Back to results
US 9,288,186 B2Granted
Network security using encrypted subfields
AssigneeCisco Technology, Inc.
InventorDavid McGrew
Life of this patent
Estimating the term…
Abstract
In one embodiment, a method includes receiving from a secure device, an encrypted rule at a first network device, receiving at the first network device, a packet containing at least one encrypted subfield from a second network device, the subfield encrypted based on a key received at the second network device from the secure device, and determining if the encrypted subfield matches the encrypted rule. An apparatus and logic are also disclosed herein.
Claims20
A method comprising:
- receiving from a secure device at a first network device, an encrypted rule encrypted with a key at the secure device;
- storing the encrypted rule at the first network device, wherein content of the rule is hidden from the first network device;
- receiving at the first network device, a packet containing at least one encrypted subfield from a second network device, said subfield encrypted based on the key received at the second network device from the secure device;
- and
- processing the packet, wherein processing comprises using the encrypted rule to inspect the packet and determine if said encrypted subfield in the packet matches said encrypted rule received from the secure device.
2 more elements
An apparatus comprising:
- a processor for receiving from a secure device, an encrypted rule at a first network device, the rule encrypted with a key at the secure device, storing said encrypted rule, wherein content of the rule is hidden at the apparatus, processing a packet containing at least one encrypted subfield from a second network device, said subfield encrypted based on a key received at the second network device from the secure device, and determining if said encrypted subfield matches said encrypted rule;
- and
- memory for storing said encrypted rule.
Logic encoded on one or more non-transitory computer readable media for execution and when executed configured to:
- store an encrypted rule received from a secure device at a first network device, said encrypted rule encrypted with a key at the secure device;
- store the encrypted rule at the first network device, wherein content of the rule is hidden from the first network device;
- inspect a packet received from a second network device and containing at least one encrypted subfield, said subfield encrypted based on a key received at the second network device from the secure device;
- and
- process the packet to determine if said encrypted subfield matches said encrypted rule received from the secure device.
2 more elements
Dependencies are inferred from the claim text.