POLICY MANAGEMENT FOR HOST NAME MAPPED TO DYNAMICALLY ASSIGNED NETWORK ADDRESS

• US 20030115246A1
• Filed: 08/24/1999
• Published: 06/19/2003
• Est. Priority Date: 08/24/1999
• Status: Abandoned Application

• Current Assignee: Hewlett-Packard Company (HP Inc.), Intel Corporation
• Original Assignee: HP Inc.
• Inventors: FENGER, RUSSELL J., DURHAM, DAVID M., YAVATKAR, RAJENDRA S., ROELING, FREDRICK M., MAHON, HUGH F.
• Application Number:
  US09/382,059
• Publication Number:
  US 20030115246A1
• Time in Patent Office: Days
• US Class Current: 709/200
• CPC Class Codes: H04L 2463/102 applying security measure for e-commerce data processing systems or methods, specially adapted for e-commerce G06Q30/00
• CPC Class Codes: H04L 41/0893 Assignment of logical groups to network elements
• CPC Class Codes: H04L 41/0894 Policy-based network configuration management
• CPC Class Codes: H04L 61/45 Network directories; Name-to-address mapping
• CPC Class Codes: H04L 61/5007 Internet protocol [IP] addresses
• CPC Class Codes: H04L 63/0263 Rule management
• CPC Class Codes: H04L 63/105 Multiple levels of security

Abstract

Method and apparatus for assigning policies which are rules that govern the use of or access to network services. Each rule defines conditions that when evaluated true trigger actions to allow or deny the service. Techniques are disclosed which provide for explicit, flexible, and centralized assignment of policy to targets which are specified network services. These techniques include explicitly associating a policy with a network resource or process, grouping policy related processes, grouping related targets, associating groups of targets with groups of policies, mapping a user name contained in a policy to an associated network address such as an Internet Protocol (IP) address, and providing dynamically mapped policy identified user and host names with associated network addresses, such as IP addresses, to client processes.

Claims

1. A computer implemented method, comprising the steps of:

receiving a dynamically assigned network address for a host computer;

obtaining a rule for a client, providing the rule specifies conditional action implementable by the client for the host computer; and

transmitting to the client the dynamically assigned network address and the rule.

2. The computer implemented method as recited in claim 1, providing the functions are automatically actuated subsequent to host computer activation.

3. The computer implemented method as recited in claim 1, further comprising the steps of:

receiving a host name, providing the host name identifies the host computer; and

transmitting the host name to a network address mapping program.

4. The computer implemented method as recited in claim 1, providing the dynamically assigned network address is an IP address.

5. The computer implemented method as recited in claim 1, providing the client controls an interface of an electronic device.

6. A computer implemented method, comprising the steps of:

receiving notification of a host computer deactivation, providing the host computer has a dynamically assigned network address; and

transmitting to the client instruction to deactivate a rule, providing the rule specifies conditional action implementable by the client for the host computer.

7. The computer implemented method as recited in claim 6, providing instruction transmitted to the client comprises the dynamically assigned network address.

8. The computer implemented method as recited in claim 6, providing instruction transmitted to the client comprises the rule.

9. The computer implemented method as recited in claim 6, providing the method step for transmitting to the client instruction to deactivate the rule is automatically actuated subsequent to host computer deactivation.

10. The computer implemented method as recited in claim 6, providing the dynamically assigned network address is an IP address.

11. The computer implemented method as recited in claim 6, providing the client controls an interface of an electronic device.

12. A computer program storage medium readable by a computer, tangibly embodying a computer program of instructions executable by the computer to perform method steps, the method steps comprising:

receiving a dynamically assigned network address for a host computer;

obtaining a rule for a client, providing the rule specifies conditional action implementable by the client for the host computer; and

transmitting to the client the dynamically assigned network address and the rule.

13. The computer program storage medium as recited in claim 12, providing the functions are automatically actuated subsequent to host computer activation.

14. The computer program storage medium as recited in claim 12, the steps further comprising:

receiving a host name, providing the host name identifies the host computer; and

transmitting the host name to a network address mapping program.

15. The computer program storage medium as recited in claim 12, providing the dynamically assigned network address is an IP address.

16. The computer program storage medium as recited in claim 12, providing the client controls an interface of an electronic device.

17. A computer program storage medium readable by a computer, tangibly embodying a computer program of instructions executable by the computer to perform method steps, the method steps comprising:

receiving notification of a host computer deactivation, providing the host computer has a dynamically assigned network address; and

transmitting to the client instruction to deactivate a rule, providing the rule specifies conditional action implementable by the client for the host computer.

18. The computer program storage medium as recited in claim 17, providing instruction transmitted to the client comprises the dynamically assigned network address.

19. The computer program storage medium as recited in claim 17, providing instruction transmitted to the client comprises the rule.

20. The computer program storage medium as recited in claim 17, providing the method step for transmitting to the client instruction to deactivate the rule is automatically actuated subsequent to host computer deactivation.

21. The computer program storage medium as recited in claim 17, providing the dynamically assigned network address is an IP address.

22. The computer program storage medium as recited in claim 17, providing the client controls an interface of an electronic device.

23. A computer, comprising a memory containing a server program having functions, the functions comprising:

receiving a dynamically assigned network address for a host computer;

obtaining a rule for a client, wherein the rule specifies conditional action implementable by the client for the host computer; and

transmitting to the client the dynamically assigned network address and the rule.

24. The computer as recited in claim 23, wherein the functions are automatically actuated subsequent to host computer activation.

25. The computer as recited in claim 23, wherein the functions further comprise:

receiving a host name, wherein the host name identifies the host computer; and

transmitting the host name to a network address mapping program.

26. The computer as recited in claim 23, wherein the dynamically assigned network address is an IP address.

27. The computer as recited in claim 23, wherein the client controls an interface of an electronic device.

28. A computer, comprising a memory containing a server program having functions, the functions comprising:

receiving notification of a host computer deactivation, providing the host computer has a dynamically assigned network address; and

transmitting to the client instruction to deactivate a rule, providing the rule specifies conditional action implementable by the client for the host computer.

29. The computer as recited in claim 28, wherein instruction transmitted to the client comprises the dynamically assigned network address.

30. The computer as recited in claim 28, wherein instruction transmitted to the client comprises the rule.

31. The computer as recited in claim 28, wherein the function for transmitting to the client instruction to deactivate the rule is automatically actuated subsequent to host computer deactivation.

32. The computer as recited in claim 28, wherein the dynamically assigned network address is an IP address.

33. The computer as recited in claim 28, wherein the client controls an interface of an electronic device.