Patent ID: 7702803
Filing Date: 2010-04-20
Classification: H04L

Abstract:
1. A method of providing security in network management for SNMP (Simple Network Security Management Protocol) packet traffic between a set of one or more managers and a set of one or more agents in a computing environment, the method including the steps of: using a manager side security application (MSA), installed on a computer in one or more local area networks (LANs), for serving the one or more managers and an agent side security application (ASA), installed on a computer in one or more LANs, for serving the one or more agents; sending an SNMP request from a respective manager to the MSA, where the MSA encrypts said SNMP request and adds an authenticating digest thereto to form a secured request packet; the MSA sending the secured request packet to the ASA, where the ASA authenticates and decrypts the secured request packet to extract the SNMP request; the ASA sending the SNMP request to a respective agent, where the respective agent sends an SNMP response to the ASA in return; the ASA encrypting said SNMP response and adding an authenticating digest thereto to form a secured response packet; the MSA receiving the secured response packet from the ASA, where the MSA authenticates and decrypts the secured response packet to extract the SNMP response; the MSA forwarding the SNMP response to the respective manager; and, if the MSA receives a secured trap packet from the ASA, then the MSA authenticating and decrypting the secured trap packet, and sending the secured trap packet to a specific intended manager.