US 2006/0085850 A1 · System and methods for providing network quarantine using IPsec

Abstract

A system and method for ensuring that machines having invalid or corrupt states are restricted from accessing host resources are provided. A quarantine agent (QA) located on a client machine acquires statements of health from a plurality of quarantine policy clients. The QA packages the statements and provides the package to a quarantine enforcement client (QEC). The QEC sends the package to a quarantine Health Certificate Server (HCS) with a request for a health certificate. If the client provided valid statements of health, the HCS grants the client health certificate that may be used in IPsec session negotiation.

Claims20

Dependent claims

A method for a host to provide selective network isolation in a network using IP Security Protocol (IPsec), comprising:

receiving a Internet Key Exchange (IKE) packet including a client health certificate from a client;
validating the client health certificate;
sending to the client a host health certificate if the client health certificate is valid;
and
denying the client access to the host if the client health certificate is invalid.

2 more elements

Dependencies are inferred from the claim text.

Facts

Application

11/056,276Filed 14 Feb 2005

Priority

14 Oct 2004

Published

20 Apr 2006

Term ends

Not estimatedThe source records don’t support an estimate.

Classification7 codes

H04L 63/0823
For authentication of entities: using certificates
G06F 21/335
Using certificates: for accessing specific resources, e.g. using Kerberos tickets
H04L 63/1433
For detecting or protecting against malicious traffic: vulnerability analysis
H04L 63/164
Implementing security features at a particular protocol layer: at the network layer

System and methods for providing network quarantine using IPsec

Life of this patent

System and methods for providing network quarantine using IPsec

Life of this patent

Abstract

Claims20