Failure recognition
AssigneeMicrosoft Corporation
InventorBrian D. Swander
Life of this patent
Estimating the term…
Abstract
A system and method for failure recognition is disclosed. The technology initially establishes a security association (SA) between a client and a first server on a network. In addition, an active reference count of a number of connections in the SA between the client and the first server is maintained. The SA is evaluated when the active reference count returns less than two connections within the SA between the client and the first server.
Claims17
Instructions on a computer-usable device wherein the instructions when executed cause a computer system to perform a method for informing a client device of a server failure in a secure internet protocol (IPSEC) environment, said computer-implemented method comprising:
- establishing a security association (SA) having an encryption protocol between a client and a first server in a network;
- providing from said first server an encrypted message in said encryption protocol to at least a second server in said network, wherein said encrypted message is not required to be decrypted by at least said second server;
- utilizing said second server to monitor said first server;
- and
- upon recognition of failure of said first server, said at least said second server forwarding said encrypted message to said client.
A computer-implemented method for failure recognition, said computer-implemented method comprising:
- establishing a security association (SA) having an encryption protocol and at least one network connection between a client and a first server in a network;
- providing from said first server an encrypted message in said encryption protocol to at least a second server in said network, wherein said encrypted message is not required to be decrypted by at least said second server;
- utilizing said second server to monitor said first server;
- and
- upon recognition of failure of said first server, said at least said second server forwarding said encrypted message to said client.
An apparatus comprising:
- a memory to store computer-executable instructions;
- a processor executing the computer-executable instructions, causing the apparatus to:
- establish a security association (SA) having an encryption protocol and at least one network connection between a client and the apparatus in a network;
- provide from the apparatus an encrypted message in said encryption protocol to at least a second apparatus in said network, wherein said encrypted message is not required to be decrypted by at least said second apparatus;
- break a connection with the client when the SA includes only a single connection;
- inform the client to establish a new SA;
- receive from a third apparatus a second encrypted message wherein the second encrypted message is not required to be decrypted by the apparatus and was sent by the third apparatus to a second client;
- monitor the third apparatus;
- and
- upon recognition of failure of the third apparatus, forward the second encrypted message to the second client.
Dependencies are inferred from the claim text.