Security in networks
AssigneeInfineon Technologies AG
InventorsNeal J. King, Charles Bry
Life of this patent
Estimating the term…
Abstract
A communication system may be configured to control by a security controller the use of a node in a network for a service or application to transmit data via the node, wherein the security controller controls the use of the node based on a predetermined list indicating whether the service or application is allowed for the node, the predetermined list including combined identifiers for client applications and identifiers for network nodes.
Claims12
A method comprising:
- controlling by a security controller the use of a node in a network for a service or application to transmit data via the node, wherein the security controller controls the use of the node based on a predetermined list indicating whether the service or application is allowed for the node, the predetermined list including combined identifiers for client applications and identifiers for network nodes;
- and
- analyzing a packet that includes a combined client application identification and a network node identification, at least the client application identification included in a header of the packet, the analyzing of the packet being performed by a Medium-Access Control (MAC) Control Plane of the security controller.
A method comprising:
- providing information indicating allowable combinations of nodes and client applications, the information indicating the allowable combinations based on combined identifiers for client applications and identifiers for network nodes;
- analyzing a packet that includes a combined client application identification and a network node identification, at least the client application identification included in a header of the packet, the analyzing of the packet being performed by a Medium-Access Control (MAC) Control Plane of a security controller;
- and
- using the information in the security controller of a network to control the provision of services by the nodes of the network.
A device configured to control the use of a node in network for a service or application of an entity of the network by a hardware security controller, wherein the security controller analyzes a packet that includes a combined client application identification and a network node identification, at least the client application identification included in a header of the packet, the analyzing of the packet being performed by a Medium-Access Control (MAC) Control Plane of the security controller and wherein the security controller controls the use of the node based on predetermined list indicating whether the service or application is allowed for the node, the predetermined list including combined identifiers for client applications and identifiers for network nodes.
A hardware network security controller, the controller configured to provide information indicating allowable combinations of client applications and nodes and to use the information to control provision of services by the nodes in the network, the information indicating the allowable combinations based on combined identifiers for client applications and identifiers for network nodes, the controller further configured to analyze a packet that includes a combined client application identification and a network node identification, at least the client application identification included in a header of the packet, the analyzing of the packet being performed by a Medium-Access Control (MAC) Control Plane of the controller.
A network system comprising:
- a hardware network security controller, the controller configured to provide information indicating allowable combinations of client applications and nodes and to use the information to control provision of services by nodes in the network, the information indicating the allowable combinations based on combined identifiers for client applications and identifiers for network nodes, the controller further configured to analyze a packet that includes a combined client application identification and a network node identification, at least the client application identification included in a header of the packet, the analyzing of the packet being performed by a Medium-Access Control (MAC) Control Plane of the controller.
A network system comprising:
- a device configured to control the use of a network node for a service or application of an entity of the network by a security controller, wherein the security controller controls the use of the node based on a predetermined list indicating whether the service or application is allowed for the node, the predetermined list including combined identifiers for client applications and identifiers for network nodes, and wherein the controller analyzes a packet that includes a combined client application identification and a network node identification, at least the client application identification included in a header of the packet, the analyzing of the packet being performed by a Medium-Access Control (MAC) Control Plane of the controller.
Dependencies are inferred from the claim text.