Back to results
US 8,752,132 B2Granted
Methods, apparatuses, and systems for the dynamic evaluation and delegation of network access control
AssigneeIntel Corporation
InventorsNed M. Smith, Howard C. Herbert, Karanvir Grewal
Life of this patent
Estimating the term…
Abstract
Embodiments of the inventions are generally directed to methods, apparatuses, and systems for the dynamic evaluation and delegation of network access control. In an embodiment, a platform includes a switch to control a network connection and an endpoint enforcement engine coupled with the switch. The endpoint enforcement engine may be capable of dynamically switching among a number of network access control modes responsive to an instruction received from the network connection.
Claims18
An apparatus comprising:
- a processor including endpoint enforcement engine circuitry to dynamically switch among a plurality of network access control modes responsive, at least in part, to an instruction received from a network connection to a network, wherein the plurality of network access control modes includes:
- an access requester mode for operation of the endpoint enforcement engine circuitry to connect the apparatus to the network;
- and
- a policy enforcement point mode for operation of the endpoint enforcement engine circuitry to enforce an access policy on a network node coupled to the network.
1 more element
A system comprising:
- a switch to control a network connection to a network;
- and
- a processor to couple to the switch, the processor including endpoint enforcement engine circuitry to dynamically switch among a plurality of network access control modes responsive, at least in part, to an instruction received from the network connection, wherein the plurality of network access control modes includes:
- an access requester mode for operation of the endpoint enforcement engine circuitry to connect the apparatus to the network;
- and
- a policy enforcement point mode for operation of the endpoint enforcement engine circuitry to enforce an access policy on a network node coupled to the network.
3 more elements
A method at a first network node, the method comprising:
- receiving, at endpoint enforcement engine circuitry of a processor, an indication to change a network access control mode of the endpoint enforcement engine circuitry, wherein the indication is based, at least in part, on integrity measurement data derived from one or more network nodes;
- and
- dynamically switching the endpoint enforcement engine circuitry among a plurality of network access control modes responsive, at least in part, to the indication, wherein the plurality of network access control modes includes:
- an access requester mode for operation of the endpoint enforcement engine circuitry to connect the first network node to the network;
- and
- a policy enforcement point mode for operation of the endpoint enforcement engine circuitry to enforce an access policy on a network node coupled to the network.
3 more elements
Dependencies are inferred from the claim text.