Patent ID: 9716589
Date: 2017-07-25
CPC Classifications: G06F,H04L

Claim:
1. An endpoint comprising a computing system, the computing system including: a user level services component; an input/output control (IOCTL) interface; a kernel level callout driver interfaced to the user level services component via the IOCTL interface and configured to establish an IPsec tunnel with a remote endpoint; a filter engine storing one or more filters defining endpoints authorized to communicate with the endpoint via the IPsec tunnel; and a second kernel level driver interfaced to the user level services component via the IOCTL interface and residing between the kernel level callout driver and a network interface of the endpoint, the second kernel level driver configured to establish a secure tunnel using a second security protocol different from IPsec; wherein the IPsec tunnel and secure tunnel are selectably established based on an addressing scheme of a network to which the endpoint is connected, the second kernel level driver configured to pass packets exchanged via the IPsec tunnel to the kernel level callout driver; and wherein a user is associated with a community of interest, and wherein the user level services component manages storage of one or more community of interest keys including a key assigned to the community of interest associated with the user; and wherein one or more community of interest keys are provided to the endpoint via the secure tunnel.