Policy-based routing in a multi-homed computer
First Claim
Patent Images
1. A computer-implemented system that facilitates policy-based routing, comprising:
- a computer comprising a processing unit and a system memory, the computer further comprising;
a routing component that receives information associated with a user and information associated with an application associated with a data transfer and generates a route proposal; and
a policy enforcement component that determines whether the proposed route is permitted or blocked based on the information associated with the user, information associated with the application and a policy, wherein the policy is based on a subscription level associated with the user, and wherein the policy enforcement component provides information to the routing component as to whether the proposed route is permitted or blocked.
2 Assignments
0 Petitions
Accused Products
Abstract
Policy-based routing system and method for a multi-homed computer. Policy-based routing permits or blocks usage of system level route(s) based on user credentials and/or network application(s) associated with a data transfer. The credentials can include information associated with an application, a user, and the like. Optionally, one or more filter(s) can be configured over classifiable field(s), such as credential(s), information associated with a determined proposed route, to statically permit/block route usage and/or to invoke an inspection module (e.g., custom inspection routine) when the filter condition(s) are met.
-
Citations
17 Claims
-
1. A computer-implemented system that facilitates policy-based routing, comprising:
-
a computer comprising a processing unit and a system memory, the computer further comprising; a routing component that receives information associated with a user and information associated with an application associated with a data transfer and generates a route proposal; and a policy enforcement component that determines whether the proposed route is permitted or blocked based on the information associated with the user, information associated with the application and a policy, wherein the policy is based on a subscription level associated with the user, and wherein the policy enforcement component provides information to the routing component as to whether the proposed route is permitted or blocked. - View Dependent Claims (2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12)
-
-
13. A computer-implemented method of policy-based routing, comprising:
-
receiving information associated with a user and information associated with an application a credential associated with a data transfer and information associated with a proposed route; determining whether the proposed route is permitted, based on the information associated with the user, the information associated with the application and a policy, wherein the policy is based on a subscription level associated with the user; and
,if the proposed first route is permitted, allowing the data transfer, wherein receiving the information associated with the user and information associated with the application associated with the data transfer and information associated with a proposed route and determining whether the proposed route is permitted, based on the credential and the policy is repeated until a permitted route is determined or available routes have been exhausted. - View Dependent Claims (14)
-
-
15. A computer-implemented method of policy-based routing, comprising:
-
using a computer system, receiving credentials associated with a data transfer and information associated with a proposed route, the credential comprising information associated with a user and information associated with an application;
determining whether a filter condition has been met;invoking a custom inspection module, if the filter condition has been met, the custom inspection module resident on the computer system; determining whether the proposed route is permitted, based on the credentials and a policy, if the filter condition has been met, wherein the policy is based on a subscription level associated with the user; and blocking the data transfer, if the filter condition has not been met. - View Dependent Claims (16, 17)
-
Specification