Secure route discovery node and policing mechanism

Patent metadata

Field	Value
Publication number	US-8931076-B2
Application number	US-201313865492-A
Country	US
Kind code	B2
Filing date	Apr 18, 2013
Priority date	Sep 14, 2009
Publication date	Jan 6, 2015
Grant date	Jan 6, 2015

Abstract

A computer implemented method for obtaining a secure route. A trusted host sets a node security association for a trusted host. The trusted host receives, at the trusted host, a client communication request directed to a destination host. The trusted host builds a secure route query comprising a trusted host address, a destination host address, and at least one security level, to form at least one secure route. The trusted host sends packets from the trusted host to the destination host based on the at least one secure route. The packets are responsive to the client communication request, and the packets each have a security label that matches the security level.

First claim

What is claimed is:

1. A computer implemented method to direct at least one secure router, the method comprising:
receiving a secure route query from a trusted host, the secure route query comprising a trusted host address, a destination host address and a one classification level;
looking up at least one path having as endpoints, the trusted host address and the destination host address, wherein the at least one path is an inadequate path to interconnect a trusted host correspo…

Assignees

• IBM

Inventors

• Bello Adekunle
• Chirra Radhika
• Venkatsubra Venkat
• Yedavilli Aruna

Classifications

• H04L63/04 Primary

  Electricity · mapped topic

• H04L45/42 Primary

  Electricity · mapped topic

• H04L63/105

  Electricity · mapped topic

• H04L63/08

  Electricity · mapped topic