Logical partition media access control impostor detector

Patent metadata

Field	Value
Publication number	US-9130987-B2
Application number	US-201213466678-A
Country	US
Kind code	B2
Filing date	May 8, 2012
Priority date	Dec 24, 2009
Publication date	Sep 8, 2015
Grant date	Sep 8, 2015

Abstract

Provided are techniques for to enable a virtual input/output server (VIOS) to establish cryptographically secure signals with target LPARs to detect an imposter or spoofing LPAR. The secure signal, or “heartbeat,” may be configured as an Internet Key Exchange/Internet Protocol Security (IKE/IPSec) encapsulated packet (ESP) connection or tunnel. Within the tunnel, the VIOS pings each target LPAR and, if a heartbeat is interrupted, the VIOS makes a determination as to whether the tunnel is broken, the corresponding LPAR is down or a media access control (MAC) spoofing attach is occurring. The determination is made by sending a heartbeat that is designed to fail unless the heartbeat is received by a spoofing device.

First claim

We claim:

1. A computing system, comprising:
a plurality of processors, at least one of which is a hardware processor;
a non-transitory computer-readable storage medium, coupled to the plurality of processors; and
logic, stored on the computer-readable storage medium and executed on the plurality of processors, for:
establishing a plurality of cryptographically secure channels, each channel between a monitoring device and a corresponding monitored device of a plurality of mon…

Assignees

• Keohane Susann M
• Mcbrearty Gerald F
• Mullen Shawn P
• Murillo Jessica C
• Shieh Johnny M
• IBM

Inventors

• Keohane Susann M
• Mcbrearty Gerald F
• Mullen Shawn P
• Murillo Jessica C
• Shieh Johnny M

Classifications

• H04L63/1483

  Electricity · mapped topic

• H04L63/1475

  Electricity · mapped topic

• H04L63/0428

  Electricity · mapped topic

• H04L43/10

  Electricity · mapped topic

• H04L63/1466 Primary

  Electricity · mapped topic