# US 9,882,965 B2 · Techniques for network process identity enablement > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 9,882,965 B2 - Document ID: US9882965B2 - Status: Granted - Kind: B2 - Application number: 14/459,951 - Filed: 2014-08-14 - Published: 2014-12-04 - Granted: 2018-01-30 - Earliest claimed: 2008-12-15 - Assignees: Micro Focus Software Inc. - Applicants: Micro Focus Software Inc. - Inventors: Jason Allen Sabin; Jeremy Ray Brown; Daniel Robert Timpson - Web page: https://patentgrep.com/patent/US9882965B2 ## CPC - H04L 67/10: in which an application is distributed across nodes in the network (software deployment G06F8/60; multiprogramming arrangements G06F9/46) - G06F 9/54: Interprogram communication - H04L 63/1408: {by monitoring network traffic (monitoring network traffic per se H04L43/00)} - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) ## Abstract Techniques for network process identity enablement are provided. Inter-server communications within a network are intercepted so that unique identity-based information is gathered and recorded before a sending process is permitted to release a communication over the network to a receiving process. Moreover, the receiving process cannot process the communication being sent until identifying information is gathered again and independently validated against the prior recorded information. ## Claims ### Claim 1 A method, comprising: transparently assigning a unique identity to a communication from a first existing process to a second process, the first existing process lacks a unique identifier and lacks an ability to authenticate to the second process, wherein transparently assigning further includes assigning the unique identity without, the first existing process being aware of the unique identity assignment to the communication; and authenticating the first existing process using the unique identity on behalf of the second process for the communication between the first existing process and the second process, wherein each subsequent communication between the first existing processing and the second process includes a different unique identity, and wherein authenticating further include validating the unique identity for the communication and each different unique identity for each subsequent communication before permitting interaction between the first existing process and the second process. ### Claim 2 (depends on 1) The method of claim 1 further comprising, performing the processing of the method as a kernel module to an Operating System (OS). ### Claim 3 (depends on 1) The method of claim 1 further comprising, performing the processing of the method as a network driver module. ### Claim 4 (depends on 1) The method of claim 1, wherein transparently further includes collecting information relevant to the communication, a port used for the communication, the first existing process, and the second existing process for use with assigning the unique identity. ### Claim 5 (depends on 4) The method of claim 4 further comprising, passing the information to an identity service to have the identity service form and assign the unique identity. ### Claim 6 (depends on 5) The method of claim 5, receiving the unique identity from the identity service as a random identity and assigning to the first existing process. ### Claim 7 (depends on 1) The method of claim 1, wherein transparently further includes intercepting the communication being sent from the first existing process to the second process. ### Claim 8 (depends on 1) The method of claim 1, where authenticating further includes consulting an identity service to perform the authentication. ### Claim 9 (depends on 8) The method of claim 8, wherein authenticating further includes releasing the first communication to the second process when the first existing process is authenticated by the identity service using the unique identity of the first existing process. ### Claim 10 A method, comprising: receiving a communication sent from a first existing process on a first server to a second process on a second server, the first existing process lacks an ability to authenticate with the second process and forming and assigning a unique identity that is specific to the communication and forming and assigning a different unique identity for a different communication between the first existing processing and the second process; obtaining information from the second server before the second process receives the communication from the second server; and authenticating the communication and the first existing process based on the information and other information obtained from the communication, and wherein authenticating further includes validating the unique identity for the communication and each different unique identity for each different communication before permitting interaction between the first existing process and the second process. ### Claim 11 (depends on 10) The method of claim 10, wherein receiving further includes identifying that the other information obtained from the communication and the information obtained from the second server are specific to the communication. ### Claim 12 (depends on 11) The method of claim 11, wherein receiving further includes identifyin.g that the other information obtained from the communication and the information obtained from the second server are used to form the unique identity for the communication. ### Claim 13 (depends on 12) The method of claim 12, wherein receiving further includes identifying that the other information obtained from the communication and the information obtained from the second server include metrics for the communication. ### Claim 14 (depends on 10) The method of claim 10, wherein obtaining further includes assigning a policy to enforce on the second server. ### Claim 15 (depends on 10) The method of claim 10, Wherein authenticating further includes preventing the communication from being handled by the second process when the communication and the first existing process are not authenticated. ### Claim 16 (depends on 10) The method of claim 10, wherein authenticating further includes instructing the second server to release the communication to the second process when the communication and the first existing process are authenticated. ### Claim 17 A system, comprising: a server; and a security service and adapted to: i) execute on the processor of the server, ii) intercept a communication directed from a first existing process on the server to a second process on a second server, and iii) establish unique information to permit the second server to authenticate the communication and the first existing process before the second process receives the communication, assign a unique identity to the communication, and assign a different unique identity to a different communication between the first existing process and the second process, and wherein the first existing process lacks an ability to authenticate to the second process and validate the unique identity for the communication and. each different unique identity for each different communication before permitting interaction between the first existing process and the second process. ### Claim 18 (depends on 17) The system of claim 17, wherein the security service, in iii), is further adapted to: consult an identity service to provide the unique information. ### Claim 19 (depends on 18) The system of claim 18, wherein the unique information includes the unique identity for the first existing process and metrics relevant to the communication. ### Claim 20 (depends on 17) The system of claim 17, wherein the security service operates at a kernel level of an Operating System (OS) associated with the server.