Patent ID: 11924167
Assignee: VMWARE LLC
Field: Digital communication (Electrical engineering)
Classification: CPC H  G | IPC G  H

Claim 0:
1. A method of filtering network packets, comprising:
creating a first user session and a second user session; setting a first security policy pertaining to the first user session, wherein setting the first security policy pertaining to the first user session comprises mapping, within a data structure, the first security policy to an identifier (ID) of the first user session;
setting a second security policy pertaining to the second user session, wherein the setting the second security policy pertaining to the second user session comprises mapping, within the data structure, the second security policy to an ID of the second user session, wherein the ID of the first security policy and the second security policy are assigned within a kernel space of an operating system and assigned to refer to a session of a user within the operating system of a virtual machine and wherein the first security policy or the second security policy define per-user access privileges, the per-user access privileges including a limitation specifying that the user is limited from accessing at least one of a file or a server;
receiving a network packet, by a filter driver, the network packet originating from the first user session or destined for the first user session or originating from the second user session or destined for the second user session; in an instance in which the network packet originated from the first user session or is destined for the first user session, comparing packet attributes of the network packet to the first security policy;
in an instance in which the network packet originated from the second user session or is destined for the second user session, comparing packet attributes of the network packet to the second security policy; and responsive to the comparing, blocking the network packet or transmitting the network packet.