Granted Patent B2

US 12,225,017 · App. 17/386,055 · Granted Feb 11, 2025

Inventors: Jared Poetter (Blue Bell, PA); Michael C Leap (Blue Bell, PA); Diane E Schaefer (Blue Bell, PA); Robert A Johnson (Collegeville, PA); Michael Saunders (Blue Bell, PA); Robert R Buckwalter (Blue Bell, PA); Sarah K Inforzato (Blue Bell, PA); Eugene J Gretter (Blue Bell, PA); George Karian (Blue Bell, PA)

Assignee: UNISYS CORPORATION

H04L63/105H04L41/0803H04L41/12H04L41/16H04L63/0263H04L63/0892H04L63/104H04L63/20G06F9/45558G06F2009/45595

Abstract

Claims (24)

1. A method of creating secure endpoints on a network, including:

registering by a node to a registration server using a random selection algorithm to choose the registration server to register to;

receiving by the node, a property set ID of a property set that the node is a member of, wherein the property set ID allows the node to look up its authorization in a setting file for authorization; and

authorizing to join a secure network by the node through an authorization server that is a member of at least one community of interest to which the node is a member using the property set ID of the property set to look up its authorization details including the authorization server in the property set wherein the node is a member of at least one community of interest in a secure network environment.

2. The method according to claim 1 , including using common information rules by the node to apply prior to authorization.

3. The method according to claim 1 , wherein authorizing includes using a random hunting algorithm such that different nodes attempt to authorize at a different place in a list.

4. The method according to claim 1 , wherein authorizing by the node includes authorizing by the node through an authorization group having at least one authorization server as a member.

5. The method according to claim 4 , wherein the authorization group is associated with the property set.

6. The method according to claim 5 , wherein the authorization group is associated with more than one property set.

7. The method according to claim 1 , wherein the property set contains rules on how the node operates and authenticates.

8. The model according to claim 7 , wherein the node's membership in a property set uses an inheritance or hierarchy concept.

9. The method according to claim 8 , further comprising updating the property set which automatically maps to the node.

10. The model according to claim 1 , wherein the node property sets contain a list of authorization servers and node properties.

11. The model according to claim 10 , wherein the node properties include audit, type, tunnel priority, cert name and type.

12. A method of creating secure endpoints on a secure network having at least one community of interest, including:

registering by a node to a registration server using a random selection algorithm to choose the registration server to register to, wherein the property set ID allows the node to look up its authorization in a setting file for authorization;

receiving by the node, a property set ID of a property set that the node is a member of; and

authorizing to join a secure network by the node through an authorization server through an authorization server using the property set ID of the property set to look up its authorization details including the authorization server in the property set;

wherein the node and the authorization server are members of the at least one community of interest that is in common to each other wherein the node is a member of at least one community of interest in a secure network environment.

13. The method according to claim 12 , including using common information rules by the node to apply prior to authorization.

14. The method according to claim 13 , wherein authorizing includes using a random hunting algorithm such that different nodes attempt to authorize at a different place in a list.

15. The method according to claim 14 , wherein the property set contains rules on how the node operates and authenticates.

16. The model according to claim 15 , wherein the node's membership in a property set uses an inheritance or hierarchy concept.

17. The method according to claim 16 , further comprising updating the property set which automatically maps to the node.

Assignments (2)

Continuity (2)

References Cited (17)