Leveraging security as a service for cloud-based file sharing

    公开(公告)号:US10135826B2

    公开(公告)日:2018-11-20

    申请号:US14845505

    申请日:2015-09-04

    Abstract: A method of leveraging security-as-a-service for cloud-based file sharing includes receiving, at a cloud-based file sharing server external to an enterprise network and having connectivity to the enterprise network, instructions from an enterprise network to validate a file uploaded by a first user associated with the enterprise network before allowing the file to be downloaded. The file sharing server may then receive the file from the first user and forward the file to a cloud-based security-as-a-service (SECaaS) server that is also external to the enterprise network and has connectivity to the enterprise network. The file sharing server receives a determination of validation from the cloud-based SECaaS server and allows a second user to download the file based on the determination. To make the determination, the SECaaS server retrieves cryptographic keying material from a cloud-based key management server, and decrypts the file.

    IDENTITY BASED DOMAIN NAME SYSTEM (DNS) CACHING WITH SECURITY AS A SERVICE (SECAAS)

    公开(公告)号:US20170346855A1

    公开(公告)日:2017-11-30

    申请号:US15165032

    申请日:2016-05-26

    Abstract: A local network element on an enterprise network caches Domain Name System (DNS) responses in association with user identifiers in accordance with a DNS-based access control policy. The network element receives a DNS request from a first endpoint device. The DNS request includes a domain name to resolve. The network element forwards the DNS request to a domain name server along with a first user identifier associated with the first endpoint device. The network element receives a DNS response from the domain name server. The DNS response includes a network address associated with the domain name, as well as the first user identifier and at least one other user identifier. The network element stores the network address in a DNS cache as a cached DNS response for the domain name. The cached DNS response is stored in association with the first user identifier and the other user identifier(s).

    PROPAGATING FLOW CHARACTERISTICS IN SERVICE FUNCTION CHAINING (SFC) HEADERS

    公开(公告)号:US20170264537A1

    公开(公告)日:2017-09-14

    申请号:US15066467

    申请日:2016-03-10

    CPC classification number: H04L45/566 H04L45/302

    Abstract: In one embodiment, a service function classifier device determines a classification of a packet using one or more packet classification rules. The device selects a service function path based on the classification of the packet. The device determines one or more traffic flow characteristics based on the classification of the packet. The device generates a service function chaining (SFC) header that identifies the selected service function path and the determined one or more traffic flow characteristics. The SFC header is configured to cause a device along the service function path to forward the encapsulated packet based on the identified service function path and the determined one or more traffic flow characteristics. The device sends the packet along the selected service function path as an encapsulated packet that includes the generated SFC header.

Patent Agency Ranking