Method of creating secure endpoints on a network

Patent metadata

Field	Value
Publication number	US-12225017-B2
Application number	US-202117386055-A
Country	US
Kind code	B2
Filing date	Jul 27, 2021
Priority date	Jul 27, 2020
Publication date	Feb 11, 2025
Grant date	Feb 11, 2025

Abstract

A method of creating secure endpoints on a network includes registering by a node using a random selection algorithm to choose which server to register to; receiving by the node a property set ID of a property set that the node is a member of; and authorizing by the node using the property set ID to look up its authorization details in the property set. A method of creating secure endpoints on a secure network having at least one community of interest, includes registering by a node using a random selection algorithm to choose which server to register to; receiving by the node a property set ID of a property set that the node is a member of; and authorizing by the node through an authorization server using the property set ID to look up its authorization details in the property set; wherein the node and the authorization server are a member of the at least one community of interest.

First claim

We claim:

1. A method of creating secure endpoints on a network, including:
registering by a node to a registration server using a random selection algorithm to choose the registration server to register to;
receiving by the node, a property set ID of a property set that the node is a member of, wherein the property set ID allows the node to look up its authorization in a setting file for authorization; and
authorizing to join a secure network by the node through an authorization server that is a member of at least one community of interest to which the node is a member using the property set ID of the property set to look up its authorization details including the authorization server in the property set wherein the node is a member of at least one community of interest in a secure network environment.

2. The method according to claim 1 , including using common information rules by the node to apply prior to authorization.

3. The method according to claim 1 , wherein authorizing includes using a random hunting algorithm such that different nodes attempt to authorize at a different place in a list.

4. The method according to claim 1 , wherein authorizing by the node includes authorizing by the node through an authorization group having at least one authorization server as a member.

5. The method according to claim 4 , wherein the authorization group is associated with the property set.

6. The method according to claim 5 , wherein the authorization group is associated with more than one property set.

7. The method according to claim 1 , wherein the property set contains rules on how the node operates and authenticates.

8. The model according to claim 7 , wherein the node's membership in a property set uses an inheritance or hierarchy concept.

9. The method according to claim 8 , further comprising updating the property set which automatically maps to the node.

10. The model according to claim 1 , wherein the node property sets contain a list of authorization servers and node properties.

11. The model according to claim 10 , wherein the node properties include audit, type, tunnel priority, cert name and type.

12. A method of creating secure endpoints on a secure network having at least one community of interest, including:
registering by a node to a registration server using a random selection algorithm to choose the registration server to register to, wherein the property set ID allows the node to look up its authorization in a setting file for authorization;
receiving by the node, a property set ID of a property set that the node is a member of; and
authorizing to join a secure network by the node through an authorization server through an authorization server using the property set ID of the property set to look up its authorization details including the authorization server in the property set;
wherein the node and the authorization server are members of the at least one community of interest that is in common to each other wherein the node is a member of at least one community of interest in a secure network environment.

13. The method according to claim 12 , including using common information rules by the node to apply prior to authorization.

14. The method according to claim 13 , wherein authorizing includes using a random hunting algorithm such that different nodes attempt to authorize at a different place in a list.

15. The method according to claim 14 , wherein the property set contains rules on how the node operates and authenticates.

16. The model according to claim 15 , wherein the node's membership in a property set uses an inheritance or hierarchy concept.

17. The method according to claim 16 , further comprising updating the property set which automatically maps to the node.

Assignees

• Poetter Jared
• Leap Michael C
• Schaefer Diane E
• Johnson Robert A
• Saunders Michael
• Buckwalter Robert R
• Inforzato Sarah K
• Gretter Eugene J
• Karian George
• Unisys Corp

Inventors

• Poetter Jared
• Leap Michael C
• Schaefer Diane E
• Johnson Robert A
• Saunders Michael
• Buckwalter Robert R
• Inforzato Sarah K
• Gretter Eugene J
• Karian George

Classifications

• H04L41/12

  Discovery or management of network topologies · CPC title

• H04L41/0894

  Policy-based network configuration management · CPC title

• H04L41/0803

  Configuration setting · CPC title

• G06F2009/45595

  Network integration; Enabling network access in virtual machine instances · CPC title

• G06F9/45558

  Hypervisor-specific management and integration aspects · CPC title