Secure connection broker for swarm communications
AssigneeVerizon Patent and Licensing Inc.
InventorsSivanaga Ravi Kumar Chunduru Venkata, Kelly M. Paone
Life of this patent
Estimating the term…
Abstract
Disclosed are systems and methods for a computerized framework that operates a secure connection broker (SCB) for management and control of swarm communications. The SCB can define secure zones within a network(s), which can be leveraged to control and/or divert network traffic related to resource requests between entities based on the entities' designed zones. Secure zones, as managed by the SCB can serve as coordination centers for swarm activities among entities, thereby facilitating communication and data sharing among swarm members. The SCB(s) on a network can ensure that swarm communications are secure, controlled and efficient by providing a structured and protected environment for swarm nodes to operate.
Claims17
A method comprising:
- receiving, from a first entity, a request for information from a second entity;
- determining, based on analysis of the request, a secure zone for the first entity and a secure zone for the second entity, each secure zone being a logical network of network nodes for which trusted network communications are enabled;
- determining, based on the secure zones of the first entity and the second entity, a policy determination regarding handling of the request, the policy determination corresponding to functionality for establishing a network connection between the first entity and the second entity respective to the request;
- activating a digital proxy on behalf of the first entity, the activation comprising dynamically injecting a function into the digital proxy according to a policy;
- establishing, based on the policy determination and the activation of the digital proxy, the network connection between the first entity and the second entity;
- causing communication of the request from the first entity to the second entity via the established network connection, the caused communication enabling the first entity to retrieve the requested information from the second entity;
- and
- deactivating the digital proxy upon the retrieval of the requested information from the second entity.
A network device comprising:
- a hardware processor configured to:
- receive, from a first entity, a request for information from a second entity;
- determine, based on analysis of the request, a secure zone for the first entity and a secure zone for the second entity, each secure zone being a logical network of network nodes for which trusted network communications are enabled;
- determine, based on the secure zones of the first entity and the second entity, a policy determination regarding handling of the request, the policy determination corresponding to functionality for establishing a network connection between the first entity and the second entity respective to the request;
- activate a digital proxy on behalf of the first entity, the activation comprising dynamically injecting a function into the digital proxy according to a policy;
- establish, based on the policy determination and the activation of the digital proxy, the network connection between the first entity and the second entity;
- cause communication of the request from the first entity to the second entity via the established network connection, the caused communication enabling the first entity to retrieve the requested information from the second entity;
- and
- deactivate the digital proxy upon the retrieval of the requested information from the second entity.
A non-transitory computer-readable storage medium storing instructions, executable by a network device, wherein the instructions are configured to:
- receive, from a first entity, a request for information from a second entity;
- determine, based on analysis of the request, a secure zone for the first entity and a secure zone for the second entity, each secure zone being a logical network of network nodes for which trusted network communications are enabled;
- determine, based on the secure zones of the first entity and the second entity, a policy determination regarding handling of the request, the policy determination corresponding to functionality for establishing a network connection between the first entity and the second entity respective to the request;
- activate a digital proxy on behalf of the first entity, the activation comprising dynamically injecting a function into the digital proxy according to a policy;
- establish, based on the policy determination and the activation of the digital proxy, the network connection between the first entity and the second entity;
- cause communication of the request from the first entity to the second entity via the established network connection, the caused communication enabling the first entity to retrieve the requested information from the second entity;
- and
- deactivate the digital proxy upon the retrieval of the requested information from the second entity.
Dependencies are inferred from the claim text.