computing device to establish a secured connection with the second computing device;
- detecting, at the first computing device, the data packet received from the second computing device;
- in response to determining the data packet being unencrypted and the data packet comprising the particular destination port, establishing the secured connection between the first computing device and the second computing device;
- and
- in response to establishing the secured connection between the first computing device and the second computing device, communicating encrypted data packets with the second computing device using the secured connection, wherein the communicating encrypted data packets with the second computing device using the secured connection comprises:
- receiving, an encrypted data packet from the second computing device;
- determining a first tag that associates with a security parameter index (SPI), wherein the SPI indicates a security association (SA) associated with the secured connection, the first tag indicates that the second computing device has a verified identity, and the first tag is different than the SPI;
- and
- accepting the encrypted data packet based on matching the first tag with a pre-configured second tag.
6 more elements
A first computing device, comprising:
- a memory;
- and
- at least one hardware processor communicatively coupled with the memory and configured to:
- configure a firewall at the first computing device, wherein, in response to determining that a data packet received from a second computing device is unencrypted and that the data packet comprises a particular destination port, the firewall is configured to initiate the first computing device to establish a secured connection with the second computing device;
- detect the data packet at the first computing device, wherein the data packet is received from the second computing device;
- in response to determining the data packet being unencrypted and the data packet comprising the particular destination port, establish the secured connection between the first computing device and the second computing device;
- and
- in response to establishing the secured connection between the first computing device and the second computing device, communicate encrypted data packets with the second computing device using the secured connection, wherein the at least one hardware processor is configured to:
- receive, an encrypted data packet from the second computing device;
- determine a first tag that associates with a security parameter index (SPI), wherein the SPI indicates a security association (SA) associated with the secured connection, the first tag indicates that the second computing device has a verified identity, and the first tag is different than the SPI;
- and
- accept the encrypted data packet based on matching the first tag with a pre-configured second tag.
9 more elements
A non-transitory computer-readable medium containing instructions which, when executed, cause a first computing device to perform operations comprising:
- configuring a firewall at a first computing device, wherein, in response to determining that a data packet received from a second computing device is unencrypted and that the data packet comprises a particular destination port, the firewall is configured to initiate the first computing device to establish a secured connection with the second computing device;
- detecting the data packet at the first computing device, wherein the data packet is received from the second computing device;
- in response to determining the data packet being unencrypted and the data packet comprising the particular destination port, establishing the secured connection between the first computing device and the second computing device;
- and
- in response to establishing the secured connection between the first computing device and the second computing device, communicating encrypted data packets with the second computing device using the secured connection, wherein the communicating encrypted data packets with the second computing device using the secured connection comprises:
- receiving, an encrypted data packet from the second computing device;
- determining a first tag that associates with a security parameter index (SPI), wherein the SPI indicates a security association (SA) associated with the secured connection, the first tag indicates that the second computing device has a verified identity, and the first tag is different than the SPI;
- and
- accepting the encrypted data packet based on matching the first tag with a pre-configured second tag.
6 more elements
Dependencies are inferred from the claim text.