The product of claim 9, wherein the communication management operations comprise: confirming at least a portion of a payload of the first network packet conforms to a data range, the data range determined from the data model identification code.ġ1. The product of claim 8, wherein the one or more first packet parameters comprise a data model identification code.ġ0.
CALMIRA FIGS CODE
The product of claim 7, wherein the one or more first packet parameters comprise a source application identification code, the source application identification code referencing a source application program for the first network packet.ĩ. The product of claim 1, wherein the communication management operations comprise: determining the one or more first expected values from a one-to-one correspondence with an n-tuple comprising the one or more first expected values, a destination port number of the first network packet, and a destination network address of the first network packet.Ĩ.
CALMIRA FIGS SOFTWARE
The product of claim 5, wherein the communication management operations comprise: determining the pre-established value for the first remote node from the software port number.ħ. The product of claim 3, wherein the monitoring comprises: a) detecting a first application identification code for a first user-application sent from the virtual device to the first remote node via the pre-established communication pathway followed by b) detecting a second application identification code for a second user-application sent from the first remote node and c) comparing the second application identification code with a pre-established value for the second user-application.Ħ. The product of claim 3, wherein the communication management operations comprise: determining the pre-established value for the first remote node from a software port number assigned to the software port.ĥ.
The product of claim 2, wherein the monitoring comprises: a) detecting a nonpublic first identification code sent from the virtual device to a software port on the first remote node via a pre-established communication pathway followed by b) further detecting a nonpublic second identification code sent from the remote node and c) comparing the nonpublic second identification code with a pre-established value for the first remote node.Ĥ.
CALMIRA FIGS SERIES
The product of claim 1, wherein the communication management operations further comprise: i) detecting negotiation of a secure communication pathway between a first remote node and the virtual device, the negotiation comprising a series of network packet communications between the first remote node and the virtual device ii) aligning a series of cryptographic keys utilized in the hypervisor with a series of cryptographic keys utilized in the virtual device iii) monitoring the series of network packet communications and iv) confirming success of the negotiation prior to the passing the authorized first network packet.ģ. A product for authorizing network communications in a hypervisor, the product comprising a non-transitory computer-readable storage medium having computer-readable program code embodied therein, the computer-readable program code executable in a hypervisor to perform communication management operations, the communication management operations comprising: i) intercepting a first network packet in the hypervisor, the first network packet comprising a first higher-than-OSI layer three portion ii) decrypting, with a single-use cryptographic key, at least a portion of the first higher-than-OSI layer three portion to obtain one or more first packet parameters iii) authorizing the first network packet in the hypervisor, comprising: comparing the one or more first packet parameters with one or more first expected values and iv) passing the authorized first network packet to a virtual device.Ģ.
0 kommentar(er)
