公开(公告)号：US20230144487A1

公开(公告)日：2023-05-11

申请号：US18150699

申请日：2023-01-05

Applicant: AT&T Intellectual Property I, L.P.

Inventor： Michael STAIR ,  Edward HOPE

IPC: H04L9/40 ,  G06F21/31 ,  G06F21/45 ,  G06F21/44

CPC classification number: H04L63/10 ,  G06F21/31 ,  G06F21/45 ,  H04L63/20 ,  G06F21/44 ,  H04L63/0227 ,  G06F21/60

Abstract: A computer-implemented method includes receiving a request for one of a network session and a virtual network function, wherein the request includes a single packet authorization request. The method further includes classifying the single packet authorization request at a first service classifier. The method further includes routing the request, via a service function forwarder, to a single packet authorization service function for validation. The method further includes instantiating a security virtual function in response to the request, wherein instantiating the security virtual function occurs after validation of the single packet authorization request. The method further includes configuring the security virtual function to apply at least one connection policy to allow or deny traffic in a data session. The method further includes, in response to allowing the data session, terminating the security virtual function after the data session has concluded.

公开(公告)号：US20180359255A1

公开(公告)日：2018-12-13

申请号：US15619757

申请日：2017-06-12

Applicant: AT&T Intellectual Property I, L.P.

Inventor： Michael STAIR ,  Edward HOPE

IPC: H04L29/06 ,  G06F21/31

Abstract: An on-demand virtual security system between a client and a server in communication with a network, the system including an orchestrator, wherein upon receiving a service request from at least one of the client and the server, the orchestrator instantiates a security virtual function within the network and supplies the security virtual function with at least one connectivity policy, and wherein the security virtual function applies the at least one connectivity policy to approve or disapprove a connection between the client and the server and wherein upon the security virtual function approving the connection between the client and the server, a orchestrator establishes a data session; and wherein after the data session has concluded, the orchestrator terminates the security virtual function.