Patent ID: 9356932
Filing Date: 2016-05-31
CPC Classification: H04L

Claim Text:
1. A computer implemented method of dynamically applying an identity-based centralized security policy for a user to network layers of a network, said computer implemented method comprising: detecting user traffic on a network, wherein one or more network layers of a plurality of network layers of said network accommodate said user traffic, wherein said plurality of network layers comprise network switches, and wherein said user traffic comprises one or more actions performed on said one or more network layers of a plurality of network layers of said network; identifying a user performing said one or more actions of said user traffic; determining a network layer of said plurality of network layers on which said user traffic is detected; accessing an identity of said user, accessing, at a database, an identity-based centralized security policy corresponding to said network layer, wherein said identity-based centralized security policy is associated with said identity of said user and comprises a plurality of portions, wherein each network layer of said one or more network layers relates to a portion of said plurality of portions that is different from any other portion of said plurality of portions, and wherein said each portion comprises at least one access restriction instruction associated with said user, said user traffic and said network layer upon which said user traffic is detected, wherein said at least one access restriction instruction comprises at least one instruction limiting access of said user to said network layer, wherein said at least one instruction comprises at least one of: sending a portion of said identity-based centralized security policy that corresponds to said network layer upon which said user traffic is detected to a security device associated with said network layer, said portion of said identity-based centralized security policy being configured to be applied by said security device to said network layer and to said user traffic.