Method and apparatus for preventing bridging of secure networks and insecure networks
AssigneeAlcatel-Lucent USA Inc.
InventorsJacco Brok, Willem Adriaan Romijn
Life of this patent
Estimating the term…
Abstract
The invention comprises a method and apparatus for preventing a bridge between a secure network and an insecure network. Specifically, the method comprises monitoring a network device supporting a secure network connection for an attempt to establish an insecure network connection, and terminating the secure network connection in response to detecting the attempt to establish the insecure network connection, where the secure network connection comprises a network layer connection.
Claims18
A method for preventing a bridge between a secure network and an insecure network at a network device, comprising:
- receiving, at a node associated with the secure network, a request to establish a secure network connection with the secure network, wherein the request to establish the secure network connection with the secure network is associated with the network device;
- and
- in response to a determination that the request to establish the secure network connection has associated therewith a token indicative that an insecure network connection to an insecure network does not exist for the network device, accepting the request to establish the secure network connection with the secure network;
- in response to a determination that the request to establish the secure network connection does not have associated therewith a token indicative that an insecure network connection to an insecure network does not exist for the network device, denying the request to establish the secure network connection with the secure network.
A computer readable storage medium storing a software program, that, when executed by a computer, causes the computer to perform a method for preventing a bridge between a secure network and an insecure network at a network device, the method comprising:
- receiving, at a node associated with the secure network, a request to establish a secure network connection with the secure network, wherein the request to establish the secure network connection with the secure network is associated with the network device;
- and
- in response to a determination that the request to establish the secure network connection has associated therewith a token indicative that an insecure network connection to an insecure network does not exist for the network device, accepting the request to establish the secure network connection with the secure network;
- in response to a determination that the request to establish the secure network connection does not have associated therewith a token indicative that an insecure network connection to an insecure network does not exist for the network device, denying the request to establish the secure network connection with the secure network.
An apparatus for preventing a bridge between a secure network and an insecure network at a network device, comprising:
- a receiver for receiving a request to establish a secure network connection with the secure network, wherein the request to establish the secure network connection with the secure network is associated with the network device;
- and
- a processor for processing the request, the processor configured for:
- accepting the request to establish the secure network connection with the secure network in response to a determination that the request to establish the secure network connection has associated therewith a token indicative that an insecure network connection to an insecure network does not exist for the network device;
- and
- denying the request to establish the secure network connection with the secure network in response to a determination that the request to establish the secure network connection does not have associated therewith a token indicative that an insecure network connection to an insecure network does not exist for the network device.
Dependencies are inferred from the claim text.