Trinh H Vu

US Patent:

59180188, Jun 29, 1999

Filed:

Feb 9, 1996

Appl. No.:

8/599232

Inventors:

Mark P. Gooderum - Blaine MN
Trinh Q. Vu - Minneapolis MN
Glenn Andreas - Fridley MN

Assignee:

Secure Computing Corporation - Roseville MN

International Classification:

G06F 1338
G06F 1517

US Classification:

39520055

Abstract:

A system and method of achieving network separation within a computing system having a plurality of network interfaces. A plurality of burbs or regions is defined, wherein the plurality of burbs includes a first and a second burb and wherein each burb includes a protocol stack. Each of the plurality of network interfaces is assigned to one of the plurality of burbs and more than one network interface can be assigned to a particular burb. Processes are bound to specific burbs when they try to access that burb's protocol stack and communication between processes assigned to different burbs is restricted so that a communication between a process bound to one burb must pass through a proxy before being sent to a different burb.

US Patent:

6219707, Apr 17, 2001

Filed:

Jan 19, 1999

Appl. No.:

9/233015

Inventors:

Mark P. Gooderum - Blaine MN
Trinh Q. Vu - Minneapolis MN
Glenn Andreas - Fridley MN

Assignee:

Secure Computing Corporation - Roseville MN

International Classification:

G06F 15173
G06F 1516

US Classification:

709225

Abstract:

A system and method of achieving network separation within a computing system having a plurality of network interfaces. A plurality of burbs or regions is defined, wherein the plurality of burbs includes a first and a second burb and wherein each burb includes a protocol stack. Each of the plurality of network interfaces is assigned to one of the plurality of burbs and more than one network interface can be assigned to a particular burb. Processes are bound to specific burbs when they try to access that burb's protocol stack and communication between processes assigned to different burbs is restricted so that a communication between a process bound to one burb must pass through a proxy before being sent to a different burb.