Master security policy server

• US 10,193,928 B2
• Filed: 12/16/2014
• Issued: 01/29/2019
• Est. Priority Date: 10/02/2001
• Status: Expired due to Fees

• Current Assignee: Musarubra US LLC (Musarubra US SellCo LLC)
• Original Assignee: McAfee, LLC
• Inventors: Singleton, Richard B.
• Primary Examiner(s): Abyaneh, Ali S
• Application Number:
  US14/572,167
• Publication Number:
  US 20150106874A1
• Time in Patent Office: 1,505 Days
• CPC Class Codes: G06F 16/178 Techniques for file synchronisation in file systems
• CPC Class Codes: G06F 21/552 involving long-term monitoring or reporting
• CPC Class Codes: G06F 21/56 Computer malware detection or handling, e.g. anti-virus arrangements
• CPC Class Codes: G06F 21/57 Certifying or maintaining trusted computer platforms, e.g. secure boots or power-downs, version controls, system software checks, secure updates or assessing vulnerabilities
• CPC Class Codes: G06F 21/604 Tools and structures for managing or administering access control systems
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 2221/034 Test or assess a computer or a system
• CPC Class Codes: G06F 2221/2101 Auditing as a secondary aspect
• CPC Class Codes: H04L 63/0218 Distributed architectures, e.g. distributed firewalls
• CPC Class Codes: H04L 63/104 Grouping of entities
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227
• CPC Class Codes: H04L 63/205 involving negotiation or determination of the one or more network security mechanisms to be used, e.g. by negotiation between the client and the server or between peers or by selection according to the capabilities of the entities involved negotiation of communication capabilities H04L69/24

Abstract

A master policy server manages security polices for client computers through a network of local policy servers. Each local policy server is responsible for the security policies on a group of clients and maintains a data store containing the security policies and security information pertaining to the clients. Periodically, the master policy server and the local policy server synchronize, at which time the master policy server replicates updated policies to the local policy servers and the local policy servers upload client security statistics to the master policy server for consolidation into a global status.

Claims

1. At least one non-transitory computer storage medium to store at least one computer program product, the computer program product comprising:

computer code to create a plurality of security policies at a local policy server;

computer code to maintain the plurality of security policies at a master policy server;

computer code to periodically synchronize the local policy server and the master policy server to transfer the plurality of security policies to the master policy server;

computer code to manage, by the local policy server, security for a plurality of client platforms, the managing to include application of one or more of the plurality of security policies to each of the plurality of client platforms according to hardware platform type; and

computer code to periodically query, by the local policy server, the master policy server to determine whether the one or more of the plurality of security policies applied to each of the plurality of client platform has been updated.

2. The at least one non-transitory computer storage medium of claim 1, further comprising:

computer code to periodically synchronize the master policy server and one or more other local policy servers by replicating the plurality of security policies from the master policy server to the one or more other local policy servers;

computer code to manage, by the one or more other local policy servers, security for a second plurality of client platforms; and

wherein each of the one or more other local policy servers is responsible for the security policies on its respective plurality of client platforms.

3. The at least one non-transitory computer storage medium of claim 1, wherein the plurality of security policies replicated during synchronization include at least one updated policy.

4. The at least one non-transitory computer storage medium of claim 1, wherein the plurality of security policies include configuration parameters for anti-virus and firewall software.

5. The at least one non-transitory computer storage medium of claim 1, further comprising:

computer code to replicate the one or more of the plurality of security policies at the master policy server responsive to a determination that the one or more of the plurality of security policies applied to each of the plurality of client platforms has been updated.

6. The at least one non-transitory computer storage medium of claim 5, further comprising:

computer code to apply, by the local policy server, the one or more of the plurality of security policies that has been updated to one or more of the plurality of client platforms.

7. The at least one non-transitory computer storage medium of claim 1, wherein the plurality of security policies include global level security policy configurations.

8. The at least one non-transitory computer storage medium of claim 7, further comprising:

computer code to derive, by the local policy server, local level security policy configurations for each of the plurality of client platforms from the global level security policy configurations.

9. The at least one non-transitory computer storage medium of claim 1, further comprising:

computer code to provide, from the local policy server, at least one security statistic about one or more of the plurality of client platforms to the master policy server.

10. The at least one non-transitory computer storage medium of claim 9, further comprising:

computer code to derive, by the master policy server, a global status based upon the at least one security statistic.

11. A local policy computer server, the local policy computer server configured to:

create a plurality of security policies at the local policy computer server, wherein a master policy computer server is to maintain the plurality of security policies; and

periodically synchronize the local policy computer server and the master policy computer server to transfer the plurality of security policies to the master policy computer server;

manage security for a plurality of client platforms, the managing to include application of one or more of the plurality of security policies to each of the plurality of client platforms according to hardware platform type; and

periodically query the master policy computer server to determine whether the one or more of the plurality of security policies applied to each of the plurality of client platforms has been updated.

12. The local policy computer server of claim 11, wherein the local policy computer server is further configured to periodically synchronize the local policy computer server with one or more other local policy computer servers by replicating the plurality of security policies from the master policy computer server to the one or more other local policy computer servers and

wherein each of the one or more other local policy computer servers is responsible for the security policies on its respective plurality of client platforms.

13. The local policy computer server of claim 11, wherein the plurality of security policies replicated during synchronization include at least one updated policy.

14. The local policy computer server of claim 11, wherein the plurality of security policies include configuration parameters for anti-virus and firewall software.

15. The local policy computer server of claim 11, wherein the local policy computer server is further configured to replicate the one or more of the plurality of security policies at the master policy computer server responsive to a determination that the one or more of the plurality of security policies applied to each of the plurality of client platforms has been updated.

16. The local policy computer server of claim 15, wherein the local computer policy server is further configured to apply the one or more of the plurality of security policies that has been updated to one or more of the plurality of client platforms.

17. The local policy computer server of claim 11, wherein the plurality of security policies include global level security policy configurations.

18. The local policy computer server of claim 17, wherein the local policy computer server is further configured to derive local level security policy configurations for each of the plurality of client platforms from the global level security policy configurations.

19. The local policy computer server of claim 11, wherein the local policy computer server is further configured to transmit, to the master policy computer server, at least one security statistic about one or more of the plurality of client platforms.

20. The local policy computer server of claim 19, wherein the master policy computer server is further configured to derive a global status based upon the at least one security statistic.