Inter-autonomous system weighstation
OwnerAlan Jason McCabeinventor
Life of this patent
Estimating the term…
Abstract
An approach for providing network security is disclosed. The system includes a first set of routing devices (e.g., routers, routing switches, etc.) operating redundantly within an autonomous system. The system also includes a second set of routing devices that are configured for redundant operation within the autonomous system and to communicate with another autonomous system. The sets of routing devices provide a communication path between the autonomous systems for transport of untrusted packets and trusted packets. Further, the system includes a security node (i.e., weighstation) configured to communicate with the sets of routing devices and to only receive the untrusted packets, wherein the untrusted packets are selectively forwarded to the other autonomous system.
Claims37
A method for providing network security between autonomous systems, the method comprising:
- receiving a packet routed from a network element in communication with one of the autonomous systems, wherein the packet is determined by the network element to be untrusted;
- and
- selectively forwarding the packet to another one of the autonomous systems based on a security policy.
A system for providing network security between autonomous systems, the system comprising:
- a firewall configured to receive a packet forwarded from a routing device in communication with one of the autonomous systems, wherein the packet is determined by the routing device to be untrusted, and the firewall is further configured to selectively forward the packet to another one of the autonomous systems.
A system for providing network security, the system comprising:
- a first set of routing devices configured to operate redundantly within an autonomous system;
- a second set of routing devices configured to operate redundantly within the autonomous system and to communicate with another autonomous system, wherein the sets of routing devices provide a communication path between the autonomous systems for transport of untrusted packets and trusted packets;
- and
- a security node configured to communicate with the sets of routing devices and to only receive the untrusted packets, wherein the untrusted packets are selectively forwarded to the other autonomous system.
A computer-readable medium carrying one or more sequences of one or more instructions for providing network security between autonomous systems, the one or more sequences of one or more instructions including instructions which, when executed by one or more processors, cause the one or more processors to perform the steps of:
- receiving a packet routed from a network element in communication with one of the autonomous systems, wherein the packet is determined by the network element to be untrusted;
- and
- selectively forwarding the packet to another one of the autonomous systems based on a security policy.
A system for providing network security between autonomous systems, the system comprising:
- means for receiving a packet routed from a network element in communication with one of the autonomous systems, wherein the packet is determined by the network element to be untrusted;
- and
- means for selectively forwarding the packet to another one of the autonomous systems based on a security policy.
A method for securely transporting packets, the method comprising:
- determining whether a packet received from a host within a first autonomous system is untrusted based on a routing criterion;
- routing the packet over a communication path to a second autonomous system, if the packet is not untrusted;
- and
- routing the packet over the communication path to a security node, if the packet is untrusted, wherein the security node selectively forwards the packet to the second autonomous system based on at least one of a plurality of security policies.
A computer-readable medium carrying one or more sequences of one or more instructions for securely transporting packets, the one or more sequences of one or more instructions including instructions which, when executed by one or more processors, cause the one or more processors to perform the steps of:
- determining whether a packet received from a host within a first autonomous system is untrusted based on a routing criterion;
- routing the packet over a communication path to a second autonomous system, if the packet is not untrusted;
- and
- routing the packet over the communication path to a security node, if the packet is untrusted, wherein the security node selectively forwards the packet to the second autonomous system based on at least one of a plurality of security policies.
A network apparatus for providing network security between autonomous systems, the apparatus comprising:
- a routing device configured to screen a packet from one of the autonomous systems, wherein the packet is determined by the routing device to be untrusted;
- and
- a firewall configured to receive the packet forwarded from the routing device in communication, and to selectively forward the packet to another one of the autonomous systems.
An apparatus for providing network security, the system comprising:
- a first set of routing devices configured to operate redundantly within an autonomous system;
- a second set of routing devices configured to operate redundantly within the autonomous system and to communicate with another autonomous system, wherein the sets of routing devices provide a communication path between the autonomous systems for transport of untrusted packets and trusted packets;
- and
- a security node configured to communicate with the sets of routing devices and to only receive the untrusted packets, wherein the untrusted packets are selectively forwarded to the other autonomous system.
Dependencies are inferred from the claim text.