US6941366B2
Expired / Lapsed
US
⏱️ 0.0 years remaining
Methods, systems and computer program products for transferring security processing between processors in a cluster computing environment
Assignee: International Business Machines Corp
•
Filing: 2001-01-17
•
Granted: 2005-09-06
•
Expires: 2021-01-17
Abstract
Abstract Methods, systems and computer program products provide for transferring network security based communications from a first distribution processor, which provides secure communications over a network in a distributed workload environment having target hosts which are accessed through the first distribution processor by a common network address, to a second distribution processor. Information sufficient to restart the transferred network security based communications at the second distribution processor is provided. Takeover of the common address by the second distribution processor is detected and existing network security based communications to the first distribution processor are terminated. The transferred communications are restarted at the second distribution processor utilizing the provided information. Both inbound and outbound network security based communications with target hosts utilizing the common network address are routed through the second distribution processor. Network security processing for both the inbound and the outbound network security based communications utilizing the common network address is performed at the second distribution processor.
Inventors
- 👤 Mark L. Antes
- 👤 James Russell Godwin
- 👤 David Anthony Herr
- 👤 Linwood H. Overby, Jr.
- 👤 David J. Wierbowski
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-11-02 09:06
CPC Classifications
H; H04; H04L; H04L63/00; H04L63/02; H04L63/0272; H04L63/10; H04L63/16; H04L67/00; H04L67/01; H04L67/10; H04L69/00; H04L69/16; H04L69/161; H04L69/162; H04L69/166
Claims Analysis
Total Claims: 15
Claim 1
Independent Claim
149 words
A method of transferring network security based communications from a first distribution processor, which provides secure communications over a network in a distributed workload environment having target hosts which are accessed through the first distribution processor by a common network address, to a second distribution processor, the method comprising: providing information sufficient to restart the transferred network security based communications at the second distribution processor; detecting takeover of the common address by the second distribution processor; terminating existing network security based communications to the first distribution processor; restarting the transferred network security based communications at the second distribution processor utilizing the provided information; routing both inbound and outbound network security based communications with target hosts utilizing the common network address through the second distribution processor; and network security processing both the inbound and the outbound network security based communications utilizing the common network address at the second distribution processor.
Claim 2
Independent Claim
149 words
A method of transferring network security based communications from a first distribution processor, which provides secure communications over a network in a distributed workload environment having target hosts which are accessed through the first distribution processor by a common network address, to a second distribution processor, the method comprising: providing information sufficient to restart the transferred network security based communications at the second distribution processor; detecting takeover of the common address by the second distribution processor; terminating existing network security based communications to the first distribution processor; restarting the transferred network security based communications at the second distribution processor utilizing the provided information; routing both inbound and outbound network security based communications with target hosts utilizing the common network address through the second distribution processor; and network security processing both the inbound and the outbound network security based communications utilizing the common network address at the second distribution processor.
Claim 3
Dependent Claim
53 words
A method according to claim 1 , further comprising the step of identifying transferred network security based communications local to the first distribution processor utilizing the common network address as distributed communications so as to cause communications utilizing the common network address and network security to be routed through the second distribution processor.
Claim 4
Dependent Claim
74 words
A method according to claim 1 , wherein the step of providing information sufficient to restart communications comprises the step of transmitting, from the first distribution processor to the second distribution processor prior to termination of the existing secure communications to the first distribution processor, network security information from which network security relationships associated with the transferred network security based communications through the first distribution processor can be re-established at the second distribution processor.
Claim 5
Dependent Claim
61 words
A method according to claim 1 , wherein the step of providing information sufficient to restart communications comprises the step of storing in a common storage accessible to the second distribution processor, network security information from which network security relationships associated with the transferred network security based communications through the first distribution processor can be re-established at the second distribution processor.
Claim 6
Dependent Claim
96 words
A method according to claim 4 , wherein the step of restarting the transferred network security based communications at the second distribution processor utilizing the provided information, comprises the following steps carried out by the second distribution processor: obtaining the network security information from the common storage; establishing the security relationships associated with the transferred network security based communications through the first distribution processor at the second distribution processor; and notifying target hosts associated with the transferred network security based communications that the second distribution processor has taken ownership of the transferred network security based communications.
Claim 7
Dependent Claim
36 words
A method according to claim 5 , further comprising the step of clearing the network security information from the common storage subsequent to the second distribution processor obtaining the network security information from the common storage.
Claim 8
Dependent Claim
43 words
A method according to claim 5 , further comprising the step of placing in the common storage, network security information from which network security relationships associated with network security based communications through the second distribution processor can be re-established at another distribution processor.
