Passport-controlled firewall

US10367788B2 · kind B2 · utility

Assignee

• International Business Machines Corporation · US

Inventors

• Joachim H. Frank · Lörrach, DE
• Holger Karn · Aidlingen, DE

Key dates

• Filing date: Jun 6, 2018
• Grant date: Jul 30, 2019
• Expiry date: Jun 6, 2038

Classification

• Technology area (CPC H): Electricity
• CPC primary: H04L2463/121
• WIPO field: Digital communication
• WIPO sector: Electrical engineering

Abstract

A method and system for dynamically modifying rules in a firewall infrastructure. A signed passport, which includes a heart-beat time-out interval and a firewall rule, is received. A trigger signal is generated within the heart-beat time-out interval. The signed passport and the trigger signal are transmitted within the heart-beat time-out interval to a border control agent of a firewall in the firewall infrastructure. In response to receiving, from the border control agent, a continuous confirmation of the firewall rule within a time interval shorter than the heart-beat time-out interval, the firewall is modified according to the firewall rule. In response to determining that the trigger signal was not received by the border control agent within the heart-beat time-out interval, the firewall rule is reset.