专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明授权

US10454931B2 Secure remote access for secured enterprise communications 有权
公开(公告)号：US10454931B2
公开(公告)日：2019-10-22
申请号：US15001354
申请日：2016-01-20
申请人： Ted Hinaman , Steven J Rajcan , Matthew Mohr , William Gunn , Sarah K Inforzato , Robert A Johnson , Gregory J Small , David S Dodgson
发明人： Ted Hinaman , Steven J Rajcan , Matthew Mohr , William Gunn , Sarah K Inforzato , Robert A Johnson , Gregory J Small , David S Dodgson
IPC分类号： H04L29/06 , H04W12/06 , H04L12/46 , H04W72/04 , H04W88/16
摘要： Methods and systems for securing communications with an enterprise from a remote computing system are disclosed. One method includes initiating a secured connection with a VPN appliance associated with an enterprise using service credentials maintained in a secure applet installed on a remote computing device, and initiating communication with an authentication server within an enterprise via the secured connection. The method also includes receiving specific credentials from the authentication server, terminating the secured connection with the VPN appliance, and initiating a second secured connection with the VPN appliance using the specific credentials, the specific credentials providing access to one or more computing devices within the enterprise being within a same community of interest as the remote computing device and obfuscating one or more other computing systems within the enterprise excluded from the community of interest. The method also includes initiating communications with at least one of the one or more computing devices included in the community of interest.

2. 发明授权

US10454890B2 Negotiation of security protocols and protocol attributes in secure communications environment 有权
公开(公告)号：US10454890B2
公开(公告)日：2019-10-22
申请号：US14042239
申请日：2013-09-30
申请人： Robert A Johnson , Kathleen Wild , Sarah K Inforzato , Ted Hinaman
发明人： Robert A Johnson , Kathleen Wild , Sarah K Inforzato , Ted Hinaman
IPC分类号： H04L29/00 , H04L29/06 , G06F21/00 , G06F21/53 , H04L9/08
摘要： Methods of communicatively connecting first and second endpoints are disclosed. One method includes transmitting from a first endpoint to a second endpoint a connection request, the connection request including an IP address of the second endpoint. The method further includes, based at least in part on the IP address of the second endpoint, selecting IPsec from among a plurality of available security protocols to first attempt to use in forming a tunnel between the first and second endpoints, and forming the tunnel between the first and second endpoints based on the connection request.

3. 发明授权

US09716589B2 Secured communications arrangement applying internet protocol security 有权
公开(公告)号：US09716589B2
公开(公告)日：2017-07-25
申请号：US14042182
申请日：2013-09-30
申请人： Robert A Johnson , Kathleen Wild , Sarah K Inforzato , Ted Hinaman
发明人： Robert A Johnson , Kathleen Wild , Sarah K Inforzato , Ted Hinaman
IPC分类号： H04L29/06 , H04L9/08 , G06F21/00 , G06F21/53
CPC分类号： H04L63/02 , G06F21/00 , G06F21/53 , H04L9/0838 , H04L9/0841 , H04L63/0227 , H04L63/0236 , H04L63/0485 , H04L63/061 , H04L63/164 , H04L63/166 , H04L63/205 , H04L69/18
摘要： A secure communications arrangement including an endpoint is disclosed. The endpoint includes a computing system. The computing system includes a user level services component and a kernel level callout driver interfaced to the user level services component and configured to establish an IPsec tunnel with a remote endpoint. The computing system also includes a filter engine storing one or more filters defining endpoints authorized to communicate with the endpoint via the IPsec tunnel. The computing system also includes a second kernel level driver configured to establish a secure tunnel using a second security protocol different from IPsec.

4. 发明授权

US09596077B2 Community of interest-based secured communications over IPsec 有权
标题翻译：基于IPsec的基于兴趣的安全通信社区
公开(公告)号：US09596077B2
公开(公告)日：2017-03-14
申请号：US14042212
申请日：2013-09-30
申请人： Robert A Johnson , Kathleen Wild , Sarah K Inforzato , Ted Hinaman
发明人： Robert A Johnson , Kathleen Wild , Sarah K Inforzato , Ted Hinaman
IPC分类号： H04L29/06 , H04L9/08 , G06F21/53 , G06F21/00
CPC分类号： H04L63/02 , G06F21/00 , G06F21/53 , H04L9/0838 , H04L9/0841 , H04L63/0227 , H04L63/0236 , H04L63/0485 , H04L63/061 , H04L63/164 , H04L63/166 , H04L63/205 , H04L69/18
摘要： A method and system for establishing secure communications between endpoints includes transmitting a first message including a token having one or more entries each corresponding to a community of interest associated with a user of the first endpoint and including an encryption key and a validation key associated with the first endpoint. The method includes receiving a second message including a second authorization token including one or more entries, each entry corresponding to a community of interest associated with a second user and including an encryption key and a validation key associated with the second endpoint. The method includes, for each community of interest associated with both users, decrypting an associated entry in the second authorization token to obtain the encryption key and validation key associated with the second endpoint. The method also includes generating a shared secret based on the key pair, transmitting a third message including the created key pair to the second endpoint, and initializing tunnel using the shared secret to derive encryption keys used for IPsec-secured communications between the endpoints.
摘要翻译：一种用于在端点之间建立安全通信的方法和系统包括：发送包括令牌的第一消息，所述令牌具有一个或多个条目，每个条目对应于与所述第一端点的用户相关联的感兴趣社区，并且包括与所述第一端点相关联的加密密钥和验证密钥第一个端点。该方法包括接收第二消息，其包括包括一个或多个条目的第二授权令牌，每个条目对应于与第二用户相关联的感兴趣社区，并且包括加密密钥和与第二端点相关联的验证密钥。对于与两个用户相关联的每个感兴趣社区，该方法包括在第二授权令牌中解密相关联的条目以获得与第二端点相关联的加密密钥和验证密钥。该方法还包括基于密钥对生成共享密钥，将包括所创建的密钥对的第三消息发送到第二端点，以及使用共享密钥初始化隧道以导出用于端点之间的IPsec安全通信的加密密钥。

