FIREWALL METHODOLOGIES FOR USE WITHIN VIRTUAL ENVIRONMENTS

• US 20090265755A1
• Filed: 04/18/2008
• Published: 10/22/2009
• Est. Priority Date: 04/18/2008
• Status: Abandoned Application

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Hamilton, Rick A. II, O'Connell, Brian M., Pickover, Clifford A., Walker, Keith R., McGinley, Robert C.
• Application Number:
  US12/106,050
• Publication Number:
  US 20090265755A1
• Time in Patent Office: Days
• US Class Current: 726/1
• CPC Class Codes: G06F 2221/2101 Auditing as a secondary aspect
• CPC Class Codes: G06F 2221/2149 Restricted operating environment
• CPC Class Codes: H04L 63/0227 Filtering policies mail message filtering H04L51/212
• CPC Class Codes: H04L 63/102 Entity profiles

Abstract

In some embodiments a method comprises receiving a virtual universe request, and determining properties of the virtual universe request. The method can also comprise determining a virtual universe firewall security policy, wherein the virtual universe firewall security policy identifies allowable properties associated with the virtual universe request. The method can also include comparing the properties of the virtual universe request to the properties of the virtual universe firewall security policy, and blocking the virtual universe request based on the comparison of the virtual universe request'"'"'s properties to the virtual universe firewall security policy'"'"'s allowable properties.

Claims

1. A method comprising:

receiving a virtual universe request;

determining properties of the virtual universe request;

determining a virtual universe firewall security policy, wherein the virtual universe firewall security policy identifies allowable properties associated with the virtual universe request;

comparing the properties of the virtual universe request to the properties of the virtual universe firewall security policy;

blocking the virtual universe request based on the comparison of the virtual universe request'"'"'s properties to the virtual universe firewall security policy'"'"'s allowable properties.

2. The method of claim 1, wherein the virtual universe request includes any one or more of a teleport request, a document access request, a visual access request, a physical access request and a communication request.

3. The method of claim 1, wherein the properties of the virtual universe request include one or more of type of the virtual universe request, attributes of the virtual universe request, location of a requester associated with the virtual universe request, and attributes of the requestor.

4. The method of claim 1, wherein the properties of the virtual universe request indicate an avatar identifier, current location of an avatar in a virtual universe, and security level of a requester associated with the virtual universe request.

5. The method of claim 1, wherein virtual universe firewall security policies apply to any one or more avatars and areas within the virtual universe including islands, regions, zones, buildings, and rooms.

6. The method of claim 1, wherein the virtual universe firewall security policies include one or more time-based policies, location-based policies, avatar-based policies, and request based policies.

7. The method of claim 1, further comprising;

logging information about the virtual universe request, wherein the information includes one or more of virtual universe request type, virtual universe request attributes, content of the email and chat communication, and requester attributes.

8. An apparatus comprising:

a virtual universe simulation agent configured to present a virtual universe; and

a virtual universe firewall configured to receive a virtual universe request, to determine properties of the virtual universe request, to determine a virtual universe firewall security policy, wherein the virtual universe firewall security policy identifies allowable properties associated with the request, the virtual universe firewall also configured to compare the properties of the virtual universe request to the properties of the virtual universe firewall security policy, and to block the virtual universe request based on the comparison of the virtual universe request'"'"'s properties to the virtual universe firewall security policy'"'"'s allowable properties.

9. The apparatus of claim 8, wherein the virtual universe firewall is configured to receive requests which include any one or more of teleport request, document access request, visual access request, physical access request, and communication request.

10. The apparatus of claim 8, wherein the virtual universe firewall is further configured to receive requests with properties including any one or more of type of the virtual universe request, attributes of the virtual universe request, location of a requester associated with the virtual universe request, and attributes of the requester.

11. The apparatus of claim 8, wherein the properties of the virtual universe request indicate an avatar identifier, current location of an avatar in a virtual universe, and security level of a requester associated with the virtual universe request.

12. The apparatus of claim 8, wherein virtual universe firewall is configured to use virtual universe firewall security policies which apply to any one or more avatars and areas within the virtual universe including islands, regions, zones, buildings, and rooms.

13. The apparatus of claim 8, wherein the virtual universe firewall security policies include one or more time-based policies, location-based policies, avatar-based policies, and request based policies.

14. The apparatus of claim 8, further comprising;

an activity log configured to store information about the virtual universe request, wherein the information includes one or more of a virtual universe request type, virtual universe request attributes, email content, chat content, and requester attributes.

19. The one or more machine-readable media of claim 9, wherein the virtual universe firewall security policies include one or more time-based policies, location-based policies, avatar-based policies, and request based policies.

15. One or more machine-readable media having stored therein a program product, which when executed a set of one or more processor units causes the set of one or more processor units to perform operations that comprise:

receiving a virtual universe request;

determining properties of the virtual universe request;

determining a virtual universe firewall security policy, wherein the virtual universe firewall security policy identifies allowable properties;

comparing the properties of the virtual universe request to the properties of the virtual universe firewall security policy;

16. The one or more machine-readable media of claim 15, wherein the virtual universe request includes any one or more of teleport request, document access request, visual access request, physical access request, and communication request.

17. The one or more machine-readable media of claim 15, wherein properties of the virtual universe request comprise any one or more of type of the virtual universe request, attributes of the virtual universe request, location of a requester associated with the virtual universe request, and attributes of the requester including an avatar identifier, current location of an avatar in a virtual universe, and security level of the requester associated with the virtual universe request.

18. The one or more machine-readable media of claim 15, wherein the virtual universe firewall security policies apply to any one or more avatars and areas within the virtual universe including islands, regions, zones, buildings, and rooms.

20. The one or more machine-readable media of claim 15, wherein the operations further comprise:

logging information about the virtual universe request, wherein the information includes one or more of virtual universe request type, virtual universe request attributes, content of communication.