Edge-based enterprise network security appliance and system
AssigneeDuskrise Inc.
InventorsEmanuele Spoto, Emanuele De Lucia, Antonio Farina
Life of this patent
Estimating the term…
Abstract
An enterprise-grade network security system is described herein. An enterprise-grade network security system may ensure that a consumer-managed network conforms with security standards for a company. In this manner, potential cyber threats may be prevented from infecting centralized company resources. An enterprise-grade network security system may include hardware, software, applications, and a strategic intelligence platform utilizing machine learning and artificial intelligence to identify potential security risks.
Claims20
A portable electronic device for installation within a private computer network managed by a remote employee of an organization, the portable electronic device comprising:
- a housing enclosing:
- a first communication subsystem;
- a second communication subsystem;
- a memory resource storing an executable asset;
- and
- a processing resource operably coupled to the memory resource and configured to load from the memory resource the executable asset to instantiate an instance of an edge application, the edge application configured to:
- access from the memory a unique identifier associated with at least one of the organization or the employee;
- access from the memory an address pointing to a backend application instance associated with the organization;
- submit, via the first communication subsystem over the private computer network, a request to the backend application via the address, the request comprising the unique identifier;
- receive, via the first communication subsystem over the private computer network, from the backend application in response to the request, a response comprising configuration information;
- automatically configure at least one operational parameter of the second communication subsystem based on the configuration information;
- automatically communicably couple the first communication subsystem to a virtual private network of the organization based on the configuration information such that traffic generated by a client device coupled to the second communication subsystem is directed through the virtual private network over the private computer network;
- and
- enable the second communication subsystem.
An electronic device for installation within a private computer network managed by a remote employee of an organization, the electronic device comprising:
- a wireless communication subsystem;
- a network interface card;
- a memory resource;
- and
- a processing resource operably coupled to the memory resource and cooperate with the memory resource to instantiate an instance of an edge application, the edge application configured to:
- advertise a first wireless network with the wireless communication subsystem;
- communicably couple to a first client device via the first wireless network;
- serve a web page to the first client device via the first wireless network;
- receive from the first client device a credential as input to the web page;
- access from the memory an address pointing to a backend application instance associated with the organization;
- submit, via the network interface card over the private computer network, a request to the backend application via the address, the request comprising the credential;
- receive, via the network interface card over the private computer network, from the backend application in response to the request, a response comprising configuration information;
- automatically configure an operational parameter of a second wireless network advertised by the wireless communication subsystem based on the configuration information;
- automatically communicably couple to a private domain name service of the organization based on the configuration information;
- and
- automatically communicably couple to a virtual private network of the organization based on the configuration information such that traffic from a second client device communicably coupled to the second wireless network is directed through the virtual private network over the private computer network.
An electronic device for coupling to a private computer network managed by a remote employee of an organization, the portable electronic device comprising:
- a communication subsystem;
- a memory resource;
- and
- a processing resource operably coupled to the memory resource and cooperate with the memory resource to instantiate an instance of an edge application, the edge application configured to:
- access from the memory an address pointing to a backend application instance associated with the organization;
- submit, via the network interface card over the private computer network, a request for configuration information to the backend application via the address;
- receive, via the communication subsystem over the private computer network, from the backend application in response to the request, a response comprising the configuration information;
- automatically configure an operational parameter the communication subsystem based on the configuration information to define a secure network;
- and
- automatically communicably couple to a virtual private network of the organization based on the configuration information such that all traffic from a client device communicably coupled to the secure network defined by the communication subsystem is directed through the virtual private network over the private computer network.
Dependencies are inferred from the claim text.