Back to results
US 11,962,571 B2Granted
Ecosystem per distributed element security through virtual isolation networks
AssigneeAcreto Cloud Corporation
InventorBabak Pasdar
Life of this patent
Estimating the term…
Abstract
A method and system are provided to integrate IoTs and related components, users and applications into an ecosystem, and then on a per-component basis to provide real-time security solutions. Ecosystem security provides isolation, communications and security for technologies that fulfill a specific function or set of functions and their related and supporting platform elements.
Claims12
A method for improving security and management of information technology by creating an identifiable ecosystem, comprising:
- a) configuring at least one database to accept a virtual isolation network registration therein of at least one virtual isolation network including at least one security instance operating at, at least one network security point, the at least one security instance operating with at least one segregated virtual network unit, wherein the at least one segregated virtual network unit utilizes at least one of a shared physical and virtual host kernel, having a fully contained dedicated Layer 2-7 network stack and ability to host applications, the at least one segregated virtual network unit hosting at least one application module;
- b) configuring the at least one virtual isolation network to accept a first element registration-of a first element;
- c) registering the first element in the at least one database;
- d) enabling the registered first element to connect to at least one virtual isolation network via the at least one network security point to the at least one security instance;
- e) applying at least one defined security policy for the communication by the first element via the at least one virtual isolation network to at least one of a communication source or destination,
- wherein at least one defined security function is applied by the at least one defined security policy using at least one respective flow marker which references the at least one defined security policy to identify if and in what sequence communication through the at least one segregated virtual network unit and at least one application module of the at least one security instance is to be activated,
- wherein the at least one element includes at least one of:
- a user, an electronic device, an IoT device, a network, a cloud network, a physical facility, a cloud instance, a Software-as-a-Service application, a software application, an operating system, a virtual machine, a connected member element, a non-connected member element;
- wherein the first element communicates with an at least one additional element within the at least one virtual isolation network but is restricted from communicating beyond the at least one virtual isolation network, and
- wherein the at least one security instance is configured to include modular interconnected respective segregated virtual network units.
7 more elements
Dependencies are inferred from the claim text.