# US 12,225,017 B2 · Method of creating secure endpoints on a network > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 12,225,017 B2 - Document ID: US12225017B2 - Status: Granted - Kind: B2 - Application number: 17/386,055 - Filed: 2021-07-27 - Published: 2022-01-27 - Granted: 2025-02-11 - Earliest claimed: 2020-07-27 - Assignees: Unisys Corporation - Applicants: Jared Poetter; Michael C Leap; Diane E Schaefer; Robert A Johnson; Michael Saunders; Robert R Buckwalter; Sarah K Inforzato; Eugene J Gretter; George Karian - Inventors: Jared Poetter; Michael C Leap; Diane E Schaefer; Robert A Johnson; Michael Saunders; Robert R Buckwalter; Sarah K Inforzato; Eugene J Gretter; George Karian - Web page: https://patentgrep.com/patent/US12225017B2 ## CPC - H04L 63/104: {Grouping of entities} - H04L 41/0803: Configuration setting - H04L 41/0843: {based on generic templates} - H04L 41/0894: Policy-based network configuration management - H04L 41/12: Discovery or management of network topologies - H04L 41/16: using machine learning or artificial intelligence - H04L 63/0263: {Rule management} - H04L 63/0892: {by using authentication-authorization-accounting [AAA] servers or protocols} - H04L 63/102: {Entity profiles} - H04L 63/105: {Multiple levels of security} - H04L 63/20: {for managing network security; network security policies in general (filtering policies H04L63/0227)} - G06F 9/45558: {Hypervisor-specific management and integration aspects} - G06F 2009/45595: {Network integration; Enabling network access in virtual machine instances} - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) ## Abstract A method of creating secure endpoints on a network includes registering by a node using a random selection algorithm to choose which server to register to; receiving by the node a property set ID of a property set that the node is a member of; and authorizing by the node using the property set ID to look up its authorization details in the property set. A method of creating secure endpoints on a secure network having at least one community of interest, includes registering by a node using a random selection algorithm to choose which server to register to; receiving by the node a property set ID of a property set that the node is a member of; and authorizing by the node through an authorization server using the property set ID to look up its authorization details in the property set; wherein the node and the authorization server are a member of the at least one community of interest. ## Claims ### Claim 1 A method of creating secure endpoints on a network, including: registering by a node to a registration server using a random selection algorithm to choose the registration server to register to; receiving by the node, a property set ID of a property set that the node is a member of, wherein the property set ID allows the node to look up its authorization in a setting file for authorization; and authorizing to join a secure network by the node through an authorization server that is a member of at least one community of interest to which the node is a member using the property set ID of the property set to look up its authorization details including the authorization server in the property set wherein the node is a member of at least one community of interest in a secure network environment. ### Claim 2 (depends on 1) The method according to claim 1, including using common information rules by the node to apply prior to authorization. ### Claim 3 (depends on 1) The method according to claim 1, wherein authorizing includes using a random hunting algorithm such that different nodes attempt to authorize at a different place in a list. ### Claim 4 (depends on 1) The method according to claim 1, wherein authorizing by the node includes authorizing by the node through an authorization group having at least one authorization server as a member. ### Claim 5 (depends on 4) The method according to claim 4, wherein the authorization group is associated with the property set. ### Claim 6 (depends on 5) The method according to claim 5, wherein the authorization group is associated with more than one property set. ### Claim 7 (depends on 1) The method according to claim 1, wherein the property set contains rules on how the node operates and authenticates. ### Claim 8 (depends on 7) The model according to claim 7, wherein the node's membership in a property set uses an inheritance or hierarchy concept. ### Claim 9 (depends on 8) The method according to claim 8, further comprising updating the property set which automatically maps to the node. ### Claim 10 (depends on 1) The model according to claim 1, wherein the node property sets contain a list of authorization servers and node properties. ### Claim 11 (depends on 10) The model according to claim 10, wherein the node properties include audit, type, tunnel priority, cert name and type. ### Claim 12 A method of creating secure endpoints on a secure network having at least one community of interest, including: registering by a node to a registration server using a random selection algorithm to choose the registration server to register to, wherein the property set ID allows the node to look up its authorization in a setting file for authorization; receiving by the node, a property set ID of a property set that the node is a member of; and authorizing to join a secure network by the node through an authorization server through an authorization server using the property set ID of the property set to look up its authorization details including the authorization server in the property set; wherein the node and the authorization server are members of the at least one community of interest that is in common to each other wherein the node is a member of at least one community of interest in a secure network environment. ### Claim 13 (depends on 12) The method according to claim 12, including using common information rules by the node to apply prior to authorization. ### Claim 14 (depends on 13) The method according to claim 13, wherein authorizing includes using a random hunting algorithm such that different nodes attempt to authorize at a different place in a list. ### Claim 15 (depends on 14) The method according to claim 14, wherein the property set contains rules on how the node operates and authenticates. ### Claim 16 (depends on 15) The model according to claim 15, wherein the node's membership in a property set uses an inheritance or hierarchy concept. ### Claim 17 (depends on 16) The method according to claim 16, further comprising updating the property set which automatically maps to the node.