5. 发明授权

US09794237B2 Secured networks and endpoints applying internet protocol security 有权
公开(公告)号：US09794237B2
公开(公告)日：2017-10-17
申请号：US14753120
申请日：2015-06-29
申请人： Robert A Johnson , Sarah K Inforzato
发明人： Robert A Johnson , Sarah K Inforzato
IPC分类号： H04L29/06 , H04L12/46
CPC分类号： H04L63/0485 , H04L12/4633 , H04L63/0272 , H04L63/061 , H04L63/0853 , H04L63/102 , H04L63/164
摘要： A method of managing secure communications states in an endpoint within a secure network is disclosed. The method includes, in a disconnected state, transmitting from a first endpoint to a second endpoint a first message including an authorization token. The method further includes, in the pending state, receiving from the second endpoint a second message including a second authorization token at the first endpoint. The method includes, based on the receipt of the second message, entering an open state and initializing a tunnel between the first and second endpoints using an IPsec-based secured connection. The method also includes, upon termination of the tunnel due to a termination or timeout message issued by at least one of the first and second endpoints, entering a closed state.

6. 发明授权

US09794225B2 Secure network communications in a mobile device over IPsec 有权
公开(公告)号：US09794225B2
公开(公告)日：2017-10-17
申请号：US14753146
申请日：2015-06-29
申请人： Robert A Johnson , James Trocki , Mark K Vallevand , Steven L Rajcan , Ted Hinaman
发明人： Robert A Johnson , James Trocki , Mark K Vallevand , Steven L Rajcan , Ted Hinaman
IPC分类号： H04L29/06 , H04W88/16
CPC分类号： H04L63/0272 , H04L63/08 , H04L63/104 , H04W88/16
摘要： Methods and systems of communicating with secure endpoints included within a secured network from a mobile device external to the secured network is disclosed. The method includes initiating a VPN-based secure connection to a VPN appliance, and initializing a stealth-based service on the mobile device. The method further includes transmitting user credential information from the mobile device to a VDR broker via the VPN appliance, and receiving status information from the VDR broker identifying a VDR associated with the mobile device and providing a connected status. The method also includes communicating with one or more secure endpoints within the secured network via a VPN connection to the VDR via the VPN appliance and through the VDR to the one or more secure endpoints within a community of interest based on the user credential information transmitted to the VDR broker.

7. 发明授权

US09912663B2 Enabling secure network mobile device communications 有权
公开(公告)号：US09912663B2
公开(公告)日：2018-03-06
申请号：US15427167
申请日：2017-02-08
申请人： Robert A Johnson , James Trocki , Mark K Vallevand , Steven L Rajcan , Ted Hinaman
发明人： Robert A Johnson , James Trocki , Mark K Vallevand , Steven L Rajcan , Ted Hinaman
IPC分类号： H04L29/06 , H04W12/06 , H04L12/46 , H04W72/04 , H04W88/16
CPC分类号： H04L63/0884 , H04L12/4641 , H04L63/0272 , H04L63/029 , H04L63/083 , H04L63/104 , H04W12/06 , H04W72/04 , H04W88/16
摘要： Methods and systems of communicating with secure endpoints included within a secured network from a mobile device external to the secured network is disclosed. The method includes initiating a VPN-based secure connection to a VPN appliance, and initializing a stealth-based service on the mobile device. The method further includes transmitting user credential information from the mobile device to a VDR broker via the VPN appliance, and receiving status information from the VDR broker identifying a VDR associated with the mobile device and providing a connected status. The method also includes communicating with one or more secure endpoints within the secured network via a VPN connection to the VDR via the VPN appliance and through the VDR to the one or more secure endpoints within a community of interest based on the user credential information transmitted to the VDR broker.

