Secure network architecture method and apparatus
OwnerRichard G. Dusenbury, Jr.inventor
Life of this patent
Estimating the term…
Abstract
A secure network architecture method and apparatus that provides security at all levels of the network. The system and method of the present invention provides communications profiles for all network resources that uniquely identify the individual network resources and provide for absolute object identity. Communications over the network are managed at all levels by the network resources themselves by virtue of individual communications profiles that are policed by arbitrators and network resources alike.
Claims67
A secure network comprising:
- a network;
- network resources connected to the network each having a communications profile comprising at least a receive profile, a transmit profile, and unique identifier and whereby each network resource can receive communications only if permitted by its receive profile and whereby each network resource can transmit communications only if permitted by its transmit profile;
- and
- at least one arbitrator with its own communications profile included in said network resources, wherein the arbitrator receives communications from transmitting network resources which are destined for destination network resources and retransmits the communication to the destination network resources.
A method for establishing a secure communications network comprising:
- establishing a communications profile comprising at least a receive profile, a transmit profile, and unique identifier on each of a plurality of network resources including at least one arbitrator on a network;
- transmitting communications from a transmitting network resource only if permitted by the transmitting network resource's communications profile;
- and
- receiving communications by a destination network resource only if permitted by the destination resource's communications profile.
A method for creating absolute object identity for objects on a network, comprising:
- providing a plurality of network resources on the network;
- providing a plurality of arbitrators for receiving and retransmitting communications between network resources;
- creating random numbers in a random number generator;
- conveying the created random numbers to a central directory;
- verifying the uniqueness of each random number in the central directory;
- and
- creating for each of said network resources a communications profile based in part on a verified random number, each created communications profile comprising at least a receive profile, a transmit profile and a unique identifier, whereby a transmitting network resource transmits communications only if permitted by its communications profile and a destination network resource receives communications only if permitted by its communications profile.
Dependencies are inferred from the claim text.