Juniper Networks, Inc.

Verisign, Inc.

Binh Phu Le

Srinivas Nimmagadda

Jeffrey S Marshall

Prakash T Seshadri

Kartik Krishnan S Iyyer

Kenneth K Okumura

Jason N Paul

Garret L Simpson

A device receives network segment information identifying network segments associated with a network, and receives endpoint host session information identifying sessions associated with endpoint hosts communicating with the network. The device generates, based on the network segment information and the endpoint host session information, a data structure that includes information associating the network segments with the sessions associated with the endpoint hosts. The device updates the data structure based on changes in the sessions associated with the endpoint hosts and based on changes in locations of the endpoint hosts within the network segments, and identifies, based on the data structure, a particular endpoint host, of the endpoint hosts, that changed locations within the network segments. The device determines a threat policy action to enforce for the particular endpoint host, and causes the threat policy action to be enforced, by the network, for the particular endpoint host.

Tracking host threats in a network and enforcing threat policy actions for the host threats

A method ( ) for assigning a key pair to an entity, such as a certification authority (CA ), includes the following steps. A key pair is generated ( ). It includes a private key and a public key which form a key pair for use in public-key cryptography. The key pair is stored ( ) in a cryptographic signing unit (CSU ). The CSU ( ) is then activated ( ). A request for a key pair is received ( ) from the entity ( ). Responsive to the request, the key pair is assigned ( ) to the entity ( ). In a preferred embodiment, an identifier ( ) is assigned to the key pair and preferably is different from identifiers assigned to other key pairs stored in the CSU ( ). The identifier ( ) is then included in a digital certificate ( ) issued to the entity ( ).

Secure mapping and aliasing of private keys used in public key cryptography

Growing community of inventors

San Jose, CA, United States of America

Binh Phu Le