Passport-controlled firewall

US10637829B2 · kind B2 · utility

Assignee

• International Business Machines Corporation · US

Inventors

• Joachim H. Frank · Lörrach, DE
• Holger Karn · Aidlingen, DE

Key dates

• Filing date: May 20, 2019
• Grant date: Apr 28, 2020
• Expiry date: May 20, 2039

Classification

• Technology area (CPC H): Electricity
• CPC primary: H04L2463/121
• WIPO field: Digital communication
• WIPO sector: Electrical engineering

Abstract

A method and system for dynamically modifying rules in a firewall infrastructure. A signed passport is encrypted based on a public key certificate registered with a trusted signer. The signed passport includes a hash value that includes a heart-beat time-out interval and a firewall rule. A trigger signal within the heart-beat time-out interval is generated. The signed passport and the trigger signal are transmitted within the heart-beat time-out interval to a border control agent of a firewall in the firewall infrastructure. In response to receiving, from the border control agent, a continuous confirmation of the firewall rule within a time interval shorter than the heart-beat time-out interval, the firewall is modified according to the firewall rule. In response to determining that the trigger signal was not received by the border control agent within the heart-beat time-out interval, the firewall rule is reset.