Application-based network security
AssigneeJuniper Networks, Inc.
InventorVijay Sai Ram Paruchuri
Life of this patent
Estimating the term…
Abstract
A network device may receive, from an application on a user device, a first network packet associated with a packet flow. The network device may identify an application identifier of the first network packet, wherein the application identifier identifies the application on the user device. The network device may select, based on the application identifier, a security protocol, wherein the security protocol is associated with at least one of an authentication header (AH) or an encryption algorithm. The network device may selectively apply, to a second network packet associated with the packet flow, at least one of the AH or the encryption algorithm, associated with the security protocol, to generate a protected network packet. The network device may transmit the protected network packet.
Claims20
A method, comprising:
- identifying, by a network device, an application identifier of a first network packet associated with a packet flow, wherein the application identifier identifies an application on a user device;
- selecting, by the network device and based on the application identifier and a priority level of the application, a security protocol,
- wherein the security protocol associated with at least one of an authentication header (AH) or an encryption algorithm;
- selectively applying, by the network device and to a second network packet associated with the packet flow, at least one of the AH or the encryption algorithm associated with the security protocol, to generate a protected network packet;
- and
- transmitting, by the network device, the protected network packet.
A device comprising:
- one or more memories;
- one or more processors to:
- identify an application identifier of a first network packet associated with a packet flow, wherein the application identifier identifies an application on a user device;
- select, based on the application identifier and a priority level of the application, a security protocol;
- selectively apply, to a second network packet associated with the packet flow, the security protocol, to generate a protected network packet;
- and
- transmit the protected network packet.
A non-transitory computer-readable medium storing instructions, the instructions comprising:
- one or more instructions that, when executed by one or more processors, cause the one or more processors to:
- receive, from an application on a user device, a first network packet;
- apply a first security protocol to the first network packet to generate a first protected network packet,
- wherein the first security protocol is associated with applying one or more of a first authentication header (AH) or a first encryption algorithm;
- identify an application identifier associated with the first network packet, wherein the application identifier identifies the application on the user device;
- select, based on the application identifier and priority level of the application, a second security protocol,
- wherein the second security protocol is associated with applying at least one of a second AH or a second encryption algorithm;
- transmit the first protected network packet;
- receive, from the application on the user device, a second network packet;
- apply the second security protocol to the second network packet to generate a second protected network packet;
- and
- transmit the second protected network packet.
Dependencies are inferred from the claim text.