US 11,121,961 B2 · Systems and methods for determining secure network elements using flexible algorithm technology

Abstract

In one embodiment, an apparatus includes one or more processors and one or more computer-readable non-transitory storage media coupled to the one or more processors. The one or more computer-readable non-transitory storage media include instructions that, when executed by the one or more processors, cause the apparatus to perform operations including receiving a first type-length-value (TLV) associated with a winning flexible algorithm definition (FAD) from a first element of a network. The operations also include determining a security level for the winning FAD based on the TLV. The operations further include determining a data transmission route through a plurality of elements of the network based on the security level for the winning FAD.

Claims20

Dependent claims

An apparatus, comprising:

one or more processors;
and
one or more computer-readable non-transitory storage media coupled to the one or more processors and comprising instructions that, when executed by the one or more processors, cause the apparatus to perform operations comprising:
receiving a first type-length-value (TLV) associated with a winning flexible algorithm definition (FAD) from a first element of a network;
determining a security level for the winning FAD based on the TLV;
determining a data transmission route through a plurality of elements of the network based on the security level for the winning FAD;
determining that a second element of the network did not advertise an attestation sub-TLV;
and
excluding the second element from the plurality of elements of the data transmission route.

6 more elements

Dependencies are inferred from the claim text.

Facts

Application

16/598,852Filed 10 Oct 2019 · us provisional application

Priority

4 Apr 2019

Published

US 2020/0322254 A18 Oct 2020

Granted

14 Sep 2021

Term ends

Not estimatedThe source records don’t support an estimate.

Classification5 codes

H04L 45/127
Shortest path evaluation: based on intermediate node capabilities
H04L 63/18
Network architectures or network communication protocols for network security: using different networks or channels, e.g. using out of band channels
H04L 63/105
For controlling access to devices or network resources: multiple levels of security
H04L 63/205
For managing network security; network security policies in general: involving negotiation or determination of the one or more network security…

Systems and methods for determining secure network elements using flexible algorithm technology

Life of this patent

Systems and methods for determining secure network elements using flexible algorithm technology

Life of this patent

Abstract

Claims20