Master security policy server

• US 10,038,720 B2
• Filed: 12/16/2014
• Issued: 07/31/2018
• Est. Priority Date: 10/02/2001
• Status: Expired due to Term

• Current Assignee: Musarubra US LLC (Musarubra US SellCo LLC)
• Original Assignee: McAfee, LLC
• Inventors: Singleton, Richard B.
• Primary Examiner(s): Abyaneh, Ali S
• Application Number:
  US14/572,328
• Publication Number:
  US 20150101015A1
• Time in Patent Office: 1,323 Days
• CPC Class Codes: G06F 16/178 Techniques for file synchronisation in file systems
• CPC Class Codes: G06F 21/552 involving long-term monitoring or reporting
• CPC Class Codes: G06F 21/56 Computer malware detection or handling, e.g. anti-virus arrangements
• CPC Class Codes: G06F 21/57 Certifying or maintaining trusted computer platforms, e.g. secure boots or power-downs, version controls, system software checks, secure updates or assessing vulnerabilities
• CPC Class Codes: G06F 21/604 Tools and structures for managing or administering access control systems
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 2221/034 Test or assess a computer or a system
• CPC Class Codes: G06F 2221/2101 Auditing as a secondary aspect
• CPC Class Codes: H04L 63/0218 Distributed architectures, e.g. distributed firewalls
• CPC Class Codes: H04L 63/104 Grouping of entities
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227
• CPC Class Codes: H04L 63/205 involving negotiation or determination of the one or more network security mechanisms to be used, e.g. by negotiation between the client and the server or between peers or by selection according to the capabilities of the entities involved negotiation of communication capabilities H04L69/24

Abstract

A master policy server manages security polices for client computers through a network of local policy servers. Each local policy server is responsible for the security policies on a group of clients and maintains a data store containing the security policies and security information pertaining to the clients. Periodically, the master policy server and the local policy server synchronize, at which time the master policy server replicates updated policies to the local policy servers and the local policy servers upload client security statistics to the master policy server for consolidation into a global status.

Claims

1. At least one non-transitory computer storage medium to store at least one computer program product, the computer program product comprising:

computer code to create a plurality of security policies at a first policy server;

computer code to maintain the plurality of security policies at the first policy server;

computer code to manage, by a second policy server, security for a plurality of client platforms, each client platform to operate security software that includes anti-virus and firewall software;

the managing to include retrieval, from a master policy server, of one or more of the plurality of security policies created by the first policy server and application of one or more of the plurality of security policies to each of the plurality of client platforms according to hardware platform type;

computer code to provide at least one security statistic about one or more of the plurality of client platforms to the first policy server from the second policy server; and

computer code to derive a global status based on the at least one security statistic.

2. The computer program product of claim 1, further comprising:

computer code to periodically synchronize the first policy server and the second policy server to replicate the security policies at the second policy server.

3. The computer program product of claim 2, wherein the security policies replicated during synchronization include at least one updated policy.

4. The computer program product of claim 1, wherein the security policies include configuration parameters for the anti-virus and firewall software.

5. The computer program product of claim 1, further comprising:

computer code to periodically query, by the second policy server, the first policy server to determine if one or more of the plurality of security policies applied to each client platform has been updated.

6. The computer program product of claim 5, further comprising:

computer code to replicate the updated versions of one or more of the plurality of security policies at the second policy server responsive to a determination that the one or more of the plurality of security policies applied to each client platform has been updated.

7. The computer program product of claim 6, further comprising:

computer code to apply, by the second policy server, the updated versions of the one or more of the plurality of security policies to one or more of the plurality of client platforms.

8. The computer program product of claim 1, wherein the plurality of security policies include global level security policy configurations.

9. The computer program product of claim 8, further comprising:

computer code to derive, by the second policy server, local level security policy configurations for each client platform from the global level security policy configurations.

10. The computer program product of claim 1, further comprising:

computer code to receive, by the second policy server, a request for the at least one security statistic from the first policy server.

11. The computer program product of claim 1, further comprising:

computer code to send, by the first policy server, the global status to a requester.

12. A system for managing security policies, the system comprising:

a first policy computer server, the first policy computer server configured to;

create a plurality of security policies; and

maintain the plurality of security policies;

a second policy computer server, the second policy computer server configured to;

manage security for a plurality of client platforms, each client platform to operate security software that includes anti-virus and firewall software;

the managing to include retrieval, from a master policy server, of one or more of the plurality of security policies created by the first policy computer server and application of one or more of the plurality of security policies to each of the plurality of client platforms according to hardware platform type; and

provide at least one security statistic about one or more of the plurality of client platforms to the first policy computer server; and

wherein the first policy computer server is further configured to derive a global status based on the at least one security statistic.

13. The system of claim 12, wherein the first policy computer server is further configured to periodically synchronize the first policy computer server and the second policy computer server to replicate the security policies at the second policy computer server.

14. The system of claim 13, wherein the security policies replicated during synchronization include at least one updated policy.

15. The system of claim 12, wherein the security policies include configuration parameters for the anti-virus and firewall software.

16. The system of claim 12, wherein the second policy computer server is further configured to periodically query the first policy computer server to determine if the one or more of the plurality of security policies applied to each client platform has been updated.

17. The system of claim 16, wherein the first policy computer server is further configured to replicate updated versions of the one or more of the plurality of security policies at the second policy computer server responsive to a determination that the one or more of the plurality of security policies applied to each client platform has been updated.

18. The system of claim 17, further comprising wherein the second policy computer server is further configured to apply the updated versions of the one or more of the plurality of security policies to one or more of the plurality of client platforms.

19. The system of claim 12, wherein the plurality of security policies include global level security policy configurations.

20. The system of claim 19, wherein the second policy computer server is further configured to derive local level security policy configurations for each client platform from the global level security policy configurations.

21. The system of claim 12, wherein the second policy computer server is further configured to receive a request for the at least one security statistic from the first policy computer server.

22. The system of claim 12, wherein the first policy computer server is further configured to send the global status to a requester.