COMMUNICATIONS DEVICE WITH SECURE DATA PATH PROCESSING AGENTS

• US 20140289794A1
• Filed: 05/07/2014
• Published: 09/25/2014
• Est. Priority Date: 01/28/2009
• Status: Abandoned Application

• Current Assignee: Headwater Research LLC (Greg Raleigh)
• Original Assignee: Headwater Partners I LLC (Greg Raleigh)
• Inventors: Raleigh, Gregory G., Raissinia, Alireza, Sabin, Michael J., Lavine, James
• Application Number:
  US14/272,274
• Publication Number:
  US 20140289794A1
• Time in Patent Office: Days
• US Class Current: 726/1
• CPC Class Codes: G06F 21/552 involving long-term monitoring or reporting
• CPC Class Codes: G06F 21/575 Secure boot
• CPC Class Codes: H04L 63/168 above the transport layer
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227

Abstract

A network system comprising memory configured to store a device communication activity policy, and a policy verification processor configured to (a) receive a device data record over a trusted communication link between the network system and a device data record generator on a communications device, the device data record comprising information about a data communications activity by the communications device, the information configured to assist the policy verification processor in determining whether the communications device is operating or has operated in accordance with the device communication activity policy, (b) determine, based on the device data record, whether the communications device is operating or has operated in accordance with the device communication activity policy, and (c) upon determining that the communications device is not operating or has not operated in accordance with the device communication activity policy, initiate an error handling action.

Claims

1. A network system comprising:

memory configured to store a device communication activity policy; and

a policy verification processor configured to;

receive a device data record over a trusted communication link between the network system and a device data record generator on a communications device, the device data record comprising information about a data communications activity by the communications device, the information configured to assist the policy verification processor in determining whether the communications device is operating or has operated in accordance with the device communication activity policy,

determine, based on the device data record, whether the communications device is operating or has operated in accordance with the device communication activity policy, and

upon determining that the communications device is not operating or has not operated in accordance with the device communication activity policy, initiate an error handling action.

2. The network system recited in claim 1, wherein determining whether the communications device is operating or has operated in accordance with the device communication activity policy comprises determining whether a policy enforcement client on the communications device is properly implementing the device communication activity policy.