US6915436B1
Expired / Lapsed
US
⏱️ 0.0 years remaining
System and method to verify availability of a back-up secure tunnel
Assignee: Trend Micro Inc
•
Filing: 2000-08-02
•
Granted: 2005-07-05
•
Expires: 2020-08-02
Abstract
Abstract A method and system for verifying the availability of a back-up virtual private network IP security (IPSec) tunnel between two network elements by originating a plurality of connection tests between the network elements. The first network element transmits a backup tunnel verification test message to the second network element over the back-up secure tunnel upon receipt of a backup tunnel verification test command. The back-up secure tunnel includes two unidirectional tunnels. The second network element receives the back-up tunnel verification test message over the first back-up unidirectional secure tunnel and transmits a response back to the first network element over the second back-up unidirectional secure tunnel. The number of failures to respond by the second network element to the backup tunnel verification tests performed during an active verification period specified in the backup tunnel verification test command are reported back to the source that initiated the back-up secure tunnel verification test.
Inventors
- 👤 Earl Hardin Booth, III
- 👤 Charles Steven Lingafelt
- 👤 Phuong Thanh Nguyen
- 👤 Leo Temoshenko
- 👤 Xiaogang Wang
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-10-24 14:17
CPC Classifications
H; H04; H04L; H04L63/00; H04L63/14; H04L63/1433; G; G06; G06F; G06F21/00; G06F21/30; G06F21/31; G06F21/42; H04L43/00; H04L43/50; H04L41/00; H04L41/02; H04L41/0213; H04L69/00; H04L69/14
Claims Analysis
Total Claims: 40
Claim 1
Independent Claim
145 words
A system for verifying the availability of a back-up secure tunnel between a pair of network elements in a communications network, comprising: a first network element for originating and transmitting a back-up tunnel verification test message to a second network element using the back-up secure tunnel in response to the receipt of a back-up tunnel verification test command; a second network element for receiving the backup tunnel verification test message and transmitting a response back to the first network element using the back-up secure tunnel; and a backup tunnel verification function logic module in the first network element for accumulating a number of failures to respond by the second network element to the backup tunnel verification tests performed during an active verification period and determining if the accumulated number of failures is less than a threshold value specified in the backup tunnel verification test command.
Claim 2
Independent Claim
145 words
A system for verifying the availability of a back-up secure tunnel between a pair of network elements in a communications network, comprising: a first network element for originating and transmitting a back-up tunnel verification test message to a second network element using the back-up secure tunnel in response to the receipt of a back-up tunnel verification test command; a second network element for receiving the backup tunnel verification test message and transmitting a response back to the first network element using the back-up secure tunnel; and a backup tunnel verification function logic module in the first network element for accumulating a number of failures to respond by the second network element to the backup tunnel verification tests performed during an active verification period and determining if the accumulated number of failures is less than a threshold value specified in the backup tunnel verification test command.
Claim 3
Dependent Claim
37 words
The system for verifying the availability of a back-up secure tunnel of claim 1 wherein the backup tunnel verification function logic module further determines the number of successful responses to the back up tunnel verification tests performed.
Claim 4
Dependent Claim
42 words
The system for verifying the availability of a back-up secure tunnel of claim 1 further comprising a computer connected to the communications network and running a network management application that transmits the backup tunnel verification test command to the first network element.
Claim 5
Dependent Claim
32 words
The system for verifying the availability of a back-up secure tunnel of claim 1 further comprising a console interface on the first network element for generating the backup tunnel verification test command.
Claim 6
Dependent Claim
38 words
The system for verifying the availability of a back-up secure tunnel of claim 1 wherein the back-up tunnel verification function is initiated by a configuration of a network element that forms an endpoint of the back-up secure tunnel.
Claim 7
Dependent Claim
25 words
The system for verifying the availability of a back-up secure tunnel of claim 1 further comprising two unidirectional tunnels that form the back-up secure tunnel.
Claim 8
Dependent Claim
24 words
The system for verifying the availability of a back-up secure tunnel of claim 1 wherein the communications network is a virtual private network (VPN).
Claim 9
Dependent Claim
26 words
The system for verifying the availability of a back-up secure tunnel of claim 1 wherein the back-up secure tunnel is an Internet Protocol Security (IPSec) tunnel.
Claim 10
Dependent Claim
26 words
The system for verifying the availability of a back-up secure tunnel of claim 8 wherein the back-up tunnel verification test message is an IPSec tunnel ping.