8. 发明授权

US10248442B2 Automated provisioning of virtual machines 有权
公开(公告)号：US10248442B2
公开(公告)日：2019-04-02
申请号：US13547148
申请日：2012-07-12
申请人： David S Dodgson , Ralph Farina , James A Fontana , Robert A Johnson , David Maw , Anthony Narisi
发明人： David S Dodgson , Ralph Farina , James A Fontana , Robert A Johnson , David Maw , Anthony Narisi
IPC分类号： G06F9/455 , G06F21/60 , H04L29/06
摘要： Virtual machines in a network may be isolated by encrypting transmissions between the virtual machines with keys possessed only by an intended recipient. Within a network, the virtual machines may be logically organized into a number of community-of-interest (COI) groups. Each COI may use an encryption key to secure communications within the COI, such that only other virtual machines in the COI may decrypt the message. Virtual machines may be automatically provisioned with configuration information, such as the encryption keys, when the virtual machine is started. The provisioning information may be created based on a template stored on a configuration server.

9. 发明申请

US20150381597A1 ENTERPRISE MANAGEMENT FOR SECURE NETWORK COMMUNICATIONS OVER IPSEC 审中-公开
标题翻译： IPSEC安全网络通信企业管理
公开(公告)号：US20150381597A1
公开(公告)日：2015-12-31
申请号：US14688348
申请日：2015-04-16
申请人： Robert A Johnson , David S Dodgson , Daniel Keiser , Jawahar Bharatia
发明人： Robert A Johnson , David S Dodgson , Daniel Keiser , Jawahar Bharatia
IPC分类号： H04L29/06 , H04L12/24 , G06F21/10 , H04L29/08
CPC分类号： H04L63/08 , G06F21/604 , H04L41/0843 , H04L63/20 , H04L67/02 , H04L67/30
摘要： Methods and systems for managing a secure enterprise are disclosed. One method includes initiating a management service at a server within the secure enterprise, the management service including a web interface providing administrative access to configuration settings associated with the secure enterprise, the management service initializing a secure communications protocol and managing access to a credential store, the credential store including a plurality of credentials defining communities of interest within the secure enterprise, each of the communities of interest defining a collection of authenticated endpoints having common access and usage rights. The method includes initiating an object management service at the server defining an interface to a configuration database, and accessing the configuration database to obtain data defining a configuration of the enterprise according to a configuration profile. The method includes applying configuration settings to the secure enterprise based on the data defining the configuration of the secure enterprise.
摘要翻译：公开了用于管理安全企业的方法和系统。一种方法包括在安全企业内的服务器上启动管理服务，管理服务包括提供对与安全企业相关联的配置设置的管理访问的web界面，初始化安全通信协议的管理服务以及管理对凭证存储的访问，证书存储包括在安全企业内定义感兴趣社区的多个凭证，感兴趣的社区每个定义具有共同访问权限和使用权限的认证端点的集合。该方法包括在定义与配置数据库的接口的服务器上启动对象管理服务，以及根据配置简档访问配置数据库以获取定义企业配置的数据。该方法包括基于定义安全企业的配置的数据将配置设置应用于安全企业。

10. 发明申请

US20150381568A1 SECURE INTEGRATION OF HYBRID CLOUDS WITH ENTERPRISE NETWORKS 有权
标题翻译：混合云与企业网络的安全整合
公开(公告)号：US20150381568A1
公开(公告)日：2015-12-31
申请号：US14474459
申请日：2014-09-02
申请人： Robert A Johnson , MARK S BRANDT , CHRISTOPHER A BYRD , KATHY Y JAING
发明人： Robert A Johnson , MARK S BRANDT , CHRISTOPHER A BYRD , KATHY Y JAING
IPC分类号： H04L29/06 , G06F21/10
CPC分类号： H04L63/0272 , G06F9/45533 , G06F21/105 , G06Q10/10 , H04L63/0209 , H04L63/029 , H04L63/04 , H04L63/0485 , H04L63/08 , H04L63/164
摘要： A system and method of managing secure integration of a cloud-based computing resource with a private domain are disclosed. One system includes a hybrid cloud arrangement including a plurality of virtual machines, the plurality of virtual machines including at least a first virtual machine within the private domain and a second virtual machine within a public cloud. The system also includes a virtual data relay within the private domain and associated with the second virtual machine. The virtual data relay includes a private domain interface used to establish a secure communication link according to a first security protocol with each virtual machine within the private domain that is a member of a community of interest, the virtual data relay assigned a community of interest key used by the private domain interface and defining the community of interest of which the second virtual machine is a member. The virtual data relay also includes a public cloud interface used to establish a secure communication link with the second virtual machine, the public cloud interface using a second security protocol different from the first security protocol.
摘要翻译：公开了一种管理基于云的计算资源与私有域的安全集成的系统和方法。一个系统包括包括多个虚拟机的混合云布置，所述多个虚拟机至少包括私有域内的第一虚拟机和公共云内的第二虚拟机。该系统还包括私有域内的虚拟数据中继并与第二虚拟机相关联。虚拟数据中继包括用于根据第一安全协议建立安全通信链路的专用域接口，私有域内的每个虚拟机是感兴趣社区的成员，虚拟数据中继器被分配了感兴趣的密钥由私有域接口使用，并定义第二个虚拟机所属的兴趣社区。虚拟数据中继还包括用于与第二虚拟机建立安全通信链路的公共云接口，公共云接口使用不同于第一安全协议的第二安全协议。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式