Enterprise security setup with prequalified and authenticated peer group enabled for secure DHCP and secure ARP/RARP

• US 20100088399A1
• Filed: 09/23/2009
• Published: 04/08/2010
• Est. Priority Date: 10/03/2008
• Status: Abandoned Application

• Current Assignee: Yoel Gluck
• Original Assignee: Yoel Gluck
• Inventors: Gluck, Yoel
• Application Number:
  US12/585,718
• Publication Number:
  US 20100088399A1
• Time in Patent Office: Days
• US Class Current: 709/221
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/104 Grouping of entities
• CPC Class Codes: H04L 63/1466 Active attacks involving interception, injection, modification, spoofing of data unit addresses, e.g. hijacking, packet injection or TCP sequence number attacks

Abstract

The method enables prevention of attacks on the network using layer-2 to layer-4 internet protocols. A secure local area network (LAN) is established having a secure peer group (SPG) of member entities with each member entity having its media access control (MAC) address locked to its own identity. A secure server within the LAN is configured as administrative and dynamic host configuration protocol (DHCP) server enabled to issue IP addresses. When using DHCP, address resolution protocol (ARP), and reverse address resolution protocol (RARP), the identity of the requesting entity is verified and entity is confirmed as legitimate. Data sent during transactions is encrypted using the public key of the receiving entity. These steps enable verified and secure establishment of IP to MAC binding during DHCP and ARP, and an enabler for secure connectivity between members of the SPG for eliminating attacks on the secure LAN.

Claims

1. A method for securing a network by a secure server by enabling secure dynamic host configuration protocol (DHCP) process by providing internet protocol (IP) addresses to member entities who are members of a secure peer group (SPG) within the network, where said secure server acts as a DHCP server.