Shared security transform device, system and methods
OwnerDwight L. Barron, Daniel N. Cripe +1inventors
InventorsDwight L. Barron, Daniel N. Cripe, Michael F. Angelo
Life of this patent
Estimating the term…
Abstract
A shared security transform device is described as being usable to couple to a plurality of nodes via a common switch comprises control logic and memory coupled to the control logic. The memory may contain security information. The shared security transform device receives packets from any of the nodes via the switch and, using a value in the packets, retrieves security handling instructions to determine whether or not to apply a security transform to the packet. If a security transform is to be applied to the packet, the shared security transform device may determine which of a plurality of transforms is to be applied to the packet.
Claims24
A shared security transform device usable to couple to a plurality of nodes via a common switch, comprising:
- control logic;
- memory coupled to said control logic, said memory containing security information;
- wherein said shared security transform device receives packets from any of said nodes via said switch and, using a value in said packets, retrieves security handling instructions to determine whether or not to apply a security transform to said packet and, if a security transform is to be applied, which of a plurality of transforms is to be applied to said packet.
A system, comprising:
- a plurality of nodes;
- a switch to which said nodes couple;
- a shared security transform device coupled to said switch and to a network, said nodes transmitting packets to and receiving packets from a target device attached to said network, said shared security transform device containing security information;
- wherein said shared security transform device receives packets from any of said nodes via said switch and, using a value in said packets, retrieves security handling instructions to determine whether or not to apply a security transform to said packet and, if a security transform is to be applied, which of a plurality of transforms is to be applied to said packet.
A system, comprising:
- a plurality of nodes;
- a switch to which said nodes couple;
- a means for transmitting packets to and receiving packets from a target device attached to said network and for containing security information, and for receiving packets from any of said nodes via said switch and, using a value in said packets, for retrieving security handling instructions to determine whether or not to apply a security transform to said packet and, if a security transform is to be applied, for determining which of a plurality of transforms is to be applied to said packet.
A method usable in a system comprising a plurality of nodes coupled to a common switch, comprising:
- receiving a packet from a node at a port on the switch;
- associating a port identifier with the received packet based on the port over which the packet was received;
- using the port identifier as an index into security information;
- retrieving security handling instructions based on the port identifier;
- and
- performing actions on the packet as specified by the security handling instructions.
A method usable in a system comprising a plurality of nodes coupled to a common switch, comprising:
- generating a packet having a source IP address that corresponds to an IP address of another node;
- receiving the packet at a port on the switch;
- associating a port identifier with the received packet based on the port over which the packet was received;
- comparing the port identifier and the source IP address of the packet with security information to determine if the port identifier and the source IP address correspond to the same node;
- performing a security action if the port identifier and source IP address do not correspond to the same node.
Dependencies are inferred from the claim text.