Patent ID: 7827602
Filing Date: 2010-11-02
Classification: H04L

Abstract:
1. A computer-implemented method for providing host application identification and authentication to a network based firewall, the method comprising computer-implemented operations for: detecting data packets transmitted by a host application executing on a host computer; in response to detecting the data packets transmitted by the host application, categorizing the host application in an active categorization, the active categorization indicating that the host application is considered to be actively transmitting the data packets; in response to detecting the data packets transmitted by the host application, resetting a timer for determining whether the host application should be re-categorized from the active categorization to a non-active categorization, the timer configured to expire after a length of time in which no additional data packets are transmitted from the host application, the non-active categorization indicating that the host computer is not considered to be actively transmitting the data packets; receiving an indication that the timer has expired after the length of time; in response to receiving the indication that the timer has expired, re-categorizing the host application from the active categorization to the non-active categorization; identifying the host application that transmitted the data packets; authenticating the identified host application; assembling a data set comprising (a) identification of the host application, (b) the categorization of the host application, (c) associated ports information utilized by the host application including translated ports information if ports have been translated, and (d) original ports information if the ports have been translated; encrypting the data set; tagging the data set with an identity of the host computer; and conveying the tagged data set in a secure manner to the network based firewall.