US 2003/0126466 A1Published application

Method for controlling an internet information security system in an IP packet level

OwnerSo-Hee Park, Ji Hoon Jeong +7inventors

InventorsSo-Hee Park, Ji Hoon Jeong, Hyung Kyu Lee, Gunwoo Kim, Su Hyung Jo, Won-Joo Park, Jae Hoon Nah, Sung Won Sohn, Chee Hang Park

Life of this patent

Estimating the term…

patentgrep

Loading patent…

Abstract

A method for controlling an Internet information security system of a sender, for packet security in an IP level, is provided. It is determined whether to select security services of packets by referring to security policy database and security association database. Security association is negotiated with a key exchange server of a receiver. The negotiated security association is stored in a key management server. A security policy related with the security association is linked. A packet is sent by using the linked security policy and the security association.

Claims5

Dependent claims

A method for controlling an Internet information security system of a sender, in order to secure a packet in an IP level, comprising the steps of:

(a) determining whether to select a security service on a packet basis by referring to security policy database and security association database, after generating an IP header of a packet that is intended to send;
(b) setting up a security policy by negotiating with a security policy control server of a receiver, when the security policy database and the security association database do not exist;
(c) negotiating security association with a key exchange server of the receiver, based on the determined security policy;
(d) storing the negotiated security association in a key management server;
(e) linking a security policy related with the security association;
and
(f) sending the packet by applying IPsec (IP security protocol) and using the linked security policy and the security association.

4 more elements

Dependencies are inferred from the claim text.

Facts

Application: 10/188,110Filed 3 Jul 2002
Priority: KR 2001-8698328 Dec 2001
Published: 3 Jul 2003
Term ends: Not estimatedThe source records don’t support an estimate.

Classification5 codes

H04L 63/0263
Filtering policies: rule management
H04L 63/061
For supporting key management in a packet data network: for key exchange, e.g. in peer-to-peer networks
H04L 63/164
Implementing security features at a particular protocol layer: at the network layer
H04L 63/20
Network architectures or network communication protocols for network security: for managing network security; network security policies in general