专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明授权

US11503042B2 Distributed network security using a logical multi-dimensional label-based policy model 有权
公开(公告)号：US11503042B2
公开(公告)日：2022-11-15
申请号：US15930412
申请日：2020-05-12
申请人： Illumio, Inc.
发明人： Paul J. Kirner , Daniel R. Cook , Juraj G. Fandli , Matthew K. Glenn , Mukesh Gupta , Andrew S. Rubin , Jerry B. Scott , Thukalan V. Verghese
IPC分类号： H04L9/40 , H04L41/0893 , H04L61/2514 , H04L61/4511
摘要： A managed server (MS) within an administrative domain is quarantined. The administrative domain includes multiple MSs that use management instructions to configure management modules so that the configured management modules implement an administrative domain-wide management policy that comprises a set of one or more rules. The quarantined MS is isolated from other MSs. A description of the MS is modified to indicate that the MS is quarantined, thereby specifying a description of the quarantined MS. Cached actor-sets are updated to indicate the quarantined MS's changed state, thereby specifying updated actor-sets. A determination is made regarding which updated actor-sets are relevant to an other MS, thereby specifying currently-relevant updated actor-sets. A determination is made regarding whether the currently-relevant updated actor-sets differ from actor-sets previously sent to the other MS. Responsive to determining that the currently-relevant updated actor-sets are identical to the previously-sent actor-sets, no further action is taken.

2. 发明授权

US10897403B2 Distributed network management using a logical multi-dimensional label-based policy model 有权
公开(公告)号：US10897403B2
公开(公告)日：2021-01-19
申请号：US15861665
申请日：2018-01-03
申请人： Illumio, Inc.
发明人： Paul J. Kirner , Daniel R. Cook , Juraj G. Fandli , Matthew K. Glenn , Mukesh Gupta , Andrew S. Rubin , Jerry B. Scott , Sehyo Chang , Alan B. Stokol
IPC分类号： H04L12/24 , H04L29/06 , H04L12/715 , G06F9/50 , G06Q10/06 , H04L29/08 , G06F11/36 , G06Q30/02
摘要： Management instructions for a particular managed server within an administrative domain are generated according to an administrative domain-wide management policy that comprises a set of one or more rules. The administrative domain includes a plurality of managed servers. A determination is made regarding which rules within the set of rules are relevant to the particular managed server. Function-level instructions are generated based on the rules that were determined to be relevant. A determination is made regarding which managed servers within the plurality of managed servers are relevant to the particular managed server. The function-level instructions and information regarding the managed servers that were determined to be relevant are sent to the particular managed server. The particular managed server uses the function-level instructions and information regarding the managed servers to configure a management module so that the configured management module implements the administrative domain-wide management policy.

3. 发明授权

US10277460B2 Updating management instructions for bound services in a distributed network management system 有权
公开(公告)号：US10277460B2
公开(公告)日：2019-04-30
申请号：US14934868
申请日：2015-11-06
申请人： Illumio, Inc.
发明人： Paul J. Kirner , Juraj G. Fandli , Antonio P. A. Rainha Dias
IPC分类号： H04L12/24
摘要： Management instructions for a managed servers are updated according to a set of rules included in management policy. A global manager computer receives information describing a change in a bound service executed by the particular managed server. The global manager generates an updated description of the particular managed server is generated by modifying an initial description of the particular managed server according to the received information describing the change in the bound service. The global manager determines currently relevant rules for the particular managed server. If the currently-relevant rules differ from previously-relevant rules, the global manager determines a rule is that should be added. The global manager generates a function-level instruction including a reference to an authorized actor-set of actors permitted to communicate with the bound service. The global manager configures the particular managed server to enforce the function-level instruction.

4. 发明申请

US20190123905A1 Enforcing a Segmentation Policy Using Cryptographic Proof of Identity 审中-公开
公开(公告)号：US20190123905A1
公开(公告)日：2019-04-25
申请号：US15789921
申请日：2017-10-20
申请人： Illumio, Inc.
发明人： Paul J. Kirner , Matthew K. Glenn , Mukesh Gupta , Anish Vinodkumar Desai
IPC分类号： H04L9/32 , H04L29/06
摘要： A segmentation server defines a segmentation policy and distributes the segmentation policy to be enforced by a plurality of operating system (OS) instances. The segmentation policy includes rules controlling which workloads executing on the OS instances can communicate with other workloads and controlling how the workloads may communicate. When a connection between two OS instances is requested, each OS instance provides an identity and a cryptographic proof of the identity. The OS instances each authenticate the identity received from the other OS instance, and once authenticated, determines based on the authenticated identities if the rules permit the communication. If the rules permit the communication, the OS instances obtain session parameters that enable the OS instances to validate integrity of the messages communicated between the workloads and optionally encrypt the messages.

