Back to results
US 7,890,999 B2Granted
RPC port mapper integrity checker to improve security of a provisionable network
AssigneeHewlett-Packard Development Company, L.P.
InventorsGuruprasad Ramarao, Amit Raikar
Life of this patent
Estimating the term…
Abstract
A method for verifying port integrity in a network, comprising: accessing port binding information in a port authorization file in the network, querying a port mapper in the network for a mapped port assignment, comparing the port assignment to the port binding, and initiating a response based on the results of the comparing.
Claims20
A method for verifying port mapping integrity in a network, comprising:
- accessing, performed by a computer system, port binding information, which includes an identification and an authorized port of an authorized service, in a port authorization file in said network;
- querying a port mapper for a mapped port assignment, which was created when an application registered a service provided by the application with said port mapper at the time said application was brought up, said mapped port assignment includes a current port used by said registered service;
- determining if an identified service is currently using said authorized port by comparing said mapped port assignment to said port binding information;
- and
- initiating a response to said comparing.
2 more elements
In a network comprising a plurality of network port connections, a network port map verification tool, comprising:
- a port assignment file, stored in an electronic device, comprising a port authorization, which includes an authorized port of an authorized service, in said network;
- and
- a port assignment file verifier wherein said verifier is enabled to verify a port assignment against said port authorization by,
- querying a port mapper for a mapped port assignment, which was created when an application registered a service provided by the application with said port mapper at the time said application was brought up, said mapped port assignment includes a current port used by said registered service;
- determining if an identified service is currently using said authorized port by comparing said mapped port assignment to said port authorization;
- and
- initiating a response to said comparing.
4 more elements
A system for protecting network security, comprising:
- a network server coupled to a network;
- a network client communicatively coupled with said network server via a port;
- a plurality of provisionable services enabled to communicate with said server via a plurality of ports;
- and
- a port map verification tool enabled to compare a port assignment to a port authorization, which includes an authorized port of an authorized service, in said network by,
- querying a port mapper for a mapped port assignment, which was created when an application registered a service provided by the application with said port mapper at the time said application was brought up, said mapped port assignment includes a current port used by said registered service;
- determining if an identified service is currently using said authorized port by comparing said mapped port assignment to said port authorization;
- and
- initiating a response to said comparing.
6 more elements
Dependencies are inferred from the claim text.