Claim 9
Dependent Claim
41 words
A method according to claim 5 , further comprising the step of identifying as non-distributed communications, ones of the transferred network security based communications local to the second distribution processor which were previously distributed communications routed through the first distribution processor.
Claim 10
Dependent Claim
16 words
A method according to claim 5 , wherein the network security comprises Internet Protocol Security (IPSec).
Claim 11
Dependent Claim
44 words
A method according to claim 9 , wherein the information stored in the common storage comprises at least one of Phase 1 Security Association (SA) information, Phase 2 SA information and information relating the Phase 1 SA information to the Phase 2 SA information.
Claim 12
Independent Claim
159 words
A system for transferring network security based communications from a first distribution processor, which provides secure communications over a network in a distributed workload environment having target hosts which are accessed through the first distribution processor by a common network address, to a second distribution processor, comprising: means for providing information sufficient to restart the transferred network security based communications at the second distribution processor; means for detecting takeover of the common address by the second distribution processor; means for terminating existing network security based communications to the first distribution processor; means for restarting the transferred network security based communications at the second distribution processor utilizing the provided information; means for routing both inbound and outbound network security based communications with target hosts utilizing the common network address through the second distribution processor; and means for network security processing both the inbound and the outbound network security based communications utilizing the common network address at the second distribution processor.
Claim 13
Independent Claim
159 words
A system for transferring network security based communications from a first distribution processor, which provides secure communications over a network in a distributed workload environment having target hosts which are accessed through the first distribution processor by a common network address, to a second distribution processor, comprising: means for providing information sufficient to restart the transferred network security based communications at the second distribution processor; means for detecting takeover of the common address by the second distribution processor; means for terminating existing network security based communications to the first distribution processor; means for restarting the transferred network security based communications at the second distribution processor utilizing the provided information; means for routing both inbound and outbound network security based communications with target hosts utilizing the common network address through the second distribution processor; and means for network security processing both the inbound and the outbound network security based communications utilizing the common network address at the second distribution processor.
Claim 14
Dependent Claim
196 words
A computer program product for transferring network security based communications from a first distribution processor, which provides secure communications over a network in a distributed workload environment having target hosts which are accessed through the first distribution processor by a common network address, to a second distribution processor, comprising: a computer readable medium having computer readable program code embodied therein, the computer readable program code comprising: computer readable program code which provides information sufficient to restart the transferred network security based communications at the second distribution processor; computer readable program code which detects takeover of the common address by the second distribution processor; computer readable program code which terminates existing network security based communications to the first distribution processor; computer readable program code which restarts the transferred network security based communications at the second distribution processor utilizing the provided information; computer readable program code which routes both inbound and outbound network security based communications with target hosts utilizing the common network address through the second distribution processor; and computer readable program code which network security processes both the inbound and the outbound network security based communications utilizing the common network address at the second distribution processor.
Claim 15
Dependent Claim
196 words
A computer program product for transferring network security based communications from a first distribution processor, which provides secure communications over a network in a distributed workload environment having target hosts which are accessed through the first distribution processor by a common network address, to a second distribution processor, comprising: a computer readable medium having computer readable program code embodied therein, the computer readable program code comprising: computer readable program code which provides information sufficient to restart the transferred network security based communications at the second distribution processor; computer readable program code which detects takeover of the common address by the second distribution processor; computer readable program code which terminates existing network security based communications to the first distribution processor; computer readable program code which restarts the transferred network security based communications at the second distribution processor utilizing the provided information; computer readable program code which routes both inbound and outbound network security based communications with target hosts utilizing the common network address through the second distribution processor; and computer readable program code which network security processes both the inbound and the outbound network security based communications utilizing the common network address at the second distribution processor.
References Cited (Backward Citations)
US4495570A
Cited
US4403286A
Cited
US4577272A
Cited
US5031089A
Cited
US5148433A
Cited
US5652908A
Cited
US5675739A
Cited
US5754856A
Cited
US5968185A
Cited
US5774660A
Cited
US5923854A
Cited
US5917997A
Cited
US5951650A
Cited
US5935215A
Cited
US6104716A
Cited
US6202169B1
Cited
US6822957B1
Cited
US6145094A
Cited
US6658018B1
Cited
US6430622B1
Cited
US6594709B1
Cited
US6754707B2
Cited
US20020016926A1
Cited
US6609213B1
Cited
US20020133602A1
Cited
US20020133608A1
Cited
US6658081B2
Cited
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 2008-09-05 | 2009-03-07 | 2009-09-06 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 2012-09-05 | 2013-03-07 | 2013-09-06 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2016-09-05 | 2017-03-07 | 2017-09-06 | $7700.00 | Window Closed / Lapsed |