5. 发明授权

US10212191B2 Automated generation of access control rules for use in a distributed network management system that uses a label-based policy model 有权
公开(公告)号：US10212191B2
公开(公告)日：2019-02-19
申请号：US15891214
申请日：2018-02-07
申请人： Illumio, Inc.
发明人： Paul J. Kirner , Matthew K. Glenn , Mukesh Gupta , Roy N. Nakashima , Thukalan V. Verghese
IPC分类号： H04L29/06
摘要： An access control rule authorizing communication between a plurality of managed servers within an administrative domain is determined. Communication information describing past communication between the plurality of managed servers is obtained. A subset of managed servers from the plurality of managed servers is identified by grouping the plurality of managed servers based on the obtained communication information. A group-level label set is determined to associate with the subset of managed servers. Role labels are determined for managed servers in the subset of managed servers. A managed server is associated with one role label. Based on the group-level label set and the role labels, an access control rule is generated authorizing communication between a first managed server of the subset of managed servers and a second managed server. The access control rule is stored as part of an administrative domain-wide management policy.

6. 发明申请

US20140373091A1 Distributed Network Security Using a Logical Multi-Dimensional Label-Based Policy Model 有权
标题翻译：分布式网络安全使用基于逻辑多维标签的策略模型
公开(公告)号：US20140373091A1
公开(公告)日：2014-12-18
申请号：US14474916
申请日：2014-09-02
申请人： Illumio, Inc.
发明人： Paul J. Kirner , Daniel R. Cook , Juraj G. Fandli , Matthew K. Glenn , Mukesh Gupta , Andrew S. Rubin , Jerry B. Scott , Thukalan V. Verghese
IPC分类号： H04L29/06 , H04L12/26
CPC分类号： H04L63/1416 , H04L41/0893 , H04L61/1511 , H04L61/2514
摘要： A managed server (MS) within an administrative domain is quarantined. The administrative domain includes multiple MSs that use management instructions to configure management modules so that the configured management modules implement an administrative domain-wide management policy that comprises a set of one or more rules. The quarantined MS is isolated from other MSs. A description of the MS is modified to indicate that the MS is quarantined, thereby specifying a description of the quarantined MS. Cached actor-sets are updated to indicate the quarantined MS's changed state, thereby specifying updated actor-sets. A determination is made regarding which updated actor-sets are relevant to an other MS, thereby specifying currently-relevant updated actor-sets. A determination is made regarding whether the currently-relevant updated actor-sets differ from actor-sets previously sent to the other MS. Responsive to determining that the currently-relevant updated actor-sets are identical to the previously-sent actor-sets, no further action is taken.
摘要翻译：管理域内的受管服务器（MS）被隔离。管理域包括使用管理指令配置管理模块的多个MS，以便配置的管理模块实现一个包含一个或多个规则集合的管理域范围的管理策略。隔离的MS与其他MS隔离。修改MS的描述以指示MS被隔离，从而指定隔离的MS的描述。更新缓存的actor集，以指示被隔离的MS的更改状态，从而指定更新的actor集。确定哪个更新的演员组与另一个MS相关，从而指定当前相关的更新的演员组。确定当前相关的更新的演员集是否与先前发送给另一个MS的演员集不同。响应于确定当前相关的更新的演员集与先前发送的演员集相同，不采取进一步的动作。

7. 发明申请

US20140310415A1 DISTRIBUTED NETWORK MANAGEMENT USING A LOGICAL MULTI-DIMENSIONAL LABEL-BASED POLICY MODEL 有权
标题翻译：使用逻辑多维标签的策略模型进行分布式网络管理
公开(公告)号：US20140310415A1
公开(公告)日：2014-10-16
申请号：US14249128
申请日：2014-04-09
申请人： Illumio, Inc.
发明人： Paul J. Kirner , Daniel R. Cook , Juraj G. Fandli , Matthew K. Glenn , Mukesh Gupta , Andrew S. Rubin , Jerry B. Scott , Sehyo Chang , Alan B. Stokol
IPC分类号： H04L12/24
CPC分类号： H04L41/145 , G06F9/50 , G06F11/3624 , G06Q10/06 , H04L29/06 , H04L41/082 , H04L41/0869 , H04L41/0893 , H04L45/04 , H04L63/10 , H04L63/20 , H04L67/125
摘要： Management instructions for a particular managed server within an administrative domain are generated according to an administrative domain-wide management policy that comprises a set of one or more rules. The administrative domain includes a plurality of managed servers. A determination is made regarding which rules within the set of rules are relevant to the particular managed server. Function-level instructions are generated based on the rules that were determined to be relevant. A determination is made regarding which managed servers within the plurality of managed servers are relevant to the particular managed server. The function-level instructions and information regarding the managed servers that were determined to be relevant are sent to the particular managed server. The particular managed server uses the function-level instructions and information regarding the managed servers to configure a management module so that the configured management module implements the administrative domain-wide management policy.
摘要翻译：根据管理域范围的管理策略生成管理域内特定受管服务器的管理指令，该管理策略包含一组或多个规则。管理域包括多个受管服务器。确定该组规则内的哪些规则与特定受管服务器相关。功能级指令是根据确定为相关的规则生成的。确定多个受管服务器内的哪些被管理的服务器与特定的受管服务器相关。有关被确定为相关的受管服务器的功能级指令和信息被发送到特定的受管服务器。特定的受管服务器使用功能级指令和有关受管服务器的信息来配置管理模块，以便配置的管理模块实现管理域范围的管理策略。

