Device for use in a network
AssigneeSiemens Aktiengesellschaft
InventorsMarkus Heintel, Amine Mohamed Houyou
Life of this patent
Estimating the term…
Abstract
A method and device are provided for use in a network including at least one existing device. At least one virtual sub-network is established within the network and a certain trust level is assigned to the at least one virtual sub-network. The device is assigned a first trust level. The device receives a token correlated with the assigned first trust level. The device is permitted into the at least one virtual subnet upon presentation of that token if the first trust level corresponds or includes the certain trust level.
Claims22
A network having a device for use in the network, wherein the network comprises:
- at least one existing device;
- at least one virtual sub-network;
- wherein the at least one virtual sub-network is established within the network and a certain trust level is assigned to the at least one virtual sub-network,
- wherein the device is permitted into the at least one virtual sub-network after the device is:
- assigned a first trust level,
- receives a token correlated with the assigned first trust level,
- and presents the token when the first trust level corresponds to or comprises the certain trust level.
A controller for coordinating an access of a device to at least one virtual sub-network of a network, the controller configured to:
- initiate an assignment of a trust level to the device;
- and
- initiate a transmission of a token describing a permission to enter the at least one virtual sub-network, describing a certain trust level assigned to the at least one virtual sub-network, or describing the permission to enter the at least one virtual sub-network and describing the certain trust level assigned to the at least one virtual sub-network.
A network comprising at least one existing device, at least one controller, and a plurality of virtual sub-networks, wherein the plurality of virtual sub-networks comprises at least one of:
- an isolated sub-network comprising a certification authority used for initial communication with a new device entering the network,
- a virtual security management sub-network comprising network equipment and network access controller and certification authority for sharing information between identity management within the network and network access control,
- a virtual network management sub-network to share information amongst the members of the system enforcing virtual sub-networks,
- a virtual default sub-network for exchanging discovery or/and plug-negotiation information between the at least one existing device and the new device,
- a virtual registration sub-network for authentication between the new device and a network equipment, and
- a virtual production sub-network between the at least one existing device and the new device for performing a task.
A method for integrating a device in a physical network comprising at least one existing device, wherein in the physical network at least one virtual sub-network is assigned a certain trust level, the method comprising:
- assigning the device a first trust level;
- receiving, by the device, a token correlated with the assigned first trust level;
- and
- permitting the device into the at least one virtual sub-network upon presentation of the token when the first trust level corresponds to or comprises the certain trust level.
(canceled)
(canceled)
Dependencies are inferred from the claim text.