Claim 11
Dependent Claim
30 words
The system for verifying the availability of a back-up secure tunnel of claim 1 further comprising a primary secure tunnel for handling data traffic between the pair of network elements.
Claim 12
Dependent Claim
45 words
The system for verifying the availability of a back-up secure tunnel of claim 1 wherein the backup tunnel verification test command includes an identification of the secure tunnel to test, and a time interval during which a number of backup tunnel verification tests are performed.
Claim 13
Dependent Claim
44 words
The system for verifying the availability of a back-up secure tunnel of claim 11 wherein the backup tunnel verification test command further comprises a time to wait between each backup tunnel verification test and a payload size of a backup tunnel verification test packet.
Claim 14
Dependent Claim
66 words
The system for verifying the availability of a back-up secure tunnel of claim 6 wherein a first back-up unidirectional tunnel is used to send an Internet Protocol Security (IPSec) tunnel ping from the first network element to the second network element, and a second back-up unidirectional tunnel is used to send a response IPSec tunnel ping from the second network element to the first network element.
Claim 15
Dependent Claim
28 words
The system for verifying the availability of a back-up secure tunnel of claim 1 further comprising a plurality of back-up secure tunnels between the pair of network elements.
Claim 16
Independent Claim
135 words
A method for verifying the availability of a back-up secure tunnel between a pair of network elements in a communications network, comprising the acts of: originating and transmitting a backup tunnel verification test message from a first network element to a second network element using the back-up secure tunnel in response to the receipt of a backup tunnel verification test command; receiving the backup tunnel verification test message from a second network element and transmitting a response back to the first network element using the back-up secure tunnel; and accumulating a number of failures to respond by the second network element to the backup tunnel verification tests performed during an active verification period and determining if the accumulated number of failures is less than a threshold value specified in the backup tunnel verification test command.
Claim 17
Independent Claim
135 words
A method for verifying the availability of a back-up secure tunnel between a pair of network elements in a communications network, comprising the acts of: originating and transmitting a backup tunnel verification test message from a first network element to a second network element using the back-up secure tunnel in response to the receipt of a backup tunnel verification test command; receiving the backup tunnel verification test message from a second network element and transmitting a response back to the first network element using the back-up secure tunnel; and accumulating a number of failures to respond by the second network element to the backup tunnel verification tests performed during an active verification period and determining if the accumulated number of failures is less than a threshold value specified in the backup tunnel verification test command.
Claim 18
Dependent Claim
28 words
The method for verifying the availability of a back-up secure tunnel of claim 15 further comprising determining the number of successful responses to the backup tunnel verification test.
Claim 19
Dependent Claim
33 words
The method for verifying the availability of a back-up secure tunnel of claim 15 further comprising transmitting the backup tunnel verification test command from a network management application to the first network element.
Claim 20
Dependent Claim
32 words
The method for verifying the availability of a back-up secure tunnel of claim 15 further comprising generating the backup tunnel verification test command at a console interface on the first network element.
Claim 21
Dependent Claim
39 words
The method for verifying the availability of a back-up secure tunnel of claim 15 further comprising initiating a back-up tunnel verification function by an initial configuration of a network element that forms an endpoint of the back-up secure tunnel.
Claim 22
Dependent Claim
25 words
The method for verifying the availability of a back-up secure tunnel of claim 15 wherein the back-up secure tunnel is formed from two unidirectional tunnels.
Claim 23
Dependent Claim
24 words
The method for verifying the availability of a back-up secure tunnel of claim 15 wherein the communications network is a virtual private network (VPN).
Claim 24
Dependent Claim
26 words
The method for verifying the availability of a back-up secure tunnel of claim 15 wherein the back-up secure tunnel is an Internet Protocol Security (IPSec) tunnel.
Claim 25
Dependent Claim
26 words
The method for verifying the availability of a back-up secure tunnel of claim 22 wherein the backup tunnel verification test message is an IPSec tunnel ping.
Claim 26
Dependent Claim
46 words
The method for verifying the availability of a back-up secure tunnel of claim 15 wherein the backup tunnel verification test command includes an identification of the back-up secure tunnel to test, and a time interval during which a number of backup tunnel verification tests are performed.
Claim 27
Dependent Claim
44 words
The method for verifying the availability of a back-up secure tunnel of claim 24 wherein the backup tunnel verification test command further comprises a time to wait between each backup tunnel verification test and a payload size of a backup tunnel verification test packet.
