Method and system for secure communication
AssigneeIBM International Group B.V.
InventorsCharles S. Fenton, Keith E. Shafer
Life of this patent
Estimating the term…
Abstract
A method and system for secure communication is presented. A virtual private proxy is generated based on an agreement between a first entity and a second entity. A first virtual private proxy is associated with the first entity and a second virtual private proxy is associated with the second entity. Data associated with the first entity is monitored at the virtual private proxy. Whether the data violates the agreement is determined and communication of the data from the first virtual private proxy to the second virtual private proxy is disallowed when the data violates the agreement.
Claims20
A secure network communication method, the method comprising:
- accessing, by a secure switch, a secure network communication agreement between a first entity and a second entity;
- generating, by the secure switch, a first virtual private proxy and a second virtual private proxy;
- establishing a first secure connection between the first virtual private proxy and the first entity;
- prohibiting remote connections to the first entity other than the first secure connection;
- establishing a second secure connection between the second virtual private proxy and the second entity;
- establishing a logical connection between the first virtual private proxy and the second virtual private proxy;
- and
- generating an alarm when transaction data transmitted over the logical connection is not in compliance with the agreement.
A secure switch, comprising:
- a processor configured to access storage media including program instructions, executable by the processor, the program instructions including instructions to:
- access an agreement for secure network communication between a first entity and a second entity, the agreement based on a first profile for the first entity and a second profile for the second entity;
- generate a first virtual private proxy and a second virtual private proxy;
- establish a first secure connection between the first virtual private proxy and the first entity;
- exclude all remote connections to the first entity other than the first secure connection;
- establish a second secure connection between the second virtual private proxy and the second entity;
- establish a logical connection between the first virtual private proxy and the second virtual private proxy;
- and
- monitor, for compliance with the agreement, transaction data arriving at the first virtual private proxy and the second virtual private proxy for transmission over the logical connection between the first entity and the second entity.
Non-transitory storage media including program instructions for implementing secure network communications at a secure switch, the program instructions including instructions executable to:
- access an agreement for secure network communication between a first entity and a second entity, the agreement based on a first profile for the first entity and a second profile for the second entity;
- generate a first virtual private proxy and a second virtual private proxy;
- establish a first secure connection between the first virtual private proxy and the first entity;
- exclude all remote connections to the first entity other than the first secure connection;
- establish a second secure connection between the second virtual private proxy and the second entity;
- establish a logical connection between the first virtual private proxy and the second virtual private proxy;
- monitor, for compliance with the agreement, transaction data arriving at the first virtual private proxy and the second virtual private proxy for transmission over the logical connection;
- when the transaction data is not in compliance with the agreement, recognize a violation of the agreement and generate alarm data associated with the violation;
- and
- when the transaction data complies with the agreement, allow transmission of the transaction data between the first entity and the second entity.
Dependencies are inferred from the claim text.