Securely establishing a communication channel between a switch and a network-based application using a unique identifier for the network-based application
AssigneeHewlett-Packard Development Company, L.P.
InventorsKaushik Datta, Craig Joseph Mills
Life of this patent
Estimating the term…
Abstract
A network-based application can establish a secure network connection to a switch. A unique identifier (UID) is generated for the network-based application, and a secure authentication request is generated from the network-based application. The UID for the network-based application is embedded in the secure authentication request. The secure authentication request is communicated to the switch. A response to the secure authentication request is received from the switch. One or more operations are performed that utilize the UID to establish a secure communication channel between the network-based application and the switch.
Claims20
A non-transitory computer-readable medium storing instructions, that when executed by one or more processors, cause the one or more processors to perform operations comprising:
- generating a unique identifier (UID) for a network-based application;
- generating, for the network-based application, a secure authentication request to a network switch;
- embedding the UID for the network-based application in the secure authentication request;
- communicating the secure authentication request to the network switch using a first secure connection;
- receiving a provisioned certificate from the network switch via the first secure connection, wherein the provisioned certificate is provided by the network switch in response to the secure authentication request, wherein the provisioned certificate includes the UID;
- and
- establishing a second secure connection between the network-based application and the network switch using the provisioned certificate.
A method comprising:
- receiving, at a network switch, a secure authentication request from a network-based application via a first secure connection;
- in response to the secure authentication request:
- parsing, at the network switch, the secure authentication request to determine a unique identifier (UID) for the network-based application;
- recording, at the network switch, the UID as being associated with the network-based application;
- sending a provisioned certificate from the network switch to the network-based application via the first secure connection, the provisioned certificate including the UID;
- receiving, at the network switch, a request for network services from the network-based application, the request for network services including the provisioned certificate;
- and
- in response to receiving the request for network services, establishing a second secure connection between the network switch and the network-based application using the provisioned certificate included in the request for services.
A computing system comprising:
- at least one processor;
- and
- a network-based application;
- wherein the network-based application is executable on the at least one processor to:
- generate a unique identifier for the network-based application;
- transmit a secure authentication request to a network switch via a first secure connection, wherein the unique identifier for the network-based application is embedded in the secure authentication request;
- receive a provisioned certificate from the network switch via the first secure connection, wherein the provisioned certificate is provided by the network switch in response to the secure authentication request, wherein the provisioned certificate includes the unique identifier;
- and
- establish a second secure connection between the network-based application and the network switch using the provisioned certificate.
Dependencies are inferred from the claim text.