The patent badge is an abbreviated version of the USPTO patent document. The patent badge does contain a link to the full patent document.

The patent badge is an abbreviated version of the USPTO patent document. The patent badge covers the following: Patent number, Date patent was issued, Date patent was filed, Title of the patent, Applicant, Inventor, Assignee, Attorney firm, Primary examiner, Assistant examiner, CPCs, and Abstract. The patent badge does contain a link to the full patent document (in Adobe Acrobat format, aka pdf). To download or print any patent click here.

Date of Patent:
Jun. 08, 2021

Filed:

Jun. 09, 2017
Applicant:

Nicira, Inc., Palo Alto, CA (US);

Inventors:

Vasantha Kumar, Pune, IN;

Leena Soman, Pune, IN;

Hrishikesh Ghatnekar, Pune, IN;

Assignee:

NICIRA, INC., Palo Alto, CA (US);

Attorney:
Primary Examiner:
Assistant Examiner:
Int. Cl.
CPC ...
H04L 29/06 (2006.01); G06F 9/455 (2018.01); H04L 29/08 (2006.01);
U.S. Cl.
CPC ...
H04L 63/0281 (2013.01); G06F 9/45558 (2013.01); H04L 63/0485 (2013.01); H04L 67/10 (2013.01); H04L 67/42 (2013.01); H04L 69/161 (2013.01); G06F 2009/45579 (2013.01); G06F 2009/45587 (2013.01); G06F 2009/45595 (2013.01); H04L 63/164 (2013.01);
Abstract

A method to selectively encrypting packets includes filtering calls, at a virtual machine on a host, to connect sockets to server applications. When a call by a client application to connect a socket to a server application is detected, the method includes determining if the socket between the client and the server applications is to be encrypted based on identities of the client application, a user logged in on the virtual machine, or the client application and the user logged in on the virtual machine. The method includes filtering outbound packets in a protocol stack of the virtual machine. When the socket is to be encrypted and an outbound packet for the socket is detected, the method includes tagging the outbound packet for encryption by a hypervisor on the host and sending the outbound packet to a virtual network interface card (vNIC) emulated by the hypervisor.


Find Patent Forward Citations

Loading…