8. 发明授权

US11425139B2 Enforcing label-based rules on a per-user basis in a distributed network management system 有权
公开(公告)号：US11425139B2
公开(公告)日：2022-08-23
申请号：US16874411
申请日：2020-05-14
申请人： Illumio, Inc.
发明人： Anish V. Desai , Juraj G. Fandli , Matthew Glenn , Mukesh Gupta , Paul J. Kirner
IPC分类号： H04L29/06 , H04L9/40 , H04L67/53 , H04L67/51 , G06F21/62
摘要： State information is received from a server indicating an identity of a user logged into the server. An administrative domain wide policy is determined that specifies a relationship between user a group and services or servers accessible to users belonging to the user group. Relevant servers are sent updated management instructions corresponding to rules of the administrative domain wide policy. Such rules provide access to a service or server to users belonging to user groups related to the service. As a result, the servers allow communications that provide access to users based on the specified relationships.

9. 发明授权

US10917309B2 Distributed network management using a logical multi-dimensional label-based policy model 有权
公开(公告)号：US10917309B2
公开(公告)日：2021-02-09
申请号：US15597127
申请日：2017-05-16
申请人： Illumio, Inc.
发明人： Paul J. Kirner , Daniel R. Cook , Juraj G. Fandli , Matthew K. Glenn , Mukesh Gupta , Andrew S. Rubin , Jerry B. Scott , Sehyo Chang , Alan B. Stokol
IPC分类号： H04L12/24 , H04L29/06 , H04L12/801 , H04L12/815 , H04L12/715 , G06F9/50 , G06Q10/06 , H04L29/08 , G06F11/36 , G06Q30/02
摘要： Management instructions for a particular managed server within an administrative domain are generated according to an administrative domain-wide management policy that comprises a set of one or more rules. The administrative domain includes a plurality of managed servers. A determination is made regarding which rules within the set of rules are relevant to the particular managed server. Function-level instructions are generated based on the rules that were determined to be relevant. A determination is made regarding which managed servers within the plurality of managed servers are relevant to the particular managed server. The function-level instructions and information regarding the managed servers that were determined to be relevant are sent to the particular managed server. The particular managed server uses the function-level instructions and information regarding the managed servers to configure a management module so that the configured management module implements the administrative domain-wide management policy.

10. 发明授权

US10701090B2 Distributed network security using a logical multi-dimensional label-based policy model 有权
公开(公告)号：US10701090B2
公开(公告)日：2020-06-30
申请号：US15841542
申请日：2017-12-14
申请人： Illumio, Inc.
发明人： Paul J. Kirner , Daniel R. Cook , Juraj G. Fandli , Matthew K. Glenn , Mukesh Gupta , Andrew S. Rubin , Jerry B. Scott , Thukalan V. Verghese
IPC分类号： H04L29/06 , H04L12/24 , H04L29/12
摘要： A managed server (MS) within an administrative domain is quarantined. The administrative domain includes multiple MSs that use management instructions to configure management modules so that the configured management modules implement an administrative domain-wide management policy that comprises a set of one or more rules. The quarantined MS is isolated from other MSs. A description of the MS is modified to indicate that the MS is quarantined, thereby specifying a description of the quarantined MS. Cached actor-sets are updated to indicate the quarantined MS's changed state, thereby specifying updated actor-sets. A determination is made regarding which updated actor-sets are relevant to an other MS, thereby specifying currently-relevant updated actor-sets. A determination is made regarding whether the currently-relevant updated actor-sets differ from actor-sets previously sent to the other MS. Responsive to determining that the currently-relevant updated actor-sets are identical to the previously-sent actor-sets, no further action is taken.

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式