The patent badge is an abbreviated version of the USPTO patent document. The patent badge does contain a link to the full patent document.

The patent badge is an abbreviated version of the USPTO patent document. The patent badge covers the following: Patent number, Date patent was issued, Date patent was filed, Title of the patent, Applicant, Inventor, Assignee, Attorney firm, Primary examiner, Assistant examiner, CPCs, and Abstract. The patent badge does contain a link to the full patent document (in Adobe Acrobat format, aka pdf). To download or print any patent click here.

Date of Patent:
Jun. 13, 2023

Filed:

Jan. 22, 2019
Applicant:

Vmware, Inc., Palo Alto, CA (US);

Inventors:

Kanika Nema, Pune, IN;

Daniel G. Wing, Truckee, CA (US);

Goresh Musalay, Pune, IN;

Assignee:

VMware, Inc., Palo Alto, CA (US);

Attorney:
Primary Examiner:
Int. Cl.
CPC ...
H04L 61/4511 (2022.01); H04L 61/2514 (2022.01); H04L 61/10 (2022.01); H04L 61/58 (2022.01); H04L 61/5007 (2022.01);
U.S. Cl.
CPC ...
H04L 61/4511 (2022.05); H04L 61/10 (2013.01); H04L 61/2514 (2013.01); H04L 61/5007 (2022.05); H04L 61/58 (2022.05);
Abstract

A domain-name-based network-connection attestation system provides for more user friendly and less error prone (compared to IP-address-based attestation systems) updating of a whitelist used to determine whether or not to allow a requested network connection. A guest agent extracts from a DNS reply a domain name, and an IP address mapped to a domain name. The agent enters these values in an agent DNS cache. When a process requests a connection to an IP address, the agent uses the IP address to determine the domain name from the agent DNS cache. The agent then determines whether the IP address is mapped to the process identity in a domain-name-based whitelist. If it is, the connection is attested to and allowed; if it is not, a secondary IP address whitelist can be checked.


Find Patent Forward Citations

Loading…