US 11,240,110 B1Granted

Providing secure data replication among nodes of a hierarchical multitenant security orchestration and automated response (SOAR) architecture

AssigneeFortinet, Inc.

InventorsAbhishek Narula, Alok Agarwal, Pooja Singh, Satish Mishra

Life of this patent

Estimating the term…

Loading patent…

Abstract

Systems and methods for facilitating secure and reliable communications among nodes of different tiers of a multi-tenant SOAR deployment are provided. According to one embodiment, data flow propagation within a hierarchy of nodes of the SOAR deployment is controlled. Responsive to creation of a record by a node: (i) when there exists a parent node in the hierarchy, setting a PID of the record to a TID of the parent node; otherwise, to a TID of the node; (ii) when there exists a child node in the hierarchy, setting a CID of the record to the TID of the child node; otherwise, to the TID of the node; and (iii) maintaining a set of propagation rules for the node relating to permissibility of propagation of the record within the hierarchy. During propagation of the record by the node, the PID and the CID of the record are updated.

Claims21

Dependent claims

A method performed by a processing resource of a Secure Orchestration and Automated Response (SOAR) node of a hierarchy of a plurality SOAR nodes of a SOAR deployment, the method comprising:

controlling data flow propagation within the hierarchy, wherein the hierarchy includes a plurality of tiers, wherein each particular SOAR node of the plurality of SOAR nodes has a tenant identifier (ID) that uniquely identifies the particular SOAR node within the SOAR deployment, and wherein said controlling includes:
responsive to creation of a record by the SOAR node:
when there exists a parent tier of the plurality of tiers immediately above the SOAR node in the hierarchy, setting a parent-tenant ID (PID) of the record to the tenant ID of a parent SOAR node of the plurality of SOAR nodes associated with the parent tier;
otherwise, setting the PID to the tenant ID of the SOAR node;
when there exists a child tier of the plurality of tiers immediately below the SOAR node in the hierarchy, setting a child-tenant ID (CID) of the record to the tenant ID of a child SOAR node of the plurality of SOAR nodes associated with the child tier;
otherwise, setting the CID to the tenant ID of the SOAR node;
and
maintaining a set of propagation rules for the SOAR node relating to permissibility of propagation of the record within the hierarchy;
and
during propagation of the record by the SOAR node, updating the PID and the CID of the record.

7 more elements

A Secure Orchestration and Automated Response (SOAR) node of a hierarchy of a plurality SOAR nodes of a SOAR deployment, the SOAR node comprising:

a processing resource;
and
a non-transitory computer-readable medium, coupled to the processing resource, having stored therein instructions that when executed by the processing resource cause the processing resource to perform a method comprising:
controlling data flow propagation within the hierarchy, wherein the hierarchy includes a plurality of tiers, wherein each particular SOAR node of the plurality of SOAR nodes has a tenant identifier (ID) that uniquely identifies the particular SOAR node within the SOAR deployment, and wherein said controlling includes:
responsive to creation of a record by the SOAR node:
when there exists a parent tier of the plurality of tiers immediately above the SOAR node in the hierarchy, setting a parent-tenant ID (PID) of the record to the tenant ID of a parent SOAR node of the plurality of SOAR nodes associated with the parent tier;
otherwise, setting the PID to the tenant ID of the SOAR node;
when there exists a child tier of the plurality of tiers immediately below the SOAR node in the hierarchy, setting a child-tenant ID (CID) of the record to the tenant ID of a child SOAR node of the plurality of SOAR nodes associated with the child tier;
otherwise, setting the CID to the tenant ID of the SOAR node;
and
maintaining a set of propagation rules for the SOAR node relating to permissibility of propagation of the record within the hierarchy;
and
during propagation of the record by the SOAR node, updating the PID and the CID of the record.

10 more elements

A non-transitory computer-readable storage medium embodying a set of instructions, which, when executed by a processing resource of a Secure Orchestration and Automated Response (SOAR) node of a hierarchy of a plurality SOAR nodes of a SOAR deployment, causes the processing resource to perform a method comprising:

controlling data flow propagation within the hierarchy, wherein the hierarchy includes a plurality of tiers, wherein each particular SOAR node of the plurality of SOAR nodes has a tenant identifier (ID) that uniquely identifies the particular SOAR node within the SOAR deployment, and wherein said controlling includes:
responsive to creation of a record by the SOAR node:
when there exists a parent tier of the plurality of tiers immediately above the SOAR node in the hierarchy, setting a parent-tenant ID (PID) of the record to the tenant ID of a parent SOAR node of the plurality of SOAR nodes associated with the parent tier;
otherwise, setting the PID to the tenant ID of the SOAR node;
when there exists a child tier of the plurality of tiers immediately below the SOAR node in the hierarchy, setting a child-tenant ID (CID) of the record to the tenant ID of a child SOAR node of the plurality of SOAR nodes associated with the child tier;
otherwise, setting the CID to the tenant ID of the SOAR node;
and
maintaining a set of propagation rules for the SOAR node relating to permissibility of propagation of the record within the hierarchy;
and
during propagation of the record by the SOAR node, updating the PID and the CID of the record.

7 more elements

Dependencies are inferred from the claim text.

Facts

Application: 17/139,628Filed 31 Dec 2020
Granted: 1 Feb 2022
Term ends: Not estimatedThe source records don’t support an estimate.

Classification8 codes

H04L 41/044
Network management architectures or arrangements: comprising hierarchical management structures
H04L 41/0894
Configuration management of networks or network elements: policy-based network configuration management
H04L 41/18
Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks: delegation of network…
H04L 41/5064
Characterised by the interaction between service providers and their network customers, e.g. customer relationship management: customer…