Originator-based network restraint system for identity-oriented networks

    公开(公告)号:US10659497B2

    公开(公告)日:2020-05-19

    申请号:US15639976

    申请日:2017-06-30

    IPC分类号: H04L29/06 H04L12/24 H04L29/12

    摘要: A computer-implemented method of extending generic resilient identity services (GRIDS) is provided that comprises: receiving, by a mapping server, a resolve request from an originator endpoint for a locator of a destination endpoint; sending, by the mapping server, a request for authorization to provide the requested locator, the request for authorization indicating an identifier of the originator endpoint; receiving, by a policy server, the request for authorization; accessing, by the policy server, from a database, a set of policies for the destination endpoint; based on the identifier of the originator endpoint and the set of policies for the destination endpoint, sending, by the policy server, an authorization response to the mapping server; and based on the authorization response, sending, by the mapping server, a response to the resolve request to the originator endpoint.

    Identifier-based resolution of identities

    公开(公告)号:US10530659B2

    公开(公告)日:2020-01-07

    申请号:US15924919

    申请日:2018-03-19

    摘要: An apparatus in an IP network, the apparatus comprises: a receiver configured to: obtain an identity of a first entity, the identity is a unique identification of the first entity at a given time, obtain a first identifier of the identity, and obtain a second identifier of the identity, the first identifier and the second identifier are identifications of the identity; and a processor coupled to the receiver and configured to: create an association of the first identifier and the second identifier with the identity, and instruct storage of the association in a database.

    DISCREPANCY DETECTION BY CONFIGURATION SERVERS

    公开(公告)号:US20190081855A1

    公开(公告)日:2019-03-14

    申请号:US15853147

    申请日:2017-12-22

    IPC分类号: H04L12/24 G06F17/30

    摘要: A computer-implemented method of discrepancy detection by a configuration server is provided that comprises: receiving, by one or more processors of the configuration server, a request to compare a first management datastore with a second management datastore; comparing, by the one or more processors of the configuration server, the first management datastore with the second management datastore to identify differences; and in response to the request, sending over a network, by the one or more processors of the configuration server, the differences.