Apparatus and method for providing secure network communication

The method of claim [c1], further comprising each intelligent network interface providing protocol translation based on servlets provided by said CMC.

The method of claim [c3], wherein said protocol translation is selected from the any two protocols within a single layer of an ISO 7 layer protocol stack.

The method of claim [c2], further comprising said CMC dynamically distributing proxy servlets to intelligent network interfaces based on distinguished name.

The method of claim [c2], further comprising said CMC dynamically distributing servlets to intelligent network interfaces based on distinguished name, said servlets selected from the group consisting of single sign-on servlets, distinguished name firewall servlets, auditing servlets, policy enforcement servlets, and web-filtering servlets.

The method of claim [c2], further comprising said CMC dynamically distributing servlets to intelligent network interfaces based on device, said servlets selected from the group consisting of fault tolerance automatic rollover servlets, gateway intrusion detection servlets, multi-level firewall servlets, machine diagnostics servlets, virus scanning servlets, and security patching servlets.

The method of claim [c2], wherein said authentication is selected from the group consisting of username/password, biometric inputs, smart cards, tokens, and combinations thereof.

The method of claim [c1], further comprising providing a plurality of CMCs on said network in a hierarchical configuration.

The system of claim [c12], wherein each intelligent network interface is implemented in a form selected from the group consisting of PCI cards, PCMCIA cards, rapid I/O-high bandwidth cards, and standalone devices.

The system of claim [c12], wherein each intelligent network interface is implemented in a form selected from the group consisting of PCI NIC cards, PCMCIA NIC cards, rapid I/O-high bandwidth NIC cards, and standalone devices with an Ethernet second I/O interface.

The system of claim [c12], wherein each intelligent network interface further comprises a serial line authentication port.

The system of claim [c15], wherein said serial line authentication port is a USB port.

The system of claim [c12], wherein said intelligent network interface further comprises parallel port authentication port.

The system of claim [c12], wherein said memory consists of flash memory for storing an OS and dynamic memory for applications.

The system of claim [c12], wherein said memory consists of a hard drive for storing an OS and applications and random access memory for running said OS and applications.

The system of claim [c12], wherein said intelligent network interfaces have an OS that is distinct from said host devices.

The system of claim [c12], further comprising:

• an encryption accelerator on a field programmable gate array (FPGA) on said intelligent network interface.

The system of claim [c24], wherein each intelligent network interface is implemented in a form selected from the group consisting of PCI cards, PCMCIA cards, rapid I/O—high bandwidth cards, and standalone devices.

The system of claim [c24], wherein each intelligent network interface is implemented in a form selected from the group consisting of PCI NIC cards, PCMCIA NIC cards, rapid I/O—high bandwidth NIC cards, and standalone devices with an Ethernet second I/O interface.

The system of claim [c24], wherein each intelligent network interface further comprises a serial line authentication port.

The system of claim [c27], wherein said serial line authentication port is a USB port.

The system of claim [c24], wherein said intelligent network interface further comprises a parallel port authentication port.

The system of claim [c24], wherein said memory consists of flash memory for storing an OS and dynamic memory for applications.

The system of claim [c24], wherein said memory consists of a hard drive for storing an OS and applications and random access memory for running said OS and applications.

The system of claim [c24], wherein said intelligent network interfaces have an OS that is distinct from said host devices.

The system of claim [c23], wherein said dynamically distributed security agent servlets include means to provide functions selected from the group consisting of:

• encryption, authentication, protocol translations, single sign-on, multi-level firewalling, distinguished-name based firewalling, centralized user management, machine diagnostics, proxying, fault tolerance, centralized patching, web filtering, virus scanning, auditing, and gateway intrusion detection.

The system of claim [c33], further comprising an encryption accelerator on a field programmable gate array (FPGA) on said intelligent network interface.

A method of providing non-host integrated fault tolerance for hosts on a network, comprising:

• providing an intelligent network interface between a network and each host on the network;
• providing a central management console (CMC) on said network;
• said CMC dynamically distributing fault tolerance servlets to said hosts such that, upon a failure of a first host, a first intelligent network interface between said network and said first host redirects packets to a second host on said network without any intervention from said first or second host.