International Business Machines Corporation

Ryan Moats

Renato John Recio

Dean Har'el Lorenz

Etai Lev Ran

Eran Gampel

Ravinder Reddy Amanaganti

Gal Sagi

Jayakrishna Kidambi

Amitabha Biswas

Stephan Benny

Sisir Chowdhury

Doug Wiegley

Brandon Logan

Gregory Haynes

A secure communication tunnel between user space software and a client device can be established. A private session key can be communicated from the user space software to a network communication device in at least one User Datagram Protocol datagram. Outbound session backets can be communicated from the user space software to the network communication device. The network communication device can generate encrypted outbound session packets by encrypting the outbound session packets using the private session key; communicate, to the client device via the secured communication tunnel, the encrypted outbound session packets; receive, by the network communication device from the client device, via the secured communication tunnel, inbound session packets; generate, by the network communication device, decrypted inbound session packets by decrypting the inbound session packets using the private session key; and communicate, from the network communication device to the user space software, the decrypted inbound session packets.

Distribution of private session key to network communication device for secured communications

A secure communication tunnel between user space software and a client device can be established. A private session key can be communicated from the user space software to a network communication device via an application programming interface. Outbound session packets can be communicated from the user space software to the network communication device. The network communication device can generate encrypted outbound session packets by encrypting the outbound session packets using the private session key; communicate to the client device, via the secured communication tunnel, the encrypted outbound session packets; receive, by the network communication device from the client device, via the secured communication tunnel, inbound session packets; generate decrypted inbound session packets by decrypting the inbound session packets using the private session key; and communicate the decrypted inbound session packets.

API based distribution of private session key to network communication device for secured communications

A secure communication tunnel between user space software and a client device can be established. A private session key can be accessed from a cryptographic service. The private session key can be communicated from the user space software to a network communication device. Outbound session packets can be communicated from the user space software to the network communication device. The network communication device can be configured to generate encrypted outbound session packets by encrypting the outbound session packets using the private session key; communicate to the client device, via the secured communication tunnel, the encrypted outbound session packets; receive from the client device, via the secured communication tunnel, inbound session packets; generate decrypted inbound session packets by decrypting the inbound session packets using the private session key; and communicate the decrypted inbound session packets.

Distribution of a cryptographic service provided private session key to network communication device for secured communications

A method of synchronizing network configuration in a multi-tenant network includes receiving a request to change a status of the multi-tenant network to a desired network configuration, validating the desired network configuration against a first network configuration, determining one or more configuration managers the first request to change impacts, attaching a tenant identifier to the first request to change, storing the first requested change in a data repository, sending a notification to each of the one or more configuration managers the first request to change impacts, querying the data repository for all requested changes stored in the data repository having a configuration manager identifier that corresponds to the first of the one or more configuration managers the requested change impacts, de-multiplexing all the requested changes by tenant identifier, and applying the desired configuration to at least one network device.

Synchronizing network configuration in a multi-tenant network

A data handling network includes a management system and a plurality of devices in communication with the management system. Each device may operate under various configurations. The management system includes a configuration version table that includes a device identifier and an intended configuration version number. A configuration manager within a device queries the management system with a query that includes a device identifier and a current device operating configuration version number. The management system may interrogate the configuration version table to determine if the current device operating configuration version number is similar to the intended configuration version number.

Synchronizing configurations amongst multiple devices

Growing community of inventors

Omaha, NE, United States of America

Ryan Moats