The patent badge is an abbreviated version of the USPTO patent document. The patent badge does contain a link to the full patent document.

The patent badge is an abbreviated version of the USPTO patent document. The patent badge covers the following: Patent number, Date patent was issued, Date patent was filed, Title of the patent, Applicant, Inventor, Assignee, Attorney firm, Primary examiner, Assistant examiner, CPCs, and Abstract. The patent badge does contain a link to the full patent document (in Adobe Acrobat format, aka pdf). To download or print any patent click here.

Date of Patent:
Mar. 24, 2008

Filed:

Aug. 11, 2004
Applicants:

Dalen M. Abraham, Duvall, WA (US);

Todd A. Barnes, Snohomish, WA (US);

Paul F. Bouche, Bellevue, WA (US);

Thomas P. Bougetz, Bothell, WA (US);

Tracy A. Gosselin, Renton, WA (US);

Mark G. Grieve, Bellevue, WA (US);

Brent A. Langdon, Redmond, WA (US);

Robert C. Allison, Kirkland, WA (US);

Michael S. Nikkel, Redmond, WA (US);

Stuart Rosove, Bellevue, WA (US);

Inventors:

Dalen M. Abraham, Duvall, WA (US);

Todd A. Barnes, Snohomish, WA (US);

Paul F. Bouche, Bellevue, WA (US);

Thomas P. Bougetz, Bothell, WA (US);

Tracy A. Gosselin, Renton, WA (US);

Mark G. Grieve, Bellevue, WA (US);

Brent A. Langdon, Redmond, WA (US);

Robert C. Allison, Kirkland, WA (US);

Michael S. Nikkel, Redmond, WA (US);

Stuart Rosove, Bellevue, WA (US);

Assignee:

Websense, Inc., San Diego, CA (US);

Attorney:
Primary Examiner:
Assistant Examiner:
Int. Cl.
CPC ...
H04L 29/06 (2005.12); G06F 21/20 (2005.12); G06F 13/00 (2005.12); G06F 17/00 (2005.12);
U.S. Cl.
CPC ...
Abstract

In accordance with the present invention, a network management program () is provided that manages the communication of data packets between an intranetwork () and an internetwork (). An operator of a computer connected to the intranetwork () inputs vital information regarding users of computers connected to the intranetwork (), mapping information regarding computers connected to the intranetwork (), and policies to be applied against those users and computers, using a graphical user interface (GUI). The GUI () communicates the vital user information, mapping information and policies to a database () which stores and organizes the vital user information, mapping information and policies. A filter executive () optimizes the policies stored in the database () into a set of rules for each user and passes the rules to a filter engine (). The filter engine () filters all outbound data packets transmitted from the intranetwork () to the internetwork () and verifies all inbound data packets from the internetwork () according to the rules provided by the filter executive (). The filter executive () also communicates the mapping information stored in the database () to a naming service manager () which further updates the mapping information and returns the updated mapping information to the filter executive (). Consequently, the filter executive () filters the data packets according to the most recent mapping information.


Find Patent Forward Citations

Loading…