Claim 28
Dependent Claim
64 words
The method for verifying the availability of a back-up secure tunnel of claim 20 wherein a first unidirectional tunnel is used to send an Internet Protocol Security (IPSec) tunnel ping from the first network element to the second network element, and a second unidirectional tunnel is used to send a response IPSec tunnel ping from the second network element to the first network element.
Claim 29
Dependent Claim
142 words
A computer readable medium containing a computer program product for verifying the availability of a back-up secure tunnel between a pair of network elements in a communications network, the computer program product comprising: program instructions that originate and transmit a backup tunnel verification test message to a paired network element using the back-up secure tunnel in response to the receipt of a backup tunnel verification test command; program instructions that receive a backup tunnel verification test message and transmit a response back to a paired network element using the back-up secure tunnel; and program instructions that accumulate a number of failures to respond by the second network element to the backup tunnel verification tests performed during an active verification period and determine if the accumulated number of failures is less than a threshold value specified in the backup tunnel verification test command.
Claim 30
Dependent Claim
142 words
A computer readable medium containing a computer program product for verifying the availability of a back-up secure tunnel between a pair of network elements in a communications network, the computer program product comprising: program instructions that originate and transmit a backup tunnel verification test message to a paired network element using the back-up secure tunnel in response to the receipt of a backup tunnel verification test command; program instructions that receive a backup tunnel verification test message and transmit a response back to a paired network element using the back-up secure tunnel; and program instructions that accumulate a number of failures to respond by the second network element to the backup tunnel verification tests performed during an active verification period and determine if the accumulated number of failures is less than a threshold value specified in the backup tunnel verification test command.
Claim 31
Dependent Claim
34 words
The computer program product for verifying the availability of a back-up secure tunnel of claim 27 further comprising program instructions that determine the number of successful responses to the backup tunnel verification tests performed.
Claim 32
Dependent Claim
33 words
The computer program product for verifying the availability of a back-up secure tunnel of claim 27 further comprising program instructions that receive the backup tunnel verification test command from a network management application.
Claim 33
Dependent Claim
28 words
The computer program product for verifying the availability of a back-up secure tunnel of claim 27 further comprising program instructions that generate the backup tunnel verification test command.
Claim 34
Dependent Claim
25 words
The computer program product for verifying the availability of a back-up secure tunnel of claim 27 wherein two unidirectional tunnels form the back-up secure tunnel.
Claim 35
Dependent Claim
28 words
The computer program product for verifying the availability of a back-up secure tunnel of claim 27 wherein the back-up secure tunnel is an Internet Protocol Security (IPSec) tunnel.
Claim 36
Dependent Claim
26 words
The computer program product for verifying the availability of a back-up secure tunnel of claim 27 wherein the communications network is a virtual private network (VPN).
Claim 37
Dependent Claim
28 words
The computer program product for verifying the availability of a back-up secure tunnel of claim 32 wherein the back-up tunnel verification test message is an IPSec tunnel ping.
Claim 38
Dependent Claim
47 words
The computer program product for verifying the availability of a back-up secure tunnel of claim 27 wherein the backup tunnel verification test command includes an identification of the secure tunnel to test, and a time interval during which a number of back-up tunnel verification tests are performed.
Claim 39
Dependent Claim
46 words
The computer program product for verifying the availability of a back-up secure tunnel of claim 35 wherein the backup tunnel verification test command further comprises a time to wait between each back-up tunnel verification test and a payload size of a back-up tunnel verification test packet.
Claim 40
Dependent Claim
66 words
The computer program product for verifying the availability of a back-up secure tunnel of claim 31 wherein a first unidirectional tunnel is used to send an Internet Protocol Security (IPSec) tunnel ping from the first network element to the second network element, and a second unidirectional tunnel is used to send a response IPSec tunnel ping from the second network element to the first network element.
References Cited (Backward Citations)
US5325362A
Cited
US5835726A
Cited
US5852721A
Cited
US5550984A
Cited
US5825891A
Cited
WO1997026734A1
Cited
US5850446A
Cited
JPH1070576A
Cited
GB2317308A
Cited
JPH1070566A
Cited
US5745884A
Cited
US5864666A
Cited
WO1998043446A2
Cited
GB2323757A
Cited
US5805803A
Cited
US6230281B1
Cited
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 2008-07-04 | 2009-01-03 | 2009-07-05 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 2012-07-04 | 2013-01-03 | 2013-07-05 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2016-07-04 | 2017-01-03 | 2017-07-05 | $7700.00 | Window Closed / Lapsed |