Hayes I Saxon

US Patent:

20090126002, May 14, 2009

Filed:

Nov 14, 2007

Appl. No.:

11/940018

Inventors:

Robert R. Vail - North Tonawanda NY, US
Mary Jo Billings - Frisco TX, US
Robert D. Bohrer - Troy OH, US
Mary M. Emmighausen - Avon NY, US
Howard M. Fannin - Celina TX, US
Edward R. Jaroch - Dillsburg PA, US
Tonya L. Justice - Amherst OH, US
Alan L. Kelkenberg - Lockport NY, US
Scott R. Morris - Tonawanda NY, US
Hayes I. Saxon - Cedar Park TX, US
William L. Weaver - Plano TX, US

International Classification:

H04L 9/00
H04L 9/32
G06F 11/00

US Classification:

726 12

Abstract:

One aspect of the invention is a method for providing restricted access to confidential services without impacting the security of a network. The method includes using a gateway to isolate one or more components providing confidential services from one or more other portions of an enterprise network. A first communication directed to a selected one of the one or more components may be received at the gateway. A determination may be made as to whether the first communication is user traffic or management traffic. The first communication may then be authenticated. If the first communication is user traffic, the first communication is forwarded to a component providing the confidential services. If the first communication is management traffic, the first communication is encrypted and forwarded to a component providing the confidential services. Additionally, components of the sub-network may be monitored to identify malicious changes.