Enforcing the principle of least privilege for large tunnel-less VPNs
Number of patents in Portfolio can not be more than 2000
United States of America Patent
Stats
-
Apr 10, 2012
Grant Date -
Feb 11, 2010
app pub date -
Aug 5, 2008
filing date -
Aug 5, 2008
priority date (Note) -
In Force
status (Latency Note)
Importance
Abstract
Techniques for secure communication in a tunnel-less VPN are provided. A key server generates and provides, to each VPN gateway, different, yet mathematically-related keying material. A VPN gateway receives distinct keying material for each designated address block (e.g., subnet) behind the VPN gateway. In response to receiving a packet from one a source host whose address falls within one of the designated address blocks, the VPN gateway identifies the appropriate keying material. The VPN gateway determines an identifier for the address block that includes the destination address. The identifier and the identified keying material are used to generate a key. The VPN gateway encrypts the packet with the key and forwards the encrypted packet to the destination host.
First Claim
Other Claims data not available
