US 7,832,006 B2Granted

System and method for providing network security

AssigneeAT&T Intellectual Property I, L.P.

InventorsZesen Chen, Yongdong Zhao, Peter Chou, Brian A. Gonsalves, Michael Taylor

Life of this patent

Estimating the term…

Loading patent…

Abstract

The present disclosure provides a system and method configured to manage and facilitate network security. When a lack of security in a communication network is detected by a security agent or when a remote device requests security, a security profile can be determined by a security manager based on the detection or the request and the available network equipment. The security profile may contain numerous executable security objects that are selected based on the security issue and parameters of the specific network device(s) that will be implementing the security feature. The system and method may include a plurality of executable security objects configured to provide security for operations associated with multiple network devices communication over the network.

Claims20

Dependent claims

A method of managing network security comprising:

storing a plurality of executable security objects configured to provide security for network devices via a security manager processor;
receiving, at the security manager processor from a security agent, an indication of at least one detected security issue for at least one network device, wherein the security agent detects the at least one security issue by receiving a request for operational security or by detecting at least one condition indicating that a security has fallen below a predetermined level;
polling via the security manager processor at least one other network device in response to the indication when the security manager processor determines that additional information is needed;
selecting, via the security manager processor, at least one executable security object from the plurality of executable security objects responsive to the indication to address the at least one detected security issue;
and
initiating communication of the at least one executable security object to the at least one network device.

3 more elements

A network based security system comprising:

an interface operable to receive a signal from at least one network device configured to communicate data via a public communication network;
at least one processor coupled to the interface;
and
a memory coupled to the at least one processor, the memory including instructions that, when executed by the at least one processor, cause the at least one processor to:
instruct a security agent to detect at least one security issue for the at least one network device by receipt of a request for operational security or by detection of at least one condition indicating that a security has fallen below a predetermined level;
and
instruct a security manager communicatively coupled to the security agent to:
receive notice of the at least one security issue for the at least one network device from the security agent;
poll at least one other network device in response to the notice when the security manager determines that additional information is needed;
and
provide at least one security feature to the at least one network device to address the at least one security issue.

8 more elements

Dependencies are inferred from the claim text.

Facts

Application: 11/200,249Filed 9 Aug 2005
Published: US 2007/0039047 A115 Feb 2007
Granted: 9 Nov 2010
Term ends: Not estimatedThe source records don’t support an estimate.

Classification4 codes

H04L 63/20
Network architectures or network communication protocols for network security: for managing network security; network security policies in general
H04L 63/1408
For detecting or protecting against malicious traffic: by monitoring network traffic
H04L 63/1441
For detecting or protecting against malicious traffic: countermeasures against malicious traffic
H04L
Digital communication