Patent ID: 6611869
Filing Date: 2003-08-26
Classification: H04L,Y10S

Abstract:
A system for providing trustworthy network security concern communication in an active security management environment, comprising:a client system storing a digital certificate comprising a validated server identifier for a server system on a client system, wherein the server system is a modular network event management framework system, further comprising: a client security application generating a certogram upon the occurrence of a network security concern within the active security management environment which encloses a notification of the network security concern occurrence and a suggested action responsive thereto within the certogram; a communications session established between the client system and the server system comprising a secure socket connection authenticating each of the client system and the server system using the stored client digital certificate and the stored server digital certificate; the server system storing a digital certificate comprising a validated client identifier for the client system on the server system, further comprising: a server security application processing the certogram on the server system, including a validation module validating the certogram using the validated client identifier stored in the client digital certificate, the server security application evaluating the network security concern notification and the suggested action enclosed within the validated certogram; one or more action sets maintained on the modular network event management framework system, at least one of which associates one of the network security concerns with at least one suggested action to be performed by an actor system; the actor system storing a digital certificate comprising a validated actor identifier for an actor system on the modular network event management framework system; the modular network event management framework system storing a digital certificate comprising a validated modular network event management framework system identifier for the modular network event management framework system on the actor system, further comprising: a generation module generating a second certogram, including retrieving the action set associated with the network security concern which occurred and enclosing a notification of the network security concern occurrence and the at least one suggested action in the action set within the second certogram; and the actor system further comprising an active security application processing the certogram, including a validation module validating the certogram using the validated modular network event management framework system identifier stored in the modular network event management framework system digital certificate and evaluating the network security concern notification and the suggested action enclosed within the second validated certogram.