Joyce M Porter

US Patent:

8250229, Aug 21, 2012

Filed:

Sep 29, 2005

Appl. No.:

11/238613

Inventors:

Joyce A. Porter - Apex NC, US
David J. Wierbowski - Owego NY, US

Assignee:

International Business Machines Corporation - Armonk NY

International Classification:

G06F 15/16

US Classification:

709232, 709225

Abstract:

Embodiments of the present invention address deficiencies of the art in respect to secure communications for multiple hosts in an address translation environment and provide a method, system and computer program product for IPsec SA management for multiple clients sharing a single network address. In one embodiment, a computer implemented method for IPsec SA management for multiple hosts sharing a single network address can include receiving a packet for IPsec processing for a specified client among the multiple clients sharing the single network address. A dynamic SA can be located among multiple dynamic SAs for the specified client using client identifying information exclusive of a 5-tuple produced for the dynamic SA. Finally, IPsec processing can be performed for the packet.

US Patent:

20130013915, Jan 10, 2013

Filed:

Jul 12, 2012

Appl. No.:

13/547603

Inventors:

Joyce A. Porter - Apex NC, US
David J. Wierbowski - Owego NY, US

Assignee:

International Business Machines Corporation - Armonk NY

International Classification:

H04L 29/06

US Classification:

713154

Abstract:

Embodiments of the present invention address deficiencies of the art in respect to secure communications for multiple hosts in an address translation environment and provide a method, system and computer program product for IPsec SA management for multiple clients sharing a single network address. In one embodiment, a computer implemented method for IPsec SA management for multiple hosts sharing a single network address can include receiving a packet for IPsec processing for a specified client among the multiple clients sharing the single network address. A dynamic SA can be located among multiple dynamic SAs for the specified client using client identifying information exclusive of a 5-tuple produced for the dynamic SA. Finally, IPsec processing can be performed for the packet.

US Patent:

20140244862, Aug 28, 2014

Filed:

May 6, 2014

Appl. No.:

14/270810

Inventors:

- Armonk NY, US
Joyce Anne Porter - Apex NC, US
David John Wierbowski - Owego NY, US

Assignee:

International Business Machines Corporation - Armonk NY

International Classification:

H04L 29/12

US Classification:

709245

Abstract:

Preventing duplicate sources on a protocol connection that uses network addresses, protocols and port numbers to identify connections that include port number translation. In response to an inbound IPsec packet from a remote source client, a determination is made as to whether or not a port number is available within a range of port numbers that comply with a security association governing the connection. If so, an available port number is assigned to the connection, thereby avoiding a possibility of a duplicate source. If a port number is not available, the packet is rejected.